Security Directory

D

DICE Studios

dice.se

66

DICE Studios is a Swedish-based game development company with a professional online presence hosted on the Squarespace platform. The website focuses on showcasing the company's identity, career opportunities, games, and playtesting activities, targeting gamers and industry professionals. The technical infrastructure leverages modern web technologies including HTTPS, HSTS, and popular font services, ensuring a secure and visually appealing user experience. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is strong in terms of transport security but could be enhanced with additional HTTP headers and incident response contact information. Overall, the website is legitimate and professionally maintained but would benefit from improved privacy compliance and transparency.

S

Save bees and farmers

savebeesandfarmers.eu

59

The website 'Save bees and farmers' represents a European Citizens’ Initiative advocating for the reduction and eventual ban of synthetic pesticides in EU agriculture. It is a coalition of NGOs, grassroots movements, and scientific groups aiming to promote sustainable, bee-friendly farming practices. The initiative has garnered significant public support with over 1.1 million signatures and actively campaigns through petitions, informational content, and social media engagement. The site provides resources for citizens to contact policymakers and stay informed about legislative developments. Technically, the website is built on ww.edit CMS 4.7, utilizing standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates third-party widgets for campaign actions and uses modernizr for feature detection. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Analytics and marketing tracking are implemented via Google Analytics, Facebook Pixel, and Twitter tags, with a clear cookie consent mechanism in place. From a security perspective, the site enforces HTTPS and employs secure form handling with required fields. However, no explicit security headers were detected in the provided data, and no incident response or vulnerability disclosure policies are published. WHOIS data is not publicly available due to EURid privacy restrictions, but the domain appears legitimate and consistent with the non-profit advocacy mission. Overall, the website presents a professional and trustworthy platform for environmental advocacy with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date libraries to strengthen security posture and compliance.

D

Dr Peter Butcher

pbutcher.uk

47

The website pbutcher.uk serves as the personal academic and professional portfolio of Dr Peter Butcher, a Lecturer in Human-Computer Interaction at Bangor University. It highlights his academic credentials, entrepreneurial ventures such as Sim Broadcasts, and leadership role at Rethink Racing. The site targets academic peers, students, and professional collaborators, positioning itself as a niche platform for personal branding and professional networking within education and technology sectors. Technically, the website employs a straightforward modern tech stack including HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome icons. It is hosted via Namecheap with DNSSEC enabled, indicating a secure domain configuration. The site is moderately performant and mobile-optimized, though accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected, reflecting a simple but effective technical implementation. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks important security headers and formal privacy or cookie policies, which limits its compliance posture. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The absence of vulnerability disclosure or incident response information suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy and professionally presented with a high legitimacy score based on domain age and WHOIS data. However, it would benefit from enhanced privacy compliance, security headers, and formal policies to improve user trust and regulatory adherence.

Aetna Student Health is a specialized branch of Aetna, a major healthcare insurance provider under CVS Health, focusing on tailored health insurance plans for students including international students. The website offers enrollment options, provider locators, insurance education, and a mobile app to streamline healthcare management. The brand is well established with consistent branding and a professional online presence. Technically, the site is built on Adobe Experience Manager with modern web technologies and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS and basic security practices, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS registration data is a notable anomaly, possibly due to privacy protection or data source limitations, but the website content and external domain relationships strongly support legitimacy. Overall, the site is professional, secure, and targeted at student populations seeking health insurance solutions.

E

Eventia s.r.o. and Active Radio a.s.

gdsession.com

62

Game Developers Session (GDS) Prague is a well-established Central European festival focused on game development, technologies, business, and marketing. The event targets game developers, indie creators, and industry professionals, positioning itself as a key regional player in the gaming event sector. The website reflects a professional and consistent brand image, supported by a broad network of partners and sponsors, including notable industry names and local government entities. The business model centers on event organization and community engagement within the gaming industry.

S

Stepp's Towing & Heavy Transport

steppstowing.com

61

Stepp's Towing & Heavy Transport is a well-established family-owned business operating for over 60 years, specializing in 24-hour towing, heavy transport, environmental response, and auto parts services. The company serves West Central Florida and offers nationwide heavy transportation, positioning itself as a major player with a large fleet. The website reflects a solid business presence with clear service offerings and contact information, supported by social media channels. Technically, the site uses modern web technologies including service workers for offline support and SVG graphics for visuals, hosted via Amazon CloudFront CDN. However, the absence of WHOIS data and lack of privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enforced but missing some security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

Tallaspumps.com is a minimal landing page serving as a country selector for a pump-related business targeting multiple European countries. The site directs users to localized domains for the Netherlands, Belgium, France, Germany, the UK, Spain, and Italy. The business appears to operate in the manufacturing sector, likely focused on pumps, but no detailed company information or business descriptions are provided on this page. Technically, the site uses basic HTML, CSS, and SVG for branding but lacks advanced frameworks or CMS indications. There is no evidence of analytics, tracking, or complex scripting, indicating a low digital maturity level. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is unavailable or the domain is unregistered, which raises legitimacy concerns. Overall, the site is accessible but minimal, with limited business and security information.

F

Funcom

dunegames.com

54

The website dunegames.com serves as a dedicated landing page for Funcom’s Dune-themed video games, primarily promoting 'Dune: Awakening' and 'Dune: Spice Wars'. It targets gamers and fans of the Dune franchise, leveraging licensed intellectual property to position itself in the media and entertainment sector. The site reflects a medium-sized business with a history dating back to 2004, consistent with the domain registration date. The business model focuses on game development and publishing, with partnerships evident with companies like Funcom, Level Infinite, Legendary, and Dune Novels. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts integration and hosting infrastructure likely provided by Amazon AWS. The site is responsive and optimized for mobile devices, offering a good user experience with clear navigation and professional design. However, no CMS or advanced frameworks are detected, indicating a relatively simple but effective technical implementation. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with privacy regulations such as GDPR. No contact information or incident response details are provided, limiting transparency and user trust in security matters. Overall, the website is safe, professional, and focused on its gaming audience, but improvements in privacy compliance, security headers, and transparency would strengthen its security posture and trustworthiness. The domain is legitimate and consistent with the business claims, with no signs of blocking or WAF interference.

V

Video.js

videojs.com

54

Video.js is a well-established open source HTML5 video player framework that supports a wide range of video formats and streaming protocols. It is widely adopted with a large contributor base and usage across hundreds of thousands of websites. The website is built using modern web technologies such as Gatsby and React, providing a good user experience and mobile optimization. However, the site lacks explicit privacy, cookie, and security policies, which are important for compliance and user trust. Security posture is moderate with no detected security headers or incident response information. Overall, the domain registration data aligns well with the website content, indicating a legitimate and credible project. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.

О

ООО ИТ Проспект

chat2desk.com

46

Chat2Desk is a Russian-based IT company founded in 2015, specializing in providing a comprehensive business communication ecosystem. Their platform aggregates multiple messaging channels including WhatsApp Business API, Telegram, VKontakte, and others into a unified chat center, enabling businesses to automate workflows, manage customer interactions, and enhance service efficiency. The company targets a broad range of industries such as fintech, retail, energy, healthcare, and logistics, serving over 10,000 clients globally with a medium-sized team and extensive partner network. The website is professionally designed, content-rich, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website employs modern web technologies including JavaScript frameworks, Google reCAPTCHA v3 for bot protection, and integrates analytics tools like Yandex Metrika and Google Tag Manager. Hosting and DNS services leverage Cloudflare, ensuring reliable performance and security. While HTTPS is enforced and some security best practices are observed, the site lacks explicit security headers and DNSSEC, which are recommended for enhanced protection. From a security standpoint, the platform emphasizes secure communication with features like two-factor authentication and IP filtering. Privacy and cookie policies are clearly presented with consent mechanisms, indicating compliance with GDPR principles. However, no explicit incident response or vulnerability disclosure policies are found, suggesting room for improvement in transparency and security governance. Overall, Chat2Desk presents a trustworthy and professional business solution with a solid technical foundation and good privacy practices. Strategic enhancements in security headers, incident response documentation, and DNS security would further strengthen their security posture and trustworthiness.

B

Bahnhit

bahnhit.de

68

Bahnhit.de is an online travel booking platform specializing in affordable city trips that include train and hotel packages, targeting German-speaking travelers. The website presents a professional and consistent brand image with a clear focus on transportation and hospitality sectors. The platform leverages modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for consent management, ensuring a good level of digital maturity. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy and professionally maintained, with extensive use of third-party advertising and analytics services.

Koch Media is a media company that has recently rebranded to PLAION, as indicated by the website content which is a simple redirect page. The site provides minimal information and no interactive features, focusing solely on informing visitors about the rebranding and redirecting them to the new domain plaion.com. The technical infrastructure is basic, using standard HTML and CSS with Google Fonts, and lacks advanced frameworks or CMS. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces trust. Overall, the website serves as a placeholder rather than a full corporate site, limiting the ability to assess the company's full digital maturity and security readiness.

A

Arkane Studios

arkane-studios.com

64

Arkane Studios is a well-established video game development company founded in 1999, known for critically acclaimed titles such as Dishonored, Prey, and DEATHLOOP. The company operates under the parent company ZeniMax Media Inc. and is currently developing Marvel’s Blade in collaboration with Marvel Games. The website presents a professional and consistent brand image with comprehensive content about their games and studio. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, FontAwesome, and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is implied but no explicit security headers were detected in the provided content. Privacy and legal policies are linked to the parent company’s domain, indicating compliance with GDPR and other regulations. However, the absence of WHOIS data and lack of direct contact information on the site slightly reduce trustworthiness. Overall, the website is professional, secure, and credible with room for improvement in security headers and contact transparency.

M

Megazone Corp., dba HOSTING.KR

webdock.com

53

The website webdock.com currently serves as a domain parking page with no active business content or services. It prominently displays a sales banner indicating the domain is for sale, targeting domain investors or buyers. The domain is registered to Megazone Corp., a hosting and registrar company, consistent with the domain parking business model. The site lacks substantive content, contact information, or detailed business descriptions, limiting its utility beyond domain resale. Technically, the site uses standard HTML5, CSS3, and JavaScript with integrations of Google Adsense and Bodis domain parking scripts for monetization. The hosting provider is Megazone Corp., and the site is served over HTTPS with a good SSL configuration. However, it lacks DNSSEC and important security headers, which are recommended for improved security posture. The site shows basic mobile optimization and accessibility but has poor SEO and content quality due to minimal content. From a security perspective, the site benefits from HTTPS but lacks additional security headers and privacy compliance mechanisms such as cookie consent banners. No contact or incident response information is provided, and no certifications or security frameworks are referenced. The domain WHOIS data is consistent and legitimate, with no suspicious patterns detected. Overall, the site scores low on content quality, business credibility, and privacy compliance, resulting in a moderate overall AI score. It is safe for general audiences but offers limited value beyond domain resale. Strategic improvements in security headers, privacy compliance, and business transparency would enhance trust and professionalism.

S

Società Italiana per lo Studio delle Cefalee

sisc2025.it

50

The website sisc2025.it represents the official online presence for the 39th National Congress of the Società Italiana per lo Studio delle Cefalee (SISC), a specialized medical society focused on headache disorders. The site provides comprehensive information about the event, including scientific committee members, thematic areas, registration details, ECM accreditation, and abstract submission guidelines. The target audience is healthcare professionals involved in headache treatment and research. The business model centers on professional education and event organization with paid registrations and official accreditation. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and various UI libraries to deliver a responsive and user-friendly experience. The site is mobile optimized and well-structured, though it lacks a CMS and advanced SEO or accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain benefits from DNSSEC and HTTPS (implied by URL), but the website lacks visible HTTP security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data shows the domain is newly registered specifically for the 2025 event, which is consistent but limits long-term trust signals. Contact information is clearly provided, enhancing credibility. Overall, the site is professional and fit for purpose but would benefit from improved privacy compliance and security hardening to meet modern standards and regulatory requirements.

M

Marián Kadaňka

kadanka.net

59

Kadanka.net is a small Slovakian web design and development business operated by Marián Kadaňka, specializing in custom WordPress and WooCommerce solutions along with IT systems management. The website serves as a professional portfolio and contact point, targeting businesses and individuals seeking tailored web services. The site demonstrates a moderate level of digital maturity with a clean, responsive design and basic SEO optimization, but lacks advanced technical frameworks or CMS detection. Security posture is moderate; while domain registration is consistent and secure with transfer prohibitions, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

D

Digitalna Avantura Ltd.

rebootdevelopblue.com

51

Reboot Develop Blue is a specialized boutique conference focused on game developers and the games industry in Europe, celebrating its 10th anniversary in 2025. The event is held in Dubrovnik, Croatia, and targets industry professionals including developers, publishers, investors, and managers. The business operates primarily as an event organizer providing conference sessions, B2B expo booths, sponsorship opportunities, and accommodation booking services. The website is built on WordPress with modern SEO and analytics integrations, reflecting a moderate to high level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, serving a niche but influential market segment.

F

Fairlead Group

fairleadgroup.com

65

Fairlead Group is a private investigation service provider established in 2019, offering a range of investigative services including open-source, social media, surveillance, SIU, and canvasses investigations. The company targets businesses and professionals seeking credible and effective investigative strategies, positioning itself as a niche provider with an integrated investigation management platform. The website is professionally designed using GoDaddy Website Builder, featuring modern web technologies and multimedia content such as embedded Vimeo videos. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and domain registration locks in place, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating gaps in compliance. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

The website clickslogistics.com currently serves as a parked domain with minimal content and no active business presence. The domain was registered recently in May 2023 through IONOS SE, a known registrar and hosting provider. The site content consists primarily of a cookie consent modal referencing third-party Sedoparking policies, with no company branding, contact information, or descriptive business content. Technically, the site uses basic HTML, CSS, and JavaScript, with DNS hosted on Cloudflare name servers. There is no evidence of HTTPS enforcement or security headers, and no forms or user data collection mechanisms are present. From a security perspective, the site lacks fundamental protections and does not demonstrate compliance with privacy regulations beyond basic cookie consent. Overall, the domain appears to be held as a placeholder or for future use rather than an active business website.

F

Fondazione Bologna Welcome

bolognawelcome.com

59

Fondazione Bologna Welcome operates the official tourism portal for Bologna and its metropolitan area, providing comprehensive information on places to visit, events, activities, and hospitality services. The website serves tourists and visitors with multilingual support, ticketing, and merchandise sales, positioning itself as a key resource for tourism promotion in the region. The site is well-branded, professionally designed, and supported by official government and regional partners, enhancing its market credibility. Technically, the website leverages modern web technologies including Angular 15, integrates analytics and consent management tools such as Microsoft Clarity and Cookiebot, and employs security best practices with HTTPS and security headers. The site is optimized for mobile devices and accessibility, ensuring a positive user experience across platforms. From a security perspective, the site demonstrates a strong posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contacts, which are recommended for enhanced security transparency. Overall, the website presents a low risk profile with high trustworthiness and professionalism. The absence of WHOIS data slightly reduces domain trust but is mitigated by the site's official nature and strong partner ecosystem. Strategic recommendations include publishing a vulnerability disclosure policy and incident response information to further strengthen security and compliance.

A

aaPanel Team

aapanel.com

67

aaPanel is an established provider of a free and open-source web hosting control panel designed primarily for Linux servers. The company offers a robust platform that simplifies server management with features such as one-click installation of popular web environments (LNMP/LAMP/OpenLiteSpeed), WP Toolkit, mail server management, and file management. The website positions aaPanel as a widely adopted solution with over 3 million installations, targeting server administrators and hosting providers. The business model includes a free edition and a paid Pro version with enhanced features. Technically, the website is well-constructed using modern web technologies and integrates analytics and consent management tools, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies and some recommended security headers. The absence of WHOIS data limits domain legitimacy verification, though the website's content and trust signals suggest a credible operation. Overall, aaPanel demonstrates a strong market position in the hosting control panel niche with room for improvement in privacy and security transparency.

V

VPSServer.com

vpsserver.com

66

VPSServer.com is a VPS and cloud hosting provider offering secure, scalable, and affordable virtual private servers with a global footprint. The company, legally known as Kamatera Inc, claims a founding year of 1995 and operates multiple data centers worldwide. Their services include Linux and Windows VPS, managed and unmanaged hosting, and a custom control panel for easy server management. The website is professionally designed with clear navigation and comprehensive service descriptions, targeting individuals and businesses seeking reliable VPS hosting solutions. Technically, the website employs modern web technologies including HTML5, CSS3, and JavaScript, with a focus on performance using NvME SSD storage and Intel Xeon processors. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and secure forms, but lacks explicit security policy and incident response information. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. However, the absence of WHOIS domain registration data introduces uncertainty about domain legitimacy. Security and privacy practices could be enhanced by adding formal policies and consent mechanisms. The company maintains active social media channels and provides clear contact information, supporting business credibility.

T

TransIP

transip.nl

70

TransIP is a leading Dutch hosting provider and the largest domain registrar in the Netherlands, serving over 150,000 customers. Their core business revolves around domain registration, web hosting, VPS, and colocation services, targeting both individuals and businesses seeking reliable internet infrastructure solutions. The website is professionally designed, well-branded, and optimized for the Dutch market with clear navigation and relevant content. Technically, the site employs modern web standards, uses reputable third-party services such as HubSpot for marketing and Iubenda for cookie compliance, and enforces HTTPS with strong security headers, reflecting a mature digital infrastructure. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency and trust. Overall, the security posture is strong with no detected vulnerabilities or suspicious content, and privacy compliance is well addressed with comprehensive policies and consent mechanisms. The domain registration details align well with the business claims, reinforcing legitimacy and trustworthiness. Strategic recommendations include publishing dedicated security and incident response pages, implementing a vulnerability disclosure policy, and enhancing accessibility features to meet broader compliance standards.

T

TransIP B.V.

transip.net

70

TransIP B.V. is a well-established Dutch hosting provider and domain registrar, recognized as the largest registrar in the Netherlands with over 150,000 customers. The company offers a range of services including domain registration, web hosting, VPS, and colocation, targeting both individuals and businesses. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Dutch, reflecting their primary market focus. Technically, the site employs modern web technologies, integrates reputable third-party services for marketing and privacy compliance, and maintains good performance and SEO practices. Security-wise, the website enforces HTTPS, implements key security headers, and uses a cookie consent mechanism, although it lacks a dedicated security policy or incident response page. Overall, the domain registration details align well with the business claims, indicating high legitimacy and trustworthiness.

T

THQ Nordic GmbH

thqnordic.com

62

THQ Nordic GmbH is a well-established global video game publisher and developer founded in 2011, operating under the parent company Embracer Group. The company targets gamers worldwide, offering a portfolio of video games and related digital content. Their website reflects a professional and consistent brand presence with clear navigation and relevant content focused on their gaming products and services. The business model centers on publishing and developing video games, supported by digital and physical distribution channels. Technically, the website is built on Drupal CMS with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to enhance security posture. From a security perspective, the site uses HTTPS and has a cookie consent mechanism compliant with GDPR, but lacks a published security policy or incident response contact details. No critical vulnerabilities or suspicious content were detected. WHOIS data is transparent and consistent with the company’s profile, supporting the legitimacy of the domain and business. Overall, the website demonstrates a solid digital presence with room for security enhancements.

Remeselnícky inkubátor Gemer is a Slovak regional non-profit organization dedicated to supporting traditional folk craftsmen and folk-art producers in the Košice region. The website serves as a platform to promote cultural heritage through education, certification, and facilitation of sales and exhibitions. It is backed by regional government and cultural institutions, positioning itself as a key regional incubator for crafts. Technically, the website is built on Drupal 10, featuring a modern but basic design with good mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No visible vulnerabilities or exposed sensitive data were found. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

B

BENEFICIAL APPS AS

bnfcl.io

52

The website bnfcl.io is a newly registered domain operated by BENEFICIAL APPS AS, a Norwegian company specializing in domain registration, domain parking, and web hosting services. The site presents basic information about its offerings with a simple design and limited content. The technical infrastructure includes Cloudflare DNS services but lacks advanced DNS security features such as DNSSEC. The site is accessible without any WAF or security challenge mechanisms, indicating no blocking or filtering. However, the website lacks critical privacy and cookie policies, contact information, and security policies, which are essential for compliance and user trust. The absence of these elements, combined with the very recent domain registration, suggests the business is in an early stage or the site is primarily a domain parking page.

T

Three.js Journey — Learn WebGL with Three.js

threejs-journey.com

50

Three.js Journey is a specialized online educational platform offering comprehensive video courses on WebGL and Three.js, targeting developers from beginners to advanced levels. The platform positions itself as a leading resource in the niche of 3D web development education, with a strong user base of over 47,000 students and positive industry testimonials. The business model centers on lifetime access course sales, providing extensive content totaling 93 hours of video tutorials. Technically, the website employs modern web technologies including Three.js, Google Tag Manager, and Google Analytics, hosted via Scaleway SAS with domain registration consistent with the business age and activity. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, excellent content quality, and trustworthy business credibility, but should enhance privacy and security transparency to align with best practices.

KOLOC oil, operated by PROTEGO s.r.o., is a regional fuel station operator in the Czech Republic offering a variety of quality fuels including unleaded gasoline and diesel variants, along with premium fuel options. The company also provides convenience store goods, refreshments, parking, and accepts multiple payment cards, positioning itself as a comprehensive service provider for motorists. The website reflects a medium-sized business with consistent branding and a clear focus on customer service. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and likely Bootstrap and jQuery for UI components. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site employs a Content-Security-Policy header but weakens it by allowing unsafe inline scripts and eval, which could be improved. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with the business claims. Overall, the site scores well in business credibility and content quality but has room for improvement in privacy compliance and security hardening.

R

Realitní kancelář Pubec

pubec.cz

44

Realitní kancelář Pubec is a Czech real estate agency specializing in property sales and rentals primarily in Plzeň and its surrounding region. Established since 1990, the company offers a comprehensive portfolio including residential and commercial properties, legal services, market valuations, auctions, and mortgage assistance. The website reflects a professional and customer-focused business with strong trust indicators such as high ratings on Google and Firmy.cz, and numerous positive client testimonials. Technically, the website employs modern web technologies and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. However, the absence of WHOIS registration data and explicit privacy and cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS usage and reCAPTCHA integration but lacks visible security headers and detailed security policies. Overall, the website presents a credible and professional real estate business with room to enhance privacy compliance and security best practices.

The website 'Win Rolla' appears to be a minimal or placeholder site with limited content and no visible privacy, cookie, or terms of service policies. The site title suggests a gaming or casino-related theme, but no detailed business description or contact information is provided. The technical infrastructure includes Cloudflare DNS hosting without DNSSEC enabled, and the site uses standard HTML and CSS technologies. No advanced frameworks or CMS are detected. Security posture is basic with no security headers observed and SSL configuration is minimal. The WHOIS data reveals a suspicious domain creation date set in the future (March 2025), which raises concerns about the legitimacy and maturity of the domain. Overall, the site lacks transparency and trust indicators, resulting in a low business credibility score.

A

ACHAVA Festspiele Thüringen

achava-festspiele.de

37

ACHAVA Festspiele Thüringen is a regional cultural festival organizing concerts and dialogues primarily in the German state of Thuringia. The website presents event highlights for 2025 and showcases awards such as the Margot-Friedländer-Preis 2025, indicating recognition in the cultural sector. The organization operates as a non-profit entity focused on media and cultural events, targeting a general audience interested in arts and culture. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party libraries such as Flickity for carousels and the Facebook SDK for social media integration. Hosting is provided by a known German hosting provider (kasserver.com). The site is moderately optimized for mobile devices and has basic SEO and accessibility features. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism detected. Contact information is not directly visible on the main page, which may impact user trust and support accessibility. Overall, the website is functional, professionally designed, and trustworthy for its cultural event purpose. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

P

Philosophicum

philosophicum.ch

50

Philosophicum is a small, Swiss-based cultural and educational organization focused on philosophy, culture, and societal questions. The website presents a well-structured platform offering event programs, publications, and venue rental services, targeting a general audience interested in philosophical and cultural discourse. The technical infrastructure is modern with use of standard web technologies and a cookie consent mechanism, indicating awareness of privacy requirements. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response contacts. The absence of privacy and terms of service pages, as well as contact details, represents areas for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

R

Red Peppers

red-peppers.cz

46

Red Peppers is a Czech Republic based creative agency specializing in branding, web design, mobile applications, virtual reality, and 3D graphics. The company targets businesses seeking innovative digital and print media solutions. Their website showcases a professional design with rich multimedia content including video showreels and client references, indicating a mature digital presence. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, Bootstrap framework, and integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, but the website content and design suggest a legitimate business. Strategic improvements in privacy policy transparency, security headers, and contact information would enhance trust and compliance.

Č

Čermná nad Orlicí

cermna-n-orl.cz

39

The website www.cermna-n-orl.cz serves as the official online presence for the municipality of Čermná nad Orlicí in the Czech Republic. It provides residents and visitors with information about local government, community events, public announcements, and municipal projects. The site is designed to support the local population with relevant news and administrative resources, reflecting a small government entity focused on community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with additional integration of a Smart App Banner to promote a mobile application. The CMS appears to be WebConfig, a platform commonly used for municipal websites in the region. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content relevance. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy. No forms or direct contact information are present on the site, limiting user interaction and support channels. Overall, the website is functional and serves its purpose as a municipal information portal but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

I

Irving Shipbuilding Inc.

shipsforcanada.ca

46

Irving Shipbuilding Inc. operates the Halifax Shipyard as a key partner in Canada's National Shipbuilding Strategy, focusing on constructing naval combatant ships for the Royal Canadian Navy. The company has invested heavily in modernizing its facilities and emphasizes Canadian economic impact, supplier engagement, and career opportunities. The website reflects a professional and consistent brand image targeting government stakeholders, suppliers, and potential employees. Technically, the site uses modern web technologies including JavaScript frameworks, social media integrations, and video content, hosted under a reputable registrar with HTTPS enabled. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

The website www.dfb-fanshop.de serves as the official e-commerce platform for the German Football Association's fan merchandise, primarily focusing on authentic Germany national football team jerseys and fanwear. It targets football fans and supporters globally, offering official products with worldwide shipping. The site demonstrates consistent branding and a professional design tailored to its audience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with fonts loaded in WOFF2 format and content delivery via Akamai CDN, ensuring reliable performance and global reach. The site is mobile-optimized and SEO-friendly, although some accessibility features appear basic. Google Analytics is used for user tracking, indicating moderate data collection practices. From a security perspective, the site enforces HTTPS with a strong SSL configuration and uses Akamai's infrastructure. However, explicit security headers are not evident in the provided content, and privacy and cookie policies are missing or not detected, which impacts compliance posture. No vulnerabilities or exposed sensitive data were found, and no WAF or blocking mechanisms interfere with access. Overall, the website presents a trustworthy and professional front for official sports merchandise sales but would benefit from enhanced privacy compliance and security header implementation to improve user trust and regulatory adherence.

B

Basilico Srl

basili.co

63

Basilico Srl operates as a specialized digital agency focusing on brand identity, web design, development, and digital marketing services. The company targets organizations seeking to innovate their business through digital experiences, positioning itself as a creative and professional agency with a strong portfolio of corporate and product websites, UX/UI design, and social media campaigns. The website content is well-structured, visually appealing, and demonstrates a consistent brand image, supporting a high level of professionalism and trustworthiness. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and video integration via Video.js and Vimeo. Analytics are implemented using privacy-focused services such as Plausible and ShinyStat, although no explicit cookie consent mechanism is present. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features, though some improvements in accessibility could be made. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of published security policies or incident response contacts represent areas for improvement. The WHOIS data is privacy protected, which is typical and justified for a small digital agency, and no suspicious patterns were detected, supporting the legitimacy of the domain. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security and incident response policies, and enhancing contact information visibility to further strengthen trust and compliance.

I

Innova

innovaenergie.com

57

Innova is a technology-focused company based in Italy, providing innovative digital solutions and services. The website presents a professional image with consistent branding and a clear focus on technology and business audiences. The company leverages modern web technologies including ProcessWire CMS, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The website is well-optimized for SEO and mobile devices, with good user experience and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance trust further. Privacy compliance is partially addressed through Cookiebot, but the absence of a visible privacy policy and terms of service is a gap. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

Situación Portuaria is a Chile-focused online platform providing historical and real-time data on port closures and operational restrictions across Chilean bays. The website offers services such as monitoring bay statuses, notifications for operational changes, and embedding gadgets for integration into other systems. The platform targets maritime operators and stakeholders requiring timely and historical port operation information. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging Google Fonts and Google Tag Manager for analytics. Hosting is managed via Cloudflare DNS, ensuring reliable domain resolution and HTTPS support. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and formal policies such as privacy and cookie policies. Contact information is clearly provided, including email and WhatsApp, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

congocash.ar is a niche content website dedicated to the Congo Cash slot game by Pragmatic Play, providing detailed guides, gameplay features, and casino-related information primarily targeting Spanish-speaking online gambling enthusiasts in Argentina. The site is built on WordPress with SEO optimization via Rank Math and is mobile-optimized, offering a good user experience and relevant content for its audience. However, it lacks critical compliance elements such as privacy and cookie policies, and does not provide any contact or business verification information, which impacts its trustworthiness. The domain WHOIS data is suspicious due to a future creation date, raising questions about legitimacy or data accuracy. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts.

The website origin-point.de currently hosts a default Craft CMS installation placeholder page, indicating that the site is under initial setup or development. There is no custom content, business information, or contact details presented. The site targets developers or site builders preparing to build the actual website. The technical infrastructure is based on Craft CMS with standard HTML and CSS, hosted on generic servers indicated by the nameservers. Mobile optimization is basic but present, and the site is accessible without any WAF or blocking mechanisms. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and contact information for incident response. SSL configuration details are not provided, but HTTPS is assumed given the URL scheme. No analytics or advertising scripts are detected, indicating minimal tracking or marketing activity. The WHOIS data is minimal and generic, with no registrant details to verify legitimacy fully. Overall, the security posture is basic with room for significant improvement. The overall risk is low given the placeholder nature of the site and lack of sensitive data or active services. However, the absence of privacy and security policies, contact information, and custom content limits trust and business credibility. Strategic recommendations include replacing the placeholder content with a professional website, implementing privacy and cookie policies, adding security headers, and providing clear contact and incident response information to improve compliance and trust.

I

Invia

invia.sk

68

Invia.sk is a leading online travel agency in Slovakia specializing in the sale of travel packages and last-minute vacations from multiple travel operators. The website targets a broad audience seeking holiday bookings primarily in popular European and Mediterranean destinations. Technically, the site employs modern web technologies including JavaScript frameworks, CDN delivery, and advanced analytics and error tracking tools such as Google Analytics, Hotjar, and Sentry. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a good level of GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit terms of service and direct contact information for security or business inquiries are not readily found, which could be improved to enhance trust and compliance. Overall, the site presents a professional and trustworthy platform for travel bookings.

F

Fabrica Studio

fabrica.studio

60

Fabrica Studio is a Spanish digital agency specializing in web development, SaaS, mobile applications, branding, and digital marketing services. Founded in 2025, the company targets entrepreneurs, startups, and growing businesses, offering comprehensive digital transformation solutions with over 20 years of combined experience and €15M+ in managed campaigns. The website demonstrates a strong market position with clear service offerings and client testimonials, emphasizing transparency and measurable results. Technically, the website is built using modern frameworks such as Astro and Partytown, ensuring fast performance, mobile optimization, and good SEO practices. The site employs HTTPS and secure form handling but lacks some advanced security headers and explicit incident response information. Privacy and terms of service pages are present and comprehensive, indicating good compliance with GDPR. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though improvements in security headers and vulnerability disclosure mechanisms are recommended. The domain WHOIS data is limited due to TLD restrictions but shows no suspicious patterns. Contact information is clear and professional, enhancing business credibility. Overall, Fabrica Studio presents a professional, trustworthy, and technically sound digital presence suitable for its target market, with minor recommendations to enhance security and privacy transparency.

O

Openbaar Ministerie

om.nl

63

The Openbaar Ministerie (OM) website is the official online presence of the Dutch Public Prosecution Service, a key government entity responsible for criminal prosecution and law enforcement leadership in the Netherlands. The site clearly communicates its role, services, and legal authority, targeting citizens, legal professionals, and stakeholders in the justice system. It is published under the Ministry of Justice and Security, reinforcing its authoritative position. Technically, the website employs modern web technologies including JavaScript, jQuery UI, and Piwik PRO analytics, hosted likely on government infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. Privacy and cookie policies are present and GDPR compliant, reflecting a mature digital governance approach. Security posture is strong with HTTPS enforced and no visible vulnerabilities or sensitive data exposure. However, explicit security headers are not detected in the HTML content, and no dedicated security policy or incident response contacts are published, which are areas for improvement. The domain registration aligns perfectly with the government entity, enhancing trust and legitimacy. Overall, the OM website is a professional, trustworthy, and well-maintained government portal with strong content quality and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and providing explicit incident response contacts to further strengthen security and transparency.

I

Intermesh BV

group-office.com

55

Group-Office, operated by Intermesh BV, is a specialized provider of open source groupware and CRM software solutions targeting businesses seeking flexible, privacy-focused collaboration tools. The company offers both self-hosted and cloud-hosted versions, emphasizing data control, GDPR compliance, and integration with native device apps. Their market position is that of a niche player with a strong focus on privacy and customization, supported by transparent business registration and VAT information. Technically, the website employs modern web standards, uses Matomo for privacy-conscious analytics, and supports open synchronization protocols. Security posture is solid with HTTPS and two-factor authentication mentioned, though the absence of explicit security headers and cookie consent mechanisms are areas for improvement. The lack of WHOIS data reduces domain trust somewhat but is mitigated by consistent branding and business transparency. Overall, the website is professional, well-structured, and trustworthy, suitable for its target business audience.

GetRentacar operates an international car rental marketplace that enables travelers to rent vehicles from local car owners across 100 countries. The platform offers a user-friendly interface with multi-language support and a wide vehicle selection. Technically, the website employs modern web technologies, integrates popular analytics and error tracking tools, and is hosted with Cloudflare DNS services. Security posture is adequate with HTTPS enforced and error monitoring in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

R

RTI International

rti.org

70

RTI International is a well-established independent scientific research institute focused on improving the human condition through diverse research and consulting services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting government agencies, academic institutions, and industry partners. The technical infrastructure is modern, leveraging Drupal 10 CMS and standard web technologies, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and credible digital front for RTI International.

A

ACTIVE Network

activenetwork.com

71

ACTIVE Network operates as a provider of comprehensive race, activity, and event management software solutions targeting organizations such as parks and recreation departments, YMCAs, swim and endurance event organizers, camps, and class providers. The company positions itself as an established player in the SaaS event management market, offering integrated tools to streamline event operations. The website reflects a mature digital presence with professional branding and a focus on user engagement through multiple marketing and analytics integrations. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, and advanced analytics platforms such as Visual Website Optimizer and Microsoft Clarity, indicating a commitment to performance and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed privacy documentation are not evident in the provided data. The absence of WHOIS registration details raises concerns about domain transparency, though the website content and branding suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance documentation and clearer contact information.

A

Axxis

axxisconsulting.com.mx

48

Axxis is a Mexico-based technology consulting firm specializing in business process management, robotic process automation, and digital transformation solutions. Established in 2004, the company positions itself as a leader in intelligent process automation, serving medium to large enterprises with services including BPM, RPA, cloud optimization, and digital marketing consulting. The website reflects a mature digital presence built on WordPress with modern plugins and a professional design. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enabled, but could benefit from enhanced security headers and published incident response policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.