Security Directory

D

Danes je nov dan - Inštitut za druga vprašanja

djnd.si

58

Danes je nov dan is a Slovenian non-profit institute focused on digital rights, democratic participation, transparency, and community solidarity. Established in 2012, it operates various advocacy and awareness projects, publishes a monthly newsletter, and maintains an active presence in media and social platforms. The organization targets Slovenian-speaking audiences interested in digital and democratic issues. Technically, the website uses modern JavaScript libraries such as Alpine.js and htmx, with privacy-respecting analytics via Plausible. The site is well-designed, mobile-optimized, and provides clear navigation and rich content. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and explicit security policies. Privacy compliance is mostly good, with a clear privacy policy but missing cookie consent mechanisms. Overall, the website is professional, trustworthy, and reflects an active, credible non-profit entity.

K

Kassa Kool llc

kassa-kool.com

45

Kassa Kool LLC is a small, local HVAC service provider based in Austin, Texas, specializing in residential HVAC system repair and maintenance including heat pumps, gas furnaces, and mini-splits. The company positions itself as a competitively priced service provider with quick response times and customer satisfaction guarantees. The website is built on WordPress using the Astra theme and Elementor page builder, hosted on HostGator, and incorporates common plugins such as Rank Math SEO and Chaty for marketing and communication. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The site uses Google Analytics for tracking but does not provide cookie or privacy consent mechanisms, indicating gaps in privacy compliance. Overall, the website is professional and trustworthy for its business scope but would benefit from enhanced security and privacy practices.

Lean Six Sigma International Association of Professionals (LSSIAP) is a UK-based organization providing international Lean Six Sigma and Business Process Management training and certifications. The company targets individuals and organizations seeking professional development in Lean Six Sigma methodologies, offering a range of certifications from Yellow Belt to Master Black Belt. The website reflects a moderate level of digital maturity, utilizing common web technologies such as jQuery, Google Analytics, and SitePad CMS, with a responsive design and clear navigation. However, the absence of privacy and terms of service policies, as well as limited contact information, slightly detracts from the overall professionalism. Security posture is moderate, with no visible security headers or incident response information, but the use of proctored exams via Proctor U adds credibility to their certification process. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

LifeWave is a health and wellness company operating an e-commerce platform focused on products that promote vitality and longevity. The website is professionally designed with a consistent brand presence and targets health-conscious consumers. The technical infrastructure leverages modern JavaScript libraries, a headless CMS (Sanity.io), and integrates analytics and cookie consent tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and formal security policies. Overall, the website is accessible without WAF or blocking mechanisms, indicating stable hosting and domain management. Strategic improvements in privacy policy publication, security headers, and incident response readiness would enhance trust and compliance.

D

Dr. Radut Consulting

streight.co.uk

48

STReight is a niche gaming concept website focused on a unique gambling game series developed since 2005. The site provides detailed information about various game variants including casino games, slots, and lottery systems. The business appears to be a small-scale consultancy or concept provider under Dr. Radut Consulting, targeting gaming enthusiasts and casino players. Technically, the website is built on Drupal CMS with standard modules and integrates Google Analytics and Adsense for tracking and monetization. The site is accessible with no blocking or WAF challenges detected, but lacks advanced security headers and comprehensive privacy policies. The WHOIS data is unavailable due to domain registration issues, which impacts trust and legitimacy assessment. Overall, the site is functional and informative but requires improvements in security posture and compliance documentation.

M

M:.L:.R:. Phoenix

mlnar.ro

49

Marea Loja Regulara Phoenix is a Romanian Masonic organization presenting itself as the legitimate successor of the Regular Grand Lodge of Romania. The website serves as an informational and recruitment platform, providing detailed content about Freemasonry traditions, principles, and membership procedures. It targets adult males interested in joining or learning about Freemasonry, emphasizing spiritual and moral values without political or religious affiliations. The organization positions itself as an independent and sovereign Masonic body practicing the three symbolic degrees of Masonry.

P

Puzzle iT

puzzle.ro

47

Puzzle iT is a niche website dedicated to puzzles, Sudoku, anagrams, and related intellectual and educational entertainment content. The site offers a variety of online puzzles, logic games, and interactive TV format ideas, targeting puzzle enthusiasts and educational audiences. The business model appears to be content-driven with monetization through Google Adsense and user engagement via blogs and forums. The website has a long-standing presence dating back to at least 1992, as indicated by copyright notices, supporting its credibility in the niche market. Technically, the site is built on Drupal CMS with legacy jQuery scripts and integrates Google Analytics for user tracking. The site is moderately optimized for mobile devices and accessibility but lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance. Performance is moderate, and SEO practices are basic but functional. From a security perspective, the site uses HTTPS but does not implement advanced HTTP security headers or explicit privacy and security policies. The WHOIS data is privacy protected by ROTLD, which is common for Romanian domains, and no suspicious patterns were detected. However, the absence of contact information and cookie consent mechanisms indicates areas for improvement in compliance and user trust. Overall, Puzzle iT is a legitimate, content-focused website with a solid niche presence but would benefit from enhanced security practices, privacy compliance, and modernization of technical infrastructure to improve user trust and regulatory adherence.

V

VIAINVEST

viainvest.com

74

VIAINVEST is a regulated European investment platform specializing in peer-to-peer lending and asset-backed securities, primarily backed by non-banking loans from VIA SMS Group. Founded in 2010 and headquartered in Latvia, the platform targets retail and institutional investors seeking alternative investment opportunities in the finance sector. The website presents a professional and consistent brand image, with a clear focus on regulated investment services and compliance with European financial regulations. Technically, the website employs a modern React-based frontend with Ant Design components, supported by robust third-party services including Google Analytics, Microsoft Clarity, and Cookiebot for consent management. Hosting and DNS services are provided by Cloudflare, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, with comprehensive cookie consent mechanisms and privacy policies that align with GDPR requirements. From a security perspective, VIAINVEST enforces HTTPS and uses Cloudflare for DNS and potential DDoS protection. While some security headers are not explicitly visible in the HTML, the overall SSL configuration is good. The absence of DNSSEC is a minor security gap. No vulnerability disclosure or incident response information is publicly available, which could be improved. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, VIAINVEST demonstrates a solid security posture and compliance framework suitable for a regulated financial platform. The website is accessible without WAF challenges or blocking, and content safety is rated as safe with no adult or NSFW material. Strategic recommendations include enabling DNSSEC, publishing a security policy and vulnerability disclosure, and enhancing security headers to further strengthen the platform's security and trustworthiness.

S

Smokers Association

smokersassociation.org

53

Smokers Association is a small non-profit organization advocating for the rights and freedoms of smokers worldwide. The website serves as a community hub offering articles, media, and event information related to smokers' rights and lifestyle choices. It positions itself as a defender of personal liberty against segregation and restrictive policies. The site has been active since at least 2008, with content reflecting ongoing advocacy and community engagement. Technically, the website is built on Drupal CMS with common web technologies such as jQuery and integrates Google Analytics and Adsense for tracking and monetization. The site is mobile-friendly and moderately optimized but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. The absence of WHOIS data and registrant information reduces domain trustworthiness, although the website content and historical presence suggest legitimacy. Privacy compliance is minimal, with no privacy or terms of service pages found, but a cookie consent mechanism is implemented. Contact is only available via a web form, with no direct emails or phone numbers provided. Overall, the site is functional and serves its advocacy purpose but would benefit from improved transparency, security practices, and privacy compliance to enhance trust and professionalism.

E

EU Copyright Office

eucopyright.com

54

EU Copyright Office operates a website providing worldwide copyright registration and deposit services, targeting creators and intellectual property owners. The site offers educational content about intellectual property and copyright law, supporting users with multi-language options and basic legal information. The business model centers on acting as an independent registrar and depository service, emphasizing securing evidence of ownership for copyright claims. The market position is niche, focusing on copyright registration within the EU context, but the lack of WHOIS data raises questions about domain legitimacy. Technically, the website is built on Drupal CMS with standard modules and uses Google Analytics and Adsense for tracking and monetization. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. Security posture is reasonable with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. Security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of WHOIS registration details and direct contact information reduces business credibility. Privacy compliance is basic with cookie banners and a privacy policy present, but GDPR compliance indicators could be stronger. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices. Strategic recommendations include improving WHOIS transparency, implementing security headers, publishing incident response and vulnerability disclosure policies, and providing clear company contact details to enhance trust and compliance.

P

Parmena and Florian Radut

shilma.com

52

Shilma.com is a professionally designed website promoting Shilma™, an innovative transparent reusable mask that uses the Coanda effect to redirect expired air downward, reducing germ spread and eyeglass fogging. The business targets general consumers interested in comfortable, transparent face masks suitable for daily use, including at work, school, and sports. The website demonstrates a clear market niche with scientific backing and multiple product styles, positioning itself as a unique player in the personal protective equipment manufacturing sector. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes essential SEO and accessibility features. It employs HTTPS with good SSL configuration and a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. No direct company contact emails or phone numbers are provided, only a contact form, which may limit direct communication. From a security perspective, the site uses HTTPS and cookie consent but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected in the HTML content. The site does not appear to be behind a WAF or blocked by security mechanisms, allowing full content access. Overall, while the website is well-constructed and content-rich, the missing WHOIS data and limited direct contact information reduce trustworthiness. Strategic improvements in domain registration transparency, security policy publication, and direct contact details would enhance credibility and security posture.

D

Dr. Radut Consulting Ltd.

dr.mt

52

Dr. Radut Consulting Ltd. is a specialized Drupal web development and IT&C consulting company with a strong presence in Malta and Romania. The company offers a wide range of services including custom Drupal development, SEO, digital marketing, AI implementations, and IT&C solutions such as web hosting and VoIP. Their market position is that of a niche expert focusing on quality and client-specific solutions. Technically, the website is built on Drupal CMS with modern front-end technologies and is hosted on optimized servers in London. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and anti-bot measures, though it lacks explicit security policies and some security headers. Privacy compliance is basic but includes a cookie consent banner and a privacy policy. Overall, the website is professional, trustworthy, and well-aligned with the business's claims and WHOIS data.

T

TW Elements

tw-elements.com

60

TW Elements is a technology-focused website offering a large collection of free and commercial Tailwind CSS UI components, templates, and plugins. The site targets web developers and designers who use Tailwind CSS, providing resources to accelerate frontend development with customizable and themeable components. The business model includes free open source offerings alongside a commercial pro version. Technically, the site is built using the Hugo static site generator and leverages modern frontend technologies including Tailwind CSS and JavaScript libraries. It integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS with a reputable registrar and domain status protections, but lacks advanced security headers and published privacy or security policies, which are areas for improvement. Overall, the site is professional, well-structured, and safe for general audiences, but could enhance privacy compliance and security transparency.

D

Data Den

getdataden.com

57

Data Den is a small technology company offering an open-source, MIT licensed customizable data grid plugin targeted at developers and software projects. The website presents a professional and consistent brand with good content quality and clear navigation, focusing on technical documentation and examples. The technical infrastructure leverages modern JavaScript libraries, Hugo CMS, and is hosted by OVH sas, indicating a moderate level of digital maturity. Security posture is basic with HTTPS enabled and domain protections in place, but lacks advanced security headers, vulnerability disclosure, and incident response information. Privacy compliance is minimal with no explicit cookie consent or GDPR indicators. Overall, the website is functional and trustworthy but could improve in privacy and security transparency.

M

MDBootstrap

mdbgo.com

50

MDBootstrap operates MDB GO, a developer-centric platform offering free hosting and deployment tools with a CLI-first approach. The platform supports a wide range of technologies including WordPress, databases, and popular frontend and backend frameworks. Positioned as a trusted solution with over 3 million developers and designers relying on its tools, MDB GO emphasizes ease of use with one-command deployment and starter templates. The business model focuses on providing free hosting services complemented by developer tools and integrations.

8

8x8, Inc.

8x8.com

77

8x8, Inc. is a leading enterprise technology company specializing in cloud-based communication, collaboration, and contact center solutions. Their platform unifies contact center, global telecommunications, video messaging, and low-code APIs into an AI-powered solution designed to enhance customer experiences and improve business efficiency. The company targets businesses seeking modern unified communications and customer engagement tools, positioning itself as a global provider in the telecommunications technology sector. Technically, the website is built on a modern stack including Gatsby and React, with integrations for Google Tag Manager, Visual Website Optimizer, and ConsentJS for privacy compliance. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Analytics and tracking are implemented with moderate user tracking levels and appropriate consent mechanisms. From a security perspective, the site enforces HTTPS, employs security headers such as CSP and HSTS, and uses cookie consent banners to comply with privacy regulations. However, explicit security policy and incident response information are not publicly available, and no vulnerability disclosure or security.txt files were found. The WHOIS data is not publicly available, likely due to privacy protection, but the website content and branding strongly indicate legitimacy. Overall, 8x8.com presents a professional, secure, and compliant online presence suitable for an enterprise SaaS provider. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

JAM Web Designs, Inc. operates the website jamwd.com as a parent company for several niche web design brands specializing in cheerleading, dance, gymnastics, and church websites. The business model focuses on providing tailored website design and class management software solutions to these specific communities. The website itself serves primarily as a landing page linking to its subsidiaries, with minimal direct content or interactive features. Technically, the site is built with basic HTML and CSS, lacking modern frameworks or CMS platforms. There is no evidence of advanced analytics, tracking, or advertising technologies. Security posture is weak due to absence of HTTPS information, DNSSEC, and security headers, and no privacy or cookie policies are published. The domain is well-established since 2006, indicating business longevity and legitimacy. Overall, the site is functional but basic, with significant room for improvement in security, privacy compliance, and content richness.

G

Gong

codeforcroatia.org

67

Code for Croatia is a Croatian non-profit civic technology community platform focused on open data, open government, and open source projects. It serves as a discussion forum and collaboration space for designers, programmers, and activists aiming to foster positive social change. The website is powered by the Discourse forum software and hosted with Cloudflare DNS services, reflecting a modern and community-oriented technical infrastructure. The platform demonstrates good digital maturity with a well-structured forum, active categories, and integration of various plugins to enhance user engagement. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Overall, the website is trustworthy, professionally maintained, and serves a clear community purpose with moderate tracking via Google Analytics. Strategic recommendations include enhancing privacy compliance with cookie consent mechanisms and formalizing security incident response documentation.

C

Counter

counter.dev

60

Counter.dev is a small technology company offering a privacy-friendly, open source web analytics platform designed to track unique visitors, referrals, and geographical data without compromising user privacy. The business model is based on voluntary payments with a 'pay when ready' approach, targeting website owners and developers who prioritize privacy and simplicity. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery and OwlCarousel, and integrates PayPal SDK for payment processing. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating good accessibility. However, some security best practices like security headers and cookie consent mechanisms are missing. The site is mobile optimized and SEO friendly but could improve accessibility features. From a security perspective, the site demonstrates a strong privacy stance by avoiding cookies and IP fingerprinting, minimizing data collection, and using HTTPS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement. Overall, the site maintains a good security posture but could enhance transparency and compliance. The overall risk assessment is low with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing security headers, publishing security and incident response policies, adding cookie consent if applicable, and improving accessibility. These steps will strengthen trust, compliance, and security culture while supporting the company’s privacy-focused brand.

FixMyStreet Platform, operated by mySociety, is an established open source civic technology project founded in 2007 that enables citizens and local governments worldwide to report and manage street problems such as potholes and broken streetlights. The platform is brandable, multilingual, and supported by a strong community and commercial services through its subsidiary SocietyWorks Ltd. The website presents a professional and consistent brand image with clear navigation and relevant content targeting civic-minded users and local authorities. Technically, the site uses a modest but effective technology stack including jQuery and Owl Carousel, with Google Fonts for typography. The site is mobile optimized and performs moderately well, though accessibility and SEO features are basic. No CMS or hosting provider details are explicitly identified. The domain is registered with Tucows Domains Inc. under mySociety in the UK, consistent with the website's claims and history. From a security perspective, the site uses domain transfer and update prohibitions but lacks DNSSEC and visible HTTP security headers. No privacy, cookie, or terms of service policies are published, and no incident response or vulnerability disclosure information is available. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the security posture is moderate but could be improved by adding security headers, enabling DNSSEC, and publishing privacy and security policies. The website content is safe for general audiences, with no adult or questionable content detected. The domain registration and website content are consistent and trustworthy, supporting a high legitimacy score. Strategic recommendations include improving privacy compliance, enhancing security headers, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance.

G

Glitnor Group

glitnor.com

55

Glitnor Group is a medium-sized technology company specializing in the iGaming sector, operating multiple B2C online casino brands and a B2B game studio. The company has a strong presence in Sweden and offices in Malta, Bulgaria, Spain, and Gibraltar. Their business model combines direct consumer-facing casino operations with game content development and affiliate marketing. The website is professionally designed, mobile-optimized, and provides clear information about their brands and services, targeting adult online gamblers and industry partners. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Maps API. The site performs moderately well with good mobile optimization but lacks advanced accessibility features and some SEO optimizations. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration transparency. This inconsistency affects the overall trust score despite the professional appearance and business presence. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, Glitnor Group's website reflects a credible and professional business in the iGaming industry but would benefit from enhanced security practices, transparent privacy policies, and WHOIS data clarity to improve trust and compliance.

H

Hosting Concepts B.V. d/b/a Registrar.eu

realspin.com

63

RealSpin is an established online gambling platform founded in 2014, offering casino games, live casino, virtual sports, and sports betting primarily targeting Finnish-speaking customers. The website demonstrates a mature business model with multi-language support and a focus on user engagement through bonuses and promotions. Technically, the site employs modern web technologies including Vue.js, Cloudflare DNS/CDN, and integrates marketing and chat tools such as Smartico and Zendesk. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding explicit security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR indicators. Overall, the site is professional, trustworthy, and well-positioned in the online gambling hospitality sector.

L

Lionbonuses.com

lionbonuses.com

68

Lionbonuses.com is an online platform specializing in providing detailed guides, reviews, and bonus information for online casinos and slot games, focusing on best payout and fastest withdrawal casinos. The site targets adult online gamblers seeking reliable and lucrative casino options. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Matomo, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and reCAPTCHA for form protection but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, impacting trustworthiness. Overall, the site is functional and content-rich but would benefit from enhanced compliance and transparency measures.

B

BonusGuru

bonusguru.net

66

BonusGuru.net is an affiliate marketing platform specializing in online casino bonuses and reviews for 2025. It targets online casino players seeking trusted and licensed casinos with fair play and secure payments. The website offers expert reviews, bonus listings, and detailed casino information to help users make informed decisions. Technically, the site is built on WordPress with modern technologies including Laravel Livewire and Bootstrap, optimized for mobile and SEO. Security posture is good with HTTPS and secure forms, but lacks explicit security headers and published privacy or cookie policies. The WHOIS data is unavailable, indicating possible new registration or privacy protection, which slightly reduces trust. Overall, the site is professional and content-rich but would benefit from improved transparency and privacy compliance.

Z

Zone Media OÜ

onlinekasiinod.ee

53

The website onlinekasiinod.ee is an Estonian-language informational portal focused on online casinos in Estonia for the year 2025. Operated by Zone Media OÜ, the site provides casino reviews, rankings, and bonus offers targeting Estonian online gambling enthusiasts. The business model appears to be affiliate marketing or informational services within the gambling niche. Technically, the site is built on WordPress using the Blocksy theme, hosted behind Cloudflare DNS, and employs standard web technologies such as jQuery UI. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with no detected security headers or published security policies, and privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is provided, which limits user trust and compliance. Overall, the domain registration data is consistent and legitimate, supporting the site's credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

K

Kasinot

kasinot.org

50

Kasinot.org is a Finnish-language online casino review and affiliate platform with over 15 years of experience, targeting Finnish players seeking trustworthy casino information and bonuses. The website offers detailed casino reviews, rankings, and affiliate links to various online casinos, focusing on user-friendly content and localized offerings. Technically, the site is built on WordPress with modern SEO and cookie compliance plugins, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and explicit privacy and terms policies. Overall, the site presents a professional and trustworthy front for its niche, with a moderate risk profile due to limited WHOIS transparency but consistent domain age and content alignment.

N

NetRefer

netrefer.com

63

NetRefer is a well-established technology company specializing in affiliate marketing software solutions tailored for the online casino and sports betting sectors. Founded in 2002, the company positions itself as a leading provider in the iGaming industry, offering a range of services including AI-powered affiliate platforms, operator-focused APIs, and data ingestion solutions. The website reflects a professional and consistent brand image with a clear focus on its target audience of iGaming operators and affiliates. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies such as Google Analytics 4, Google Tag Manager, FontAwesome, GSAP, and various JavaScript libraries for enhanced user experience and performance. Hosting is managed via Akamai, indicating a robust infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site employs HTTPS with an excellent SSL configuration and includes a cookie consent mechanism compliant with GDPR principles. However, it lacks DNSSEC, security headers, and publicly available security policies or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, NetRefer presents a credible and professional online presence with a solid business model and technical foundation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and security policies, implement DNSSEC, and add security headers. These steps will strengthen the security posture and privacy compliance, aligning with industry best practices.

S

SIA VIA SMS

viasms.lv

54

SIA VIA SMS operates the website www.viasms.lv, providing fast online consumer loans up to 5,000 euros targeted primarily at Latvian customers. The company holds a special license issued by PTAC, confirming its legitimacy in the Latvian financial sector. The website offers a loan calculator, flexible repayment options, and clear instructions for registration and loan application. The parent company is VIA SMS GROUP, which operates subsidiaries in multiple countries. Technically, the website uses a custom CMS with jQuery and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-positioned in the Latvian online lending market.

J

JSC VIA SMS group

viasmsgroup.com

70

VIA SMS Group is a Latvia-based financial services company founded in 2013, offering a range of accessible financial solutions including loans, payments, savings, and investments across several European countries. The company operates multiple subsidiary brands tailored to regional markets, positioning itself as a reliable and established player in the regional finance sector. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting consumers and investors interested in financial products. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager for analytics, hosted behind Cloudflare DNS services. Security posture is generally good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security policy or incident response information is provided. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

N

Novi B.V.

miki.com

65

Miki.com operates as an online gambling platform specializing in casino games, live casino, and sports betting, including esports markets. Licensed under Curacao jurisdiction and operated by Novi B.V., the platform targets adult users interested in crypto and traditional payment methods. The website offers a comprehensive gaming experience with a variety of bonuses, fast payment options, and 24/7 customer support via live chat. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Cloudflare DNS, with integrations for marketing and support such as Smartico and Zendesk. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy and cookie policies are present and reasonably comprehensive, supporting GDPR compliance. No incident response or vulnerability disclosure policies were found, indicating an area for enhancement. Overall, the site is professionally designed, user-friendly, and trustworthy within the online gambling niche, but should enhance security and compliance transparency to further strengthen its position.

The website goplay.se is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any business or content information. The domain is registered since 2005 with Safenames LTD and is active without privacy protection, indicating a legitimate registration. However, no privacy policies, cookie notices, terms of service, or contact information are available on the blocked page. The technical infrastructure relies on Cloudflare for security and performance, but the lack of DNSSEC and security headers is noted. Due to the WAF block, a full security and compliance assessment cannot be performed, resulting in a low AI score and limited insights.

S

Casino utan Svensk Licens | 50+ Nya Casinon utan Spelpaus 🎖️

spelpressen.se

61

Spelpressen.se is a Swedish-focused online platform specializing in providing information and updated rankings of casinos without Swedish licenses. The site targets Swedish players interested in gambling options outside the Swedish regulatory framework. The business model appears to be affiliate or informational, offering curated lists and reviews of foreign gambling sites. Technically, the website is built on WordPress, leveraging Cloudflare for DNS and CDN services, and uses Google Tag Manager for analytics. The site demonstrates good mobile optimization and a professional design, though some accessibility features are basic. Security-wise, HTTPS is properly implemented, but the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the domain registration data aligns well with the website's Swedish focus and business age, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, enabling DNSSEC, and implementing security headers to strengthen the security posture and user trust.

M

Markus Liljestrand

casinousl.com

51

CasinoUSL.com is a Swedish-language online media platform specializing in providing comprehensive guides, reviews, and rankings for online casinos without Swedish licenses. The site targets Swedish players seeking alternatives to the regulated Swedish gambling market, offering information on foreign casinos, payment methods, bonuses, and how to play without restrictions such as Spelpaus. The business operates as an affiliate and informational site, leveraging detailed content and structured data to build trust and authority in its niche. Technically, the site is built on WordPress with modern plugins like WPBakery and Rank Math SEO, and uses Google Tag Manager for analytics. The site is mobile-optimized and well-structured, though it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and security headers. Overall, the site is accessible without WAF or blocking mechanisms, providing a safe and professional user experience focused on adult gambling content.

Bénévalibre is a French non-profit initiative providing free open-source software to assist very small associations in managing and valorizing volunteer work. The project is supported by CRAJEP Bourgogne-Franche-Comté and several financial and expert partners. The website serves as an informational portal and access point to the web application. Technically, the site is built on WordPress with standard plugins and modern web technologies, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of cookie consent and detailed GDPR policies. Overall, the domain registration and website content align well, indicating a legitimate and focused non-profit project.

S

swisscollections

swisscollections.ch

57

swisscollections is a specialized digital gateway providing access to historical and modern collections from Swiss libraries and archives. It serves researchers, historians, and the general public by aggregating access to manuscripts, rare books, images, maps, and other cultural heritage materials from 14 partner institutions. The platform is positioned as a key resource in the Swiss educational and cultural sector, offering a professional and consistent user experience with multilingual support and a clear focus on archival research. Technically, the website is built on VuFind 9.0 with Bootstrap 3 and several modern JavaScript libraries such as jQuery, Handlebars, and Chosen. The site is mobile-optimized, accessible, and performs moderately well. It uses HTTPS with good security practices including nonce attributes on scripts, but lacks some advanced security headers and explicit security policies. From a security perspective, swisscollections demonstrates a solid posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, it lacks a cookie consent mechanism, published security policies, and vulnerability disclosure information, which are important for compliance and transparency. No signs of tracking or advertising scripts were found, indicating a privacy-conscious approach. Overall, swisscollections is a trustworthy and professional platform with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance its security posture and user trust further.

M

Memoriav

memobase.ch

59

MEMOBASE, operated by Memoriav, is a specialized Swiss portal dedicated to preserving and providing access to the country's audiovisual heritage. The platform aggregates collections from archives, museums, and libraries, serving researchers, historians, and the general public interested in Swiss cultural history. Supported by the Swiss Federal Office of Culture, MEMOBASE holds a strong position as a national cultural heritage resource. The website is professionally designed, multilingual, and offers curated showcases and search capabilities for audiovisual materials. Technically, the site is built on Drupal 10 with modern libraries such as Mapbox GL JS for interactive maps, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie compliance mechanisms in place, though it lacks explicit security policies and incident response information. Overall, the site is trustworthy, content-rich, and compliant with privacy regulations, making it a valuable resource for its target audience.

S

SLSP AG

slsp.ch

48

SLSP AG operates the Swiss Library Service Platform, a national service provider for libraries in Switzerland. It manages the swisscovery platform, aggregating scientific information from approximately 500 Swiss libraries, facilitating easy access and discovery. SLSP also handles billing for paid library services on behalf of these institutions. The company targets libraries and academic users, positioning itself as a key player in the Swiss library ecosystem. The website is professionally designed, multilingual, and provides clear information about services and projects. Technically, the site is built on WordPress with Elementor and Jet plugins, employing modern web technologies and Piwik PRO for analytics. Security posture is strong with HTTPS and security headers, though cookie consent mechanisms and explicit security policies are lacking. Overall, the platform demonstrates a mature digital presence with room for improvement in privacy compliance and transparency.

L

Localcities

localcities.ch

65

Localcities is a Swiss-focused digital platform providing residents and stakeholders with comprehensive municipality-related information including events, clubs, contacts, weather, emergency numbers, and directories. The platform serves as a centralized hub for local community engagement and information dissemination, targeting Swiss municipalities and their inhabitants. Technically, the website employs modern web technologies including responsive design, SVG icons, and Google Tag Manager for analytics, ensuring a good user experience across devices. The presence of cookie consent and privacy policies indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website is professional, trustworthy, and well-positioned in its niche, with room for improvement in explicit security disclosures and contact transparency.

L

localsearch

localsearch.ch

66

localsearch is a well-established digital services provider focused on supporting Swiss SMEs in their digital transformation and online presence. The company offers a comprehensive suite of solutions including website creation, online advertising, appointment management, and e-commerce platforms. Their market position is strong within Switzerland, supported by multiple platforms such as local.ch and search.ch, which serve as key assets in their ecosystem. Technically, the website is built on WordPress with modern tools like Google Tag Manager and OneTrust for cookie consent, reflecting a mature digital infrastructure. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing transparency with published privacy and security policies, adding vulnerability disclosure mechanisms, and strengthening security headers to further improve the security posture.

A

Activision Publishing, Inc.

worldseriesofwarzone.com

64

The World Series of Warzone (WSOW) 2025 website is a professionally developed platform dedicated to hosting and promoting the largest Call of Duty: Warzone esports competition. Operated under the umbrella of Activision Publishing, Inc., the site serves competitive players and fans globally, offering detailed tournament information, registration links, and official merchandise. The site leverages modern web technologies including React and Next.js, hosted on Akamai infrastructure, ensuring fast and responsive user experience across devices. Privacy and cookie policies are comprehensive and linked to official Activision legal pages, with a consent mechanism implemented via OneTrust. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Overall, the website reflects a mature digital presence aligned with a major gaming publisher's esports initiatives.

The Call of Duty League website serves as the official digital platform for the professional esports league centered around the Call of Duty franchise. It provides comprehensive content including match schedules, team information, news, video highlights, and merchandise offerings. The site targets esports enthusiasts and gamers, positioning itself as a leading authority in the competitive Call of Duty esports space. Owned by Activision Publishing, Inc., the site reflects a mature and well-established brand with a large audience and significant market presence. Technically, the website is built on modern web technologies including Next.js and Contentstack CMS, hosted via Amazon CloudFront CDN, ensuring fast performance and excellent mobile optimization. The integration of Google Tag Manager and OneTrust for analytics and cookie consent demonstrates a commitment to data-driven insights and privacy compliance. The site features strong SEO and accessibility practices, contributing to a high-quality user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and manages cookie consent effectively. While DNSSEC is not enabled and no explicit security policy or incident response contacts are published, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, enhancing user trust. Overall, the Call of Duty League website is a professional, secure, and user-friendly platform that effectively supports the esports league's business objectives. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and providing clearer incident response information to further strengthen security and compliance.

T

Toys for Bob

toysforbob.com

57

Toys for Bob is an independent game development studio with a long-standing history since 1989, known for crafting epic adventures featuring iconic characters such as Crash Bandicoot and Spyro. The company operates primarily in the technology sector, focusing on game development across multiple platforms. Their website reflects a professional and consistent brand image, leveraging Squarespace CMS for content delivery. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security-wise, the site benefits from HTTPS and HSTS but could improve by adding additional security headers and formal security policies. Overall, the website presents a trustworthy and professional front but should enhance privacy compliance and contact transparency to improve user confidence and regulatory adherence.

B

Blizzard Entertainment

vvisions.com

79

Blizzard Entertainment is a globally recognized leader in the video game industry, known for developing and publishing iconic game franchises. The analyzed website serves as a professional career portal targeting job seekers interested in opportunities at Blizzard, particularly in Albany and other locations. The site is well-branded, professionally designed, and provides comprehensive job listings and application functionality. Technically, the site leverages modern recruitment platforms and integrates OAuth for social login, enhancing user experience and security. The security posture is strong with HTTPS enforcement and security headers, though explicit incident response contacts are not found. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is trustworthy, professional, and aligned with Blizzard's enterprise stature.

B

Beenox

beenox.com

64

Beenox is a well-established video game development studio founded in 1999, primarily known for its work on the Call of Duty franchise. The company targets gamers and industry professionals, emphasizing collaborative and ambitious game creation. The website is professionally designed using WordPress CMS and integrates modern technologies such as Gravity Forms, Google Tag Manager, and reCAPTCHA. The site is mobile optimized and SEO friendly, though minor backend PHP notices are visible, indicating some code maintenance is needed. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the company's history, supporting legitimacy and trustworthiness.

I

Iron Galaxy Studios

irongalaxystudios.com

64

Iron Galaxy Studios is a large independent video game development company with offices in multiple US cities including Chicago, Orlando, and Nashville. The company supports various game studios by providing development and launch preparation services across multiple genres and platforms. Their website reflects a professional and modern digital presence built on Webflow, incorporating standard web technologies and third-party tools such as Google Tag Manager and Osano for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness, though the website content and branding appear legitimate and professional. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, targeting industry professionals and job seekers in the gaming sector.

O

Oliver+Coady, Inc

guardianproject.info

63

Guardian Project is a US-based important non-profit technology organization founded in 2010, specializing in developing easy-to-use secure applications, open-source software libraries, and customized solutions aimed at protecting communications and data from unjust intrusion and monitoring. Their target audience includes average users, activists, journalists, and humanitarian organizations. The organization maintains a strong market position through long-term partnerships, notably with the Tor Project, and offers a range of privacy-focused tools and platforms such as Orbot, ProofMode, and Círculo. The website reflects a professional and consistent brand image with good content quality and navigation.

T

The Calyx Institute

calyxinstitute.org

66

The Calyx Institute is a US-based non-profit organization established in 2010, dedicated to advancing digital privacy and internet freedom through education, tool development, and community support. Their offerings include membership programs providing mobile internet access via Wi-Fi hotspots and privacy-enhanced smartphones running CalyxOS. The organization maintains a strong community presence and actively supports open-source privacy projects through grantmaking initiatives. Technically, the website is built on a Ruby on Rails backend with Bootstrap frontend components, delivering a responsive and content-rich experience. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC, security headers, and vulnerability disclosure transparency. Overall, the site is professional, trustworthy, and well-aligned with its mission, serving a privacy-conscious audience effectively.

C

Caltha - Krzewski, Potempski Sp.J.

caltha.eu

57

Caltha - Krzewski, Potempski Sp.J. is a Polish technology company specializing in custom software development since 2002. Their expertise spans backend and frontend solutions, UI/UX design, mobile applications (Android), and open-source CRM implementations, particularly CiviCRM for NGOs. The company targets a diverse clientele including telecommunication firms, startups, and non-profit organizations, emphasizing long-term partnerships and tailored IT solutions. The website is professionally designed using Drupal 7 CMS with Bootstrap and Material Design frameworks, providing a good user experience and mobile optimization. However, some technical aspects such as security headers and privacy compliance require improvement. The site uses Google Analytics and Tag Manager with IP anonymization, indicating moderate user tracking. Security posture is adequate with HTTPS enabled but lacks published security policies and vulnerability disclosures. Overall, the domain registration aligns well with the company's history and business claims, supporting legitimacy and trustworthiness.

R

Research ICT Africa

researchictafrica.net

52

Research ICT Africa (RIA) is a well-established African think tank specializing in multidisciplinary research on digital governance, policy, and regulation to support evidence-based policymaking for digital inclusion and economic development in Africa. The organization has a strong market position as a trusted source of public-interest research, with a focus on accelerating digital equality and data justice. Their key services include research outputs, capacity building, and policy engagement, targeting policymakers, researchers, and development stakeholders across Africa. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins, and integrates Google Analytics for tracking. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, supporting its mission effectively.