Security Directory

P

Poliklinika i dnevna bolnica IMED

imed.hr

59

Poliklinika i dnevna bolnica IMED is a specialized healthcare provider based in Croatia, focusing on complex dental cases and combining dental medicine, implantology, orthodontics, aesthetic surgery, and ENT services. The website reflects a professional and modern digital presence, leveraging Nuxt.js and Tailwind CSS frameworks, with integrated analytics and cookie consent mechanisms. The site is well-structured, mobile-optimized, and provides essential contact information, although explicit privacy and terms of service policies are missing. Security posture is good with HTTPS and security headers in place, but lacks published incident response or vulnerability disclosure policies. Overall, the business appears legitimate and trustworthy with a solid technical foundation but could improve compliance documentation and transparency.

G

Gist

giftcardpro.app

73

Gist operates Gift Card Pro, a Shopify app designed to enhance gift card sales and delivery for Shopify store owners. The app offers features such as digital and physical gift card sales, automated delivery via email and SMS, customizable designs, bulk sending, and balance reminders. Positioned as a niche e-commerce tool, it targets Shopify merchants seeking to improve customer gifting experiences. Technically, the app leverages modern web technologies including React, Stimulus, Tailwind CSS, and is hosted on Shopify's CDN infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, CSRF protections, and no visible vulnerabilities, though explicit privacy and cookie policies are absent on the app detail page. Overall, the app demonstrates a mature digital presence with high user ratings and trust signals, but could improve privacy compliance and contact transparency.

S

SV Werder Bremen

werder-bremen.com

69

SV Werder Bremen's official website serves as a digital hub for the German football club, providing fans with news, match updates, and player information. The site targets football enthusiasts and club supporters, positioning itself as a reputable source for club-related content. The business model revolves around sports engagement and merchandising, with a medium-sized organizational footprint in Germany. Technically, the website employs modern frameworks such as Nuxt.js and Tailwind CSS, hosted on German infrastructure, and integrates Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be enhanced. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, which are areas for improvement. Overall, the website is trustworthy and functional, with moderate analytics tracking via Google Tag Manager. Strategic recommendations include publishing privacy and terms of service pages, enhancing security headers, and providing clear contact and incident response information to bolster compliance and user trust.

U

Profesionálové s odpovědností | UNICONN CZ

uniconn.cz

6

The website uniconn.cz represents a newly registered domain (2023) with a professional business-oriented title but minimal content available. The site uses modern frontend technologies such as Nuxt.js and Tailwind CSS, indicating a contemporary technical infrastructure. However, the content is basic with no visible privacy, cookie, or terms of service policies, and no contact information or social media links are provided. Security posture is weak due to lack of security headers and absence of incident response or vulnerability disclosure information. Overall, the site appears to be in early development or minimal deployment stage with limited business and security maturity.

R

Red Hook Studios

darkestdungeon.com

55

Red Hook Studios operates the website www.darkestdungeon.com as the official platform for their game Darkest Dungeon and related content. The site targets gamers and enthusiasts of indie games, providing information about the studio and its products. The technical infrastructure leverages modern web technologies including Nuxt.js, Vue.js, GSAP for animations, and Tailwind CSS for styling, indicating a contemporary and responsive design approach. The presence of consent management via Osano CMP reflects some attention to privacy compliance, though explicit privacy and cookie policies were not detected in the provided content. Security posture appears moderate with HTTPS implied, but no explicit security headers were found in the data. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or recent registration, which impacts trustworthiness. Overall, the website is professionally designed and functional but would benefit from enhanced transparency in privacy, contact information, and security disclosures.

Filuta AI is a technology startup specializing in AI-driven automated game testing solutions. Leveraging advanced AI planning agents originally developed for deep space exploration, the company offers adaptive, goal-driven testing frameworks that enable continuous and comprehensive QA for game developers and related professionals. Their market position is that of an innovative pioneer in automated game testing, targeting game developers, QA leads, designers, and automation engineers. The company is relatively new, founded in 2022, and operates primarily in the technology sector with a small team of highly qualified experts. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good performance and mobile optimization. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is supported by testimonials, partnerships, and a professional web presence. Overall, the website is trustworthy and professional, with no signs of malicious content or suspicious activity.

OVER HOLDING S.R.L. operates the website overthereality.ai, a leading global platform specializing in 3D mapping datasets and spatial intelligence technologies. The company provides advanced AI-powered services including Large Geospatial Models, Visual Positioning System (VPS) for robotic navigation, and Generative AR content creation tools. Their platform targets developers, enterprises, and creators in the augmented reality and robotics sectors, positioning itself as a pioneer in Physical AI and spatial computing. The business model leverages digital land ownership, token incentives, and a comprehensive ecosystem of tools and marketplaces to drive engagement and revenue.

P

Piton Labs

pitonlabs.com

55

Piton Labs is a technology-focused startup development agency founded in 2021, specializing in helping early-stage companies and entrepreneurs rapidly build and launch MVPs. Their services include product strategy, expert software development, and team assembly to ensure long-term success. The website reflects a professional and consistent brand with clear messaging targeted at startups seeking reliable development partners. Technically, the site uses modern frameworks such as Next.js and React, with Tailwind CSS for styling, indicating a contemporary and maintainable tech stack. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is implied, but no security headers or DNSSEC are enabled, and no explicit security or privacy policies are published, which are areas for improvement. The domain registration is consistent with the business profile, showing legitimacy and no suspicious patterns. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

The website fertighausspezialist.at currently presents minimal content, primarily a placeholder or coming soon page with no visible business information, contact details, or policies. The business focus and services cannot be determined from the site content. The technical infrastructure is based on WordPress with a coming soon plugin, using Tailwind CSS and jQuery libraries. Hosting is provided by kasserver.com, consistent with the domain's WHOIS data. Security posture is weak due to lack of security headers, absence of privacy and cookie policies, and no visible contact or incident response information. The site is accessible without WAF or security challenges but lacks substantive content and compliance features. Overall, the site scores low on content quality, privacy compliance, and business credibility, indicating it is either under development or poorly maintained.

The website senzoor.de operates as an e-commerce affiliate aggregator specializing in clothing, accessories, home goods, outdoor equipment, shoes, and sports products. It provides users with product listings sourced from various external providers, facilitating product search and navigation. The site also prominently offers the domain for sale, indicating a possible transition or business change. Technically, the site employs modern frontend technologies such as Tailwind CSS and htmx.js, ensuring a responsive and interactive user experience. However, the site lacks comprehensive privacy and cookie policies, which are critical for GDPR compliance in the German market. Security-wise, while HTTPS is implied, the absence of explicit security headers and limited bot detection mechanisms suggest room for improvement. Overall, the site is functional and professionally designed but requires enhancements in privacy compliance and security posture to meet industry standards.

L

Leadson AB

infoo.se

10

Infoo.se is a Swedish web directory platform operated by Leadson AB, providing comprehensive company profiles, industry categorizations, and business information since 1993. The platform targets Swedish businesses and consumers seeking detailed company data and marketing opportunities. The website is built using modern web technologies including Vue.js and Tailwind CSS, hosted likely on DigitalOcean, and integrates multiple advertising and analytics services with a robust consent management platform ensuring GDPR compliance. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, though DNSSEC is not enabled and some security headers could be improved. Overall, Infoo.se presents a professional, trustworthy, and user-friendly experience with good content quality and clear navigation.

U

Unbound Studios Pte Ltd

playground.game

9

PlayGround is a newly launched next generation gaming platform developed by Unbound Studios Pte Ltd, based in Singapore. The platform offers AI-driven no-code tools enabling users and developers to create, share, and play games across multiple categories including web games, premium titles, and partner games. It also provides a Creator toolset for game development on PC and MacOS, targeting gamers, developers, and content creators. The website is professionally designed with good mobile optimization and clear navigation, reflecting a modern and engaging user experience. Technically, the site uses Vue.js, Tailwind CSS, and Cloudflare DNS, with Google Tag Manager and Twitter Ads integrated for analytics and marketing. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy and cookie policies are absent, indicating compliance gaps. No direct contact information or incident response details are published, which may affect user trust and regulatory compliance. Overall, the domain registration is consistent and legitimate, matching the company identity and launch timeline.

S

SolarReviews

solarreviews.com

68

SolarReviews operates as a leading independent solar panel comparison and review platform in the United States, targeting homeowners interested in installing solar panels. The website offers tools such as a solar cost and savings calculator, unbiased consumer reviews of solar companies, and expert reviews of solar equipment including panels, batteries, and inverters. It is well-positioned in the renewable energy sector with a strong market presence supported by citations from reputable media outlets. Technically, the website employs modern web technologies including Vue.js, Tailwind CSS, Google Analytics, Hotjar, and Stripe for payments, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS and uses several security best practices, though explicit security headers and policies are not fully visible in the provided content. The absence of WHOIS data reduces domain trust slightly, but the overall brand credibility and content quality remain high. Privacy and cookie policies are not detected, suggesting room for improvement in compliance. Overall, SolarReviews presents a professional and trustworthy online presence with moderate risk and opportunities for enhanced privacy and security transparency.

E

EnergySage

energysage.com

76

EnergySage operates as a leading online marketplace specializing in clean home energy solutions, primarily targeting homeowners in the United States. Founded in 2011, the company offers a platform for comparing solar energy systems, backup power, EV charging, and heating/cooling solutions. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience. Technically, the site leverages modern JavaScript frameworks and multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. The lack of WHOIS data slightly impacts domain trustworthiness, but overall, the business credibility remains high based on available contact information and structured data.

E

EuroMarine Association

euromarinenetwork.eu

53

EuroMarine Association operates a professional and collaborative network of European marine research organizations, providing funding, training, and networking opportunities to advance marine sciences and policy. The website reflects a mature digital presence with modern technologies such as Vue.js and Nuxt.js, supported by reputable hosting from OVH SAS. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of marine scientists and organizations. Security posture is solid with HTTPS and security headers implemented, though explicit security and privacy policies are absent, representing an area for improvement. Overall, the website is trustworthy and credible, supporting EuroMarine's mission effectively.

ASBIS Hrvatska is a medium-sized technology company operating in Croatia, specializing in consumer electronics innovation and distribution. The website reflects a professional digital presence built on modern technologies such as Nuxt.js and Tailwind CSS, with integration of multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. The domain is well-established since 2012 with consistent WHOIS data matching the business location and claims. However, the website lacks critical compliance elements such as privacy and cookie policies, terms of service, and explicit contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and Cloudflare DNS usage, but missing security headers and incident response information.

D

Domains By Proxy, LLC

wnhub.io

56

WN Hub is a niche platform dedicated to the games industry ecosystem, offering information on industry events, conferences, job opportunities, news, and educational courses. The website targets professionals and enthusiasts within the gaming sector, positioning itself as an informational hub. The domain is relatively new, registered in 2020, and uses privacy protection services common for small businesses. The hosting infrastructure is based on AWS, and the site employs modern frontend technologies such as Tailwind CSS and Swiper.js, indicating a moderate level of technical maturity. From a security perspective, the website lacks visible security headers and does not provide explicit privacy or cookie policies, which are critical for compliance and user trust. No incident response or security contact information is available, and no analytics or tracking scripts were detected, suggesting minimal user data collection. The absence of WAF or blocking mechanisms indicates open accessibility. The domain WHOIS data shows privacy protection but no suspicious patterns, supporting legitimacy. Overall, the website demonstrates basic content quality and technical implementation but falls short in privacy compliance and security best practices. The lack of contact information and policies may impact user trust and regulatory adherence. Strategic improvements in security headers, privacy disclosures, and contact transparency are recommended to enhance credibility and compliance.

WN Hub operates as an information platform providing listings and details of upcoming game industry conferences, networking events, and summits worldwide. The website targets professionals and enthusiasts in the gaming sector, offering event information across multiple regions including the UK, China, Turkey, US, Canada, and the EU. The business appears to be relatively new, founded around 2020, and operates with a small-scale model focused on event aggregation and promotion. Technically, the website employs modern front-end technologies such as Tailwind CSS and Swiper.js, hosted on AWS infrastructure, indicating a moderate level of digital maturity. The site is mobile-optimized and presents content with good design and navigation clarity. However, there is a lack of visible analytics or marketing tools, suggesting minimal user tracking and data collection. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No privacy or cookie policies are present, which is a compliance gap, especially for GDPR. The WHOIS data shows privacy protection via Domains By Proxy, which is common and justified for small businesses. No suspicious indicators were found, but the absence of contact and incident response information reduces transparency. Overall, the site is functional and professionally presented but requires improvements in privacy compliance, security practices, and transparency to enhance trust and regulatory adherence.

M

Motorsport Network

motorsport.com

67

Motorsport.com is a leading German-language motorsport news and results platform operated under the Motorsport Network brand. It provides comprehensive coverage of major racing series including Formula 1, MotoGP, DTM, and endurance racing, supported by a rich media database and an active user community. The website is professionally designed, well-optimized for mobile devices, and integrates modern web technologies including consent management for GDPR compliance. The technical infrastructure leverages CDN hosting and advanced analytics tools, ensuring fast performance and good SEO. Security posture is strong with HTTPS enforced and adblock detection implemented, though explicit security headers and incident response policies are not prominently published. Overall, the site represents a mature, trustworthy media business with a solid digital presence.

G

Gesellschaft für Versicherungswissenschaft und -gestaltung e.V. (GVG)

gesundheitsziele.de

50

Gesellschaft für Versicherungswissenschaft und -gestaltung e.V. (GVG) is a German non-profit organization focused on social and health insurance sciences and policy. It serves as a platform uniting various stakeholders from social insurance carriers, healthcare providers, government bodies, and scientific communities to discuss and shape the future of social security and public health in Germany. The website reflects a well-established entity with a history dating back to 2003, offering forums, publications, and events to support health goal formulation and policy discourse. Technically, the website is built on the KONTEXT-CMS platform, utilizing modern technologies such as jQuery and Tailwind CSS. It is hosted on servers associated with cloudpit.de and employs Matomo analytics for user tracking, indicating a privacy-conscious approach. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections in place. However, it lacks DNSSEC and security headers, and there is no visible security.txt or incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance.

M

marbis GmbH

nitrado.net

63

Nitrado, operated by marbis GmbH, is a technology company specializing in providing instant and affordable game server rental services. The website targets gamers and gaming communities seeking reliable hosting solutions. The company appears to have a medium-sized operation with a professional online presence, leveraging modern web technologies such as Nuxt.js and Tailwind CSS to deliver a responsive and user-friendly experience. Analytics and tracking tools like Google Tag Manager, Segment, Microsoft Clarity, and Sentry are integrated for performance monitoring and user insights. Security posture is generally strong with HTTPS enforced, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the website is safe, professional, and well-structured, but would benefit from enhanced privacy compliance and clearer business contact information.

S

Skuld

skuld.com

64

Skuld is a globally recognized marine insurer with a strong financial position and a presence in 10 countries. The company offers a comprehensive range of insurance products and services tailored to shipowners, charterers, the energy sector, renewables, and aquaculture. Their website reflects a professional and trustworthy brand with clear messaging and extensive content about their services, sustainability commitments, and industry expertise. Technically, the website employs modern technologies including Matomo analytics and Microsoft Application Insights, ensuring good performance and privacy-aware tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and a formal security policy is absent. Overall, the site is well-designed, accessible, and optimized for mobile users, supporting a positive user experience and strong business credibility.

M

Milka

milka.cz

68

Milka.com/cz is a professionally designed website representing the Milka chocolate brand in the Czech Republic. The site offers product information, promotions, and community engagement content targeting general consumers interested in confectionery products. The technical infrastructure leverages modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, although no explicit incident response or vulnerability disclosure information is present. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces business credibility but does not detract from the overall trustworthiness of the website content and branding.

G

Goetheanum TV

goetheanum.tv

67

Goetheanum TV is a specialized media platform offering video content centered on anthroposophy, targeting a general audience interested in cultural and educational material. The platform operates on a subscription and video-on-demand business model, leveraging a modern technical infrastructure including Uscreen OTT platform, Tailwind CSS, and various JavaScript libraries. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing accessibility and user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. Overall, the platform presents a trustworthy and professional digital presence with moderate tracking and advertising practices.

The website euroshare.eu is a German-language financial content portal focused on investment topics such as returns, dividends, portfolios, stocks, and the stock market. It provides educational content, product recommendations, and affiliate links to financial books and guides. The site prominently offers the domain for sale, indicating a possible transition or discontinuation of the current project. Technically, the site uses modern frontend technologies like Tailwind CSS and htmx.js, with a clean and responsive design. However, it lacks privacy and cookie policies, security headers, and structured metadata, which limits its compliance and SEO effectiveness. The WHOIS data is unavailable, suggesting privacy protection or registry restrictions, which slightly reduces trust. Overall, the site is functional and informative but requires improvements in privacy, security, and transparency to enhance trust and compliance.

G

Advantage - Building User-First Ad Formats. | Advantage

get-advantage.org

51

The website www.get-advantage.org represents an open-source project named Advantage, which provides a set of customizable, high-performance web components designed to simplify and standardize high-impact display advertising on the web. The project targets web developers and publishers seeking advanced advertising infrastructure solutions. The site is well-structured with clear navigation and professional design, leveraging modern technologies such as VitePress and Tailwind CSS to deliver a fast and mobile-optimized user experience. However, the site lacks explicit business contact information, privacy policies, and terms of service, which limits its business credibility and privacy compliance posture. From a technical perspective, the website employs a modern frontend stack with ES modules and responsive design. The absence of forms reduces the attack surface, but no security headers were detected in the provided data, indicating room for improvement in security hardening. The WHOIS data is unavailable due to a malformed query or privacy protection, which is common for open-source projects but reduces transparency. The domain appears active and legitimate based on website content and GitHub presence. Security posture is moderate; HTTPS is implied but no explicit security headers or incident response contacts are present. No analytics or tracking scripts were detected, suggesting minimal user tracking and good privacy by design, though the lack of privacy and cookie policies is a compliance gap. Overall, the site is safe with no adult or questionable content detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, providing contact information for security and business inquiries, and improving WHOIS transparency if possible to enhance trust and compliance.

N

Netcompany

netcompany.com

75

Netcompany is an established technology company founded in 1996, specializing in providing innovative digital solutions that empower societies, companies, and institutions to control their processes and data for competitive advantage. The company positions itself as a responsible digitalisation partner with a professional and modern web presence. The website demonstrates a mature technical infrastructure using modern CSS frameworks and video technologies, optimized for mobile and accessibility. Security posture is generally good with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency on privacy and security policies.

O

Outroll

outroll.com

66

Outroll is a software holding company, venture builder, and managed services provider that manages, builds, and acquires software companies. The company positions itself as a permanent home for software, targeting software businesses and investors. The website reflects a professional and modern digital presence with a focus on technology and software industry services. The domain is mature, created in 2009, supporting the company's established presence. Technically, the website uses modern frameworks such as Nuxt.js and Tailwind CSS, hosted via Cloudflare, and integrates Google Tag Manager for analytics. The site is mobile optimized and has good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks published security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

N

Netcompany

sdc.dk

75

Netcompany is a well-established technology company specializing in providing modern core banking services powered by AI, targeting banks and financial institutions. The company positions itself as a trusted partner delivering digital transformation solutions at speed. The website reflects a professional and consistent brand image with a focus on banking technology solutions. Technically, the site uses modern web technologies including Tailwind CSS and Video.js, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security features like DNSSEC and explicit security headers. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the domain registration data supports the legitimacy and stability of the business.

V

Vesta Control Panel

vestacp.com

56

Vesta Control Panel is an established open source hosting control panel software founded in 2010, offering a free GPLv3 licensed solution for managing websites, DNS, mail, backups, and more. It targets developers, hosting providers, and small to medium businesses seeking an easy-to-use hosting control panel. The website demonstrates a strong market position with half a million servers running Vesta and 25,000 monthly installs, supported by an active GitHub repository and community forum. Technically, the site uses modern web technologies including Nuxt.js and Tailwind CSS, with Cloudflare DNS and Google Tag Manager integration, providing a fast, mobile-optimized, and accessible user experience. Security-wise, the site benefits from HTTPS, open source transparency, and claims strong password security practices, but lacks published privacy, cookie, and security policies, as well as DNSSEC and security headers, which are recommended for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

W

Wyldata, Ltd.

wyldata.com

49

Wyldata, Ltd. operates a specialized action sports data platform focused on providing accurate, relevant, and actionable sports data to federations, athletes, fans, and brands. The company offers core services including database management, ranking algorithms, and custom data products, positioning itself as a trusted technology partner within the action sports ecosystem. Their partnerships with recognized federations such as World Skate and FIS underscore their market credibility and industry integration. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on AWS infrastructure, and employs best practices in design, responsiveness, and performance. Security posture is solid with HTTPS enabled and error monitoring via Sentry; however, there is room for improvement in security headers and published security policies. Privacy compliance is basic with presence of privacy and cookie policies and consent mechanisms, though GDPR compliance is not explicitly confirmed. Overall, the website demonstrates a high level of professionalism and trustworthiness, with minor gaps in direct contact information and advanced security disclosures.

N

Nederlandse Vereniging van Journalisten

nvj.nl

71

The Nederlandse Vereniging van Journalisten (NVJ) is a well-established Dutch association dedicated to supporting journalists and media professionals. Founded in 1995, the organization provides advocacy, resources, and professional support to its members within the Netherlands. The website reflects a professional and consistent brand presence targeting journalists and media stakeholders. Technically, the site employs modern CSS frameworks such as Tailwind and likely uses Storyblok CMS, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. Security posture is basic, with no DNSSEC enabled and no visible security headers or incident response policies. Privacy compliance is minimal, with no privacy or cookie policies detected. Overall, the domain's age and registration details support the legitimacy of the organization. Strategic improvements in security and privacy policies would enhance trust and compliance.

P

PersVeilig

persveilig.nl

64

PersVeilig is a Dutch non-profit initiative focused on enhancing the safety of journalists against violence, aggression, and legal threats. It operates in partnership with key Dutch media and law enforcement organizations, providing training, safety plans, incident reporting, and awareness campaigns. The website is well-structured, professionally designed, and uses modern technologies such as Nuxt.js and Storyblok CMS. It includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good privacy compliance. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. The domain registration is consistent with the organization's Dutch roots and business history, supporting legitimacy. Overall, the website presents a trustworthy and professional front for its mission.

The website luna-aboshop.de is currently under maintenance and provides no substantive business information or services. The site uses WordPress with a coming soon plugin and standard frontend libraries such as jQuery, Tailwind CSS, and FontAwesome. The technical infrastructure appears basic with no advanced frameworks or analytics detected. Security posture is minimal with no visible security headers or privacy policies, and no contact or incident response information is provided. The domain WHOIS data shows standard reseller name servers but lacks registrant details, limiting trustworthiness. Overall, the site is low in content quality, security, and compliance, resulting in a low AI score and limited business credibility.

Biolase operates a professional healthcare-focused website providing a customer login portal primarily for laser technology products and services. The site is well-branded and targets healthcare professionals, offering account access and ordering capabilities. The technical infrastructure leverages modern web technologies including Nuxt.js, Tailwind CSS, Firebase backend services, Stripe for payments, and PostHog for analytics, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal privacy and cookie policies, which are critical for compliance and trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

A

The Best Web Hosting Services at 20x Speeds | hosting.com

a2hosting.com

9

Hosting.com is a web hosting service provider emphasizing high-speed hosting solutions, targeting businesses and individuals seeking enhanced website performance. The domain is well-established since 1996, indicating a mature presence in the hosting industry. The website employs modern front-end technologies such as Tailwind CSS and uses Cloudflare for DNS services, reflecting a contemporary technical infrastructure. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain status protections in place, but there is room for improvement in publishing security policies and implementing DNSSEC. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

D

DSI Slovakia

vzdy.sk

53

Vzdy.sk is a Slovak-based retail distributor specializing in consumer electronics with a 26-year history. The company focuses on importing, localizing, marketing, and servicing well-known brands such as JBL, Harman/Kardon, Kenwood, and Revlon. Their market position is strong within Slovakia and the Czech Republic, serving both retail consumers and business partners. Technically, the website uses modern frameworks like React and Tailwind CSS, with integrations for Google Analytics and Facebook Pixel for marketing and tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a basic privacy policy page and no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

I

Instadapp

instadapp.io

68

Instadapp is a technology platform specializing in decentralized finance (DeFi) tools designed to maximize the potential of DeFi protocols for a broad audience. Founded in 2018, it offers multiple products including Instadapp PRO, Lite, Avocado, Fluid, and a governance platform, positioning itself as a mature player in the DeFi ecosystem. The website demonstrates a modern technical infrastructure using Nuxt.js and Tailwind CSS, with excellent mobile optimization and fast performance. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, though DNSSEC is not enabled and no explicit security policies or incident response information are published. Privacy compliance is weak due to absence of privacy and cookie policies, and no contact information is provided. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

D

DSI Slovakia

edsi.sk

63

EDSI is a Slovak-based official distributor specializing in consumer electronics and household products, serving both retail and wholesale customers. The company operates a comprehensive e-commerce platform offering a wide range of products including audio equipment, kitchen appliances, and home care devices. Their market position is solid within Slovakia as an authorized distributor for several global brands. Technically, the website employs modern frontend technologies such as React and Redux, with Tailwind CSS for styling, and integrates standard marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Security-wise, the site enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms, reflecting a mature security posture. However, it lacks a dedicated security policy or vulnerability disclosure page. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for customers.

F

FlixPatrol

flixpatrol.com

59

FlixPatrol is a specialized media analytics platform that provides daily updated rankings and popularity charts for streaming video on demand (VOD) content across nearly a thousand streaming platforms worldwide. The service targets general audiences interested in streaming trends, as well as industry professionals seeking data insights. The platform offers key services such as top 10 charts, popularity metrics, and a premium subscription with API access for advanced analytics. Technically, the website employs modern frontend technologies including Alpine.js, Tailwind CSS, and integrates analytics tools like Google Analytics and Hotjar for user behavior tracking. The site is mobile optimized and presents a professional design with clear navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, and does not provide visible privacy or cookie policies, which are areas for improvement. Overall, the website is legitimate and functional with moderate risk, but would benefit from enhanced privacy compliance and security hardening.

C

CEIAS: Central European Institute of Asian Studies

ceias.eu

63

CEIAS (Central European Institute of Asian Studies) is a specialized academic and research institute focused on Asian studies from a Central European perspective. Founded in 2013 and based in Bratislava, Slovakia, CEIAS provides research papers, insights, publications, and interactive trackers related to geopolitical and economic topics in Asia. The organization targets academics, policy makers, and individuals interested in Asian affairs, offering a range of educational resources and a newsletter for ongoing engagement. The website is built on a modern WordPress platform utilizing Tailwind CSS, jQuery, and several plugins including Yoast SEO and Complianz GDPR for compliance. It is hosted by WebSupport s.r.o., a reputable hosting provider. The site demonstrates excellent performance, mobile optimization, and SEO practices, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. While some security headers are not explicitly visible in the HTML, the overall posture is strong with no detected vulnerabilities. Privacy compliance is robust, with a comprehensive privacy policy and GDPR consent mechanisms in place. Overall, CEIAS presents a trustworthy, professional, and well-maintained digital presence aligned with its academic mission. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure to further strengthen trust and compliance.

I

IdentityStream AS

identitystream.com

68

IdentityStream AS is a Norwegian software company specializing in identity and access management (IAM) solutions, primarily targeting banks and financial institutions. The company offers modular software designed to provide a solid foundation for effective enterprise governance, focusing on identity security as a key enabler for digital transformation. Their market position is strong within Norway, supported by notable clients in the banking sector and a clear focus on compliance and automation. The website reflects a professional and modern digital presence built with Gatsby and Tailwind CSS, optimized for performance and mobile devices. Security posture is good with HTTPS and modern frameworks, but lacks explicit security policies and privacy compliance documentation. Overall, the company demonstrates credibility and technical maturity, though improvements in privacy and security transparency are recommended.

S

SAMFlows | Revolutionises fire pump operations

samflows.com

57

SAMFlows operates as a specialized technology provider focusing on integrated waterflow control systems for fire engines, managing pumps, tanks, and valves. The website presents a professional image with clear branding and partnerships with recognized fire safety companies, targeting firefighting professionals and emergency services. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Technically, the site uses modern CSS frameworks like Tailwind and includes Google Analytics with IP anonymization, but lacks visible security headers and privacy policies, indicating room for improvement in security and compliance. Overall, the site is functional and well-designed but requires enhanced transparency and security measures to improve trustworthiness and compliance.

J

J.B. Poindexter & Co

jbpoindexter.com

44

J.B. Poindexter & Co (JBPCO) is a privately held diversified manufacturing company specializing in commercial trucks, specialty vehicles, upfit and accessory solutions, and manufacturing services. With a global workforce of approximately 8,500 employees and a consolidated revenue of around $2.5 billion, JBPCO operates multiple well-known business units including Morgan Truck Body, Morgan Olson, Reading Truck, and several ambulance and specialty vehicle manufacturers. The company positions itself as a leader in the industrial and commercial vehicle manufacturing sectors, serving a broad range of customers and industries. Technically, the JBPCO website is built on WordPress with modern front-end technologies such as Tailwind CSS and Alpine.js, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. The site is well-optimized for SEO, mobile responsive, and demonstrates good accessibility features. Security measures include HTTPS enforcement, reCAPTCHA v3 on forms, and security headers, reflecting a mature security posture. From a security perspective, the site shows strong adherence to best practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a visible cookie consent banner and explicit incident response contact information are areas for improvement. The WHOIS data for the domain is missing, which is unusual for a large enterprise and may warrant further investigation to confirm domain legitimacy. Overall, JBPCO presents a professional, trustworthy, and well-maintained digital presence aligned with its business stature. Strategic recommendations include enhancing privacy compliance visibility, publishing security policies, and clarifying domain registration details to strengthen trust and compliance posture.

S

SVGBox | API for Web Icons

svgbox.net

10

SVGBox is a small technology-focused service providing a free API for web developers and designers to easily integrate over 4,600 SVG icons into their projects. The service leverages Cloudflare CDN for fast and reliable icon delivery and uses modern frontend technologies such as Alpine.js and Tailwind CSS to provide a responsive and user-friendly interface. The website includes a search feature, icon exploration, and a contact form for user feedback. Google Analytics is used for visitor tracking, but no privacy or cookie policies are published, indicating a compliance gap. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks explicit security headers and published security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

T

Teta drogerie

tetadrogerie.cz

69

Teta drogerie is a prominent retail and e-commerce company operating in the Czech Republic, specializing in cosmetics, skin care, household goods, and products for children and pets. The company holds a strong market position as a leading drugstore chain, targeting general consumers with a comprehensive product range both in physical stores and online. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging various third-party tools for analytics, advertising, and consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security measures include HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not publicly available. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data reduces transparency and slightly impacts business credibility. Overall, the website is trustworthy and professionally managed, with room for improvement in security transparency and WHOIS data availability.

R

RWTH Aachen University

git.nrw

53

git.nrw is an educational platform operated under the auspices of RWTH Aachen University, providing a centralized GitLab instance and related services to universities in the NRW region of Germany. The platform supports version control, issue tracking, CI/CD, and offers educational courses and profiling quizzes to enhance learning experiences. The website is professionally designed with excellent content quality and clear navigation, targeting students and experts within the academic community. Technically, the site uses modern static site generation with Hugo, Tailwind CSS, and JavaScript modules, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy consent mechanisms implemented, though explicit security policies and vulnerability disclosure mechanisms are absent. WHOIS data confirms the domain's legitimacy and university affiliation, reinforcing trustworthiness. Overall, git.nrw represents a credible, well-maintained educational service with strong technical and privacy compliance foundations.

E

ELB Learning

rehearsal.com

62

Rehearsal, operated by ELB Learning, is a specialized video role-play training platform designed to enhance sales enablement, call center training, and soft skills development. The platform targets corporate training professionals and sales teams, offering a SaaS model that supports video-based practice and coaching accessible anywhere. The website presents a professional and consistent brand image with clear calls to action for demos, app downloads, and support resources, positioning itself as a niche player in the education technology sector. Technically, the website leverages modern web technologies including React and Tailwind CSS, with a focus on performance and mobile optimization. Security best practices are well implemented with strong HTTP security headers and HTTPS enforcement. However, the absence of a cookie consent mechanism and explicit vulnerability disclosure pages indicates room for improvement in privacy compliance and transparency. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The site demonstrates good adherence to security standards but could enhance incident response readiness by providing direct security contact channels. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the professional presentation and ELB Learning association mitigate concerns. Overall, Rehearsal's website is a well-executed digital presence for a specialized SaaS training platform, with solid technical and security foundations. Strategic improvements in privacy compliance and domain registration transparency would further strengthen trust and compliance.

A

ARCHEKTA, s.r.o.

archekta.com

47

Archekta is a small Slovak architecture studio founded in 1991, specializing in architectural design and construction consulting with a focus on balancing art and architecture. The company has a strong regional presence with award-winning projects and a professional team. The website showcases their portfolio and team but lacks privacy and cookie policies, which are important for compliance. Technically, the site uses modern frameworks like Nuxt.js and Tailwind CSS, hosted on Websupport.cz, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve compliance and security practices.

S

Saba Rock

sabarock.com

56

Saba Rock is a hospitality-focused website likely representing a resort or tourism service provider. The domain is well-established since 1998, indicating a mature business presence. The website employs modern frontend technologies such as Vue.js and Tailwind CSS, with integrated marketing and analytics tools including Google Tag Manager and Facebook Pixel. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers or vulnerability disclosures, and no signs of WAF or content blocking were found. Overall, the site presents a professional but basic digital presence with room for improvement in privacy and security compliance.