Security Directory

D

Digitalna Avantura Ltd.

rebootdevelopblue.com

51

Reboot Develop Blue is a specialized boutique conference focused on game developers and the games industry in Europe, celebrating its 10th anniversary in 2025. The event is held in Dubrovnik, Croatia, and targets industry professionals including developers, publishers, investors, and managers. The business operates primarily as an event organizer providing conference sessions, B2B expo booths, sponsorship opportunities, and accommodation booking services. The website is built on WordPress with modern SEO and analytics integrations, reflecting a moderate to high level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, serving a niche but influential market segment.

N

New Brunswick Innovation Foundation

nbif.ca

65

The New Brunswick Innovation Foundation (NBIF) is a regional venture capital and research financing organization focused on supporting and empowering entrepreneurs in New Brunswick, Canada. The company invests in early-stage startups and emerging technologies, particularly in cleantech and innovation sectors, aiming to build the next generation of global tech firms. Their business model revolves around venture capital funds, innovation vouchers, and pitch competitions, positioning them as a key player in the regional innovation ecosystem. Technically, the website is built on WordPress with a modern tech stack including WPBakery Page Builder, Yoast SEO, and various analytics and marketing integrations such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting and domain registration are managed through reputable providers, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, security headers are not explicitly detected, and no formal security or incident response policies are published. The site includes secure login and registration forms but could improve by adding security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of blocking or WAF interference. The domain is long-established, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing security policies to further strengthen trust and compliance.

N

NorthStandard

standard-club.com

71

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) insurance, positioning itself as one of the largest P&I clubs within the International Group. The company targets maritime industry professionals, ship owners, and operators, offering marine insurance services and partnership support. Founded in 2022, the business operates with a modern digital presence, leveraging professional design elements and standard web technologies. The website demonstrates moderate digital maturity with the use of Google Tag Manager, Cookiebot for consent management, and Hotjar for user behavior analytics. However, explicit privacy policies and terms of service are not present in the analyzed content, which may impact compliance and user trust.

N

NorthStandard

nepia.com

58

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) coverage, positioning itself as one of the largest P&I clubs within the International Group. The company targets marine industry professionals, ship owners, and operators, offering specialized insurance services tailored to the maritime sector. The website reflects a professional and consistent brand image with a focus on marine insurance solutions. Technically, the site employs modern web technologies including Google Tag Manager, Hotjar, Cookiebot for consent management, Adobe Typekit, and Google Fonts, indicating a moderate level of digital maturity. The hosting registrar is IONOS SE, a reputable provider, and the domain is relatively new, created in 2022, which aligns with a new business entity.

A

American Steamship Owners Mutual Protection and Indemnity Association, Inc.

american-club.com

64

The American Club is a well-established mutual Protection and Indemnity insurance association domiciled in the United States, serving the maritime industry since 1917. The website reflects a professional organization offering a comprehensive suite of insurance products and services tailored to shipowners and related stakeholders. The company maintains an international presence with multiple regional offices and provides extensive resources such as circulars, member alerts, and loss prevention guidance. Technically, the website employs common JavaScript libraries and Google Tag Manager for analytics, with a moderate level of mobile optimization and accessibility. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly diminishes trustworthiness. Overall, the site is functional, informative, and trustworthy from a business perspective but would benefit from enhanced security and privacy compliance features.

S

Slovenské centrum dizajnu

scd.sk

61

Slovenské centrum dizajnu is a Slovak government-affiliated cultural institution dedicated to researching, presenting, and popularizing design in Slovakia. It also preserves cultural heritage through its Slovak Museum of Design department. The organization operates a professional website with rich content including articles, exhibitions, events, publications, and profiles of design personalities. The site targets design professionals, cultural institutions, and the general public interested in design. It holds a strong national position as the authoritative design center in Slovakia.

M

Michal Danko

michaldanko.com

45

Michal Danko operates as a freelance full stack web developer based in Košice, Slovakia, with over 10 years of experience. The website serves as a professional portfolio showcasing his skills in web development technologies including WordPress, WooCommerce, Laravel, and front-end frameworks. The business model is focused on freelance client engagements, targeting clients seeking custom web development and design services. The website is well-structured and presents a clear overview of services and past projects, positioning Michal as an experienced independent developer in the Slovak market. Technically, the website uses a modern tech stack with HTML5, CSS3, Bootstrap, JavaScript, PHP frameworks, and CMS platforms like WordPress and October CMS. Hosting is provided by Websupport, a Slovak hosting provider, with domain registration consistent with the business location. Google Analytics is used for visitor tracking, and Google Fonts are loaded for typography. The site is mobile optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected, which could improve security posture. There are no privacy or cookie policies present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response information is provided. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low to moderate. The site is professional and trustworthy but lacks formal privacy and cookie policies and some security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing vulnerability disclosure information to improve compliance and security maturity.

T

Torstar Corporation

torstar.com

45

Torstar Corporation is a well-established Canadian holding company primarily invested in news and media, including the Toronto Star and other city and community news organizations. The website reflects a professional corporate presence with clear business descriptions and a focus on media services. The company targets a general audience interested in news and media content. Technically, the website is built on Joomla CMS with the Helix3 framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome. It is mobile-optimized and includes Google Analytics for user tracking. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Privacy compliance is partially met with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with a domain age consistent with the company's history.

M

micro.company

store.link

10

Store.link is a SaaS e-commerce platform that enables small to medium businesses and entrepreneurs to create online stores effortlessly by leveraging Google Sheets as the product database. The platform emphasizes simplicity, no coding requirements, and real-time synchronization between Google Sheets and the online store. It supports payment integrations including card and PayPal and offers order management via WhatsApp, email, or spreadsheets. The business is positioned as a niche player focusing on ease of use and rapid store deployment, with a user base exceeding 10,000 stores. The parent company is micro.company, which also operates related products in the digital marketing and customer engagement space. Technically, the website is built on Webflow CMS, uses modern JavaScript libraries like jQuery, and integrates third-party marketing and analytics tools such as Partnero and Plausible Analytics. Hosting and DNS are managed via Cloudflare, providing good performance and security. The site is mobile-optimized and SEO-friendly, with a professional design and clear navigation. However, some security best practices such as DNSSEC and comprehensive security headers are not fully implemented. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. No sensitive data is exposed in the HTML content. However, the absence of explicit privacy and cookie consent mechanisms and lack of published security policies or incident response contacts indicate room for improvement in compliance and transparency. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports legitimacy. Overall, Store.link presents a trustworthy and professional e-commerce solution with a solid technical foundation and good user experience. Strategic improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust. No critical vulnerabilities or suspicious content were detected, making it a safe platform for general audiences.

L

locate store

locatestore.com

58

LocateStore is a SaaS provider specializing in easy-to-use store locator widgets powered by Google Sheets integration, targeting businesses that require multi-platform store location solutions without coding. The company has a solid market presence with over 5,000 users and a strong reputation supported by positive customer testimonials and a perfect aggregate rating. Technically, the website is built on Webflow, hosted via Cloudflare, and uses modern web technologies including Mapbox for maps and jQuery for interactivity. The site is fast, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-positioned in its niche.

C

Children's of Alabama

childrensalblog.org

57

Children's of Alabama operates a dedicated blog platform providing educational and awareness content focused on pediatric health and safety. The site serves as a trusted resource for parents, caregivers, and healthcare professionals in the Alabama region, leveraging its affiliation with Children's of Alabama and the University of Alabama at Birmingham. The content is professionally presented, relevant, and consistent with the organization's mission to support children's health. Technically, the website is built on WordPress and hosted on WordPress.com, utilizing common web technologies such as jQuery and Jetpack for analytics and social integration. While the site benefits from HTTPS and domain registration protections, it lacks advanced DNS security features and security headers, representing areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website demonstrates a solid business credibility and content quality but requires enhancements in privacy and security posture to strengthen trust and compliance.

A

Allianz ELIANT

eliant.eu

47

Allianz ELIANT is a European non-profit alliance focused on promoting and preserving anthroposophical cultural initiatives across the EU. Founded in 2006 and active as an NGO in Brussels since 2012, it advocates for cultural diversity, education, and integrative medicine. The website is built on WordPress with modern plugins and multilingual support, providing rich content and event information. Security posture is good with HTTPS and cookie consent, but lacks published privacy and security policies. Social media presence is strong, supporting community engagement.

D

Domeinenbank

domeinenbank.nl

60

Domeinenbank is a specialized domain name brokerage and advisory service provider based in the Netherlands, operating since 1999. The company offers services including buying, renting, selling, and appraising domain names, targeting individuals and businesses seeking premium domain names. The website reflects a mature digital presence built on WordPress with Elementor and SEO optimizations, indicating a solid technical infrastructure. Security posture is good with HTTPS and DNSSEC enabled, though some security headers and incident response policies are absent. Privacy policies are present and GDPR compliant, but cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

B

Bruno Simon

bruno-simon.com

56

Bruno Simon's website is a personal portfolio showcasing his work as a creative developer based in Paris. The site highlights his freelance services and educational offerings related to web development, particularly using three.js technology. The business model centers on personal branding and teaching, targeting developers and learners interested in creative coding. The domain is well-established since 2009, indicating a stable online presence. Technically, the website employs modern web technologies including three.js for interactive 3D content, Google Fonts for typography, and Google Analytics and Tag Manager for user tracking. The site is hosted by IONOS SE and uses HTTPS, ensuring basic transport security. Performance and mobile optimization appear good, though accessibility features are basic. SEO is supported by proper meta tags and Open Graph data. From a security perspective, the site lacks advanced security headers and DNSSEC is not enabled, which could be improved. No privacy or cookie policies are present, and no consent mechanisms for tracking are implemented, indicating gaps in privacy compliance. No contact or incident response information is provided, limiting transparency and user trust. The WHOIS data is consistent and legitimate, with no suspicious patterns. Overall, the website is professional and functional with good technical implementation but requires enhancements in privacy compliance, security best practices, and contact transparency to improve trust and regulatory adherence.

D

Dyrket.no

dyrket.no

72

Dyrket.no is an online marketplace focused on delivering local food products from Norwegian farmers and producers directly to consumers. The website positions itself as a niche e-commerce platform catering to customers interested in high-quality, locally sourced food in Norway. The business model revolves around facilitating online orders and home delivery, targeting a general consumer audience within Norway. The website demonstrates a modern technical infrastructure, leveraging Next.js for server-side rendering and React for frontend interactivity, along with integration of Google Fonts, Google Maps API, and Cookiebot for cookie consent management. Analytics are implemented via Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of security headers and lack of published privacy and terms of service policies represent areas for improvement. The missing WHOIS data reduces transparency and trustworthiness, though the website content and technology usage suggest a legitimate business. Overall, the site is professionally designed with good user experience and moderate SEO optimization, but could benefit from enhanced privacy compliance and clearer contact information.

C

Children's of Alabama

childrensal.org

67

Children's of Alabama is a well-established pediatric healthcare provider based in Birmingham, Alabama, recognized nationally for excellence in multiple specialties. The organization offers a comprehensive range of pediatric services including emergency care, outpatient centers, behavioral health, and patient support through a secure online portal. Their market position is strong, supported by numerous awards and recognitions, reflecting a trusted brand in pediatric healthcare. The website targets parents, patients, healthcare professionals, and donors, providing extensive resources and easy access to services. Technically, the website is built on Drupal CMS with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Crazy Egg. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. The use of secure patient portals and cookie consent mechanisms indicates attention to user privacy and data protection, although explicit security policies and incident response information are not publicly disclosed. From a security perspective, the site enforces HTTPS and employs standard best practices, but could improve by publishing explicit security headers and vulnerability disclosure information. The WHOIS data is unavailable due to privacy protection, which is common and justified for healthcare entities. Overall, the domain and website appear legitimate and trustworthy with a high level of professionalism and compliance. The overall risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response, and ensuring all third-party scripts remain secure and up to date. The website serves as a reliable and professional digital presence for Children's of Alabama, supporting its mission to provide exceptional pediatric care.

H

Hitnspin Casino Online Österreich Spielen ᐉ Bonus 800€

hitnspin.com

66

Hitnspin.com is an online casino platform targeting primarily the Austrian market, offering real money gambling services including slots, blackjack, and roulette. The website is presented in German and supports multiple languages via hreflang tags, indicating a multi-regional approach. The business model focuses on online gambling with bonuses and free spins to attract players. The domain was registered in late 2020, consistent with a relatively new entrant in the online casino industry. Technically, the site uses modern web technologies including React-like frameworks, Google Tag Manager, and Hotjar for analytics and user behavior tracking. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. However, DNSSEC is not enabled, and no advanced security headers were detected, indicating room for improvement in security posture. Privacy and cookie policies are not found in the analyzed content, which is a compliance gap especially given the GDPR applicability in Austria. No direct contact or incident response information is visible, which may impact user trust and regulatory compliance. Overall, the site is functional and professionally designed but should enhance transparency and security measures to improve trust and compliance.

D

Domains By Proxy, LLC

20bet.win

51

20bet.win is an online gambling and betting platform that is currently inaccessible due to geographic restrictions, as indicated by the 'Country blocked' message on the landing page. The business targets adult users interested in online betting services. The website uses modern technologies such as React and is hosted behind Cloudflare DNS and Amazon Cloudfront CDN, but the actual content is blocked, limiting visibility into the full service offering and market position. The domain is privacy-protected via Domains By Proxy, which is common in the gambling industry to protect registrant identity. The domain is relatively new, created in late 2021, consistent with a startup or recently launched service.

Winbay3.com is an online casino and sports betting platform recently launched in 2024. The website offers gambling services targeting adult users interested in online casino games and sports wagering. The platform is built using modern web technologies including Angular and is hosted with Cloudflare DNS services, indicating a contemporary technical infrastructure. However, the website lacks visible privacy policies, terms of service, and contact information, which are critical for regulatory compliance and user trust in the gambling industry. Security posture is moderate with HTTPS enabled and domain status protections in place, but DNSSEC is not enabled and security headers are not evident. Overall, the site is functional but requires improvements in compliance and security transparency.

The website 'Dragonia' hosted on dragonia2.com is accessible and primarily serves German-speaking users. The site appears to be related to gaming or entertainment, as inferred from the title and font usage, but lacks explicit business descriptions or contact information. The technical infrastructure leverages Cloudflare for DNS and hosting, and Google Fonts for typography, indicating a modern but basic setup. However, the absence of privacy, cookie, and terms of service policies, as well as contact details, limits its professionalism and compliance posture. Security-wise, HTTPS is enabled, but no advanced security headers or DNSSEC are implemented, which could be improved to enhance protection. The WHOIS data is inconsistent, showing a domain creation date in the future, which raises concerns about legitimacy and domain age appropriateness. Overall, the website scores moderately on technical and security aspects but falls short on privacy compliance and business credibility.

The website pistolo1.com/de/ appears to be a newly created site with minimal content and limited business information. The domain was registered in January 2025, consistent with the website's build date in October 2025. The site uses Cloudflare DNS and Google Fonts but lacks common business trust indicators such as privacy policies, contact information, or social media presence. The technical infrastructure is basic with no detected CMS or frameworks. Security posture is limited, with no security headers or advanced configurations detected, and no GDPR compliance indicators present. Overall, the site appears to be in an early development or placeholder stage, with low business credibility and limited content quality.

The website 'Cleobetra' presents minimal content primarily consisting of technical HTML and CSS with no visible business or contact information. The domain WHOIS data is suspicious due to a future creation date and lack of registrant details, which undermines trust in the site's legitimacy. Technically, the site uses Cloudflare DNS and Google Fonts but lacks evident CMS or frameworks. No privacy, cookie, or terms of service policies are found, and no contact channels are provided. Security posture is weak with no detected HTTPS or security headers. Overall, the site appears to be in an early or placeholder state or potentially suspicious, requiring further verification.

The website at savethewaves.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents any meaningful analysis of the business, services, or user engagement features. The domain is long-established, registered since 2001 with a reputable registrar, indicating a legitimate entity behind the domain. However, the lack of accessible content, absence of privacy or cookie policies, and no visible contact or security information significantly limit the ability to assess the organization's digital maturity or security posture. The technical infrastructure appears minimal with only Google Fonts and SVG graphics loaded, hosted on SiteGround. Security posture cannot be fully evaluated due to lack of data, but no DNSSEC is enabled and no security headers are detected. Overall, the site is currently non-functional for external users, representing a critical issue for trust and usability.

R

Ready Kirken

ready-kirken.cz

53

Ready Kirken is a Czech rock and pop music band based in Pardubice, as indicated by their website content and social media presence. The website serves primarily as a promotional platform showcasing band information, concert dates, media content, and contact links to social media channels. The site is built on the Wix platform, leveraging Wix's Thunderbolt rendering engine and standard Wix UI components, indicating a moderate level of digital maturity suitable for small entertainment businesses. Technically, the site uses HTTPS with good SSL configuration but lacks advanced security headers and comprehensive privacy or terms of service documentation. No direct contact information such as emails or phone numbers are provided, which limits direct communication channels. The absence of WHOIS data reduces the ability to verify domain ownership and legitimacy, impacting trustworthiness. Overall, the site is functional but basic in content and security posture.

D

DAB PUMPS S.p.A.

dabpumps.co.za

9

DAB PUMPS S.p.A. is an established Italian company specializing in the manufacturing and distribution of water pumps and technological solutions for water movement and management. With over 50 years of experience, the company holds a strong market position in the energy sector, targeting industrial, commercial, and residential customers. The website serves as a professional digital presence showcasing their products and company information. Technically, the website is built on WordPress with WooCommerce and Elementor, optimized for performance and mobile devices, and hosted via dotNice. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness.

A

Airport Hotel Budapest**** Kft.

vip-parkolo.hu

49

VIP Parkoló is a well-established airport parking service provider located near Budapest Liszt Ferenc International Airport. Operating since 2005, the company offers secure, guarded parking with free airport transfer and online booking capabilities. The website is professionally designed using Joomla CMS with modern frameworks and provides clear contact information and social media presence, supporting a trustworthy user experience. Technically, the site employs HTTPS with good security headers and modern JavaScript libraries, though it lacks a visible cookie consent mechanism and explicit security policies. Overall, the business demonstrates a solid market position in the transportation and hospitality sectors within Hungary.

B

Blue Sky Travel

blueskytravel.hu

47

Blue Sky Travel is a Hungarian travel agency established in 2018, specializing in air and bus travel packages primarily to Greek islands and various exotic destinations. The company offers competitive pricing, last-minute deals, and comprehensive travel organization services targeting Hungarian-speaking travelers. Their website features a professional design with clear navigation, mobile optimization, and integrated booking forms, reflecting a medium-sized business with a solid market presence. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and popular analytics and marketing tools such as Google Tag Manager, Hotjar, Microsoft Clarity, and Tawk.to live chat. Hosting is provided via a CDN, ensuring moderate performance and good mobile responsiveness. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site enforces HTTPS and employs consent-based loading of tracking scripts, demonstrating a privacy-aware approach. However, it lacks several important security headers and does not publish a security policy or incident response contacts. No critical vulnerabilities or suspicious activities were detected, and WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a trustworthy and professional travel service with room for improvement in privacy policy transparency and security hardening. The risk level is moderate with no immediate threats identified.

Orex Travel is a Hungarian travel agency specializing in organizing vacation packages primarily to Turkey, Egypt, and Bulgaria. The company offers a wide range of travel services including hotel bookings, direct flights, insurance, excursions, private transfers, and airport parking. The website reflects a well-established business with a domain age since 2011, consistent with its market presence. Technically, the site uses modern frameworks such as Next.js and React, with integrations for analytics, chat support, and cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie management, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving Hungarian travelers effectively.

G

Green Savoree St. Petersburg, LLC

gpstpete.com

44

The Firestone Grand Prix of St. Petersburg website represents a well-established motorsports event organizer with a history dating back to 2001. The company, Green Savoree St. Petersburg, LLC, operates a premier motorsports festival in St. Petersburg, Florida, offering ticket sales, hospitality packages, and merchandise. The website effectively targets motorsports fans, tourists, and local attendees with clear event information and partner engagement. Technically, the site is built on Joomla CMS with modern frameworks like Helix3 and Bootstrap, ensuring responsive design and moderate performance. The use of analytics and marketing tools such as Google Analytics, Hotjar, and Constant Contact indicates a mature digital marketing approach, though lacking explicit cookie consent mechanisms. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and business credible, with room for privacy compliance enhancements.

V

Valfrigo

valfrigo.com

43

Valfrigo is a Kosovo-based company specializing in the sale of thermal pumps for central heating, ventilation, air conditioning, and related services such as filtering and degassing of oil transformers. The company markets products from well-known brands like NIBE, TOSHIBA, CARRIER, and CLIVET, positioning itself as a specialized provider in the green energy sector. The website reflects a small-sized business with a clear focus on green energy heating solutions, targeting both businesses and consumers interested in sustainable energy technologies. The domain age of 20 years supports a mature business presence. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It employs modern web technologies including jQuery and Google Fonts, and integrates Google Maps API. The site is mobile optimized with good design quality and navigation clarity, although SEO and accessibility features are basic. Hosting appears to be managed via Name.com, consistent with the domain registrar information. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, no DNSSEC is enabled, and no security headers were detected in the provided data, which are areas for improvement. The absence of privacy and cookie policies, as well as incident response contacts, indicates gaps in compliance and security transparency. No evidence of tracking or advertising scripts was found, suggesting minimal user tracking. Overall, the website is professional and trustworthy with moderate security posture and limited privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance the site's security and compliance standing.

Green Building Energy Fund (GBEF) is a specialized investment fund focusing on energy efficiency and renewable energy projects within the building sector. Established in 2004, the company provides capital and expertise to accelerate sustainable energy solutions, targeting investors and stakeholders in the energy and sustainability markets. The website reflects a professional and consistent brand presence, catering to a niche audience interested in sustainable energy investments. Technically, the website employs modern web fonts and JavaScript libraries for enhanced user input handling, hosted via GoDaddy. While the site is accessible and uses HTTPS, it lacks several security best practices such as security headers and DNSSEC, and does not provide visible privacy or cookie policies, which are critical for compliance and user trust. No contact emails, phone numbers, or social media links are explicitly found in the provided content, limiting direct communication channels. Overall, the website is safe, professional, and moderately mature technically but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

T

Tencent Media Processing Service, Inc.

mps.live

63

Tencent Media Processing Service, Inc. operates the website mps.live, offering advanced media processing and live streaming solutions. The company provides a comprehensive platform including encoding, enhancement, streaming, and playback services, targeting global clients seeking high-quality video delivery at lower bitrates. The business is positioned as a leading technology provider within the media streaming sector, supported by Tencent Cloud infrastructure and recognized industry certifications. The website demonstrates a high level of professionalism, with clear branding, extensive product offerings, and a strong focus on customer trust and data security. Technically, the site is built on modern web technologies including React and Next.js, hosted on Tencent Cloud, and optimized for performance and mobile responsiveness. The integration of Tencent's Aegis monitoring tool and Google Tag Manager indicates a mature approach to analytics and performance tracking. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though some improvements in security headers and incident response transparency are recommended. From a security and compliance perspective, the site prominently displays multiple international certifications such as ISO 27001, NIST CSF, and CSA STAR, underscoring its commitment to data security and privacy. Privacy and cookie policies are present and GDPR compliant, though a cookie consent mechanism is absent. No signs of malicious activity or vulnerabilities were detected. Overall, the domain and website content align well with a legitimate, enterprise-grade service provider. The overall risk assessment is low, with recommendations focusing on enhancing security headers, adding explicit incident response contacts, and implementing cookie consent to further strengthen compliance and user trust.

V

Visit Heim

visitheim.no

57

Visit Heim is a regional tourism website dedicated to promoting the Heim municipality in Trøndelag, Norway. It offers information on local attractions, accommodations, dining, events, and outdoor activities, targeting tourists and visitors interested in nature and cultural experiences. The website is built on a modern technical stack including Bootstrap, jQuery, and Google Maps API, and is powered by the WisWeb CMS platform. While the site presents good content quality and user experience, it lacks comprehensive privacy and security policies, including cookie consent and security headers. The domain registration is consistent with the business purpose and shows no suspicious indicators, supporting the site's legitimacy. Overall, the website serves as a useful tourism portal but would benefit from enhanced security and privacy compliance measures.

M

Montana Tours

montanatours.hu

54

Montana Tours is a well-established Hungarian travel agency based in Szeged, operating since 1998 with a domain registered since 2001. The company offers a broad range of travel services including family holidays, ski trips, cruises, and exotic travel packages. The website is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Bootstrap, and Google reCAPTCHA for security. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Hungarian. However, the site lacks explicit terms of service and security policy pages. Security posture is good with HTTPS and bot protection but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, user-friendly, and compliant with GDPR requirements, serving a general audience interested in travel and tourism.

U

UseClick.io

useclick.io

63

UseClick.io is a privacy-first SaaS platform specializing in branded short links and advanced link analytics designed for marketers, agencies, startups, and creators. The company emphasizes GDPR compliance and user privacy by avoiding cookie-based tracking and providing clear, actionable insights into link performance. Their market position is that of a modern, privacy-conscious alternative to traditional link shorteners and analytics tools, trusted by over 1000 businesses worldwide. The platform offers a comprehensive suite of features including campaign management, A/B testing, geo-targeting, QR code generation, and bulk link uploads, all accessible via a modern, responsive web interface built on Next.js and Cloudflare infrastructure.

O

Oceanspace Media DK ApS

maritime.direct

58

Maritime Direct is a specialized maritime news platform operated by Oceanspace Media DK ApS, targeting maritime industry professionals with news, job listings, AIS tracking, and event information. The site is well-branded, professionally designed, and offers a paywall model for premium content. Technically, it uses modern web technologies including Labrador CMS, Google Tag Manager, and Adnuntius for advertising, with good mobile optimization and accessibility. Security posture is solid with HTTPS and JWT authentication, though security headers are not explicitly detected and no public security policy or incident response information is found. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and clear contact information. Overall, the site is a credible and valuable resource for its niche audience.

O

Oceanspace Media (implied from footer and partner links)

fiskerbladet.dk

10

Fiskerbladet.dk is a Danish media website specializing in fisheries, maritime industry, and related sectors. It operates under the Oceanspace Media group, serving a professional audience with news, job listings, and advertising services. The website demonstrates a solid market position within its niche, supported by a network of sister sites across Scandinavia and beyond. Technically, the site employs modern web technologies including Google Tag Manager, Adnuntius ad network, and cookie consent management, ensuring a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. Overall, the site is professional, trustworthy, and well-maintained, though WHOIS data is unavailable, limiting domain registration insights.

F

Freeride Mountain Bike Association e.V. (FMBA)

fmbworldtour.com

48

The Freeride Mountain Bike Association e.V. (FMBA) operates the FMB World Tour, the official international circuit for freeride mountain biking disciplines. Founded in 2010 and registered as a non-profit in Munich, Germany, FMBA governs and promotes the sport through event sanctioning, athlete licensing, and ranking systems. The website serves athletes, event organizers, and fans with news, rankings, event calendars, and membership information. The organization holds a strong market position as the official governing body for freeride mountain biking.

G

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V.

gapao.de

60

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V. (GAPAO) is a small non-profit organization based in Germany focused on the interdisciplinary field of architecture psychology and oncology. The website serves as an educational platform offering training, symposiums, and research projects targeted at professionals in architecture, psychology, and healthcare. The organization collaborates with universities and professional chambers, positioning itself as a niche leader in this specialized domain. Technically, the website is built on Webflow, uses modern web fonts, and includes cookie consent mechanisms, but has a misconfigured Google reCAPTCHA which could expose it to spam risks. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Overall, the site is professional, accessible, and trustworthy with room for improvement in security and compliance details.

O

Outroll

outroll.com

66

Outroll is a software holding company, venture builder, and managed services provider that manages, builds, and acquires software companies. The company positions itself as a permanent home for software, targeting software businesses and investors. The website reflects a professional and modern digital presence with a focus on technology and software industry services. The domain is mature, created in 2009, supporting the company's established presence. Technically, the website uses modern frameworks such as Nuxt.js and Tailwind CSS, hosted via Cloudflare, and integrates Google Tag Manager for analytics. The site is mobile optimized and has good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks published security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

ACTIVE Network

activenetwork.com

71

ACTIVE Network operates as a provider of comprehensive race, activity, and event management software solutions targeting organizations such as parks and recreation departments, YMCAs, swim and endurance event organizers, camps, and class providers. The company positions itself as an established player in the SaaS event management market, offering integrated tools to streamline event operations. The website reflects a mature digital presence with professional branding and a focus on user engagement through multiple marketing and analytics integrations. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, and advanced analytics platforms such as Visual Website Optimizer and Microsoft Clarity, indicating a commitment to performance and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed privacy documentation are not evident in the provided data. The absence of WHOIS registration details raises concerns about domain transparency, though the website content and branding suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance documentation and clearer contact information.

G

GreenBizTracker

greenbiztracker.org

59

GreenBizTracker is a specialized web-based platform designed to support Green Business certification programs by providing tools for environmental metrics tracking and reporting. The platform targets states and organizations running green business initiatives, helping businesses adopt sustainable practices and measure their environmental impact. The website presents a professional and consistent brand image with clear navigation and relevant content focused on sustainability and green business facilitation. Technically, the website is built using modern React technology and hosted on Netlify, leveraging Google Tag Manager and Google Analytics for user tracking and marketing insights. The site demonstrates good mobile optimization and moderate performance, though accessibility and SEO could be further improved. Security-wise, HTTPS is enforced, but the absence of security headers and visible privacy or cookie policies indicates room for enhancement in compliance and protection. The WHOIS data is incomplete, with no registrar or registrant information available, which reduces domain trustworthiness despite the professional appearance of the site. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site is safe, with no adult or questionable content, and serves a niche market in environmental sustainability tracking. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, improving accessibility and SEO, and enhancing transparency around domain registration to boost trust and compliance.

P

Your links and products in one place | Your links and products in one place

petshopprince.com

58

Linklist.bio is a technology SaaS platform specializing in providing users with a comprehensive digital presence solution that includes link in bio management, digital catalogs, link shortening, and QR code generation. The platform targets individuals and businesses seeking to consolidate their online links and products in one accessible place, enhancing brand visibility and e-commerce capabilities. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Vuetify, along with Google Fonts and tracking technologies like Google Tag Manager and Facebook Pixel. The site is optimized for mobile devices and demonstrates good performance and SEO practices. Security is well implemented with HTTPS, multiple security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and visible contact information slightly reduces privacy compliance and business credibility scores. The security posture is strong, with enforced HTTPS and security headers, but lacks explicit security policies and incident response contacts. The WHOIS data is limited due to TLD restrictions or privacy protection, which is common for SaaS platforms and does not raise immediate concerns. Overall, the website presents a low risk profile with good security and technical maturity. Strategic recommendations include implementing a cookie consent banner to enhance GDPR compliance, publishing clear security policies and incident response contacts, and providing visible company contact information to improve business credibility and user trust.

U

UK Wing Chun Assoc.

ukwingchun.com

49

The UK Wing Chun Association operates as a small, specialized martial arts organization focused on Wing Chun Kung Fu training and community building within the United Kingdom. Founded in 1985 by Master James Sinclair, it holds a respected position in the martial arts community and offers classes, instructor resources, and merchandise through its website. The digital presence is built on a modern WordPress platform utilizing WooCommerce for e-commerce and Elementor for design, indicating a moderate level of digital maturity. The website is well-structured, mobile-optimized, and integrates social media and payment processing via PayPal, supporting a seamless user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and employs Facebook Pixel for marketing and analytics. However, the absence of explicit security headers and a visible privacy policy or terms of service page indicates room for improvement in compliance and security posture. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and trustworthiness, despite the professional appearance and established business history claimed on the site. Overall, the website presents a professional and trustworthy front for its target audience but should address privacy compliance and domain registration transparency to enhance trust and security. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and verifying domain registration details to align with best practices and regulatory requirements.

C

Centro de Administraciones Tributarias Subnacionales (CeATS)

ceats.org

44

Centro de Administraciones Tributarias Subnacionales (CeATS) is a well-established non-profit organization based in Argentina, focused on subnational tax administration collaboration, training, and research. The website reflects a professional presence with clear navigation, relevant content, and active engagement through events and educational programs. The organization partners with universities and government tax agencies, reinforcing its credibility and market position in the government and education sectors. Technically, the website uses a modern but standard technology stack including Bootstrap, jQuery, and various carousel and slider libraries. Hosting is stable with a reputable registrar, and the site is mobile optimized with moderate performance. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

A

Altaposten

altaposten.no

59

Altaposten is a regional Norwegian media company serving the Finnmark area, including Alta, Kautokeino, and Loppa. It operates a digital news platform, a bi-weekly print newspaper, and local radio and TV stations. The company is part of Polaris Media, a significant media group in Norway. The website demonstrates a mature digital presence with a modern tech stack including Nuxt.js and PolarisWeb CMS, and integrates multimedia content effectively. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting GDPR compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit security policies. Overall, Altaposten presents a trustworthy and professional media outlet with good content quality and user experience.

S

Slovenia Explorer

slovenia-explorer.com

56

Slovenia Explorer is a specialized tour operator and official Gray Line Slovenia® licensee offering a variety of tours including small group day trips, private day trips, multi-day tours, and tailor-made experiences focused on Slovenia's key attractions such as Lake Bled, Postojna Cave, and Ljubljana. The company targets tourists seeking authentic and organized travel experiences in Slovenia. The website is professionally designed with clear navigation, mobile optimization, and rich structured data enhancing user experience and SEO. Technically, the site employs modern web technologies including Google Fonts, Typekit, Google Maps API, and Google Analytics with consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS and service worker usage, but lacks some security headers and formal privacy and terms policies, which are critical for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the business appears credible and well-positioned in the hospitality sector, but domain registration transparency and privacy compliance need improvement.

B

Bixby Knolls Business Improvement Association

bixbyknollsinfo.com

41

Bixby Knolls Business Improvement Association is a small, community-focused non-profit organization established in 2002, dedicated to supporting local businesses and residents in the Bixby Knolls area of Long Beach, California. The website serves as a hub for community events, business directories, donation campaigns, and programs aimed at fostering neighborhood engagement and economic growth. The organization recently transitioned to a 501(c)(3) nonprofit status to facilitate tax-deductible donations, reflecting its commitment to sustainable community support. The target audience includes local business owners, residents, and community members interested in neighborhood development and events. Technically, the website is built on WordPress using the Divi theme, supplemented by popular plugins such as LayerSlider, DataTables, Contact Form 7, and Bloom for newsletter management. Hosting is provided by Bluehost, with domain registration dating back to 2002, indicating a mature digital presence. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Analytics integration via MonsterInsights is present but not configured, suggesting room for improvement in data-driven insights. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers are detected, which could expose the site to certain DNS and web-based attacks. Privacy compliance is lacking, with no visible privacy or cookie policies, and no consent mechanisms for data collection, despite the presence of multiple forms collecting personal information. There is no public incident response or vulnerability disclosure information, which could be a concern for transparency and trust. Overall, the website is trustworthy and professional in its presentation and business credibility but requires enhancements in privacy compliance and security best practices to align with modern standards. Strategic improvements in these areas will strengthen user trust and regulatory adherence.

I

Impact Factory

impact-factory.de

65

Impact Factory is Germany's largest incubator and accelerator focused on startups addressing social and ecological challenges. The organization provides structured programs tailored to different startup development phases, fostering a community and network to support impact-driven entrepreneurs. The website reflects a professional and consistent brand presence, targeting impact startups and stakeholders in the social entrepreneurship ecosystem. Technically, the website is built on Webflow, leveraging modern web technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-handled with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance the posture. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive cookie consent banner and detailed cookie categorization. However, the absence of visible contact information and terms of service pages limits full business transparency. Overall, the website presents a low-risk profile with good digital maturity and compliance. Strategic improvements in security headers, incident response information, and contact transparency would further strengthen trust and resilience.

C

Cooltix

cooltix.hu

61

Cooltix is a Hungarian event ticketing platform established in 2017, providing online ticket sales and event management services primarily for concerts, festivals, and parties. The platform targets both event organizers and attendees within Hungary, positioning itself as a regional player in the entertainment sector. The website is professionally designed with good content quality and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern web technologies including React and Next.js, integrates Google Maps and Stripe for payments, and uses standard tracking tools such as Facebook Pixel and Google Tag Manager. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the site demonstrates a mature digital presence with room for security policy improvements.