Security Directory

L

Loando Loans SRL

loando.ro

59

Loando.ro operates as a specialized online loan comparison platform primarily targeting Romanian consumers seeking quick and flexible loan options. The platform aggregates offers from multiple verified lending companies, enabling users to compare terms such as interest rates, fees, and repayment periods without navigating multiple sites. Loando.ro does not provide loans directly but serves as an intermediary to facilitate informed financial decisions. The company behind the site, Loando Loans SRL, has been established since 2015 and maintains a clear digital presence with comprehensive user-facing policies and transparent business information. Technically, the website is built using modern web technologies including React and Gatsby, hosted on DigitalOcean, ensuring fast performance and excellent mobile responsiveness. The site implements HTTPS and a cookie consent mechanism aligned with GDPR requirements, reflecting a mature approach to privacy and user data protection. SEO and accessibility considerations are well addressed, contributing to a professional user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, explicit security headers like Content-Security-Policy and incident response policies are not evident, suggesting areas for improvement. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, Loando.ro presents a secure, compliant, and user-friendly platform with a strong business model focused on loan comparison services. Strategic enhancements in security policy transparency and incident response readiness would further strengthen its security posture and user trust.

R

Romantischer Rhein Tourismus GmbH

romantischer-rhein.de

68

Romantischer Rhein Tourismus GmbH operates a professional tourism promotion website focused on the Romantic Rhine region in Germany, targeting tourists and visitors interested in cultural and natural attractions. The website provides comprehensive information about regional offers, events, and accommodations, positioning itself as a key regional marketing organization. The technical infrastructure leverages modern web technologies including Google Maps API, Cookiebot for consent management, and Google Analytics for visitor tracking, indicating a mature digital presence. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the website is trustworthy, compliant with GDPR, and well-optimized for user experience and mobile devices, making it a reliable source for regional tourism information.

V

Verbandsgemeinde Rengsdorf-Waldbreitbach

rengsdorf-waldbreitbach.de

65

The Verbandsgemeinde Rengsdorf-Waldbreitbach website serves as the official digital presence for a local government association in Germany, providing residents and visitors with access to municipal services, public announcements, and community information. The site is well-structured with comprehensive navigation covering key areas such as citizen services, infrastructure, education, and tourism. Technically, the website employs modern web technologies including AngularJS and the Ionas4 CMS platform, with HTTPS enforced and resource integrity checks in place, reflecting a moderate to good level of digital maturity. Security posture is generally sound, though the absence of explicit security headers and a formal security policy suggests room for improvement. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service, which are important for full GDPR adherence. Overall, the site is trustworthy and professional, consistent with its government entity status, but could enhance transparency and security by publishing more detailed policies and contact information.

ASD Web – Alfons Weber is a small local IT service and web design provider based in Koblenz, Germany. The company offers IT services, telephone services, internet solutions, and web design primarily targeting local businesses and individuals. The website is built on WordPress using the Brooklyn theme by United Themes, indicating a moderate level of digital maturity with standard CMS usage and common web technologies such as jQuery and JavaScript. The site is mobile optimized and uses HTTPS, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a basic professional presence but requires improvements in security, privacy, and contact transparency to enhance trust and compliance.

The website www.bvcd.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which prevents direct access to any meaningful content or business information. The domain WHOIS data is unavailable or protected, providing no registrar, creation, expiry, or registrant details. Consequently, no privacy policies, contact information, or security policies are detectable. The technical infrastructure is limited to Cloudflare's security services with no visible CMS or analytics tools. This lack of accessible content and metadata severely limits the ability to assess the business, technical, or security posture of the entity behind the domain. The site appears to be protected by Cloudflare but is effectively blocked for analysis purposes.

P

Provincie Drenthe

drentscheaa.nl

70

Nationaal Park Drentsche Aa is a government-affiliated nature conservation entity in the Netherlands, focused on preserving and promoting one of the country's most pristine stream valley landscapes. The website serves as an informational and engagement platform for visitors, locals, and nature enthusiasts, offering details on activities, events, and park features. The site is well-branded, consistent with official provincial government identity, and targets a broad audience interested in nature and outdoor recreation. Technically, the site uses a modern CMS (iprox), implements HTTPS, and integrates Google Analytics 4 for visitor insights. Accessibility and mobile responsiveness are well addressed, contributing to a positive user experience. Security posture is solid with encrypted connections and secure form handling, though formal security policies and incident response contacts are absent. Privacy compliance is strong with clear cookie consent and privacy policy links. Overall, the site is trustworthy, professional, and aligned with its governmental mission.

T

Third Iron, Inc.

browzine.com

61

BrowZine is a digital platform operated by Third Iron, Inc., focused on providing academic journal aggregation and reading services primarily targeting researchers, students, and librarians. The platform offers web and mobile access to scholarly journals, integrating with library systems to facilitate content discovery and monitoring. The business model is subscription-based, catering to academic institutions and libraries, positioning BrowZine as a niche player in the education technology sector. Technically, the website employs modern JavaScript frameworks, specifically Ember.js, and loads resources from multiple thirdiron.com subdomains. The infrastructure is hosted with reputable providers, and the domain is mature and well-registered. However, the website content is minimal in the provided snapshot, showing mostly loading placeholders and lacking visible privacy, cookie, or terms of service pages. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site enforces HTTPS and has domain status flags to prevent unauthorized changes, but lacks DNSSEC and visible security headers in the HTML content. No vulnerability disclosure or incident response information is published. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. No contact information or social media links are present in the analyzed content, limiting user trust and engagement. Overall, BrowZine's website shows a moderate technical foundation but lacks comprehensive content and security best practices in the analyzed snapshot. Strategic improvements in privacy compliance, security headers, and user engagement features are recommended to enhance trust and regulatory adherence.

The website medikoo.com is a personal portfolio site for Mariusz Nowak, a JavaScript programmer. It primarily serves as a simple online presence linking to social media profiles such as GitHub and Twitter, with minimal content and no commercial or business services offered. The domain is long-standing, created in 2004, which aligns with the presence of an old homepage link, indicating a consistent personal use over time. The site targets developers or recruiters interested in the individual's programming skills. Technically, the site uses basic HTML, CSS, and JavaScript with Typekit fonts, hosted via GoDaddy's infrastructure. The site is minimalistic with basic mobile optimization and accessibility but lacks advanced SEO or modern frameworks. Security posture is weak, with no detected security headers or privacy policies, and DNSSEC is not enabled. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user engagement. Overall, the site is safe, with no adult or questionable content, but lacks professional security and privacy compliance features.

D

DontPayFull: Coupon Codes, Coupons, Promo Codes, Free Shipping and Discounts

dontpayfull.com

72

DontPayFull.com is an online coupon and promo code aggregator providing users with thousands of discount offers and free shipping deals updated daily. The website targets online shoppers seeking savings across various e-commerce platforms. It operates primarily as an affiliate marketing business, driving traffic and conversions to partner retailers through coupon codes and deals. The site presents a modern, mobile-optimized design with a clear focus on user experience and content relevance. Technically, it employs common web technologies including Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance, although no CMS or hosting provider details are evident. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service documentation. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced compliance and security disclosures.

C

CM.com

cxcompany.com

74

CM.com is a large technology company specializing in conversational AI cloud platforms that enable businesses to build AI chatbots without coding. Their market position is strong within the AI and telecommunications sectors, offering multi-channel chatbot deployment and customer support automation services. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Microsoft Clarity, indicating a high level of digital maturity and performance optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not published. Overall, the website and business demonstrate legitimacy and professionalism, with privacy protection applied to WHOIS data, which is common for enterprises of this scale.

K

Kontomatik

kontomatik.com

79

Kontomatik is a fintech company specializing in open banking solutions primarily serving the Central and Eastern European region. Their platform enables businesses to access and analyze financial data through a unified API, supporting services such as identity verification, risk analysis, transaction labeling, and PDF document analysis. The company positions itself as a trusted partner for financial institutions and businesses seeking data-driven decision-making capabilities. Technically, the website is built on modern web technologies including Webflow CMS, Cookiebot for consent management, and integrates Google Analytics and Google Ads for marketing and analytics. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical for fintech firms. Overall, the website reflects a professional and trustworthy business with a solid digital presence.

The website luckycasino.ca appears to be an online casino platform operated by Glitnor Marketing Ltd., a company registered in Gibraltar since 2019. The site is currently inaccessible due to a Cloudflare Turnstile captcha security challenge, preventing direct content analysis. The domain registration data is consistent and legitimate, matching the business type and location. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or legal information limit the ability to fully assess the website's compliance and professionalism. The technical infrastructure relies on Cloudflare for security and hosting, but no further technology stack or CMS details are available due to content blocking. Security posture cannot be fully evaluated, but the presence of a WAF challenge indicates some level of protection. Overall, the site scores low on content quality and privacy compliance due to inaccessibility and missing policies, resulting in a low AI overall score.

G

Geldersch Landschap en Kasteelen

glk.nl

72

Geldersch Landschap en Kasteelen (GLK) is a well-established Dutch non-profit organization founded in 1929, dedicated to the conservation and management of nature areas, castles, and estates in the Gelderland region. The organization offers public engagement through excursions, activities, and donor programs, positioning itself as a trusted steward of cultural and natural heritage. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to nature enthusiasts and local communities. Technically, the site leverages modern web technologies including WordPress CMS, imgix for image delivery, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, GLK's website demonstrates high trustworthiness, professionalism, and alignment with its mission and audience.

L

Landgoedhotel Woodbrooke

woodbrookebarchem.nl

62

Landgoedhotel Woodbrooke is a medium-sized hospitality business located in the Netherlands, offering hotel accommodations, conference facilities, and event hosting services. The company positions itself as a leading meeting and event hotel in East Netherlands, with a focus on regional and organic products and outdoor activities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers and integrates with third-party booking and marketing platforms. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit security policies. Overall, the website is trustworthy and well-maintained, supporting the business's market position effectively.

Hampshire Hotel 's Gravenhof Zutphen is a small hospitality business located in the historic city center of Zutphen, Netherlands. The hotel offers accommodation, dining, and event services, targeting tourists and visitors seeking a culturally rich experience. The website is professionally designed with multilingual support and clear navigation, facilitating direct bookings and showcasing promotional packages. The technical infrastructure includes modern JavaScript integrations, Google Tag Manager, Facebook Pixel, and a third-party PMS booking system, indicating a mature digital presence. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is basic with visible privacy and cookie policies but lacks an explicit consent mechanism. Overall, the website reflects a trustworthy and credible business with good user experience and marketing practices.

H

Herberg de Gouden Leeuw

herbergdegoudenleeuw.com

63

Herberg de Gouden Leeuw is a small boutique hotel and restaurant located in Bronkhorst, the smallest city in the Netherlands. The business offers accommodation, dining, event hosting, and related hospitality services. The website is professionally designed with clear navigation, multilingual support, and integrated booking engines from Hoteliers and Smarthotel, indicating a mature digital presence. The technical infrastructure leverages modern JavaScript libraries, a PWA service worker, and is hosted on the Duda platform with CDN support, providing good performance and mobile optimization. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding are consistent with a legitimate hospitality business. Overall, the site is suitable for general audiences with no adult content and provides clear contact information and social media presence.

S

Snap Inc.

bitmoji.com

67

Bitmoji is a digital avatar creation platform owned by Snap Inc., offering users personalized cartoon emojis and stickers for use in messaging and social media. The website presents a professional and consistent brand image with clear calls to action for downloading the app on iOS and Android platforms, as well as integration with Snapchat and other messaging apps. The business model is freemium, leveraging app downloads and integrations to drive user engagement. The site targets a broad general audience interested in personalized digital expression. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with mobile optimization and app store integration. While no advanced frameworks or CMS are detected, the site is well-structured and SEO optimized. Performance is moderate with good mobile responsiveness. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS (implied by app store links and modern web standards), but no explicit security headers were detected in the provided data. No forms or sensitive data collection points are present on the main page, reducing attack surface. Privacy compliance is strong with clear links to comprehensive privacy and cookie policies, though no active cookie consent mechanism is visible. The WHOIS data is missing or unavailable, which is unusual but likely due to registry or query limitations rather than malicious intent. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. The main risk is the lack of visible security headers and incomplete WHOIS data, which should be addressed to improve transparency and security posture.

P

PlayCanvas

playcanvas.com

69

PlayCanvas is a mature and reputable web-based platform specializing in WebGL and HTML5 game engine technology. Founded in 2011, it offers an open source engine and a collaborative in-browser editor for developers and studios to create games, visualizations, VR, AR, and interactive ads. The platform enjoys a strong market position with trusted brand associations and a clear focus on performance and cross-platform support. Technically, the website leverages modern JavaScript libraries and multimedia content to deliver a fast, mobile-optimized experience hosted on AWS infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

The analyzed domain currently serves a Chrome internal error page indicating that the actual website content is inaccessible or blocked. The page contains embedded scripts related to the Chrome offline T-Rex runner game, which is a default browser feature when no internet connection is available or the site cannot be reached. There is no business or contact information, no privacy or cookie policies, and no security or compliance documentation present. The lack of accessible content and metadata prevents meaningful assessment of the business or its market position. Technically, the page uses standard HTML, CSS, and JavaScript with Chromium-specific scripts but lacks modern SEO, accessibility, or security features. The security posture is weak due to missing HTTPS and security headers. Overall, the domain appears inactive or misconfigured, and the trustworthiness is low.

D

Dr. Radut

radut.eu

60

The website radut.eu serves as a minimal content delivery network (CDN) branded as Dr. Radut, linking to the main radut.com site. It provides limited business information and no direct services or detailed descriptions on this page. The technical infrastructure includes basic HTML5 and CSS3 with Cloudflare Insights for analytics, indicating a moderate level of digital maturity but lacking advanced frameworks or CMS platforms. Security posture is basic, with no detected security headers or privacy policies, and no contact or incident response information provided. Overall, the site is accessible without WAF blocking but lacks comprehensive security and privacy compliance features, resulting in a moderate risk profile.

P

Privacy Coalitie

privacycoalitie.org

51

Privacy Coalitie is a Dutch non-profit coalition advocating for enhanced digital privacy and privacy-friendly alternatives in the Netherlands. Founded in 2022, it brings together multiple organizations and individuals to promote awareness, responsible data use, and societal dialogue on digital privacy. The coalition positions itself as a thought leader aiming to influence both policy and public behavior towards a more privacy-respecting digital society. The website serves as an informational and advocacy platform, providing a manifesto, member lists, and contact points for engagement. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery 3.6.0, hosted by Combell NV. The site is mobile responsive with good navigation and content structure. However, no CMS or advanced backend technologies are detected. Performance is moderate with basic accessibility and SEO optimizations in place. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has clientTransferProhibited domain status, but lacks DNSSEC and security headers, which are recommended for improved security posture. No privacy or cookie policies are published, representing a compliance gap with GDPR best practices. Contact is provided solely via email, with no forms or phone numbers. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website is trustworthy and professional for its advocacy purpose but would benefit from enhanced privacy compliance documentation and improved security hardening. The domain registration is consistent and legitimate, supporting the coalition's credibility.

Y

Yellowgrape and Hipex

ecookie.nl

52

Ecookie.nl is a Dutch website offering a free, easy-to-install cookie banner solution designed to help e-commerce businesses comply with the GDPR (AVG) regulations. Developed collaboratively by the e-commerce agency Yellowgrape and Magento hosting specialist Hipex, the service targets webshops seeking to manage cookie consent efficiently and in their own branding style. The website provides a registration form for users to create accounts and download a whitepaper on privacy laws for webshops. The site is well-structured, mobile-optimized, and presents a professional image consistent with its niche market position. From a technical perspective, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Symfony PHP framework for user registration. Hosting is likely provided by Hipex, a Magento hosting specialist, indicating a reliable infrastructure. The site performs moderately well with good mobile responsiveness and basic accessibility features. However, explicit security headers are not detected, and no detailed privacy or security policies are published, which are areas for improvement. Security posture is adequate with HTTPS usage and secure form handling including CSRF tokens and mandatory consent checkboxes. No vulnerabilities or exposed sensitive data were identified in the provided content. The absence of published privacy and cookie policies reduces privacy compliance confidence. No incident response or vulnerability disclosure information is available, limiting transparency in security management. Overall, ecookie.nl presents a trustworthy and professional service for GDPR cookie compliance in the Dutch e-commerce sector. Strategic improvements in publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts would strengthen its security posture and compliance standing.

E

Energie aanbiedingen + Cadeau of cashback tot € 545,00

energie-aanbiedingen.com

69

The website energie-aanbiedingen.com operates as a Dutch energy offer comparison and cashback platform targeting consumers interested in energy deals and promotional gifts such as Nintendo Switch or Apple iPad. The site is positioned as a consumer-focused affiliate or comparison service within the energy sector in the Netherlands. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates Google Analytics 4 and Google Tag Manager for analytics and marketing. The site is well-structured with good SEO meta tags and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and multiple security headers present, but lacks explicit privacy and cookie policies, which impacts compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Social media presence is established on YouTube, Facebook, and Twitter, enhancing brand visibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and clearer contact information.

C

Counter

counter.dev

60

Counter.dev is a small technology company offering a privacy-friendly, open source web analytics platform designed to track unique visitors, referrals, and geographical data without compromising user privacy. The business model is based on voluntary payments with a 'pay when ready' approach, targeting website owners and developers who prioritize privacy and simplicity. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery and OwlCarousel, and integrates PayPal SDK for payment processing. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating good accessibility. However, some security best practices like security headers and cookie consent mechanisms are missing. The site is mobile optimized and SEO friendly but could improve accessibility features. From a security perspective, the site demonstrates a strong privacy stance by avoiding cookies and IP fingerprinting, minimizing data collection, and using HTTPS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement. Overall, the site maintains a good security posture but could enhance transparency and compliance. The overall risk assessment is low with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing security headers, publishing security and incident response policies, adding cookie consent if applicable, and improving accessibility. These steps will strengthen trust, compliance, and security culture while supporting the company’s privacy-focused brand.

Bénévalibre is a French non-profit initiative providing free open-source software to assist very small associations in managing and valorizing volunteer work. The project is supported by CRAJEP Bourgogne-Franche-Comté and several financial and expert partners. The website serves as an informational portal and access point to the web application. Technically, the site is built on WordPress with standard plugins and modern web technologies, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of cookie consent and detailed GDPR policies. Overall, the domain registration and website content align well, indicating a legitimate and focused non-profit project.

T

Toys for Bob

toysforbob.com

57

Toys for Bob is an independent game development studio with a long-standing history since 1989, known for crafting epic adventures featuring iconic characters such as Crash Bandicoot and Spyro. The company operates primarily in the technology sector, focusing on game development across multiple platforms. Their website reflects a professional and consistent brand image, leveraging Squarespace CMS for content delivery. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security-wise, the site benefits from HTTPS and HSTS but could improve by adding additional security headers and formal security policies. Overall, the website presents a trustworthy and professional front but should enhance privacy compliance and contact transparency to improve user confidence and regulatory adherence.

T

The Calyx Institute

calyxinstitute.org

66

The Calyx Institute is a US-based non-profit organization established in 2010, dedicated to advancing digital privacy and internet freedom through education, tool development, and community support. Their offerings include membership programs providing mobile internet access via Wi-Fi hotspots and privacy-enhanced smartphones running CalyxOS. The organization maintains a strong community presence and actively supports open-source privacy projects through grantmaking initiatives. Technically, the website is built on a Ruby on Rails backend with Bootstrap frontend components, delivering a responsive and content-rich experience. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC, security headers, and vulnerability disclosure transparency. Overall, the site is professional, trustworthy, and well-aligned with its mission, serving a privacy-conscious audience effectively.

H

Holiday Media

holidaymedia.nl

60

Holiday Media is a specialized internet service provider focused on the Dutch recreation and travel sector, delivering website design, maintenance, and online booking integration to over 250 clients. Their market position is strong within this niche, supported by a professional website, client testimonials, and active social media presence. Technically, the website employs modern web technologies including Google Analytics and Tag Manager, custom fonts, and responsive design, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and secure login forms, though lacking in explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-targeted to its audience, but could improve in privacy and security transparency.

H

Holiday Media

hmcms.nl

60

Holiday Media is a specialized internet service provider focusing on the Dutch recreation and travel sector, delivering website design, maintenance, and integration with booking systems to over 250 clients. Their market position is that of a niche expert with a strong local presence and a comprehensive service offering including internet marketing, photography, and videography. Technically, the website employs modern web technologies including jQuery, Google Analytics, and a proprietary CMS, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, but lacks visible security headers and explicit privacy compliance mechanisms such as cookie consent banners. Overall, the site is professional and trustworthy, with clear contact information and social media presence.

S

Specialdelivery

specialdeliverysandiego.org

57

Special Delivery San Diego is a small non-profit organization dedicated to providing nutritional support to the San Diego community through home-delivered meals, a nutrition pantry, and diabetic education programs. The organization relies on donations and volunteer efforts to serve over 800 families monthly. The website is built on the Wix platform, featuring a professional design with clear navigation and calls to action for volunteering and donations. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features. No WHOIS data was available due to query failure or privacy protection, but the domain and website content appear consistent with a legitimate non-profit entity. Overall, the site demonstrates good business credibility and content quality but should improve privacy policies and security practices to enhance trust and compliance.

The website europazagradane.hr is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and no meaningful user engagement features. The domain was registered recently in 2022 by a Bulgarian registrar and uses parking name servers, consistent with domain parking practices. Technically, the site uses basic HTML and JavaScript with third-party ad networks such as Google Adsense Domains CAF and Youseasky. There is no evidence of a CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers detected, and no privacy or cookie consent mechanisms implemented. No contact or business information is provided, limiting trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.

P

Popravi.to

popravi.to

54

Popravi.to is a Croatian civic technology platform enabling local residents to report, view, and discuss street-related problems such as graffiti, illegal waste dumping, and damaged infrastructure. The platform is powered by the open source FixMyStreet software and targets community members interested in improving their local environment. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and OpenLayers for mapping, supported by multiple analytics tools and Cloudflare hosting. The site is mobile optimized and uses HTTPS with some security best practices like CSRF tokens and service workers. However, it lacks explicit privacy and cookie policies, and no direct contact information is provided on the homepage. Security posture is good but could be improved with additional headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent with the website's Croatian civic focus, indicating legitimacy and trustworthiness.

P

Plus Hosting Grupa d.o.o.

parlametar.hr

53

Parlametar is a Croatian government-focused digital platform that provides detailed analysis and tracking of parliamentary activities, including voting records and speech transcripts of Croatian Parliament members. The platform targets citizens, journalists, and political analysts interested in transparent and accessible parliamentary data. It operates as an informational service with a specialized niche in political data visualization and analysis. Technically, the website employs a modern yet somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.3, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The domain is registered with a reputable Slovenian hosting provider, consistent with the website's operational profile. Overall, the site is professional, trustworthy, and serves a clear public interest function.

M

MDBootstrap

mdbootstrap.com

68

MDBootstrap is a well-established provider of Material Design UI kits and Bootstrap templates, trusted by over 2 million developers and designers worldwide. The company offers a comprehensive suite of frontend development resources including UI components, plugins, and extensive documentation, positioning itself as a leader in the web development tools market. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome to deliver a rich user experience. The technical infrastructure is robust, with good mobile optimization, SEO practices, and performance considerations. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in publishing explicit privacy, cookie, and security policies. Overall, MDBootstrap presents a professional and trustworthy digital presence with strong market credibility.

A

algoo

galae.net

62

Galae is a French-based email service provider offering high deliverability, unlimited email addresses and domains, and advanced configuration options. The service is positioned as an ethical, GDPR-compliant alternative focused on autonomy and sovereignty, leveraging open source software and hosted exclusively in France. The business is relatively new, founded in 2023, and operated by the parent company algoo. The website presents a professional image with clear pricing, client testimonials, and a community support platform. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, with hosting provided by Scaleway SAS. Security practices include support for email authentication standards (DKIM, SPF, DMARC) and data redundancy, but lack visible security headers and explicit incident response information. Privacy compliance is partially demonstrated but lacks explicit privacy and cookie policies on the site. Overall, galae demonstrates a solid business and technical foundation with room for improvement in security transparency and privacy disclosures.

G

Green Leisure Group Coöperatie U.A.

greenleisure.nl

61

Green Leisure Group Coöperatie U.A. is a specialized sustainability consulting cooperative focused on practical and strategic sustainability solutions for the tourism, hospitality, cultural, event, and sports sectors primarily in the Netherlands. The company offers expert advice, project management, and sector-specific sustainability programs such as Green Stages, Green Sport, and Green Leisure. Their market position is that of a trusted advisor with a cooperative business model, serving a niche audience of organizations seeking to improve their sustainability practices. Technically, the website is built with modern web standards including HTML5, CSS3, and jQuery, with good mobile optimization and a professional design. The site uses HTTPS with strong SSL configuration but lacks some security headers and cookie consent mechanisms. No major vulnerabilities or exposed sensitive data were detected, and the site does not appear to use extensive tracking or analytics, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities, but it could improve by implementing security headers, publishing a security policy, and adding incident response contact information. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with the business's sustainability mission. The domain registration data is consistent and legitimate, supporting the company's credibility. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and incident response policies to further strengthen trust and compliance.

The website 'ICE Detention Map' operated by Lockdown Systems provides an interactive and detailed visualization of ICE detention facilities across the United States. It offers data on detainee counts, criminal versus non-criminal status, and ICE threat levels, serving as a valuable resource for activists, researchers, and the general public interested in immigration detention transparency. The platform positions itself as a niche non-profit advocacy tool focused on government and immigration issues. Technically, the site employs modern web technologies including Leaflet.js for mapping and OpenStreetMap for base tiles. The infrastructure is straightforward, with moderate performance and good mobile optimization. The site uses minimal tracking via Plausible Analytics, reflecting a privacy-conscious approach. However, the absence of privacy and cookie policies, as well as missing security headers, indicates areas for compliance and security improvement. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. The WHOIS data presents anomalies with a future domain creation date and no registrant details, which reduces trustworthiness but does not necessarily indicate malicious intent given the site's content and affiliations. Overall, the website is functional, informative, and safe for general audiences but would benefit from improved privacy compliance, security hardening, and clearer business contact information to enhance trust and regulatory adherence.

S

Science & Design, Inc

onionshare.org

52

OnionShare is an open-source privacy-focused software project that enables anonymous peer-to-peer file sharing, chatting, and web hosting over the Tor network. The project is developed by Science & Design, Inc and partners with reputable privacy organizations such as The Calyx Institute, Guardian Project, and the Tor Project. The website serves a privacy-conscious audience including security specialists and users of privacy-centric operating systems like QubesOS and Tails. The business model is community-driven with donation support and open-source contributions. Technically, the website is well-built using modern web standards and hosted on DigitalOcean, with good mobile optimization and accessibility. Security practices include PGP signature verification for downloads and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial with a privacy policy present but no cookie consent or terms of service. Overall, the site is professional, trustworthy, and aligned with its privacy-centric mission.

S

Stichting KMVK

duurzaam-gastvrij.nl

63

Duurzaam Gastvrij is a Dutch sustainability certification organization focused on the leisure sector, operated by Stichting KMVK. The website serves as a comprehensive platform to promote sustainable business practices, certify companies, and provide resources and support for sustainability efforts. It holds a strong market position as a recognized sustainability mark endorsed by Green Key, targeting leisure businesses in the Netherlands. The site offers clear navigation, rich content, and multiple trust signals including partner logos and certifications. Technically, the website uses modern web technologies including jQuery, Swiper.js, and Google Analytics, hosted on a CMS platform (HMCMS). It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence with strong business credibility and privacy compliance.

A

allotropia software GmbH

zetaoffice.net

44

ZetaOffice is a technology-focused company offering a LibreOffice-based office suite accessible via web browsers, desktop, and soon mobile platforms. The company operates under allotropia software GmbH, based in Hamburg, Germany, and positions itself as a niche provider enabling businesses to leverage LibreOffice with options for self-hosting or CDN deployment. Their business model combines open source software with paid professional support and CDN services. Technically, the website employs modern web technologies and integrates privacy-friendly analytics, but lacks some advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business goals.

A

AlCoda GmbH

alcoda.info

39

AlCoda GmbH operates the domain alcoda.info, which currently hosts a default Plesk generated placeholder page indicating hosting control panel availability. The company appears to be involved in providing hosting services or web management solutions leveraging the Plesk platform. The website content is minimal and does not provide detailed business descriptions or customer engagement features. Technically, the site uses standard HTML, CSS, and JavaScript with Plesk infrastructure but lacks advanced security headers and privacy compliance mechanisms. The security posture is basic with no evident vulnerabilities but also no enhanced protections. Overall, the website is low in content quality and business credibility due to its placeholder nature. Strategic recommendations include implementing privacy and cookie policies, adding contact information, enabling DNSSEC, and improving security headers to enhance trust and compliance.

swissbib.ch was an academic library search portal affiliated with Universität Basel, Switzerland, providing access to Swiss university library collections. The service was discontinued in April 2021, with users directed to successor platforms such as swisscovery. The website serves primarily as an archival and informational resource, reflecting the transition of swissbib's knowledge and data into new projects managed by the University of Basel's Digital Services division. The site is built on VuFind 7.0.1 and Bootstrap 3, indicating a moderately modern technical infrastructure but with basic mobile and accessibility features. Security posture is limited, with no visible security headers or explicit policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. Contact information is limited but includes a university domain email and social media links to Twitter and a blog. Overall, the site is trustworthy and legitimate but lacks modern security and privacy best practices.

M

MiXiT

mixitconf.org

57

MiXiT is a specialized technology conference based in Lyon, France, focusing on ethics, diversity, and social responsibility within the tech industry. Founded in 2017, it hosts annual events featuring speakers, workshops, and sessions that engage developers, designers, and product managers. The conference emphasizes accessibility, safe environments, and eco-friendly practices, supported by a community-driven approach and sponsorships from notable companies. The website serves as an information hub for event details, ticketing, and multimedia content including podcasts and videos. Technically, the site uses modern web standards with Bootstrap and JavaScript, hosted by OVH sas, a reputable French provider. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance its security posture and compliance transparency.

A

April

candidats.fr

51

Candidats.fr is a French non-profit advocacy platform operated by the April association, focused on promoting free software and digital freedoms within the political landscape. The website provides resources, campaigns, and information encouraging political candidates to commit to free software principles through the Pacte du Logiciel Libre. The platform targets political candidates, free software advocates, and citizens interested in digital rights, positioning itself as a niche but trusted voice in the French technology and government sectors. Technically, the website is built on the Dotclear CMS and uses legacy JavaScript libraries such as jQuery 1.6.2 and jQuery UI 1.8.16. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. However, it lacks modern security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The absence of security headers and formal privacy compliance documentation reduces its security posture score. WHOIS data is unavailable, limiting domain legitimacy verification, but the association with April provides moderate trustworthiness. Overall, Candidats.fr is a credible and focused advocacy site with good content quality and user experience but would benefit from enhanced security practices and privacy compliance to strengthen trust and protect user data.

C

casinoutansvensklicens.website

casinoutansvensklicens.website

36

The website casinoutansvensklicens.website appears to be a parked domain primarily used for advertising and affiliate marketing related to gambling without a Swedish license. It lacks substantive business content, contact information, or clear service offerings, indicating it is not an operational business site but rather a placeholder or monetization platform. The technical infrastructure relies on basic HTML, CSS, and JavaScript with integration of Google Adsense and Bodis domain parking scripts. The site is accessible without WAF or blocking mechanisms but lacks modern security practices such as security headers and cookie consent mechanisms. Overall, the security posture is weak, with minimal privacy compliance and no incident response or security policy information available. The domain uses privacy-protected WHOIS registration, which reduces trust and transparency. The site targets a mature audience interested in gambling but does not provide any direct gambling services or content. Strategic recommendations include improving security headers, implementing privacy and cookie consent mechanisms, and providing clear business and contact information to enhance trust and compliance.

C

CasinoSpot.de

casinospot.de

55

CasinoSpot.de is a German online casino guide established in 2018, offering detailed comparisons, reviews, and exclusive bonuses for online casinos. The website targets German-speaking adults interested in online gambling and positions itself as a leading casino guide in Germany. Technically, the site is built on WordPress, uses Cloudflare for DNS and CDN services, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with a professional design and clear navigation. Security-wise, the site enforces HTTPS and uses Cloudflare, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is legitimate and trustworthy but could improve transparency on privacy and security policies.

AFAS is a well-established technology company providing business software solutions, primarily in the Netherlands. The analyzed website is a dedicated status page for AFAS services, offering real-time updates on system status, incidents, and scheduled maintenance. The page is designed to inform customers and users about the operational status of various AFAS products and integrations. The business model is SaaS-focused, targeting business customers who rely on AFAS software for their operations. Technically, the status page is hosted on the Statuspal platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and hCaptcha for bot protection. The site is mobile-optimized and performs well with fast loading times. However, it lacks some advanced accessibility and SEO features. The use of HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are important for GDPR compliance. There is no published incident response or vulnerability disclosure information, which could be improved to enhance trust and transparency. Overall, the website is professional, trustworthy, and serves its purpose effectively. The main risks relate to privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear security contact information to improve compliance and user trust.

The website monpetitsite.org currently serves only a 404 error page indicating that the requested resource is not found. The domain is registered to a French organization named L'Échappée Belle, created recently in November 2023, suggesting a new or small business. There is no visible business content, contact information, or policies on the site, which limits the ability to assess the business model or market position. The hosting appears to be provided by Infomaniak based on the nameservers. Technically, the site uses basic HTML, CSS, and JavaScript with mobile responsive design but lacks SEO optimization and accessibility features. Security posture is minimal with no security headers detected and no HTTPS status visible from the provided data. No privacy or cookie policies are present, indicating poor privacy compliance. Overall, the site is not currently functional for business purposes and lacks trust and credibility indicators.

L

Les métiers en Église

metiers-eglise.ch

9

Les métiers en Église is a small-scale informational website focused on presenting various vocations and professions within the Catholic Church, primarily targeting a general audience interested in religious careers. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, with a moderate level of technical maturity. It uses HTTPS and standard Wix scripts but lacks advanced security headers and privacy compliance mechanisms. The site includes Google Tag Manager for analytics but does not provide visible privacy or cookie policies, nor contact information for users or security incidents. Overall, the website is professionally designed with good content relevance but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

L

La Doc - Librairie et médiathèque

catedoc.ch

50

La Doc - Librairie et médiathèque is a small, local library and bookstore service based in Fribourg, Switzerland, specializing in religious and liturgical materials. The website provides access to thematic collections aligned with liturgical seasons and offers user account management for borrowing and searching resources. The business appears community-focused with a clear target audience interested in religious education and media. Technically, the site uses a modern web stack including Bootstrap, jQuery, and Google Fonts, running on the NetBiblio WebOPAC platform. While the site is functional and well-structured, mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking important security headers and anti-CSRF protections. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and contact information support legitimacy. Overall, the site is suitable for its educational purpose but requires improvements in security and privacy transparency.