Security Directory

G

Google LLC

golang.org

63

The website go.dev is the official site for the Go programming language, an open source project supported and maintained by Google LLC. It serves as a comprehensive resource hub for developers, offering documentation, learning materials, downloads, and community engagement. The site targets software developers and engineering teams seeking to build secure, scalable systems using Go. The business model revolves around providing an open source programming language ecosystem backed by a major technology company, positioning Go as a leading language in cloud and network services, web development, and DevOps. Technically, the site is well-implemented with modern web technologies including HTML5, CSS3, JavaScript, and Google’s own analytics and tag management tools. It is hosted on Google Cloud Platform, ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with clear navigation and professional design. No CMS is detected, indicating a custom-built platform tailored for the Go project. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. It uses Google Analytics and Tag Manager scripts loaded asynchronously, and a cookie consent banner is present to comply with privacy regulations. However, there is no explicit security policy or vulnerability disclosure page, nor contact information for incident response, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, go.dev is a high-quality, trustworthy, and professional website that effectively supports the Go programming language community. It reflects the credibility of Google LLC and provides valuable resources for developers. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing clear security incident contacts to enhance trust and compliance.

Limecast is an emerging privacy-first, open-source podcasting platform aimed at podcasters and privacy-conscious users. The website serves as a coming soon landing page highlighting the platform's focus on privacy and distributed podcasting technology. The business is positioned as a startup founded in 2020, with a small team and a technology sector focus. The platform emphasizes open-source development and community involvement, as evidenced by links to their Codeberg repository and social media presence on Mastodon and Bluesky. Technically, the website is built with modern HTML5 and CSS3 standards, uses Google Fonts, and integrates an EmailOctopus subscription form for user engagement. Hosting appears to be managed via NameCheap, with domain registration consistent with the startup's timeline. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is currently poor due to the absence of privacy and cookie policies and consent mechanisms. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is professional and well-branded but requires enhancements in privacy compliance and security best practices to improve trust and user confidence.

L

Limeleaf Worker Collective

apply.coop

52

apply.coop is a specialized job board operated by Limeleaf Worker Collective, LLC, focusing on connecting job seekers with values-driven organizations such as cooperatives, nonprofits, and public benefit corporations. The platform offers curated job listings with detailed workplace profiles, targeting individuals seeking meaningful careers with social impact. The website is relatively new, founded in 2025, and positions itself as a niche player in the job board market with a clear mission and consistent branding. Technically, the website employs modern web standards including HTML5 and CSS3 with Flexbox Grid for layout, and uses GoatCounter for privacy-conscious analytics. Hosting is provided by EnCirca, Inc., and the domain is secured with HTTPS and clientTransferProhibited status, though DNSSEC is not enabled. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No major CMS or frameworks are detected, suggesting a custom or lightweight platform. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No explicit security policies or incident response contacts are published, and no cookie consent mechanism is present despite analytics usage. The overall security posture is moderate with room for improvement in headers and transparency. Overall, apply.coop presents a professional, trustworthy, and focused platform with good content quality and business credibility. The main risks relate to security best practices and privacy compliance enhancements. Strategic improvements in security headers, cookie consent, and published policies would strengthen trust and compliance.

I

I Worked On

iworkedon.com

45

I Worked On is a small technology-focused platform founded in 2006 that enables individuals, makers, and developers to create and share portfolios showcasing their projects. The website emphasizes a modern approach to professional experience by focusing on tangible work and outcomes rather than traditional resumes. The platform targets users who want an easy and visually appealing way to present their work to the world. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and Alpine.js for interactivity. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Hosting details are not explicitly stated but the domain is registered with eNom, LLC and uses name-services.com for DNS. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers such as Content-Security-Policy and Strict-Transport-Security. No privacy or cookie policies are published, which is a compliance gap. No incident response or vulnerability disclosure information is available. The domain is stable and legitimate with a long registration history, supporting trustworthiness. Overall, the website is professional and functional with moderate security posture and limited privacy compliance. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance.

Mubs.me is a personal and professional portfolio website for Mubashar Iqbal, a solo software developer and content creator based in Upstate New York. The site showcases his product studio, side projects, and blog articles, positioning him as a niche solo developer with a strong personal brand. The business model revolves around software development and content creation, targeting tech enthusiasts and potential clients. The website is well designed with good content quality and consistent branding, reflecting a small but professional operation. Technically, the site uses modern web technologies including Alpine.js and Splide.js for interactivity, along with web fonts from Google Fonts and Fontshare. The site is mobile optimized and performs moderately well, though no CMS or hosting provider details are evident. SEO and accessibility are basic but adequate for the site's scope. From a security perspective, the domain is registered with a reputable registrar and has clientTransferProhibited status, indicating some protection against unauthorized transfers. However, DNSSEC is not enabled, and no security headers or privacy policies are present on the site, representing compliance and security gaps. No forms or sensitive data collection points are detected, reducing immediate risk exposure. Cloudflare Web Analytics is used for traffic monitoring with minimal user tracking. Overall, the website is safe, professional, and trustworthy with moderate security posture. Key recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information to enhance compliance and trust.

N

Nový Hlavák

novyhlavak.com

10

Nový Hlavák is a Czech public infrastructure project focused on revitalizing the Vrchlického sady park, constructing a new tramway line, and reconstructing the main railway station's new hall in Prague. The project is led by the Danish architectural studio Henning Larsen Architects, which won the competitive dialogue with their design 'Šťastný Hlavák'. The website serves as an informational platform showcasing the project vision, visual comparisons, and virtual tours, targeting city residents, visitors, and stakeholders. Technically, the site is built on WordPress with Elementor and integrates Google Analytics for visitor tracking. The site is well-structured and mobile-optimized but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and DNSSEC.

H

Harmonie Norge AS

harmonie.no

67

Harmonie Norge AS operates a professional e-commerce website focused on manufacturing and retailing doors, windows, and smart lock solutions primarily for the Norwegian market. The company has a consistent brand presence and offers a range of products including exterior and interior doors, garage doors, and accessories. The website is built on a modern technical stack with JavaScript frameworks, Google Analytics, and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy and terms policies. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

C

C4all Gesellschaft mbH & Co. KG

c4all.de

48

C4all Gesellschaft mbH & Co. KG is a German-based digital marketing service provider specializing in telephony, SMS, video, and image services to help businesses analyze campaigns, track customer touchpoints, and acquire new clients. With over 10 years of experience and a client base of 175 companies, C4all positions itself as a reliable partner in the digital marketing ecosystem. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to business customers seeking marketing measurement and communication solutions. Technically, the site is built on Umbraco CMS with modern HTML5, CSS3, and JavaScript technologies, leveraging the uSkinned sitebuilder framework. While performance and SEO are adequate, there is room for improvement in accessibility and security headers. Security posture is moderate, with secure form handling and CAPTCHA but lacking visible security policies and headers. Privacy compliance is partially met with a privacy policy and GDPR consent checkbox but missing a cookie consent mechanism. Overall, the domain registration data aligns with the business claims, indicating legitimacy and consistency.

G

Global Pixel

globalpixel.pt

54

Global Pixel is a well-established Portuguese company specializing in web development, graphic design, and digital marketing services with over 15 years of experience. The company targets businesses and organizations seeking professional digital solutions, offering a broad range of services including website creation, online stores, SEO, social media management, and advertising campaigns. Their market position is solidified by a diverse portfolio of reputable clients and a consistent brand presence. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a strong SSL configuration and incorporates security best practices such as CSRF tokens and CAPTCHA for forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic improvements in security policy transparency and header implementation would enhance the security posture further.

Koenig & Bauer BKK is a regional statutory health insurance provider in Germany, serving primarily employees and families associated with Koenig & Bauer and related companies. The website presents a professional image with clear information about health insurance services, fitness programs, and personal support. The company emphasizes regional proximity and personalized service, positioning itself as a trusted partner in health and wellbeing. Technically, the website uses custom HTML, CSS, and JavaScript with moderate performance and basic mobile optimization. Security posture is moderate with no visible advanced security headers or explicit security policies, and privacy compliance is partial due to the absence of a cookie consent mechanism. Contact information is comprehensive and transparent, supporting business credibility. Overall, the website is safe, professional, and trustworthy but could improve in security and privacy compliance.

The website med-alumni.de currently serves as a domain parking and sales landing page, offering a selection of generic categories such as products, home & garden, sports, and information guides. The domain is explicitly marked as 'for sale' and lacks any substantive business content or contact information. The technical infrastructure is basic but includes modern HTML, CSS, and JavaScript with a captcha challenge to mitigate bot access. However, there is no evidence of HTTPS enforcement or advanced security headers, which limits the security posture. The absence of WHOIS data and registrant information further reduces trust and legitimacy. Overall, the site is functional as a domain sale landing page but lacks business credibility and comprehensive privacy or security compliance.

CommanderZero.com is a personal blog established in 2003, focusing on preparedness, survivalism, firearms, and related logistics topics. The site serves a niche audience of survival enthusiasts and firearm owners, providing detailed articles, reviews, and observations. The business model appears to be content publishing supported by community engagement and Patreon donations. Technically, the site runs on WordPress hosted by Bluehost, utilizing modern web technologies and Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility but lacks comprehensive privacy and cookie policies, which are compliance gaps. Security posture is adequate with HTTPS enabled and domain transfer protections, but missing advanced security headers and vulnerability disclosures. Overall, the domain age and registration data support the site's legitimacy and stable presence. Strategic improvements in privacy compliance and security practices would enhance trust and reduce risk.

D

Dell Deutschland

dell.de

68

Dell Deutschland operates as a regional branch of Dell Technologies, providing a comprehensive portfolio of technology products and services including notebooks, desktops, servers, storage, monitors, gaming equipment, and accessories. The website targets both business and consumer segments in Germany, reflecting Dell's strong market position as a global technology leader. The digital infrastructure is robust, leveraging advanced marketing and analytics tools such as Adobe Target and OneTrust for consent management, ensuring GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and professionalism consistent with an enterprise-grade technology provider.

L

Leipziger Messe GmbH

medlogistica.de

67

med.Logistica is a specialized event platform organized by Leipziger Messe GmbH, focusing on hospital logistics and process management in the German-speaking healthcare sector. It serves as a leading congress and trade fair, targeting hospital management professionals, exhibitors, and visitors interested in optimizing hospital processes. The platform offers exhibitor registration, visitor information, ticketing, and an official mobile app to enhance user engagement. The website reflects a professional and consistent brand image aligned with its parent company, Leipziger Messe GmbH, based in Germany. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and a comprehensive cookie consent mechanism powered by consentmanager.net. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely under Leipziger Messe's infrastructure. Performance is moderate with good technical implementation but lacks explicit CMS identification. From a security perspective, the site enforces HTTPS and uses cookie consent for GDPR compliance. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data aligns well with the website content, indicating a trustworthy and legitimate online presence. Overall, med.Logistica's website is a well-structured, professional platform with good privacy compliance and moderate security posture. Strategic improvements in security policy transparency and incident response readiness would enhance trust and resilience.

A

Agentur Zentral GmbH

theme-ultimate.de

54

Agentur Zentral GmbH operates a professional website offering a proprietary Contao 5 theme called Theme Ultimate, targeting medium-sized businesses and Contao CMS users. The company provides theme development, installation, maintenance, and support services, positioning itself as a niche provider with a focus on quality and performance. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and strong SEO practices. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced security headers and policies are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it lacks explicit incident response and terms of service documentation.

A

Asian Art and Antiques LTD

vegasswordshow.com

63

The Vegas Sword Show website represents a niche event organizer focused on Japanese sword collectors and antique arms enthusiasts, hosting an event in Las Vegas in conjunction with the Las Vegas Antique Arms Show. The business operates primarily as an event coordinator, providing table and pass sales, event information, and accommodation details. The website is built on a custom CMS platform and presents a professional, content-rich experience with good navigation and mobile optimization. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible security headers or published security policies, and privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and informative but would benefit from improved security and compliance transparency.

The website teknofest.app hosts a landing page titled 'NSosyal' which promotes a social networking mobile application targeted at young people, volunteers, and technology enthusiasts primarily in Turkey. The platform offers features such as following friends, sharing posts including photos and videos, and engaging through likes and comments. The business model revolves around mobile app distribution via Google Play and Apple App Store, with a desktop version accessible through a subdomain. The site content is primarily in Turkish with an English language option. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. It features a visually appealing design with animations and responsive layout optimized for mobile devices. However, there is no evidence of a content management system or advanced frameworks. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms or sensitive data collection points are present, reducing immediate risk. The absence of privacy, cookie, and terms of service policies indicates compliance gaps, especially regarding GDPR. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and visually professional but lacks critical compliance and security documentation. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance trustworthiness and regulatory compliance.

R

RockSolid Themes

rocksolidthemes.com

55

RockSolid Themes is a specialized provider of premium Contao CMS themes and plugins, offering responsive, hand-coded designs with a strong emphasis on ease of customization and open source extensions. Established in 2012 and based in Germany, the company targets webmasters, agencies, freelancers, and developers seeking high-quality, flexible website themes. Their market position is reinforced by official Contao partnership and positive customer testimonials, positioning them as a niche leader in the Contao ecosystem. Technically, the website is well-constructed with modern HTML5 and CSS3 technologies, optimized for mobile devices and fast performance. The hosting is managed via NSHost2 name servers, and the domain is secured with HTTPS and a clientTransferProhibited status, though DNSSEC is not enabled. The site lacks some advanced security headers and explicit incident response or vulnerability disclosure policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and regular updates to themes and plugins. However, there is room for improvement in cookie consent implementation, security policy transparency, and DNS security enhancements. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, RockSolid Themes presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security documentation would further strengthen their posture and customer trust.

Z

ZEISS

zeiss.ch

68

ZEISS Switzerland operates as a regional corporate website for the global ZEISS Group, a leading technology company specializing in optics and optoelectronics. The website serves as a language selection gateway directing users to localized content in German and French. The company is positioned as a major player in the technology sector with a focus on precision optics and related services. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and integrated with Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly visible on this page. Overall, the website reflects a professional and trustworthy corporate presence with good compliance to privacy regulations.

Z

ZEISS

zeiss.ro

68

ZEISS România is the Romanian branch of ZEISS, a globally recognized leader in optics and optoelectronics technology. The website presents a professional corporate presence with a focus on vision care and medical technology sectors. The site is built on Adobe Experience Manager, leveraging modern web technologies and includes a cookie consent mechanism compliant with GDPR standards. While the WHOIS data is privacy protected under ROTLD, the website content and branding strongly align with the ZEISS international brand, indicating legitimacy and trustworthiness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital infrastructure suitable for an enterprise-level technology company.

L

livetipsportal.com

livetipsportal.com

57

Livetipsportal.com is a specialized media website providing detailed information and resources related to sports betting and football data. The site offers betting tips, tables, bookie tests, and app reviews targeted at sports bettors and football enthusiasts. The business operates primarily as a content and affiliate marketing platform within the sports betting niche. Technically, the website is built on WordPress with SEO optimizations via the Yoast plugin, delivering a professional and mobile-optimized user experience. However, the domain WHOIS data is missing or indicates the domain may not be registered, which raises concerns about the legitimacy of the domain registration. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. Overall, the site is functional and content-rich but would benefit from improved transparency and security practices.

C

C3 marketing agentur GmbH

myc3.com

55

C3 marketing agentur GmbH is a German marketing and advertising agency with offices in Tirschenreuth and Regensburg. The company offers a broad range of services including website development, e-commerce solutions, print and graphic design, photography, video, 3D media, and advertising campaigns. Their market position appears well-established with over two decades of presence and a strong regional footprint. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting businesses seeking marketing services in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as SVG graphics and JavaScript modules. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or an unregistered domain, which slightly reduces trustworthiness. Overall, the website presents a professional and trustworthy front for a marketing agency, but domain registration transparency and enhanced security disclosures would improve credibility and compliance posture.

MarinaOffice, operated by Scribble Software Inc., offers a comprehensive suite of marina management software solutions targeting marina operators, yacht basins, port authorities, and marine retailers. Their product portfolio includes marina management, retail point-of-sale, fuel management, boat yard service, online bill pay, cloud services, and boat rental management. The company positions itself as a leading provider in the marina software industry with a focus on flexibility and integration, including QuickBooks accounting integration. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular UI libraries like Swiper.js and Owl Carousel, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacks visible security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is missing, which raises concerns about domain registration legitimacy, although the website content and contact information appear professional and consistent. Overall, the site demonstrates a solid business presence but would benefit from enhanced security and privacy transparency.

The website fs-world.org serves as an authoritative platform for consolidating and publishing world ranking lists for Formula SAE/Formula Student competitions globally. Operated by Formula Student Germany GmbH, it targets student teams participating in these competitions, providing a transparent and methodical ranking system based on recent event results. The platform is niche-focused and well-positioned within the educational motorsport community, offering valuable benchmarking services without commercial intent. Technically, the website is straightforward, built with standard HTML and CSS, hosted via Cloudflare, and secured with HTTPS. While the site performs adequately with basic mobile optimization and accessibility, it lacks advanced security headers and DNSSEC, which could enhance its security posture. No CMS or complex frameworks are detected, indicating a simple and maintainable infrastructure. From a security perspective, the site benefits from HTTPS and domain transfer protections but would improve by implementing DNSSEC, security headers, and publishing a formal security policy. No forms or user data collection mechanisms are present, reducing attack surface. Privacy compliance is partial, with a privacy policy available but no cookie consent or GDPR-specific indicators. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy, safe, and professionally maintained, with a clear focus on educational content. Strategic improvements in security and privacy compliance would enhance its resilience and user trust.

E

Epic Games, Inc.

epicgames.com

11

Epic Games Store is a leading digital distribution platform operated by Epic Games, Inc., a well-established company in the gaming industry since 1991. The platform offers a wide range of video games and software, targeting gamers and developers globally. It provides a developer-friendly revenue share model and a robust storefront experience. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses the Pug template engine. It is optimized for performance, accessibility, and SEO, with comprehensive localization support. Security posture is strong with HTTPS enforcement, security headers, and secure authentication mechanisms, although no explicit vulnerability disclosure or incident response contacts are publicly visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and well-maintained, reflecting the stature of Epic Games in the technology and entertainment sectors.

S

Samurai Saga

samuraisaga.com

48

Samurai Saga is a niche multimedia entertainment brand established in 2021, focusing on a futuristic samurai-themed universe. It offers a play-to-earn game, NFT collections, physical playing cards, food and beverage products, merchandise, an animated book series, and hosts events. The brand targets gamers, NFT collectors, and fans of Japanese culture and futuristic storytelling. The website is built on Webflow with modern front-end technologies and integrates multimedia content such as Vimeo and YouTube videos. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The domain registration is consistent and transparent, indicating legitimate ownership. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

M

Max-Planck-Institut für Chemie

mpic.de

10

The Max-Planck-Institut für Chemie website serves as the digital presence of a reputable German research institute focused on atmospheric chemistry, climate science, and related fields. The site provides scientific content, information about research groups, publications, events, and career opportunities. It targets scientists, students, and the general public interested in environmental and chemical research. Technically, the website employs modern web technologies including RequireJS, Bootstrap, and Slick Carousel, hosted on GWDG infrastructure with a CMS from JustRelate CX Cloud. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and CSRF protections, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies. Overall, the domain registration and hosting align with the Max-Planck-Gesellschaft, confirming legitimacy. Recommendations include publishing privacy and cookie policies, enhancing security headers, and providing incident response contacts to improve trust and compliance.

The Universität Hamburg is a large, well-established public university in Germany, serving over 42,000 students and recognized as one of the leading research and education institutions in Northern Germany. The website reflects a comprehensive academic institution offering a wide range of study programs, research initiatives, and community engagement services. It targets students, researchers, faculty, and administrative staff, providing extensive information on academic offerings, research projects, career services, and events. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and multimedia content such as videos and image carousels. It uses analytics tools like eTracker and error monitoring via BetterWeb, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a comprehensive privacy policy, but no explicit cookie consent mechanism was detected. Contact information is primarily via a feedback form, with no direct emails or phone numbers publicly listed. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain and hosting are consistent with a reputable academic institution, with no signs of suspicious activity.

A

Acetex

acetex.cz

66

Acetex is a Czech Republic based company specializing in the installation and servicing of photovoltaic systems and heat pumps for residential, commercial, and municipal clients. Established in 2020, it has positioned itself as a leading supplier in the renewable energy sector within the Czech market, boasting over 8,000 installations and recognized certifications and insurance coverage. The company offers a comprehensive range of products including photovoltaic power plants, heat pumps, gas boilers, and related energy solutions, complemented by consulting services for subsidies and professional maintenance. Technically, the website employs modern web technologies and multiple analytics and tracking tools, with a clear cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though explicit security policies and headers could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, though it lacks explicit privacy and terms of service documentation. The domain registration data aligns well with the business claims, supporting legitimacy.

B

BOHEMIAKOMBI spol. s r. o.

bohemiakombi.cz

58

BOHEMIAKOMBI spol. s r. o. is a Czech transportation company specializing in combined rail-road freight transport, particularly the transport of road trailers by rail across Europe. The company is positioned as a key operator in the Czech Republic's continental combined transport sector and is part of the ČD group. Their services provide an alternative to traditional road transport, targeting businesses involved in export logistics. The website reflects a professional business presence with clear contact information, partner affiliations, and relevant content. Technically, the site uses modern web technologies including Google Analytics and is mobile optimized, though some security headers and explicit security policies are absent. The absence of WHOIS data limits domain trust assessment, but the business information and website content indicate legitimacy. Privacy compliance is basic but includes cookie consent mechanisms.

R

Robert Koch-Institut

rki.de

65

The Robert Koch-Institut (RKI) is the central federal institution in Germany responsible for disease surveillance and prevention. The website serves as an authoritative public health portal providing comprehensive information, research data, and guidance on infectious and non-infectious diseases. It targets public health professionals, government agencies, researchers, and the general public. The RKI holds a strong market position as Germany's leading public health authority. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It is hosted by ITZBund, a government IT service provider, and demonstrates good mobile optimization, accessibility, and SEO practices. The site employs Matomo analytics with anonymized data collection and a robust cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with GDPR-aligned policies and transparent cookie management. Overall, the RKI website is a professional, trustworthy, and well-maintained government resource with excellent content quality and privacy practices. Strategic improvements could include adding security headers and publishing a formal security policy to enhance trust and compliance further.

L

Limeleaf Worker Collective, LLC

blueskydirectory.com

59

Bluesky Directory is a niche online platform providing a curated directory of tools, applications, and resources related to the Bluesky social media platform. Operated by Limeleaf Worker Collective, LLC, the website targets Bluesky users and developers seeking to discover and explore ecosystem offerings. The business model centers on content curation and community engagement through featured listings, profiles, and news aggregation. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, and Cloudflare hosting, delivering a fast and mobile-optimized user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

m|events

conference2web.com

70

m|events is a specialized provider of advanced digital meeting services worldwide, focusing on onsite and online medical conference technology. The company offers unique tools and features designed to elevate event experiences, targeting event organizers and medical conference planners. Their business model is B2B, leveraging digital platforms to deliver comprehensive event solutions. The website is professionally designed, consistent in branding, and demonstrates good content quality and user experience. Technically, the site is built on the HubSpot CMS platform, utilizing modern web technologies and marketing automation tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. However, WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional, but domain registration details should be verified for full legitimacy assurance.

D

Deutsches Institut für Medizinische Dokumentation und Information (DIMDI) / Robert Koch-Institut (RKI) / DIVI

intensivregister.de

48

The DIVI-Intensivregister website serves as an authoritative German government-backed platform that collects and disseminates daily data on intensive care capacities and COVID-19 patient statistics across approximately 1,100 acute hospitals. It plays a critical role in monitoring healthcare capacity and supporting pandemic response efforts. The site is technically built on a modern Angular framework with Material Design, offering a responsive and user-friendly interface with comprehensive content including data visualizations, downloadable reports, and regular blog updates. Security posture is moderate with HTTPS presumably enabled but lacking explicit security headers and formal privacy or cookie policies, which are areas for improvement. The domain registration and hosting align well with the official nature of the site, reinforcing its legitimacy. Overall, the site is a trusted resource for healthcare professionals, government officials, and the public, though enhancements in privacy compliance and security best practices are recommended.

E

Envision Saint John: The Regional Growth Agency

envisionsaintjohn.com

10

Envision Saint John: The Regional Growth Agency is a government-affiliated organization focused on promoting economic growth, investment, and quality of life in the Saint John region of Canada. The website serves as a comprehensive portal for investors, residents, visitors, and businesses, offering detailed information on regional advantages, services, and community highlights. The agency positions itself as a key regional player facilitating growth through strategic initiatives in real estate, workforce development, and destination marketing. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, Slick Carousel, and various tracking pixels for analytics and marketing. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and user trust. From a security perspective, the site uses HTTPS and integrates secure forms with CAPTCHA, but lacks visible security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and branding suggest legitimacy. Overall, the website is a well-executed regional growth platform with strong business credibility and user experience. Strategic improvements in privacy compliance, security headers, and domain transparency would further strengthen its security posture and trust signals.

S

SAD Prešov SK, s.r.o.

sad-po.sk

40

SAD Prešov SK, s.r.o. is a regional transportation company based in Slovakia, providing regular bus services including suburban, long-distance, and international routes, as well as contracted charter and special transport. The company emphasizes modernity, high quality, and safety in its operations. The website serves as an information portal offering schedules, ticket sales, and service details targeted at the general public and commuters in the region. The company appears to have a solid market position within the Prešov region and surrounding areas. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. It integrates Google Analytics for visitor tracking with a cookie consent mechanism that respects user privacy preferences. The site is mobile-optimized and provides a good user experience with clear navigation and regularly updated content. However, no major CMS or hosting provider information is evident, suggesting a custom or proprietary platform. From a security perspective, the site enforces HTTPS and implements cookie consent for analytics tracking, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the company's business goals but could enhance its security and compliance posture by publishing more detailed policies and contact information for security incidents.

A

Armanet

armanet.us

63

Armanet is a specialized advertising platform focused on the firearms and Second Amendment (2A) industry, providing programmatic advertising solutions to brands, retailers, publishers, and creators within this niche. The company positions itself as a modern alternative to mainstream ad platforms that restrict 2A content, offering targeted ad campaigns with features such as retargeting, geo-targeting, and audience interest targeting. The business is relatively new, founded in 2023, and operates primarily in the US market. Its website reflects a professional and consistent brand image with clear messaging and partner endorsements from well-known firearms-related websites. Technically, the website leverages modern web technologies including Bootstrap for responsive design, Swiper.js for interactive carousels, and HubSpot for analytics, chat, and form management. Hosting and DNS services are provided by Cloudflare, ensuring good performance and security at the infrastructure level. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and explicit security headers. From a security and compliance perspective, the site does not display explicit privacy or cookie consent mechanisms, which may impact GDPR compliance. No direct contact emails or phone numbers are published, with contact primarily facilitated through a HubSpot chat widget and call-to-action pages. There are no published security policies, incident response contacts, or vulnerability disclosure programs. The WHOIS data is consistent with the business claims, showing a US-based registrant and a domain age appropriate for a startup. Overall, Armanet presents as a credible and professional niche advertising platform with a good technical foundation and moderate security posture. To enhance trust and compliance, the company should implement explicit privacy and cookie policies, improve security headers, and provide clearer contact information and security policies.

The website rancholosalamitoslegacy.org is currently inaccessible beyond a Cloudflare Turnstile CAPTCHA challenge page, which prevents access to any substantive content. The domain is very recently registered (December 13, 2024) with GoDaddy and uses Cloudflare for security and performance. Due to the lack of accessible content, no business information, contact details, or policies are available for review. The technical infrastructure includes Cloudflare's WAF and CAPTCHA service, but no other technologies or CMS are detectable. Security posture cannot be fully assessed due to the blocked content, but the absence of DNSSEC and security headers is noted. Overall, the site appears to be in an initial or pre-launch state with minimal public presence.

M

MAXXmarketing GmbH

webdesigner-profi.de

37

MAXXmarketing GmbH operates the website www.webdesigner-profi.de, offering comprehensive web design, programming, SEO, and online marketing services primarily targeting businesses in Germany, Austria, and Switzerland. The company positions itself as a mid-sized agency with over 15 years of experience and a strong portfolio of more than 2000 projects, supported by trust signals such as Google Partner certification and notable client references. The website is professionally designed, mobile-optimized, and structured to provide clear navigation and service information. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, PHP, and MySQL, with asynchronous loading of analytics and marketing scripts such as Google Tag Manager and Yandex Metrika. Hosting appears to be provided by Your-Server.de based on nameserver data. Performance and SEO optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response disclosures. From a security and compliance perspective, the site lacks visible privacy and cookie policies, consent mechanisms, and vulnerability disclosure information, which are areas for improvement. Contact information is clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a solid business and technical foundation with room to enhance privacy compliance and security best practices to further strengthen trust and regulatory adherence.

C

Centraal Justitieel Incassobureau

cjib.nl

64

The Centraal Justitieel Incassobureau (CJIB) is a Dutch government agency under the Ministry of Justice and Security responsible for collecting fines and organizing the enforcement of penalties. The website serves as an official portal for Dutch citizens and legal entities to manage fines, view related information, and access government services. The site is well-branded, consistent, and provides multilingual support, reflecting a mature digital presence. Technically, the website is built on Drupal 10, uses modern web standards including SVG graphics, and offers good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is moderate due to missing explicit privacy and cookie policies in the provided content. Overall, the website is trustworthy and professional, aligned with its government function.

H

Hugsmiðjan ehf.

eplica.is

9

Eplica.is is the official website for the Eplica web management system, developed and hosted by Hugsmiðjan ehf., an Icelandic technology company. The site primarily serves as an informational portal announcing the end-of-life (EOL) status of the Eplica CMS product, with all development and operations ceasing by the end of January 2025. The business model revolves around providing web content management services to organizations, but the product is now legacy and being phased out. The website targets existing Eplica users and potential clients familiar with the CMS. The company maintains a professional online presence with clear contact details and social media links.

L

Leibniz-Institut fuer Ostseeforschung Warnemuende

baltic.earth

58

Baltic Earth is a scientific research initiative hosted by the Leibniz-Institut fuer Ostseeforschung Warnemuende in Germany, focused on advancing the understanding of the Baltic Sea regional Earth system. The organization facilitates international collaboration through conferences, workshops, and educational programs targeting researchers, PhD students, and stakeholders concerned with environmental and climatic challenges in the Baltic Sea region. The website serves as a portal for information dissemination, event announcements, and community engagement within this niche scientific domain. Technically, the website is built on the Contao Open Source CMS platform using the Foundation CSS framework, delivering a responsive and well-structured user experience. While the site employs HTTPS and modern web standards, it lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the hosting institution, and no WAF or blocking mechanisms interfere with content accessibility. However, the absence of a published security policy or incident response contacts suggests limited formal security governance publicly available. Overall, Baltic Earth presents a credible, professionally maintained scientific resource with a strong institutional backing. Strategic enhancements in security policies, privacy compliance, and technical security controls would further strengthen its trustworthiness and regulatory alignment.

H

HfG Schwäbisch Gmünd

openmoji.org

55

OpenMoji is an academic open source project developed by students and professors at HfG Schwäbisch Gmünd, providing a comprehensive emoji library compliant with Unicode Emoji v16.0. The project targets designers, developers, and general users seeking free, consistent, and well-designed emojis under a Creative Commons license. The website demonstrates good content quality, clear navigation, and consistent branding, supported by a modern tech stack including Astro framework and JavaScript libraries such as jQuery and Fuse.js. Security posture is moderate with HTTPS usage but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the project's credibility.

S

S.H.O.P. CENTAR d.o.o.

croatiaopen.hr

68

Croatia Open Umag is an official ATP tennis tournament organized by S.H.O.P. CENTAR d.o.o., established in 2011 and held in Croatia. The website serves as a platform for disseminating tournament news, schedules, player information, and ticket sales, targeting tennis fans and sports enthusiasts. The business operates primarily in the hospitality and sports event sector, maintaining a consistent brand presence and affiliation with the ATP Tour. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and New Relic for monitoring, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is limited due to missing privacy and terms of service pages. Overall, the site is professional and trustworthy, with room for improvement in compliance and security transparency.

R

Rethink Racing

rethinkracing.com

44

Rethink Racing is a small sports team focused on Prokart and Sim Racing, competing in the British Prokart Endurance Championship and iRacing.com. The website serves primarily as a placeholder with minimal content and links to a legacy site. The business targets motorsport enthusiasts and sim racing communities, operating in a niche segment of the transportation industry. The domain is registered since 2019, consistent with the business age and scope. Technically, the website uses basic modern web technologies including HTML5, CSS3, Google Fonts, and Font Awesome icons. Hosting appears to be with Gandi based on DNS nameservers. The site lacks advanced frameworks or CMS and shows basic mobile optimization and accessibility. SEO and performance are moderate but could be improved. From a security perspective, the site lacks critical security headers and DNSSEC is not enabled. No privacy or cookie policies are present, and no contact or incident response information is provided. The domain registration is stable and legitimate with no privacy protection, but security posture is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is safe with no adult or explicit content, but it is basic and lacks important compliance and security features. Strategic improvements in privacy, security headers, and contact transparency are recommended to enhance trust and compliance.

V

VP RACING FUELS ONTARIO

vpontario.com

65

VP Racing Fuels Ontario operates as a regional distributor of VP Racing Fuels products, serving the Ontario market since 1994. The website presents a focused business model centered on fuel distribution for motorsports and racing enthusiasts. The company maintains a clear contact channel via phone and email, supported by a contact form with Google reCAPTCHA protection. The site is hosted on GoDaddy's platform, reflecting a moderate level of digital maturity with basic SEO and mobile optimization. Security posture is adequate with HTTPS enabled and domain registration protections, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the website is functional and trustworthy, with no signs of malicious activity or content blocking.

S

Stratos

stratos-ad.com

71

Stratos is a well-established online community platform founded in 1998, serving video game and multimedia developers primarily in Spain. The website offers industry news, job listings, collaboration opportunities, forums, and educational resources, positioning itself as a niche hub for professionals and enthusiasts in the multimedia development sector. The platform maintains active engagement through frequent job and collaboration postings and integrates social media channels for broader community interaction. Technically, the site employs modern web standards including responsive design, Google Fonts, FontAwesome icons, and Google Tag Manager for analytics, hosted by DonDominio. The website is mobile-optimized and provides a consistent user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration but lacks some advanced security headers and DNSSEC. Privacy compliance is addressed with dedicated pages for privacy policy, cookie policy with consent mechanisms, and terms of service, though incident response and vulnerability disclosure policies are absent. Overall, the site demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The domain's long registration history and consistent WHOIS data reinforce the site's legitimacy and trustworthiness.

A

Agence Française pour le Jeu Vidéo

afjv.com

47

Agence Française pour le Jeu Vidéo (AFJV) operates a professional information portal dedicated to the multimedia and video game industries in France. Established in 2003, the website provides comprehensive industry news, company directories, event calendars, studies, and a dedicated employment portal. The site targets professionals within the video game sector, offering valuable resources such as job listings, video content including conferences and reports, and detailed industry analyses. AFJV holds a reputable position as a niche media portal with consistent branding and a strong social media presence across multiple platforms. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, hosted by Arsys Internet, a known registrar and hosting provider. The site is mobile-optimized with good SEO practices and clear navigation, though it lacks advanced frameworks or CMS indicators. Performance is moderate, and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. No cookie consent mechanism or privacy compliance indicators are present, representing a compliance gap. Overall, AFJV demonstrates a solid business credibility and content quality with a well-established domain age and consistent thematic focus. However, improvements in privacy compliance, security headers, and incident response transparency would strengthen its security posture and regulatory adherence. The absence of explicit cookie and privacy policies may expose the site to GDPR compliance risks. No adult or explicit content is present, making the site safe for general audiences.

M

Microsoft Corporation

virtualearth.net

64

Bing Maps, operated by Microsoft Corporation, is a major online mapping service providing users with map viewing, location sharing, and directions. The service is integrated into the Microsoft ecosystem and targets a broad general audience. The analyzed page is a sharing interface that requires WebGL support, which is currently disabled in the browser, limiting the page's functionality and content visibility. Technically, the site uses modern web technologies including JavaScript and WebGL, hosted on Microsoft Azure infrastructure, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, but explicit security headers and privacy policies are not present on this page, which could be improved. Overall, the domain is legitimate and well-established, though WHOIS data is not publicly available due to privacy or registry policies typical for large corporations.

V

Vizor Apps Ltd.

vizor-games.com

64

Vizor Apps Ltd. is a medium-sized technology company specializing in mobile game development and publishing. Their portfolio includes popular titles such as Klondike Adventures, Atlantis Odyssey, Knights & Brides, and Zombie Castaways, targeting mobile gamers interested in adventure and casual games. The company maintains a professional web presence with clear branding, social media engagement, and distribution through major app stores. The website is built using modern web technologies including Angular 17 and Material Design components, optimized for mobile and desktop users with good performance and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website and business demonstrate a trustworthy and professional operation with moderate technical maturity and good user experience.