Security Directory

H

Holiday Media

hmcms.nl

60

Holiday Media is a specialized internet service provider focusing on the Dutch recreation and travel sector, delivering website design, maintenance, and integration with booking systems to over 250 clients. Their market position is that of a niche expert with a strong local presence and a comprehensive service offering including internet marketing, photography, and videography. Technically, the website employs modern web technologies including jQuery, Google Analytics, and a proprietary CMS, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, but lacks visible security headers and explicit privacy compliance mechanisms such as cookie consent banners. Overall, the site is professional and trustworthy, with clear contact information and social media presence.

S

Specialdelivery

specialdeliverysandiego.org

57

Special Delivery San Diego is a small non-profit organization dedicated to providing nutritional support to the San Diego community through home-delivered meals, a nutrition pantry, and diabetic education programs. The organization relies on donations and volunteer efforts to serve over 800 families monthly. The website is built on the Wix platform, featuring a professional design with clear navigation and calls to action for volunteering and donations. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features. No WHOIS data was available due to query failure or privacy protection, but the domain and website content appear consistent with a legitimate non-profit entity. Overall, the site demonstrates good business credibility and content quality but should improve privacy policies and security practices to enhance trust and compliance.

P

Popravi.to

popravi.to

54

Popravi.to is a Croatian civic technology platform enabling local residents to report, view, and discuss street-related problems such as graffiti, illegal waste dumping, and damaged infrastructure. The platform is powered by the open source FixMyStreet software and targets community members interested in improving their local environment. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and OpenLayers for mapping, supported by multiple analytics tools and Cloudflare hosting. The site is mobile optimized and uses HTTPS with some security best practices like CSRF tokens and service workers. However, it lacks explicit privacy and cookie policies, and no direct contact information is provided on the homepage. Security posture is good but could be improved with additional headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent with the website's Croatian civic focus, indicating legitimacy and trustworthiness.

P

Plus Hosting Grupa d.o.o.

parlametar.hr

53

Parlametar is a Croatian government-focused digital platform that provides detailed analysis and tracking of parliamentary activities, including voting records and speech transcripts of Croatian Parliament members. The platform targets citizens, journalists, and political analysts interested in transparent and accessible parliamentary data. It operates as an informational service with a specialized niche in political data visualization and analysis. Technically, the website employs a modern yet somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.3, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The domain is registered with a reputable Slovenian hosting provider, consistent with the website's operational profile. Overall, the site is professional, trustworthy, and serves a clear public interest function.

M

MDBootstrap

mdbootstrap.com

68

MDBootstrap is a well-established provider of Material Design UI kits and Bootstrap templates, trusted by over 2 million developers and designers worldwide. The company offers a comprehensive suite of frontend development resources including UI components, plugins, and extensive documentation, positioning itself as a leader in the web development tools market. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome to deliver a rich user experience. The technical infrastructure is robust, with good mobile optimization, SEO practices, and performance considerations. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in publishing explicit privacy, cookie, and security policies. Overall, MDBootstrap presents a professional and trustworthy digital presence with strong market credibility.

A

algoo

galae.net

62

Galae is a French-based email service provider offering high deliverability, unlimited email addresses and domains, and advanced configuration options. The service is positioned as an ethical, GDPR-compliant alternative focused on autonomy and sovereignty, leveraging open source software and hosted exclusively in France. The business is relatively new, founded in 2023, and operated by the parent company algoo. The website presents a professional image with clear pricing, client testimonials, and a community support platform. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, with hosting provided by Scaleway SAS. Security practices include support for email authentication standards (DKIM, SPF, DMARC) and data redundancy, but lack visible security headers and explicit incident response information. Privacy compliance is partially demonstrated but lacks explicit privacy and cookie policies on the site. Overall, galae demonstrates a solid business and technical foundation with room for improvement in security transparency and privacy disclosures.

G

Green Leisure Group Coöperatie U.A.

greenleisure.nl

61

Green Leisure Group Coöperatie U.A. is a specialized sustainability consulting cooperative focused on practical and strategic sustainability solutions for the tourism, hospitality, cultural, event, and sports sectors primarily in the Netherlands. The company offers expert advice, project management, and sector-specific sustainability programs such as Green Stages, Green Sport, and Green Leisure. Their market position is that of a trusted advisor with a cooperative business model, serving a niche audience of organizations seeking to improve their sustainability practices. Technically, the website is built with modern web standards including HTML5, CSS3, and jQuery, with good mobile optimization and a professional design. The site uses HTTPS with strong SSL configuration but lacks some security headers and cookie consent mechanisms. No major vulnerabilities or exposed sensitive data were detected, and the site does not appear to use extensive tracking or analytics, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities, but it could improve by implementing security headers, publishing a security policy, and adding incident response contact information. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with the business's sustainability mission. The domain registration data is consistent and legitimate, supporting the company's credibility. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and incident response policies to further strengthen trust and compliance.

The website 'ICE Detention Map' operated by Lockdown Systems provides an interactive and detailed visualization of ICE detention facilities across the United States. It offers data on detainee counts, criminal versus non-criminal status, and ICE threat levels, serving as a valuable resource for activists, researchers, and the general public interested in immigration detention transparency. The platform positions itself as a niche non-profit advocacy tool focused on government and immigration issues. Technically, the site employs modern web technologies including Leaflet.js for mapping and OpenStreetMap for base tiles. The infrastructure is straightforward, with moderate performance and good mobile optimization. The site uses minimal tracking via Plausible Analytics, reflecting a privacy-conscious approach. However, the absence of privacy and cookie policies, as well as missing security headers, indicates areas for compliance and security improvement. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. The WHOIS data presents anomalies with a future domain creation date and no registrant details, which reduces trustworthiness but does not necessarily indicate malicious intent given the site's content and affiliations. Overall, the website is functional, informative, and safe for general audiences but would benefit from improved privacy compliance, security hardening, and clearer business contact information to enhance trust and regulatory adherence.

S

Science & Design, Inc

onionshare.org

52

OnionShare is an open-source privacy-focused software project that enables anonymous peer-to-peer file sharing, chatting, and web hosting over the Tor network. The project is developed by Science & Design, Inc and partners with reputable privacy organizations such as The Calyx Institute, Guardian Project, and the Tor Project. The website serves a privacy-conscious audience including security specialists and users of privacy-centric operating systems like QubesOS and Tails. The business model is community-driven with donation support and open-source contributions. Technically, the website is well-built using modern web standards and hosted on DigitalOcean, with good mobile optimization and accessibility. Security practices include PGP signature verification for downloads and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial with a privacy policy present but no cookie consent or terms of service. Overall, the site is professional, trustworthy, and aligned with its privacy-centric mission.

S

Stichting KMVK

duurzaam-gastvrij.nl

63

Duurzaam Gastvrij is a Dutch sustainability certification organization focused on the leisure sector, operated by Stichting KMVK. The website serves as a comprehensive platform to promote sustainable business practices, certify companies, and provide resources and support for sustainability efforts. It holds a strong market position as a recognized sustainability mark endorsed by Green Key, targeting leisure businesses in the Netherlands. The site offers clear navigation, rich content, and multiple trust signals including partner logos and certifications. Technically, the website uses modern web technologies including jQuery, Swiper.js, and Google Analytics, hosted on a CMS platform (HMCMS). It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence with strong business credibility and privacy compliance.

A

AlCoda GmbH

alcoda.info

39

AlCoda GmbH operates the domain alcoda.info, which currently hosts a default Plesk generated placeholder page indicating hosting control panel availability. The company appears to be involved in providing hosting services or web management solutions leveraging the Plesk platform. The website content is minimal and does not provide detailed business descriptions or customer engagement features. Technically, the site uses standard HTML, CSS, and JavaScript with Plesk infrastructure but lacks advanced security headers and privacy compliance mechanisms. The security posture is basic with no evident vulnerabilities but also no enhanced protections. Overall, the website is low in content quality and business credibility due to its placeholder nature. Strategic recommendations include implementing privacy and cookie policies, adding contact information, enabling DNSSEC, and improving security headers to enhance trust and compliance.

C

casinoutansvensklicens.website

casinoutansvensklicens.website

36

The website casinoutansvensklicens.website appears to be a parked domain primarily used for advertising and affiliate marketing related to gambling without a Swedish license. It lacks substantive business content, contact information, or clear service offerings, indicating it is not an operational business site but rather a placeholder or monetization platform. The technical infrastructure relies on basic HTML, CSS, and JavaScript with integration of Google Adsense and Bodis domain parking scripts. The site is accessible without WAF or blocking mechanisms but lacks modern security practices such as security headers and cookie consent mechanisms. Overall, the security posture is weak, with minimal privacy compliance and no incident response or security policy information available. The domain uses privacy-protected WHOIS registration, which reduces trust and transparency. The site targets a mature audience interested in gambling but does not provide any direct gambling services or content. Strategic recommendations include improving security headers, implementing privacy and cookie consent mechanisms, and providing clear business and contact information to enhance trust and compliance.

C

CasinoSpot.de

casinospot.de

55

CasinoSpot.de is a German online casino guide established in 2018, offering detailed comparisons, reviews, and exclusive bonuses for online casinos. The website targets German-speaking adults interested in online gambling and positions itself as a leading casino guide in Germany. Technically, the site is built on WordPress, uses Cloudflare for DNS and CDN services, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with a professional design and clear navigation. Security-wise, the site enforces HTTPS and uses Cloudflare, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is legitimate and trustworthy but could improve transparency on privacy and security policies.

AFAS is a well-established technology company providing business software solutions, primarily in the Netherlands. The analyzed website is a dedicated status page for AFAS services, offering real-time updates on system status, incidents, and scheduled maintenance. The page is designed to inform customers and users about the operational status of various AFAS products and integrations. The business model is SaaS-focused, targeting business customers who rely on AFAS software for their operations. Technically, the status page is hosted on the Statuspal platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and hCaptcha for bot protection. The site is mobile-optimized and performs well with fast loading times. However, it lacks some advanced accessibility and SEO features. The use of HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are important for GDPR compliance. There is no published incident response or vulnerability disclosure information, which could be improved to enhance trust and transparency. Overall, the website is professional, trustworthy, and serves its purpose effectively. The main risks relate to privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear security contact information to improve compliance and user trust.

The website monpetitsite.org currently serves only a 404 error page indicating that the requested resource is not found. The domain is registered to a French organization named L'Échappée Belle, created recently in November 2023, suggesting a new or small business. There is no visible business content, contact information, or policies on the site, which limits the ability to assess the business model or market position. The hosting appears to be provided by Infomaniak based on the nameservers. Technically, the site uses basic HTML, CSS, and JavaScript with mobile responsive design but lacks SEO optimization and accessibility features. Security posture is minimal with no security headers detected and no HTTPS status visible from the provided data. No privacy or cookie policies are present, indicating poor privacy compliance. Overall, the site is not currently functional for business purposes and lacks trust and credibility indicators.

Spojené nástroje elektronické s.r.o. is a small Czech technology company specializing in electronic public procurement solutions. The company operates a platform aggregating public tenders in the Czech Republic, notably through the portal FEN.cz, and collaborates with government ministries on digitalization projects. Their market position is important within the Czech public procurement sector, serving businesses and public entities involved in tenders. The website reflects a professional business presence with clear contact information and a focused description of their services. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The absence of analytics and tracking scripts suggests minimal user tracking. From a security perspective, the site lacks visible security headers, privacy and cookie policies, and incident response information. HTTPS status is unknown from the data but should be verified. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected but notable gaps in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enforcing HTTPS, and publishing incident response contacts to enhance trust and compliance.

R

Radically Open Security

radicallyopensecurity.com

70

Radically Open Security is a non-profit computer security consultancy focused on improving global security through research, networking, and forensics expertise. The organization targets clients seeking expert security consultancy and is staffed by security researchers and Capture The Flag winners, positioning itself as a niche player in the non-profit security sector. The website presents a professional and consistent brand image with good content quality and clear messaging about its mission and services. Technically, the site uses modern web standards with HTTPS and a Content Security Policy, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the website content suggests a genuine organization. Overall, the site demonstrates a solid security posture but would benefit from enhanced privacy policies and contact transparency.

Commons Caretakers BV operates as an intermediary service provider supporting the creation and maintenance of digital commons, focusing on free and open source software and hardware projects. It serves grantees of the NGI Zero programs and the broader NGI ecosystem, collaborating closely with partners such as the NLnet foundation and The Commons Conservancy. The website presents a professional and clear description of its mission and services, targeting creators and maintainers of digital commons and FOSS communities. Technically, the website is built with basic HTML and CSS, featuring responsive design elements for mobile optimization. However, no advanced frameworks, CMS, or analytics tools are detected. The site lacks security headers and HTTPS information in the provided data, indicating potential gaps in security implementation. No forms or tracking scripts are present, suggesting minimal data collection. From a security perspective, the absence of HTTPS and security headers reduces the security posture score. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available, which impacts compliance and trust. The WHOIS data is missing or inaccessible, which is inconsistent with the active website presence and lowers domain legitimacy confidence. Overall, Commons Caretakers presents a focused and professional digital presence with clear business objectives but requires improvements in security, privacy compliance, and transparency to enhance trust and reduce risk.

L

Hireful Candidate Portal

livevacancies.co.uk

58

The website livevacancies.co.uk serves as a minimal landing page for the Hireful Candidate Portal, a recruitment product likely targeting job seekers and recruiters. The site primarily functions as a redirect or informational page linking to the main product site at hireful.co.uk. The business appears to be a small technology company founded around 2015, consistent with the domain registration date. The content is minimal and basic, with no detailed business or contact information provided on this page. Technically, the site uses basic HTML and CSS with Google Fonts and a custom font. There is no evidence of a CMS or advanced frameworks. Performance is likely fast due to minimal content, but SEO and accessibility features are minimal. No analytics or tracking scripts are detected, indicating low digital maturity. From a security perspective, the site lacks visible HTTPS confirmation, security headers, privacy policies, or contact information for incident response. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement and trust. The WHOIS data is consistent and indicates a legitimate domain with a reputable registrar and appropriate domain age. Overall, the website scores low on content richness, privacy compliance, and security posture but is safe and free from suspicious content. Strategic improvements should focus on adding privacy and cookie policies, security headers, HTTPS enforcement, and clear contact information to enhance trust and compliance.

E

Editions ENI

editions-eni.fr

61

Editions ENI is a French publishing company specializing in IT education materials including books, videos, and e-learning courses. The company targets IT professionals, students, and learners seeking comprehensive training in systems, networks, programming languages, office software, and web technologies. The website reflects a mature digital presence with a well-structured catalog and integrated customer review systems, positioning Editions ENI as a reputable player in the French IT education market. Technically, the website employs modern web technologies such as Google Tag Manager and cookie consent SDKs, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partial due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy, but could improve transparency and compliance documentation.

L

LES EDITIONS DIAMOND

ed-diamond.com

60

LES EDITIONS DIAMOND operates a professional online boutique offering subscriptions and single-issue sales of specialized technology magazines focused on Linux, cybersecurity, embedded systems, and open source. The company targets IT professionals and enthusiasts with a niche market presence in France. The website is well-structured, mobile-optimized, and provides multiple digital and print reading options, including a digital content platform named Diamond Connect. Technically, the site uses modern web technologies and a PrestaShop CMS, with good security practices including HTTPS and security headers. No critical vulnerabilities or security incidents were detected. Privacy and cookie policies are present and GDPR compliant. Overall, the website demonstrates a mature digital presence with a strong business credibility and trustworthy user experience.

É

Éditions Eyrolles

editions-eyrolles.com

56

Éditions Eyrolles is a well-established independent French publishing house founded in 1925, specializing in a broad range of book genres including personal development, literature, creative hobbies, and professional skills. The website presents a professional and content-rich platform targeting readers interested in educational and leisure reading materials. Technically, the site uses modern web technologies such as Google Tag Manager and slick carousel for user experience enhancements, with good mobile optimization and SEO practices. However, the security posture is moderate due to lack of visible security headers and unclear SSL configuration. Privacy compliance is weak, with no explicit privacy or cookie policies found in the analyzed content. The WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy despite the strong brand presence. Overall, the site is functional and professional but would benefit from improved transparency and security measures.

The website www.marketingbrew.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks content until human verification is completed. This prevents access to any meaningful business or technical content for analysis. The WHOIS lookup for the domain returned no registration data, indicating the domain may be unregistered, expired, or protected by privacy services with no public information. Consequently, no business details, contact information, or policies are available for review. The site is hosted behind Cloudflare's security infrastructure, which provides protection but also limits visibility into the site's actual content and security posture. Overall, the lack of accessible content and WHOIS data severely limits the ability to assess the company's legitimacy, security maturity, or compliance status.

A

AFAS Theater

afastheater.nl

67

AFAS Theater is a modern theater and event venue located in Leusden, Netherlands, established in 2021. It serves both business clients and general theater audiences, offering a unique experience with inclusive services such as parking and refreshments. The theater is part of the AFAS Software group, leveraging a strong brand and partnerships to enhance its market position. The website reflects a professional and well-structured digital presence with good content quality and user experience. Technically, the site uses modern web technologies and implements essential security measures including HTTPS and security headers. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website and business demonstrate a high level of credibility and trustworthiness.

A

AFAS Foundation

afas.foundation

65

The AFAS Foundation is a Dutch non-profit organization dedicated to inspiring and supporting social projects that create significant positive impact. The foundation focuses on funding and facilitating initiatives that help many people and inspire change. Their website is professionally designed, mobile-optimized, and provides detailed information about ongoing projects, events, and news updates. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, and Google Tag Manager for analytics. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies. The absence of WHOIS data limits full verification of domain legitimacy, but the website content and branding are consistent with a reputable non-profit entity. Overall, the foundation demonstrates a solid digital presence with room for improvement in privacy compliance and security best practices.

AFAS Online operates as a business software platform providing secure user authentication services through its login portal. The website targets business users and clients of AFAS software solutions, offering modern authentication options including passkey (FIDO2) technology. The platform appears professionally designed with consistent branding and a focus on usability for enterprise customers. Technically, the site uses standard web technologies and ASP.NET MVC framework patterns, with moderate performance and good mobile optimization. Security measures include CSRF tokens and advanced login methods, though the absence of visible security headers and privacy policies suggests room for improvement. Overall, the domain and website content align with a legitimate business software provider, though WHOIS data is unavailable for the subdomain, which is typical and not concerning. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security header implementation to strengthen trust and compliance.

P

Private by Design, LLC

kkx.one

62

The website kkx.one is a personal landing page created in 2021, serving as a simple link aggregator for the individual or entity known as '33KK'. It primarily links to social media platforms, code repositories, and streaming services, targeting a general audience interested in the owner's online presence. The business model is minimal and personal, with no commercial or transactional features. The domain is privacy protected by 'Private by Design, LLC', a US-based privacy service, which aligns with the personal and privacy-conscious nature of the site. Technically, the website is built with basic HTML and CSS, hosted behind Cloudflare DNS services, and shows good performance and mobile optimization. However, it lacks advanced frameworks, CMS, or analytics tools. The site does not implement DNSSEC, security headers, or privacy and cookie policies, which limits its compliance and security posture. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. From a security perspective, the domain is protected against unauthorized transfer and deletion, and uses Cloudflare nameservers, which is positive. However, the absence of DNSSEC, security headers, and privacy policies indicates room for improvement. No vulnerabilities or malicious content were detected. The site does not collect user data or track visitors, which reduces privacy risks but also limits marketing insights. Overall, the website is low risk, with a basic security posture suitable for a personal site. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and considering a vulnerability disclosure policy to enhance trust and compliance.

S

Software Freedom Conservancy

fossy.us

53

The website 2025.fossy.us represents the FOSSY 2025 conference, a community-oriented event focused on free and open source software, hosted by the Software Freedom Conservancy. The event is scheduled for July 31st to August 3rd, 2025, at Portland State University. The site provides information about the conference, registration, sponsorship, and related logistics, targeting open source contributors and enthusiasts. The business model is non-profit and community-driven, with a clear focus on fostering open source software development and collaboration. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, FontAwesome, and Tachyons CSS. The site is mobile-optimized with good navigation and professional design. External resources are loaded from reputable CDNs, and no major performance or accessibility issues are evident. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS (implied by the URL), but no explicit security headers were detected in the provided data. There is no visible security.txt or incident response contact information. The WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of non-profit event. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism on the site. Overall, the website is trustworthy and professionally presented, with a moderate to good security posture and privacy compliance. Recommendations include adding security headers, implementing cookie consent, and publishing vulnerability disclosure information to enhance trust and compliance.

T

Technische Universität Hamburg (TU Hamburg)

stuhhdium.de

11

Technische Universität Hamburg (TU Hamburg) is a reputable public university specializing in engineering and technology education with a strong emphasis on addressing climate change challenges. The website provides comprehensive information about their Bachelor and Master programs, dual study options, research focus, and student life. It targets prospective students, including international candidates, offering detailed program descriptions and support resources. The university maintains an active presence on major social media platforms and integrates modern web technologies to deliver a professional and engaging user experience. The site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website reflects a trustworthy and well-established educational institution with a strong digital presence.

Meetingcpp GmbH operates Meeting C++, a specialized platform dedicated to the C++ programming community. The website serves as a hub for news, blogs, events, and an annual conference, positioning itself as a key player in the niche C++ ecosystem. The business model revolves around community engagement, event organization, training, job postings, and advertising, targeting C++ developers worldwide. The company has a strong social media presence and a decade-long history, reinforcing its market position. Technically, the website is built using standard web technologies (HTML, CSS, JavaScript) without a detected CMS, indicating a custom or static site approach. Hosting appears to be managed by Cronon GmbH. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected in the provided content. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, and DNSSEC is not enabled on the domain. There is no published security policy or incident response information. However, the domain is well-registered with consistent WHOIS data and no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could be improved significantly. The overall risk is low given the nature of the site as an informational and community platform with no sensitive data collection evident. Strategic recommendations include implementing security headers, enabling DNSSEC, adding privacy and cookie policies with consent mechanisms, and publishing security and incident response policies to enhance trust and compliance.

Bedel Déménagement d'entreprise is a French company specializing in corporate relocation and transfer services, including moving offices, hospitals, laboratories, hotels, and art works. The company holds multiple ISO certifications (9001, 14001, 45001) and a Confidentiel Défense status, positioning it as a trusted and professional service provider in the transportation and logistics sector. Their client portfolio includes major corporations such as Orange, Krys, and Eni, indicating a strong market presence and reliability. The website reflects a medium-sized enterprise with a consistent brand and clear service offerings tailored to business clients requiring complex relocation solutions. Technically, the website uses modern web technologies including Bootstrap, Google Analytics, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and incident response information, which are important for enhancing trust and compliance. The security posture is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies, as well as incident response contacts, reduces the overall privacy compliance score. The company demonstrates strong business credibility through certifications and client testimonials but should improve transparency regarding data protection and user consent mechanisms. Overall, Bedel's website is professional and trustworthy, serving its business audience effectively. Strategic improvements in privacy compliance and security transparency would further strengthen its digital maturity and risk posture.

S

Standard C++ Foundation

isocpp.org

61

The Standard C++ Foundation operates the isocpp.org website, serving as the authoritative online resource for the C++ programming language standard. The site provides comprehensive news, guidelines, event information, and educational content targeted at C++ developers and contributors worldwide. The foundation is a small, technology-focused non-profit entity based in the United States, with a domain established in 2012, reflecting a mature and stable presence in the programming community. Technically, the website employs a modern yet straightforward technology stack including HTML5, CSS3, JavaScript with jQuery, and Google Fonts. It is hosted on DigitalOcean and uses Cloudflare DNS services, although DNSSEC is not enabled. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical debt or outdated components detected. From a security perspective, the website benefits from HTTPS encryption and does not expose sensitive data. However, it lacks several security headers and does not implement DNSSEC, which could enhance its security posture. There is no visible security policy or vulnerability disclosure page, and no cookie consent mechanism is present, which may impact privacy compliance. The WHOIS data shows privacy protection, which is justified for this type of non-commercial organization, and the domain registration is consistent with the foundation's history. Overall, the website is professional, trustworthy, and content-rich, serving its community well. Strategic improvements in security headers, privacy compliance, and incident response transparency would further strengthen its security posture and user trust.

M

Meine Sternstunde | H. Everding

meine-sternstunde.de

38

Meine Sternstunde is a small, Germany-based educational service focused on astronomy and space exploration. The website offers detailed information about astronomy-themed events such as star walks, lectures, and astro-cafés, targeting general audiences including families, children, and local communities. The business model revolves around event ticket sales and donations, positioning itself as a niche local provider with a strong emphasis on educational content and community engagement. Technically, the website employs a modern and responsive design using Bootstrap 5 and jQuery, with additional libraries like Fancybox for image galleries. Hosting is provided by a German hosting company (kasserver.com). The site performs moderately well with good mobile optimization and clear navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site lacks visible security headers and does not provide a cookie consent mechanism or detailed GDPR compliance information. No incident response or vulnerability disclosure policies are present. The WHOIS data is minimal but consistent with the business profile, showing no suspicious patterns. Overall, the security posture is moderate but could be improved by implementing standard security best practices. The overall risk assessment is low, with no indications of malicious or adult content. Strategic recommendations include enhancing security headers, adding cookie consent and privacy compliance details, and publishing a vulnerability disclosure policy to improve trust and compliance.

The Krankenhausgesellschaft Nordrhein-Westfalen e. V. (KGNW) is a non-profit association representing approximately 340 hospital operators and their umbrella organizations in the German state of Nordrhein-Westfalen. The organization advocates for hospital interests in political, financial, and public domains, providing services such as quality management, data analysis, and event organization. The website reflects a professional and consistent brand presence targeting hospital stakeholders and policymakers within NRW. Technically, the site uses modern web technologies including React (via preact compatibility), jQuery, and Slick Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly detailed. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements, serving as a credible digital platform for the healthcare sector in NRW.

The website mredshandyman.com (content analyzed is for an777.com embedded gambling platform) presents itself as a licensed Indonesian online slot and gambling platform offering slot games, fish games, and domino games with APK downloads for Android devices. The platform targets adult users interested in online gambling with promises of secure login, fast deposits and withdrawals, and 24/7 customer support. However, the domain WHOIS data is suspicious due to a future creation date in 2025, which undermines the credibility of the business claims. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted via Cloudflare DNS services but lacks DNSSEC and security headers. The site includes embedded iframe games from external domains and uses StatCounter for analytics tracking. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which raises compliance and trust concerns. The content is adult-oriented gambling, requiring age restrictions and regulatory compliance.

D

day777

xemphim74.net

53

The website 'day777' operates as an online gambling platform targeting the Indonesian market, offering slot games, fish games, and domino games accessible via an Android APK download. It positions itself as a trusted and licensed platform with secure login and 24/7 customer support, though no verifiable contact or licensing information is provided on the site. The technical infrastructure relies on standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted via Cloudflare. The site loads game content through an iframe from an external domain and uses Statcounter for analytics tracking. Mobile optimization is good, but accessibility and SEO are basic. Security posture is weak due to lack of visible security headers, no DNSSEC, and suspicious WHOIS data indicating a domain creation date in the future, which undermines trust. No privacy, cookie, or terms of service policies are present, and no contact information is available, which raises compliance and credibility concerns. Overall, the site is functional but exhibits significant gaps in security, privacy, and legitimacy.

R

rp777

omeletapp.com

53

rp777 is an online gambling platform targeting Indonesian users, offering slot, fish, and domino games accessible via a downloadable APK for Android devices. The website positions itself as a trusted and licensed platform with fast login and 24/7 customer support. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted with Cloudflare DNS services. However, the domain WHOIS data is suspicious due to a future creation date and lack of registrant details, which raises concerns about legitimacy. Security posture is weak with no DNSSEC, no visible security headers, and no published privacy or cookie policies. Analytics is implemented via Statcounter, indicating moderate user tracking. Overall, the site provides a good user experience and mobile optimization but lacks critical compliance and security transparency.

C

l777 - Slot Online Terpercaya | Download APK & Login Mudah | Official l777.com

cantinhodamusica.net

7

The website cantinhodamusica.net hosts an online gambling platform branded as l777, targeting the Indonesian market with slot games, fish games, and domino. It offers APK downloads for Android devices and promotes itself as a licensed and trusted platform with 24/7 customer support. The site uses Cloudflare for DNS and hosting and includes embedded game content from an external domain. However, no privacy, cookie, or terms of service policies are present, and no contact information is provided, which limits transparency and user trust. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It is moderately optimized for mobile devices and uses Statcounter for analytics. The domain is registered via Cloudflare, but the WHOIS data is suspicious due to a future creation date and lack of registrant details, which raises concerns about legitimacy. Security headers are absent, and there is no visible HTTPS enforcement information, indicating potential security weaknesses. From a security perspective, the site lacks critical policies and security best practices such as security headers and vulnerability disclosure mechanisms. The gambling nature of the site requires strong compliance and security controls, which are not evident. The WHOIS inconsistencies further reduce trustworthiness. Overall, the site presents moderate risk due to these gaps. Strategic recommendations include implementing HTTPS with strong TLS, publishing privacy and cookie policies, adding security headers, providing clear contact information, and addressing WHOIS inconsistencies to improve legitimacy and trust. Enhancing accessibility and SEO would also benefit user experience and visibility.

C

at777 - Slot Online Terpercaya | Download APK & Login Mudah | Official at777.com

celebritiesphones.com

6

The website celebritiesphones.com hosts content branded as at777, an online slot and gambling platform targeting Indonesian users. It offers various gambling games including slot, fish, and domino games, with APK downloads for Android devices. The site claims to be a trusted and licensed platform with fast login and 24/7 support. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, and is hosted with Cloudflare DNS services. The embedded game content is loaded via an iframe from an external domain. Analytics are provided by Statcounter. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which impacts trust and compliance. WHOIS data is suspicious with a future creation date and no registrant details, reducing domain legitimacy. Overall, the site is functional but has significant gaps in security, privacy, and business transparency.

I

Responsive Web Design Online Testing - isResponsive

isresponsive.com

43

The website www.isresponsive.com offers an online tool focused on testing and building responsive web designs. It targets web developers and designers who need to verify their websites' responsiveness across various devices and viewports. The site provides testing features and emulators to facilitate this process. The business model centers around providing a free or ad-supported online service in the technology niche, specifically web development tools. The market position is that of a niche service provider with a small-scale operation and no evident parent or subsidiary companies. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics and Adsense for tracking and monetization. The site is moderately optimized for mobile devices and SEO, with a clean and consistent design. Security-wise, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable, indicating the domain may be unregistered or privacy protected, which reduces trustworthiness. Overall, the site is accessible without WAF or blocking mechanisms and contains safe content suitable for general audiences.

M

Mohammad Younes

rtlcss.com

51

RTLCSS is a specialized open source framework designed to convert CSS stylesheets from Left-To-Right (LTR) to Right-To-Left (RTL) layouts, targeting web developers and designers who require RTL support. The website presents a focused technical offering with an online playground and CDN services, positioning itself as a niche tool in the web development ecosystem. The business is small, founded in 2013, and maintained by Mohammad Younes, with a consistent domain registration history and active GitHub presence. Technically, the site uses a modern static site generator (Hexo), standard web technologies, and integrates common libraries such as jQuery and Font Awesome. Performance and mobile optimization are adequate, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacks security headers and formal policies. Advertising is present via Carbon Ads and Google Adsense, with moderate user tracking through Google Analytics. Privacy and cookie policies are absent, and no contact information or security incident response details are provided, which impacts compliance and trust. Overall, the site is professional and functional but could improve in privacy, security, and transparency aspects.

E

Emercoin

emercoin.com

67

Emercoin is a blockchain platform established in 2013, providing decentralized solutions and a suite of blockchain-based services targeting businesses and individual coinholders. The platform offers a variety of services including decentralized DNS, secure SSH, SSL certificates, ownership ledgers, micropayments, and file validation, positioning itself as a versatile blockchain infrastructure provider. The website demonstrates a professional and consistent brand presence with credible media coverage and partnerships, reinforcing its market position in the blockchain technology sector. Technically, the site uses modern web technologies, is mobile-optimized, and hosted behind Cloudflare DNS, ensuring moderate performance and accessibility. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is partial, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, with room for enhancements in security and privacy transparency.

D

Dux Group N.V.

bruno-casino.net

46

Bruno Casino is an online gambling platform launched in 2021, operated by Dux Group N.V. It offers a wide range of casino games including slots, live casino, and table games, targeting primarily German-speaking players and Finnish market. The site promotes bonuses, cryptocurrency payments, and 24/7 multilingual support. Technically, the website is built on Angular 13, hosted on DigitalOcean, and uses Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and SSL encryption, offers two-factor authentication, and claims RNG fairness, but lacks visible security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the business claims and the site appears legitimate but could improve transparency and security practices.

dtp studio is a small, specialized media design and print prepress company based in Oldenburg, Germany, with over 25 years of experience. They provide web design, print prepress services, and develop color software products, including founding the non-profit freieFarbe e.V. Their market position is niche with a focus on quality and expertise in color management and media design. The website is professionally designed with clear navigation and responsive layout, using modern frontend technologies such as Bootstrap and jQuery. Hosting is provided via kasserver.com. Security posture is moderate with no visible security headers and unknown SSL configuration, but no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and safe for general audiences.

Z

Trending - Zappiens.br

zappiens.br

61

Zappiens.br is a PeerTube-based video hosting platform focused on delivering digital content in the Portuguese language, primarily targeting Brazilian users. The platform offers video streaming services including trending, recently added, and local videos, positioning itself as a niche content provider within the open-source PeerTube ecosystem. The website's branding and content quality are good, with consistent design and a clear focus on Portuguese digital media consumption. Technically, the site leverages modern web technologies including Angular and PeerTube version 6.3.3, ensuring a contemporary user experience. The platform is accessible, mobile-optimized, and uses HTTPS for secure communications. However, some areas such as security headers and privacy compliance policies are lacking, which could be improved to enhance trust and regulatory adherence. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy and cookie policies represent gaps in the security posture. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's Brazilian focus, supporting legitimacy. Overall, Zappiens.br is a functional and legitimate video platform with room for improvement in privacy, security policies, and contact transparency. Strategic enhancements in these areas would strengthen user trust and compliance readiness.

B

Ben Stocker Johnson

bensjohnson.com

41

Ben Stocker Johnson is a seasoned art director, designer, and illustrator specializing in visual storytelling for social good. The website serves as a professional portfolio showcasing a broad range of creative services including art direction, user experience, brand identity, illustration, and print design. The target audience primarily consists of mission-driven organizations such as nonprofits, government agencies, and social innovators. The business model is consultancy and creative services with a strong emphasis on cause-based projects. The website reflects over 20 years of experience, consistent with the domain age dating back to 2000. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Font Awesome icons. It integrates Google Analytics and Google Tag Manager for tracking and analytics. Hosting appears to be managed via Google Cloud DNS with domain registration through Squarespace Domains II LLC. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site uses domain status flags to prevent unauthorized domain transfer or deletion but lacks DNSSEC and visible security headers. There is no privacy or cookie policy present, which impacts compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. The site does not appear to be behind a WAF or security challenge, and no malicious or suspicious content is detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. However, it would benefit from enhanced privacy compliance, improved security headers, and explicit policies to strengthen its security posture and regulatory adherence.

The HACS Workshop website represents a specialized, invite-only academic event focused on advancing the intersection of cryptographic software and formal verification techniques. Founded in 2016, it serves a niche audience of cryptographic developers and formal methods experts, aiming to foster collaboration and improve software assurance in cryptography. The site content is well-structured and professional, reflecting the workshop's academic and industry credibility. Technically, the website is simple, built with basic HTML and CSS, with no detected CMS or advanced frameworks. It lacks modern security headers and privacy compliance documentation, which are areas for improvement. No analytics or tracking scripts are present, indicating a privacy-conscious approach. The WHOIS data is unavailable due to a malformed request, limiting domain trust verification, but the website content and event history support legitimacy. Overall, the site is safe, professional, and focused on its academic mission, though it would benefit from enhanced security and compliance features.

Linux Day 2025 is a well-established annual event organized by the Italian Linux Society, focusing on free software, open source, and Linux community engagement across Italy. The website serves as an information hub for the event, promoting decentralized volunteer-driven activities and providing resources for organizers and participants. The site is professionally designed with consistent branding and clear navigation, targeting technology enthusiasts and the broader free software community in Italy. Technically, the website employs modern web technologies including Bootstrap, jQuery, Leaflet.js for mapping, and Matomo for privacy-conscious analytics. The site is mobile responsive and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some advanced security headers and formal incident response disclosures. From a security and compliance perspective, the site does not display explicit privacy or cookie policies on the analyzed page, which is a gap in GDPR compliance. Contact information is limited to an email address in metadata, with no phone or physical address provided. No vulnerability disclosure or security.txt files were found, indicating an opportunity to enhance transparency and incident handling readiness. Overall, Linux Day 2025's website is trustworthy and credible, reflecting a mature community-driven initiative with strong technical foundations but with some compliance and security best practice improvements recommended to further strengthen user trust and legal adherence.

Acquire.com operates as a professional online marketplace facilitating the buying and selling of profitable online businesses. The platform boasts a large user base of over 500,000 qualified buyers and thousands of vetted listings, positioning itself as a leading player in the online business acquisition market. Key services include M&A advisory, legal assistance, and escrow services, enhancing the transaction security and trustworthiness for users. The website's content and branding are consistent and professionally presented, targeting entrepreneurs and business buyers/sellers.

J

Welcome to JAIN

jainlogic.com

53

JAIN Logic's website serves primarily as a portal landing page directing users to two main application suites: JAIN Logic and Observant Global. The business appears to operate in the technology sector, providing software solutions likely targeted at enterprise or business users. The site is minimalistic, focusing on navigation rather than content, with no detailed business descriptions or contact information presented. Technically, the website is built with standard HTML and CSS, hosted partially on Amazon S3 for static assets, and is mobile responsive with basic design quality. However, it lacks advanced SEO metadata, structured data, and analytics integrations, indicating a low level of digital maturity. Security posture is minimal with no visible security headers or privacy policies, and no forms or data collection mechanisms are present on the landing page. The domain uses privacy protection in WHOIS, which is common but limits transparency. Overall, the site is functional for its purpose but lacks comprehensive security, privacy, and business information disclosures.