Security Directory

T

Ten Bosch Montageservice Haarlem

tenboschmontageservice.nl

56

Ten Bosch Montageservice Haarlem is a small Dutch company specializing in the installation and advisory of sustainable heating and cooling systems, including underfloor heating, wall heating, ceiling heating, cooling, and shower heat recovery systems. The company targets installers, contractors, and private individuals primarily in the Haarlem region. The website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear contact information, enhancing user experience and business credibility. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with room for security and compliance improvements.

A

Autorijschool Frank Sakkers

franksakkers.nl

67

Autorijschool Frank Sakkers is a well-established driving school based in Utrecht, Netherlands, operating since 1988. The company offers driving lessons primarily for cars and trailer BE licenses, utilizing a stepwise driving education method known as 'Rijopleiding in Stappen'. The business targets learners in Utrecht and surrounding areas, boasting a high pass rate and a strong local reputation. Their website reflects a professional and consistent brand image with clear service offerings and active social media engagement. Technically, the site is built on WordPress with the Divi theme, incorporates modern web technologies, and includes SEO optimizations and cookie consent mechanisms. Security posture is good with HTTPS enforced, though some security headers are not explicitly detected and no formal security policy or incident response information is published. Overall, the website is trustworthy, compliant with GDPR, and provides sufficient contact information, though no phone number is explicitly listed. The domain registration details align well with the business claims, supporting legitimacy.

V

VGNS

vgns.nl

56

VGNS is a Dutch non-profit association dedicated to advocating for and supporting users of natural thyroid hormone medication. Established in 1998, it provides information, a members portal, and promotes awareness about natural thyroid hormone as an effective treatment alternative. The website serves primarily Dutch-speaking patients and healthcare professionals interested in thyroid health. Technically, the site is built on WordPress using common plugins such as WPBakery Page Builder and LiteSpeed Cache, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy policies exist but do not include explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and focused on healthcare advocacy with no signs of adult or questionable content.

A

Aannemingsbedrijf Noord Zuid B.V.

aannemingsbedrijfnoord-zuid.nl

56

Aannemingsbedrijf Noord Zuid B.V. is a well-established Dutch construction company specializing in new builds, renovations, remodeling, and maintenance services. With over 35 years of experience, the company targets residential and commercial property owners in the Netherlands, emphasizing reliability and collaboration with trusted suppliers and subcontractors. The website reflects a professional image with clear service offerings and contact information, supporting its market position as a trusted local construction firm. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and content management capabilities. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is enforced, but the absence of key security headers and published security policies indicates room for improvement in hardening the site against threats. Overall, the security posture is adequate but could benefit from enhanced security headers and incident response documentation. Privacy compliance is supported by a visible cookie consent mechanism and a privacy policy page, though terms of service and vulnerability disclosure policies are missing. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include implementing comprehensive security headers, publishing security and incident response policies, and enhancing accessibility and privacy compliance measures to strengthen trust and resilience.

HypotheekPlatform is a Dutch mortgage advisory firm specializing in independent, expert, and reliable mortgage advice primarily serving the Rotterdam region and broader Netherlands market. The company offers a range of services including mortgage calculations, refinancing, expat mortgages, and support for entrepreneurs and self-employed individuals. The website reflects a strong market position with high customer satisfaction ratings and industry recognition. Technically, the site is built on WordPress with modern plugins and tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

Cavallaro Napoli

thekeythesecret.nl

38

TheKeyTheSecret.nl is a professionally designed website representing the Cavallaro Napoli fashion brand, focusing on formal and leisure wear collections for 2021. The site targets fashion-conscious consumers looking for stylish and high-quality apparel with Italian heritage. The business operates primarily in the retail sector within the Netherlands and appears to be a small-sized company founded around 2020. The website offers lookbook downloads and direct contact options via phone and email but lacks interactive forms or e-commerce capabilities on this domain. Technically, the website utilizes modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Fonts, ensuring a responsive and visually appealing user experience. Google Analytics is implemented with IP anonymization, indicating some privacy consideration. However, the site lacks critical security headers and DNSSEC is not enabled, which are areas for improvement. The site performance is moderate with good mobile optimization but basic SEO and accessibility features. From a security standpoint, the site uses HTTPS (assumed from domain and scripts) but does not publicly disclose privacy, cookie, or security policies, nor does it provide incident response or vulnerability disclosure information. No forms are present, reducing attack surface but also limiting user interaction. The WHOIS data is consistent with the business profile, showing domain registration in 2020 with no privacy protection, supporting legitimacy. Overall, the website is safe, professional, and credible but has gaps in privacy compliance and security best practices. Strategic improvements in policy disclosures, security headers, and DNSSEC would enhance trust and compliance posture.

H

Haarlemmermeer Transport & Logistiek BV

haarlemmermeertransport.nl

56

Haarlemmermeer Transport & Logistiek BV is a well-established Dutch transport and logistics company specializing in refrigerated transport, urgent deliveries, warehousing, air freight, and ADR transport. With over 20 years of experience, the company serves clients nationally and internationally across Europe, positioning itself as a reliable and flexible service provider. The website reflects a professional business model focused on B2B and B2C customers requiring specialized transport and storage solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response information. Privacy compliance is addressed with a privacy policy and cookie consent banner, though terms of service and security disclosures are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

S.V. ALLIANCE '22

alliance22.nl

52

S.V. ALLIANCE '22 is a well-established non-profit football club based in Haarlem-Zuid West, Netherlands, with a rich history dating back to 1922. The club serves a broad community audience including youth, senior, and veteran football players, and actively engages in community and volunteer activities. The website reflects a mature digital presence with comprehensive content, structured data, and active social media integration. Technically, the site is built on WordPress using WPBakery Page Builder, with modern technologies such as Google Analytics and Tag Manager for tracking. Security posture is strong with HTTPS and security headers implemented, though improvements can be made in privacy compliance by adding cookie consent and incident response information. Overall, the site is professional, trustworthy, and well-aligned with the club's community-oriented mission.

W

Waterland Notariaat

waterland-notariaat.nl

51

Waterland Notariaat is a specialized notary office operating primarily in Purmerend and Uitgeest, Netherlands, focusing on family law and real estate services. The company offers a comprehensive range of notarial services including estate planning, wills, property transactions, and partnership agreements. The website reflects a modern, professional business with clear contact channels and a customer-oriented approach. Technically, the site is built on WordPress with popular plugins like Yoast SEO and WPBakery, ensuring good SEO and content management capabilities. The site is mobile-optimized and uses HTTPS, providing a secure browsing experience. Security posture is adequate but could be improved by adding security headers and a cookie consent mechanism to enhance GDPR compliance. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive business reputation.

G

Green Business Bikes

greenbusinessbikes.nl

52

Green Business Bikes is a newly established Dutch company specializing in leasing and selling robust, affordable business e-bikes, targeting SMEs, staffing agencies, and rental companies. Their flagship product, the KARO Solid e-bike, emphasizes durability, low maintenance, and cost-effectiveness. The website is professionally designed with clear navigation and multiple contact points, including forms with GDPR-compliant privacy agreements. Technically, the site runs on WordPress with modern plugins and SEO optimizations, though some security enhancements are recommended. The security posture is moderate with HTTPS enabled but lacks security headers and DNSSEC. Overall, the business appears legitimate and well-positioned in the transportation sector with a focus on sustainable mobility solutions.

S

Synanta B.V.

synanta.nl

58

Synanta B.V. is a Dutch consulting company specializing in certification advisory services including ISO 9001, VCA, HKZ-KO, and RI&E. They also offer a proprietary SaaS solution, Cross Approach, to support QHSE process management. The company targets businesses seeking practical, expert guidance to achieve and maintain certifications, positioning itself as a trusted partner with a personalized approach. The website reflects a professional and modern digital presence built on WordPress, integrating multiple analytics and marketing tools while maintaining GDPR compliance. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, Synanta presents a credible, well-structured business with a clear market niche and digital maturity appropriate for a small enterprise.

C

Cavallaro Napoli

cavallaronapoli.com

69

Cavallaro Napoli operates an official e-commerce webshop specializing in fashion apparel for men and women. The site offers a professional shopping experience with features such as fast delivery, pay afterwards options, and a 30-day return policy. The brand targets fashion-conscious consumers primarily in the Netherlands and surrounding regions. The website is built on Magento, leveraging modern web technologies and integrates multiple marketing and analytics tools including Google Analytics, Hotjar, and Cookiebot for privacy compliance. Technically, the site demonstrates a mature digital infrastructure with HTTPS enforced, cookie consent mechanisms, and anti-CSRF protections. However, explicit security headers and detailed security policies are not evident. The site uses extensive third-party tracking and marketing services, indicating a robust marketing strategy but also raising privacy considerations. From a security perspective, the site is well-configured with SSL and cookie consent but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, suggesting potential registration or privacy issues that warrant further investigation. Overall, Cavallaro Napoli presents a professional and trustworthy online retail presence with good technical and security foundations but would benefit from enhanced transparency in privacy policies, terms of service, and domain registration details.

T

Trustoo

trustoo.nl

69

Trustoo is a well-established Dutch online platform founded in 2018 that specializes in connecting consumers and businesses with local service providers across a wide range of categories including legal, home improvement, personal services, and events. The platform positions itself as the leading service comparison site in the Netherlands, offering users the ability to compare companies based on reviews and pricing, facilitating informed decision-making. Trustoo operates subsidiaries in Belgium, Germany, and Spain, indicating a regional expansion strategy. Technically, the website is built on modern web technologies such as Next.js and React, ensuring fast performance and excellent mobile optimization. The use of Cookiebot for cookie consent and integration with Google Tag Manager and Bing Ads reflects a mature digital marketing and privacy compliance approach. The platform leverages structured data (JSON-LD) for SEO and maintains a professional, user-friendly design with clear navigation. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No direct contact emails or phone numbers are publicly listed, and no formal privacy policy or terms of service were found in the provided content, which could be improved to strengthen compliance and user trust. Overall, Trustoo presents a high-quality, trustworthy service platform with strong market presence in the Netherlands. Strategic improvements in security policies and transparency would further enhance its credibility and compliance posture.

NLGW is a Dutch association representing registered web designers who are fiscally reliable and registered with the Dutch Chamber of Commerce (KvK). The organization provides a certification mark (keurmerk) to its members, helping businesses identify trustworthy web design partners. The website targets Dutch businesses seeking reliable web designers and offers membership registration, a member directory, and trust signals to the market. Technically, the site uses a moderately modern tech stack including Bootstrap 3.3.7, jQuery, and FontAwesome, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF protections in place, but lacks security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

A

AIShopGenie

aishopgenie.com

51

AIShopGenie is a small, recently founded company specializing in advanced ecommerce AI chatbot solutions tailored to industry-specific needs. Their platform assists ecommerce businesses by enabling personalized store creation, product exploration, and seamless checkout experiences within the chatbot interface, including WhatsApp integration. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. Analytics and marketing tools such as Google Tag Manager are employed, but privacy and cookie policies are notably absent, which may impact compliance and user trust. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers, suggesting room for improvement. Overall, the site is professional and well-branded but would benefit from enhanced privacy transparency and security hardening.

F

FlexPress Ventures

organic.ly

51

FlexPress Ventures operates a technology platform aimed at accelerating high-traffic websites by up to 15 times, leveraging AI technologies such as ChatGPT and other large language models to enhance content discoverability and user experience. The company positions itself as a competitive alternative to WPVIP, offering enterprise CMS, hosting, organic ads, and AI-powered analytics solutions. The website demonstrates a professional design with good SEO and mobile optimization, supported by a modern WordPress infrastructure and integrated marketing and analytics tools including HubSpot and Microsoft Clarity. Security posture is moderate with domain transfer protections in place, but lacks visible security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business credibility is solid for a newly founded company with clear market positioning and partner references.

P

Private by Design, LLC

rxresu.me

58

Reactive Resume is a free and open-source resume builder designed to simplify the creation, updating, and sharing of resumes. The platform targets job seekers and professionals looking for a user-friendly, customizable resume solution. It operates on a donation-supported model and emphasizes community involvement, open-source development, and privacy. The website is well-positioned in the niche market of resume building tools, offering rich features such as multiple templates, OpenAI integration, and secure authentication options. Technically, the website leverages a modern tech stack including React, Vite, TailwindCSS, NestJS, and PostgreSQL, hosted on DigitalOcean. The site is optimized for performance, mobile responsiveness, and accessibility, with good SEO practices. The use of open-source libraries and frameworks reflects a mature digital infrastructure. From a security perspective, the site enforces HTTPS, supports two-factor authentication, and restricts domain transfer and deletion. However, it lacks DNSSEC and some security headers, and does not provide explicit security policies or incident response information. Privacy is respected with no tracking or advertising, but cookie consent mechanisms and terms of service are missing. Overall, Reactive Resume presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, privacy compliance, and formal policies would enhance trust and compliance further.

The website at arcticicestudio.com currently serves a standard 404 error page hosted on the Netlify platform, indicating the site content is inaccessible or missing. There is no visible business information, contact details, or policy documentation available on the page. The domain is registered with IONOS SE since 2014 and uses privacy protection for registrant details, which is typical for business domains. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. From a technical perspective, the site is hosted on Netlify but lacks any detectable scripts, tracking, or modern web technologies in the provided HTML snapshot. The absence of security headers and SSL configuration details in the data provided suggests potential gaps in security best practices, although this cannot be fully confirmed without live site testing. Security posture is weak due to the lack of visible security policies, privacy compliance documentation, and contact information. No forms or data collection mechanisms are present, reducing immediate data exposure risks but also indicating a lack of engagement or business functionality. The domain WHOIS data is consistent and legitimate, but the site itself does not currently present a professional or trustworthy front. Overall, the site is non-functional from a user perspective and scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include restoring website content, publishing essential policies, implementing security headers and HTTPS, and providing clear contact information to improve trust and compliance.

M

Martin Magni

oddbotout.com

45

Odd Bot Out is an indie mobile puzzle game developed and promoted by Martin Magni. The website serves as a promotional platform linking to the iOS and Android app stores and features embedded video content and positive press reviews. The business operates in the technology sector, specifically mobile gaming, targeting casual gamers interested in physics-based puzzles. The site is small-scale and focused on a single product with no indication of a larger corporate structure. Technically, the website is built with basic HTML and CSS, uses Google Fonts, and embeds YouTube videos. It is mobile-optimized and provides a straightforward user experience. However, there is no evidence of advanced frameworks or CMS usage. SEO and accessibility are basic but adequate for the site's scope. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact information or incident response details are provided, limiting transparency and user trust. Overall, the site is functional and content-rich for its purpose but has notable gaps in security, privacy compliance, and domain registration transparency. Strategic improvements in these areas would enhance trust and compliance.

M

Martin Magni

mekorama.com

48

Mekorama is an indie mobile puzzle game developed by Martin Magni, offering a unique experience with mechanical dioramas and user-generated content via QR codes. The game is available across multiple platforms including iOS, Android, Nintendo Switch, PlayStation, Xbox, and web browsers, positioning it as a niche but well-regarded title in the indie gaming market. The website provides rich content about the game, including links to app stores, console versions, and social media channels, but lacks formal business contact details and privacy-related policies. Technically, the website uses standard web technologies such as HTML5, CSS, and JavaScript, with Google Adsense for monetization and Google Fonts for typography. The site is mobile-optimized and has good SEO practices but lacks advanced security headers and explicit privacy or cookie policies. No forms are present, reducing attack surface but also limiting user interaction on the site. From a security perspective, the site uses HTTPS, but no additional security headers were detected in the provided data. The absence of privacy and cookie policies indicates potential compliance gaps with GDPR and other privacy regulations. The WHOIS data is unavailable, which reduces trust slightly but is not uncommon for small indie projects. No vulnerabilities or malicious content were detected, and the content is safe for general audiences. Overall, Mekorama's website is professionally presented with good content quality and business credibility for an indie game. However, improvements in privacy compliance, security headers, and WHOIS transparency are recommended to enhance trust and regulatory adherence.

E

East Sweden Game

eastswedengame.se

52

East Sweden Game is a small Swedish organization or community focused on gaming, as indicated by the website title and content. The website is built on WordPress using the Divi theme, hosted by Loopia AB, a Swedish hosting provider. The technical infrastructure is standard with moderate performance and good mobile optimization. However, the website lacks critical compliance documents such as privacy and cookie policies, and no contact information is explicitly provided. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers. Overall, the website is functional but has room for improvement in security and compliance to enhance trust and user confidence.

P

Poki

poki.com

69

Poki is a well-established online gaming platform founded in 2001, offering a wide variety of free-to-play games accessible via web browsers on desktop and mobile devices. The platform emphasizes instant play without downloads or logins, targeting a broad general audience including families and casual gamers. Poki maintains a strong market position with over 90 million monthly users worldwide and collaborates with game developers by sharing advertising revenue. Technically, the site leverages modern web technologies including React and CDN services, ensuring fast performance and excellent mobile optimization. Security practices are robust with HTTPS enforcement, domain protection statuses, and security headers, though DNSSEC is not enabled. Privacy compliance is strong with comprehensive policies and consent mechanisms, reflecting a commitment to user data protection. However, explicit security policies and incident response contacts are not publicly detailed, and no vulnerability disclosure program is evident. Overall, Poki presents a professional, trustworthy, and user-friendly gaming environment with a solid security posture and compliance framework.

F

Fidlerówna

fidlerowna.com

51

The website www.fidlerowna.com is a personal portfolio site for Joasia Fidler-Wieruszewska, a Polish brand designer, art director, and illustrator based in Berlin. The site showcases her creative work and services including brand design, art direction, illustration, creative direction, exhibition design, and campaigns. The website is built on the Framer platform and hosted via framerusercontent.com, indicating a modern and visually oriented technical infrastructure. The site is mobile optimized and presents a professional design with clear navigation and relevant content for creative professionals and potential clients. Security posture is basic with no advanced security headers detected and no privacy or cookie policies present, which could be improved to enhance compliance and trust. The domain WHOIS data is unavailable, raising questions about domain registration legitimacy, but the site content itself is professional and safe. Overall, the website scores moderately on content quality, technical implementation, and business credibility but lacks in privacy compliance and security best practices.

J

Error

jonasfriedrich.co

50

The domain jonasfriedrich.co is registered since 2019 with privacy protection and hosted on Wix platform. Currently, the website content is an error page indicating the domain is not connected to an active Wix website. The site uses outdated AngularJS 1.2.28 and jQuery 2.0.3 libraries and lacks any business or contact information. No privacy, cookie, or terms of service policies are present, and no security headers or DNSSEC are enabled, reflecting a basic security posture. The domain registration is legitimate but the lack of active content and policies reduces trustworthiness and business credibility. Overall, the website is non-functional and provides no business or security assurances.

S

Studio Lenzing

studiolenzing.com

61

Studio Lenzing is a small, internationally operating interactive design studio specializing in user experience, UX strategy, interactive design, and production services. The company targets brands and businesses seeking premium digital product design and has a strong portfolio with notable clients. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow, Vimeo, GSAP, and Pirsch Analytics. Security posture is good with HTTPS and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is missing, which slightly reduces trust but the website content and branding indicate a legitimate business. Overall, the site is high quality with good user experience and technical implementation.

F

Fuck I Wish I Knew That

fuckiwishiknewth.at

41

The website 'Fuck I Wish I Knew That' is a personal curated link list managed by Piet Terheyden, targeting general internet users interested in educational and interesting content. It offers a monthly newsletter and an RSS feed to keep subscribers updated. The business model is simple content curation without commercial transactions or complex services. The site is built on WordPress CMS with modern versions of jQuery and integrates third-party services like Mailerlite for newsletter management and Plausible Analytics for privacy-focused user tracking. Hosting appears to be managed via the domain registrar's name servers, with no explicit hosting provider identified. From a security perspective, the site enforces HTTPS and uses deferred JavaScript loading, but lacks explicit security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options. No privacy or cookie policies are present, which is a compliance gap. The contact information is limited to an email address and a newsletter subscription form, with no phone numbers or physical addresses. WHOIS data is privacy protected, which aligns with the personal nature of the site. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website demonstrates good content quality and user experience with clear navigation and consistent branding. However, it lacks formal privacy and security policies, which impacts its privacy compliance score. The security posture is moderate due to missing security headers and lack of vulnerability disclosure mechanisms. The site is safe for general audiences with no adult or explicit content detected. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

P

Piet Terheyden

oni-icons.com

40

Oni Icons is a small technology-focused business founded in 2021 by Piet Terheyden, offering customizable icon packs primarily targeting designers and mobile users who want to personalize their iPhone and Android home screens. The website provides vector icon packs with easy color customization and instructions for use, positioning itself as a niche provider in the design tools market. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, and integrates privacy-conscious analytics via Plausible. The site is mobile optimized with good navigation and professional design, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain registration protections in place, but lacks DNSSEC and security headers. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the site is legitimate and functional but could improve in security and privacy transparency.

M

Marvin Kühner

marvinkuehner.com

40

Marvin Kühner's website serves as a professional portfolio for a film editor specializing in video post-production for high-profile clients such as Mercedes Benz, BMW, Adidas, and Zalando. The business operates as a small entity focused on providing film editing services, targeting film production companies and advertising agencies. The website is built on WordPress and employs common web technologies including jQuery and Plyr.js for video playback, with Google Analytics and Tag Manager for visitor tracking. While the site is visually professional and mobile-optimized, it lacks critical privacy and cookie policies, and does not implement GDPR compliance mechanisms. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers reduce overall security maturity. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional and professional but would benefit from improved privacy compliance and enhanced security practices.

N

Nature's Way Brands, LLC

baze.com

71

Nature's Way is a well-established company specializing in health and wellness supplements, operating a professional e-commerce platform powered by Shopify. The website demonstrates a mature digital presence with comprehensive product offerings, educational content, and a clear business model focused on retail and subscription sales. The technical infrastructure leverages modern web technologies and integrates multiple marketing and analytics tools to optimize user engagement and conversion. Security posture is strong with HTTPS enforcement, CAPTCHA protection, and secure form handling, though DNSSEC is not enabled. Privacy and cookie policies are present and indicate GDPR compliance, supporting user data protection. Overall, the website reflects a trustworthy and credible business with a high-quality user experience.

T

TiQuest Management

tiquest-management.de

46

TiQuest Management is a small, Germany-based artist and influencer management agency specializing in representing social media stars with millions of followers. The company focuses on building sustainable careers for talented artists through personalized management and influencer marketing services. The website is professionally designed, mobile-optimized, and compliant with GDPR and cookie regulations, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and themes, hosted on kasserver.com, and employs HTTPS for secure communications. Security posture is good but could be improved by adding security headers and explicit incident response policies. Overall, the domain registration and hosting details align well with the business claims, supporting legitimacy and trustworthiness.

S

Silicon Allee

siliconallee.com

61

Silicon Allee is a Berlin-based innovation network focused on supporting deep tech and AI startups through acceleration programs, community events, and investor engagement. Established in 2011, it collaborates closely with Fraunhofer Heinrich Hertz Institute to foster the growth of technology startups in Germany. The website reflects a professional and consistent brand presence with active community outreach via Slack, newsletters, and events. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for user insights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces domain trustworthiness but does not detract significantly from the overall legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

M

MOHAB Group

mohab.group

58

MOHAB Group is a Germany-based organization focused on creating minimal, versatile, and sustainable living and working spaces through its two divisions: MOHAB Studio and MOHAB Foundation. The company emphasizes sustainability-driven research and design, targeting residents, students, and businesses interested in eco-friendly environments. Their partnerships with architectural and timber construction firms enhance their market position in sustainable real estate solutions. Technically, the website is built on WordPress with Yoast SEO and uses Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit incident response policies. Overall, the website presents a trustworthy and professional image with room for security enhancements and more transparent compliance disclosures.

F

FORMEL SKIN Derma GmbH

formelskin.de

57

FORMEL SKIN Derma GmbH operates a professional dermatological skincare platform focused on personalized medical skin treatments developed by dermatologists and delivered directly to customers in Germany. The company positions itself as a leading provider with over one million successful treatments and offers ongoing medical support via chat. The website is well-designed, mobile-optimized, and uses modern technologies such as Next.js, React, and Storyblok CMS, hosted on AWS infrastructure. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security policies and terms of service are not published. The business demonstrates high credibility through verified testimonials and medical professional involvement. Overall, the site is trustworthy, compliant with GDPR in terms of cookie consent, but could improve transparency by publishing privacy and security policies.

N

Netlify Inc

smalltribe.studio

55

smalltribe.studio is a boutique branding and digital design studio focused on creating humane digital products, services, and experiences. The company operates as a small entity founded in 2019, leveraging modern design tools such as Framer and hosting on Netlify. The website reflects a professional and consistent brand image with good design quality and user experience, targeting a general audience interested in branding and digital design services. Technically, the site uses modern web fonts and frameworks but lacks advanced CMS or complex backend technologies. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks security headers and DNSSEC. Privacy and compliance documentation such as privacy and cookie policies are absent, which is a compliance gap. No contact or social media information is explicitly provided on the site, limiting direct communication channels. Overall, the site is legitimate and professionally presented but would benefit from enhanced security practices and compliance documentation.

F

Founders

founders.as

54

Founders is a small technology-focused company specializing in investing in and building software companies. The website serves as a professional landing page presenting the company's core business description and branding. The technical infrastructure is based on Webflow CMS with CDN hosting and uses jQuery for client-side scripting, indicating a modern but simple web presence. The site is mobile optimized with good design quality but lacks comprehensive content and detailed business information. Security posture is minimal with no detected security headers or policies, and no HTTPS configuration details are available from the provided data. Privacy and cookie policies are absent, which impacts compliance and trust. Overall, the website is functional but basic, with room for improvement in security, privacy, and contact transparency.

P

POOL

pool.day

50

The website pool.day is a small technology-focused web application designed to allow users to save anything with a screenshot. The site is built using the Framer platform and integrates plausible.io for analytics, indicating a modern but lightweight technical infrastructure. The content is minimal but functional, targeting a general audience interested in productivity tools. The website lacks comprehensive privacy, cookie, and terms of service policies, and no contact or security policy information is provided, which limits its compliance posture and business transparency. Security features such as HTTP security headers are absent, and the domain registration is privacy protected, which is common for small projects but reduces trust signals. Overall, the site presents a basic but clean user experience with moderate technical maturity.

W

Sign ups with built-in referrals – Waitless

wt.ls

61

The website wt.ls represents a newly launched SaaS platform named Waitless, focused on enabling users to create viral waitlists with built-in referral mechanisms. The service targets entrepreneurs, startups, and product developers aiming to build pre-launch audiences through referral incentives. The domain was registered recently in July 2023, consistent with the early-stage nature of the business. The website is built using Framer and hosted via Cloudflare, indicating a modern and scalable technical infrastructure. The site design is professional and mobile-optimized, providing a good user experience with clear messaging about the product's value proposition. However, the site lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, terms of service, and contact information, which are essential for trust and regulatory adherence. No security headers or incident response contacts are present, which may expose the site to security risks. Overall, the website is functional and relevant but requires significant improvements in privacy, security, and compliance to enhance business credibility and user trust.

P

Private by Design, LLC

spinoff.studio

51

Spinoff Studio is a small, independent product studio founded by Maxime Junique and Piet Terheyden, based in Berlin. The company focuses on crafting delightful product experiences, offering design and development services primarily targeted at startups and product teams. The website reflects a professional and modern digital presence built using the Framer platform, showcasing the founders and their projects with clear branding and social media integration. The business model is service-oriented, emphasizing bespoke product creation and collaboration.

M

Minimal Gallery

minimal.gallery

37

Minimal Gallery is a curated web design inspiration platform operated by Piet Terheyden since 2013, targeting designers, developers, agencies, and entrepreneurs globally. The site offers a gallery of hand-picked websites, templates, tools, and a newsletter subscription, positioning itself as a leading resource in the web design community. The business model includes sponsorship opportunities and affiliate marketing through template sales. Technically, the site runs on WordPress with advanced custom fields and integrates modern tools like Plausible Analytics and Mailerlite for marketing and analytics. The infrastructure is stable, hosted under a reputable registrar with secure HTTPS configuration. Security posture is solid with no visible vulnerabilities, though lacking some security headers and formal policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in formal compliance documentation and security best practices.

C

Contact Privacy Inc. Customer 0155950127

glass.photo

75

Glass.photo is a niche, paid global community platform dedicated to photographers, emphasizing an ad-free and algorithm-free environment. It offers a clean, distraction-free interface for photo sharing and community engagement, targeting photography enthusiasts who seek meaningful interaction and inspiration. The platform is relatively young, founded in 2019, and positions itself as a premium alternative to mainstream social media photo sharing apps. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Stripe for payment processing. The site demonstrates excellent design quality, mobile optimization, and user experience, supported by positive testimonials and media coverage. Security-wise, the site enforces HTTPS and domain transfer protections but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which are areas for improvement. Overall, Glass.photo presents a trustworthy and professional platform with room to enhance privacy compliance and security posture.

N

Neatnik

cache.lol

49

omg.lol is a small technology company operated by Neatnik, offering personalized web addresses, profile pages, and email forwarding services with a strong focus on privacy and community engagement. Their market position is niche, targeting individuals and small communities seeking a fun and private web presence. The business model is subscription-based with a transparent flat annual fee, emphasizing simplicity and user control. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, delivering a fast and mobile-optimized user experience. The integration with Fastmail for email sending enhances their service offering. Security posture is solid with HTTPS enforced and privacy-respecting practices, though there is room for improvement in security headers and formal policies. Overall, the site is professional, trustworthy, and well-aligned with its stated mission.

S

Schwartzco, Inc. d/b/a Commercial Type

commercialtype.com

68

Commercial Type is a specialized font foundry and licensing company established in 2007, offering a wide range of professional fonts and custom font design services. Their business model revolves around e-commerce font licensing with detailed legal agreements and secure payment processing via Stripe. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including Ruby on Rails, Hotwired Turbo, and Stimulus, with a custom CMS named GrayMatter. Security posture is solid with HTTPS and CSRF protections, but lacks some security headers and explicit security policies. Privacy compliance is a notable gap, with no privacy or cookie policies detected. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

UX Collective is a prominent online publication dedicated to user experience design, hosted on the Medium platform. It targets UX professionals and design enthusiasts by providing curated articles, editor picks, and newsletters focused on UX, AI, technology, and product design. The publication enjoys a large follower base and maintains a consistent and professional brand presence. Technically, the website leverages modern web technologies including React, CSS-in-JS (Fela), and integrates advanced services such as Google reCAPTCHA Enterprise, Branch.io for marketing, and Google Analytics for user insights. The site is hosted on Medium's infrastructure, ensuring reliable performance and mobile optimization. Security-wise, the site enforces HTTPS, employs multiple security headers, and uses secure forms, reflecting a mature security posture. Privacy policies and terms of service are comprehensive and GDPR compliant, though dedicated security and incident response pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, with moderate user tracking consistent with media platforms.

W

WearTesters

weartesters.com

62

WearTesters is a specialized content publisher focused on providing detailed reviews of basketball shoes, running shoes, cross training shoes, athletic apparel, and related equipment. The website targets sports enthusiasts and consumers interested in athletic footwear and apparel, leveraging expert testing and reviews to build credibility. The business operates primarily as a content and affiliate marketing platform, with a market position as a niche expert review site. The domain has been active since 2011, supporting the business's longevity and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including popular plugins for SEO (Rank Math), media embedding (YouTube Embed Plus), and user engagement (Jetpack, Powerkit). Hosting appears to be on AWS infrastructure, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no published security policy or incident response information, which could be improved to enhance trust and compliance. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy for its niche but should address privacy compliance gaps and enhance security practices to reduce risk and improve user trust. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, implementing security headers, and providing clear incident response contacts.

DataSign is a small, established Dutch company specializing in WordPress website and webshop development, SEO, email marketing, social media management, hosting, and related digital services. Founded in 1999 and based in Haarlem, Netherlands, it positions itself as an affordable and experienced local specialist with a strong portfolio and official certification as a Nederlandse Geregistreerde Webdesigner. The website is professionally designed, mobile-optimized, and provides clear contact channels including email, phone, and a contact form with CAPTCHA protection. Technically, the site runs on WordPress with modern technologies such as LiteSpeed Cache, Google Maps API, and Contact Form 7. It uses HTTPS with good SSL configuration and includes Google reCAPTCHA v3 for spam protection. However, security headers are not explicitly detected, and no dedicated security or incident response policies are published. Privacy and cookie policies exist but lack an explicit consent mechanism. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration details are consistent with the business claims, indicating legitimacy and trustworthiness. Analytics tools like Google Analytics and StatCounter are used with moderate user tracking. Overall, the website is safe, professional, and trustworthy, targeting general audiences without any adult or questionable content. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, implementing explicit cookie consent mechanisms, and maintaining regular updates to WordPress and plugins to sustain security and compliance.

E

Enalito

enalito.com

71

Enalito is a medium-sized technology company specializing in AI-driven marketing automation and personalization solutions for ecommerce businesses worldwide. Their platform offers a comprehensive suite of tools including smart segmentation, campaigning, onsite personalization, and an AI chatbot named AIShopGenie. The company positions itself as a leader in ecommerce marketing technology, targeting online store owners and marketing teams to improve sales and customer engagement. Technically, the website is built on Webflow with integrations to Shopify and uses modern JavaScript libraries and analytics tools, demonstrating a mature digital infrastructure. Security measures include HTTPS, CAPTCHA on forms, and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the website is professional, well-designed, and compliant with privacy regulations such as GDPR. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, warranting further verification. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency around incident response.

W

WPGens

wpgens.com

56

WPGens is a small technology business specializing in premium and free WordPress plugins, particularly for WooCommerce stores. Founded in 2015, it is operated by a solo developer, Goran Jakovljević, who emphasizes plugin speed, security, and adherence to WordPress best practices. The company has a solid market position with over 7000 customers and high user ratings. Technically, the website is built on WordPress using the Astra theme and integrates modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security is generally good with HTTPS and domain locks, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

B

Body Builders Pharmacy

bodybuilderspharmacy.com

69

Body Builders Pharmacy operates as a specialized online pharmacy focusing on bodybuilding-related medicines, including HCG and PCT supplies. The business targets fitness enthusiasts and bodybuilders seeking pharmaceutical products at competitive prices. The website demonstrates a moderate level of digital maturity, leveraging WordPress with WooCommerce and Elementor, along with modern plugins such as Slider Revolution. Hosting and DNS services are managed via reputable providers, including Cloudflare DNS and Shinjiru Technology as the registrar. Security posture is adequate with HTTPS and domain transfer lock, but lacks published privacy, cookie, and security policies, which are critical for compliance and trust. Contact information is primarily via email and contact forms, with no phone or physical address disclosed. Overall, the site is functional, safe, and professionally presented but would benefit from enhanced privacy and security disclosures.

ShopUp is a Thai-based web design and development company specializing in creating online stores and websites tailored to small and medium businesses. With over 15 years of experience and a customer base exceeding 100,000, ShopUp offers three main service packages ranging from single-page sale pages to fully custom multi-page designs. The company also provides additional digital marketing and design services such as email hosting, fanpage cover design, and product data entry. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, ensuring a responsive and user-friendly experience. The presence of a GlobalSign SSL certificate confirms secure HTTPS communication. However, the absence of a privacy policy and cookie consent mechanism indicates compliance gaps with privacy regulations. The WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and branding suggest a legitimate business. Overall, ShopUp demonstrates a solid market position in Thailand's web design sector with room for improvement in privacy compliance and security best practices.