Security Directory

M

MAXXmarketing GmbH

webdesigner-profi.de

37

MAXXmarketing GmbH operates the website www.webdesigner-profi.de, offering comprehensive web design, programming, SEO, and online marketing services primarily targeting businesses in Germany, Austria, and Switzerland. The company positions itself as a mid-sized agency with over 15 years of experience and a strong portfolio of more than 2000 projects, supported by trust signals such as Google Partner certification and notable client references. The website is professionally designed, mobile-optimized, and structured to provide clear navigation and service information. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, PHP, and MySQL, with asynchronous loading of analytics and marketing scripts such as Google Tag Manager and Yandex Metrika. Hosting appears to be provided by Your-Server.de based on nameserver data. Performance and SEO optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response disclosures. From a security and compliance perspective, the site lacks visible privacy and cookie policies, consent mechanisms, and vulnerability disclosure information, which are areas for improvement. Contact information is clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a solid business and technical foundation with room to enhance privacy compliance and security best practices to further strengthen trust and regulatory adherence.

F

Famithemes

famithemes.com

54

FamiThemes is a small technology-focused business offering premium website themes aimed at enhancing online presence for website owners and developers. The website serves primarily as a directory for various theme subdomains and promotes partnership with IQS Directory, a manufacturing resource. The business model centers on theme design and distribution, targeting a niche market segment. Technically, the website employs standard HTML5 and JavaScript with HTTPS and strong security headers, but lacks advanced frameworks or CMS detection. The site is basic in design and content, with minimal mobile optimization and accessibility features. Security posture is good with proper HTTPS and security headers, but privacy compliance is poor due to absence of privacy and cookie policies and lack of contact information. WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional but lacks comprehensive business and privacy transparency, which impacts its credibility and compliance standing.

H

Hugsmiðjan ehf.

eplica.is

9

Eplica.is is the official website for the Eplica web management system, developed and hosted by Hugsmiðjan ehf., an Icelandic technology company. The site primarily serves as an informational portal announcing the end-of-life (EOL) status of the Eplica CMS product, with all development and operations ceasing by the end of January 2025. The business model revolves around providing web content management services to organizations, but the product is now legacy and being phased out. The website targets existing Eplica users and potential clients familiar with the CMS. The company maintains a professional online presence with clear contact details and social media links.

L

Leibniz-Institut fuer Ostseeforschung Warnemuende

baltic.earth

58

Baltic Earth is a scientific research initiative hosted by the Leibniz-Institut fuer Ostseeforschung Warnemuende in Germany, focused on advancing the understanding of the Baltic Sea regional Earth system. The organization facilitates international collaboration through conferences, workshops, and educational programs targeting researchers, PhD students, and stakeholders concerned with environmental and climatic challenges in the Baltic Sea region. The website serves as a portal for information dissemination, event announcements, and community engagement within this niche scientific domain. Technically, the website is built on the Contao Open Source CMS platform using the Foundation CSS framework, delivering a responsive and well-structured user experience. While the site employs HTTPS and modern web standards, it lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the hosting institution, and no WAF or blocking mechanisms interfere with content accessibility. However, the absence of a published security policy or incident response contacts suggests limited formal security governance publicly available. Overall, Baltic Earth presents a credible, professionally maintained scientific resource with a strong institutional backing. Strategic enhancements in security policies, privacy compliance, and technical security controls would further strengthen its trustworthiness and regulatory alignment.

H

HfG Schwäbisch Gmünd

openmoji.org

55

OpenMoji is an academic open source project developed by students and professors at HfG Schwäbisch Gmünd, providing a comprehensive emoji library compliant with Unicode Emoji v16.0. The project targets designers, developers, and general users seeking free, consistent, and well-designed emojis under a Creative Commons license. The website demonstrates good content quality, clear navigation, and consistent branding, supported by a modern tech stack including Astro framework and JavaScript libraries such as jQuery and Fuse.js. Security posture is moderate with HTTPS usage but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the project's credibility.

S

S.H.O.P. CENTAR d.o.o.

croatiaopen.hr

68

Croatia Open Umag is an official ATP tennis tournament organized by S.H.O.P. CENTAR d.o.o., established in 2011 and held in Croatia. The website serves as a platform for disseminating tournament news, schedules, player information, and ticket sales, targeting tennis fans and sports enthusiasts. The business operates primarily in the hospitality and sports event sector, maintaining a consistent brand presence and affiliation with the ATP Tour. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and New Relic for monitoring, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is limited due to missing privacy and terms of service pages. Overall, the site is professional and trustworthy, with room for improvement in compliance and security transparency.

R

Rethink Racing

rethinkracing.com

44

Rethink Racing is a small sports team focused on Prokart and Sim Racing, competing in the British Prokart Endurance Championship and iRacing.com. The website serves primarily as a placeholder with minimal content and links to a legacy site. The business targets motorsport enthusiasts and sim racing communities, operating in a niche segment of the transportation industry. The domain is registered since 2019, consistent with the business age and scope. Technically, the website uses basic modern web technologies including HTML5, CSS3, Google Fonts, and Font Awesome icons. Hosting appears to be with Gandi based on DNS nameservers. The site lacks advanced frameworks or CMS and shows basic mobile optimization and accessibility. SEO and performance are moderate but could be improved. From a security perspective, the site lacks critical security headers and DNSSEC is not enabled. No privacy or cookie policies are present, and no contact or incident response information is provided. The domain registration is stable and legitimate with no privacy protection, but security posture is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is safe with no adult or explicit content, but it is basic and lacks important compliance and security features. Strategic improvements in privacy, security headers, and contact transparency are recommended to enhance trust and compliance.

V

VP RACING FUELS ONTARIO

vpontario.com

65

VP Racing Fuels Ontario operates as a regional distributor of VP Racing Fuels products, serving the Ontario market since 1994. The website presents a focused business model centered on fuel distribution for motorsports and racing enthusiasts. The company maintains a clear contact channel via phone and email, supported by a contact form with Google reCAPTCHA protection. The site is hosted on GoDaddy's platform, reflecting a moderate level of digital maturity with basic SEO and mobile optimization. Security posture is adequate with HTTPS enabled and domain registration protections, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the website is functional and trustworthy, with no signs of malicious activity or content blocking.

S

Stratos

stratos-ad.com

71

Stratos is a well-established online community platform founded in 1998, serving video game and multimedia developers primarily in Spain. The website offers industry news, job listings, collaboration opportunities, forums, and educational resources, positioning itself as a niche hub for professionals and enthusiasts in the multimedia development sector. The platform maintains active engagement through frequent job and collaboration postings and integrates social media channels for broader community interaction. Technically, the site employs modern web standards including responsive design, Google Fonts, FontAwesome icons, and Google Tag Manager for analytics, hosted by DonDominio. The website is mobile-optimized and provides a consistent user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration but lacks some advanced security headers and DNSSEC. Privacy compliance is addressed with dedicated pages for privacy policy, cookie policy with consent mechanisms, and terms of service, though incident response and vulnerability disclosure policies are absent. Overall, the site demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The domain's long registration history and consistent WHOIS data reinforce the site's legitimacy and trustworthiness.

The website gamedevelopers.ie is currently a parked domain with no active business content or services. The landing page indicates the domain is for sale and references game development tutorials and courses in Ireland, but no actual content or offerings are present. The domain registration data shows a creation date in the future (June 6, 2025), which is likely erroneous and reduces trust in the domain's legitimacy. The site relies on external iframes and third-party ad networks for content, with no privacy or cookie policies, and no contact information available. Technically, the site uses basic HTML and JavaScript but lacks HTTPS enforcement and security headers, exposing it to potential security risks. Overall, the site has poor content quality, minimal technical sophistication, and low business credibility.

A

Agence Française pour le Jeu Vidéo

afjv.com

47

Agence Française pour le Jeu Vidéo (AFJV) operates a professional information portal dedicated to the multimedia and video game industries in France. Established in 2003, the website provides comprehensive industry news, company directories, event calendars, studies, and a dedicated employment portal. The site targets professionals within the video game sector, offering valuable resources such as job listings, video content including conferences and reports, and detailed industry analyses. AFJV holds a reputable position as a niche media portal with consistent branding and a strong social media presence across multiple platforms. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, hosted by Arsys Internet, a known registrar and hosting provider. The site is mobile-optimized with good SEO practices and clear navigation, though it lacks advanced frameworks or CMS indicators. Performance is moderate, and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. No cookie consent mechanism or privacy compliance indicators are present, representing a compliance gap. Overall, AFJV demonstrates a solid business credibility and content quality with a well-established domain age and consistent thematic focus. However, improvements in privacy compliance, security headers, and incident response transparency would strengthen its security posture and regulatory adherence. The absence of explicit cookie and privacy policies may expose the site to GDPR compliance risks. No adult or explicit content is present, making the site safe for general audiences.

M

Microsoft Corporation

virtualearth.net

64

Bing Maps, operated by Microsoft Corporation, is a major online mapping service providing users with map viewing, location sharing, and directions. The service is integrated into the Microsoft ecosystem and targets a broad general audience. The analyzed page is a sharing interface that requires WebGL support, which is currently disabled in the browser, limiting the page's functionality and content visibility. Technically, the site uses modern web technologies including JavaScript and WebGL, hosted on Microsoft Azure infrastructure, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, but explicit security headers and privacy policies are not present on this page, which could be improved. Overall, the domain is legitimate and well-established, though WHOIS data is not publicly available due to privacy or registry policies typical for large corporations.

V

Vizor Apps Ltd.

vizor-games.com

64

Vizor Apps Ltd. is a medium-sized technology company specializing in mobile game development and publishing. Their portfolio includes popular titles such as Klondike Adventures, Atlantis Odyssey, Knights & Brides, and Zombie Castaways, targeting mobile gamers interested in adventure and casual games. The company maintains a professional web presence with clear branding, social media engagement, and distribution through major app stores. The website is built using modern web technologies including Angular 17 and Material Design components, optimized for mobile and desktop users with good performance and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website and business demonstrate a trustworthy and professional operation with moderate technical maturity and good user experience.

D

DEVICAT

devi.cat

52

DeviCAT is a professional association dedicated to supporting and promoting the video game industry in Catalonia, Spain. Founded in 2022, it serves as a horizontal association that brings together local and international companies with a presence in Catalonia. The organization focuses on enhancing the social recognition of video games, strengthening the ecosystem, fostering internationalization and innovation, promoting local talent, and attracting foreign companies. Their market position is that of a key industry connector and promoter within the regional technology sector. Technically, the website is built on WordPress with modern SEO and security plugins, hosted by Dinahosting s.l., and demonstrates good mobile optimization and performance. Security posture is solid with HTTPS and firewall plugins, though improvements like DNSSEC and security headers are recommended. Privacy compliance is basic, with policies present but lacking explicit consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

S

Save bees and farmers

savebeesandfarmers.eu

59

The website 'Save bees and farmers' represents a European Citizens’ Initiative advocating for the reduction and eventual ban of synthetic pesticides in EU agriculture. It is a coalition of NGOs, grassroots movements, and scientific groups aiming to promote sustainable, bee-friendly farming practices. The initiative has garnered significant public support with over 1.1 million signatures and actively campaigns through petitions, informational content, and social media engagement. The site provides resources for citizens to contact policymakers and stay informed about legislative developments. Technically, the website is built on ww.edit CMS 4.7, utilizing standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates third-party widgets for campaign actions and uses modernizr for feature detection. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Analytics and marketing tracking are implemented via Google Analytics, Facebook Pixel, and Twitter tags, with a clear cookie consent mechanism in place. From a security perspective, the site enforces HTTPS and employs secure form handling with required fields. However, no explicit security headers were detected in the provided data, and no incident response or vulnerability disclosure policies are published. WHOIS data is not publicly available due to EURid privacy restrictions, but the domain appears legitimate and consistent with the non-profit advocacy mission. Overall, the website presents a professional and trustworthy platform for environmental advocacy with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date libraries to strengthen security posture and compliance.

D

Dr Peter Butcher

pbutcher.uk

47

The website pbutcher.uk serves as the personal academic and professional portfolio of Dr Peter Butcher, a Lecturer in Human-Computer Interaction at Bangor University. It highlights his academic credentials, entrepreneurial ventures such as Sim Broadcasts, and leadership role at Rethink Racing. The site targets academic peers, students, and professional collaborators, positioning itself as a niche platform for personal branding and professional networking within education and technology sectors. Technically, the website employs a straightforward modern tech stack including HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome icons. It is hosted via Namecheap with DNSSEC enabled, indicating a secure domain configuration. The site is moderately performant and mobile-optimized, though accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected, reflecting a simple but effective technical implementation. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks important security headers and formal privacy or cookie policies, which limits its compliance posture. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The absence of vulnerability disclosure or incident response information suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy and professionally presented with a high legitimacy score based on domain age and WHOIS data. However, it would benefit from enhanced privacy compliance, security headers, and formal policies to improve user trust and regulatory adherence.

Aetna Student Health is a specialized branch of Aetna, a major healthcare insurance provider under CVS Health, focusing on tailored health insurance plans for students including international students. The website offers enrollment options, provider locators, insurance education, and a mobile app to streamline healthcare management. The brand is well established with consistent branding and a professional online presence. Technically, the site is built on Adobe Experience Manager with modern web technologies and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS and basic security practices, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS registration data is a notable anomaly, possibly due to privacy protection or data source limitations, but the website content and external domain relationships strongly support legitimacy. Overall, the site is professional, secure, and targeted at student populations seeking health insurance solutions.

E

Eventia s.r.o. and Active Radio a.s.

gdsession.com

62

Game Developers Session (GDS) Prague is a well-established Central European festival focused on game development, technologies, business, and marketing. The event targets game developers, indie creators, and industry professionals, positioning itself as a key regional player in the gaming event sector. The website reflects a professional and consistent brand image, supported by a broad network of partners and sponsors, including notable industry names and local government entities. The business model centers on event organization and community engagement within the gaming industry.

GIANTS Software GmbH operates the official website for Farming Simulator, a leading farming simulation game with a strong global community and multi-platform availability. The website serves as a hub for game sales, downloadable content, mods, tutorials, and community engagement, supporting a diverse audience of gamers and content creators. The business model includes direct sales, DLC offerings, merchandise, and community-driven content, positioning GIANTS Software as a prominent player in the simulation gaming industry. Technically, the website employs modern web technologies including jQuery and the Foundation framework, ensuring responsive design and good mobile optimization. The site is well-structured with clear navigation and SEO-friendly metadata, supporting a positive user experience. However, some technical details such as hosting provider and CMS are not explicitly identified. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating attention to privacy compliance. Nonetheless, the absence of explicit security headers and lack of visible incident response or security policy pages suggest areas for improvement. The WHOIS data is unavailable or protected, which slightly reduces transparency but is not uncommon for commercial entities. Overall, the website is professional, trustworthy, and content-rich, with no signs of adult or questionable content. The main risk lies in the incomplete WHOIS data and limited direct contact information, which could be addressed to enhance trust and compliance.

G

GIANTS Software GmbH

giants-software.com

50

GIANTS Software GmbH is a well-established Swiss technology company specializing in game development and publishing, best known for the Farming Simulator series. The company maintains a professional online presence with a content-rich website targeting gamers, partners, and potential employees. Their market position is strong within the simulation gaming niche, supported by active social media channels and partnerships. Technically, the website uses a traditional tech stack with jQuery and CSS, hosted by Hetzner Online GmbH, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced DNS security and security headers. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy. Overall, the website is trustworthy and professionally maintained, though improvements in security and transparency could enhance its posture further.

S

Stepp's Towing & Heavy Transport

steppstowing.com

61

Stepp's Towing & Heavy Transport is a well-established family-owned business operating for over 60 years, specializing in 24-hour towing, heavy transport, environmental response, and auto parts services. The company serves West Central Florida and offers nationwide heavy transportation, positioning itself as a major player with a large fleet. The website reflects a solid business presence with clear service offerings and contact information, supported by social media channels. Technically, the site uses modern web technologies including service workers for offline support and SVG graphics for visuals, hosted via Amazon CloudFront CDN. However, the absence of WHOIS data and lack of privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enforced but missing some security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

Grand Prix Gear is a specialized e-commerce retailer offering official merchandise for prominent motorsport events such as the Firestone Grand Prix of St Petersburg, the Grand Prix of Portland, and the Honda Indy Toronto, as well as NASCAR Xfinity Cup races. The company operates primarily through a Shopify-based online storefront, targeting motorsport fans and event attendees with branded apparel and souvenirs. The business appears to be small-sized, founded in 2021, and focused on niche retail within the transportation and retail sectors. Technically, the website leverages modern web technologies including Shopify's Dawn theme, JavaScript, and CSS, hosted on Amazon AWS infrastructure. The site demonstrates good performance, mobile optimization, and accessibility. Shopify's integrated payment solutions such as Shopify Payments and Apple Pay are utilized, enhancing the user experience and transactional security. From a security perspective, the site enforces HTTPS and benefits from domain status protections that prevent unauthorized domain modifications. However, DNSSEC is not enabled, and explicit security headers are not clearly visible in the HTML content. There is no evidence of a security policy, incident response contacts, or vulnerability disclosure mechanisms, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is professionally designed and functional, with a moderate security posture and some gaps in privacy compliance and transparency. Strategic enhancements in privacy policy publication, cookie consent, and security disclosures would improve trust and compliance standing.

Tallaspumps.com is a minimal landing page serving as a country selector for a pump-related business targeting multiple European countries. The site directs users to localized domains for the Netherlands, Belgium, France, Germany, the UK, Spain, and Italy. The business appears to operate in the manufacturing sector, likely focused on pumps, but no detailed company information or business descriptions are provided on this page. Technically, the site uses basic HTML, CSS, and SVG for branding but lacks advanced frameworks or CMS indications. There is no evidence of analytics, tracking, or complex scripting, indicating a low digital maturity level. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is unavailable or the domain is unregistered, which raises legitimacy concerns. Overall, the site is accessible but minimal, with limited business and security information.

F

Funcom

dunegames.com

54

The website dunegames.com serves as a dedicated landing page for Funcom’s Dune-themed video games, primarily promoting 'Dune: Awakening' and 'Dune: Spice Wars'. It targets gamers and fans of the Dune franchise, leveraging licensed intellectual property to position itself in the media and entertainment sector. The site reflects a medium-sized business with a history dating back to 2004, consistent with the domain registration date. The business model focuses on game development and publishing, with partnerships evident with companies like Funcom, Level Infinite, Legendary, and Dune Novels. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts integration and hosting infrastructure likely provided by Amazon AWS. The site is responsive and optimized for mobile devices, offering a good user experience with clear navigation and professional design. However, no CMS or advanced frameworks are detected, indicating a relatively simple but effective technical implementation. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with privacy regulations such as GDPR. No contact information or incident response details are provided, limiting transparency and user trust in security matters. Overall, the website is safe, professional, and focused on its gaming audience, but improvements in privacy compliance, security headers, and transparency would strengthen its security posture and trustworthiness. The domain is legitimate and consistent with the business claims, with no signs of blocking or WAF interference.

V

Video.js

videojs.com

54

Video.js is a well-established open source HTML5 video player framework that supports a wide range of video formats and streaming protocols. It is widely adopted with a large contributor base and usage across hundreds of thousands of websites. The website is built using modern web technologies such as Gatsby and React, providing a good user experience and mobile optimization. However, the site lacks explicit privacy, cookie, and security policies, which are important for compliance and user trust. Security posture is moderate with no detected security headers or incident response information. Overall, the domain registration data aligns well with the website content, indicating a legitimate and credible project. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.

О

ООО ИТ Проспект

chat2desk.com

46

Chat2Desk is a Russian-based IT company founded in 2015, specializing in providing a comprehensive business communication ecosystem. Their platform aggregates multiple messaging channels including WhatsApp Business API, Telegram, VKontakte, and others into a unified chat center, enabling businesses to automate workflows, manage customer interactions, and enhance service efficiency. The company targets a broad range of industries such as fintech, retail, energy, healthcare, and logistics, serving over 10,000 clients globally with a medium-sized team and extensive partner network. The website is professionally designed, content-rich, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website employs modern web technologies including JavaScript frameworks, Google reCAPTCHA v3 for bot protection, and integrates analytics tools like Yandex Metrika and Google Tag Manager. Hosting and DNS services leverage Cloudflare, ensuring reliable performance and security. While HTTPS is enforced and some security best practices are observed, the site lacks explicit security headers and DNSSEC, which are recommended for enhanced protection. From a security standpoint, the platform emphasizes secure communication with features like two-factor authentication and IP filtering. Privacy and cookie policies are clearly presented with consent mechanisms, indicating compliance with GDPR principles. However, no explicit incident response or vulnerability disclosure policies are found, suggesting room for improvement in transparency and security governance. Overall, Chat2Desk presents a trustworthy and professional business solution with a solid technical foundation and good privacy practices. Strategic enhancements in security headers, incident response documentation, and DNS security would further strengthen their security posture and trustworthiness.

B

Bahnhit

bahnhit.de

68

Bahnhit.de is an online travel booking platform specializing in affordable city trips that include train and hotel packages, targeting German-speaking travelers. The website presents a professional and consistent brand image with a clear focus on transportation and hospitality sectors. The platform leverages modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for consent management, ensuring a good level of digital maturity. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy and professionally maintained, with extensive use of third-party advertising and analytics services.

Koch Media is a media company that has recently rebranded to PLAION, as indicated by the website content which is a simple redirect page. The site provides minimal information and no interactive features, focusing solely on informing visitors about the rebranding and redirecting them to the new domain plaion.com. The technical infrastructure is basic, using standard HTML and CSS with Google Fonts, and lacks advanced frameworks or CMS. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces trust. Overall, the website serves as a placeholder rather than a full corporate site, limiting the ability to assess the company's full digital maturity and security readiness.

A

Arkane Studios

arkane-studios.com

64

Arkane Studios is a well-established video game development company founded in 1999, known for critically acclaimed titles such as Dishonored, Prey, and DEATHLOOP. The company operates under the parent company ZeniMax Media Inc. and is currently developing Marvel’s Blade in collaboration with Marvel Games. The website presents a professional and consistent brand image with comprehensive content about their games and studio. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, FontAwesome, and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is implied but no explicit security headers were detected in the provided content. Privacy and legal policies are linked to the parent company’s domain, indicating compliance with GDPR and other regulations. However, the absence of WHOIS data and lack of direct contact information on the site slightly reduce trustworthiness. Overall, the website is professional, secure, and credible with room for improvement in security headers and contact transparency.

M

Megazone Corp., dba HOSTING.KR

webdock.com

53

The website webdock.com currently serves as a domain parking page with no active business content or services. It prominently displays a sales banner indicating the domain is for sale, targeting domain investors or buyers. The domain is registered to Megazone Corp., a hosting and registrar company, consistent with the domain parking business model. The site lacks substantive content, contact information, or detailed business descriptions, limiting its utility beyond domain resale. Technically, the site uses standard HTML5, CSS3, and JavaScript with integrations of Google Adsense and Bodis domain parking scripts for monetization. The hosting provider is Megazone Corp., and the site is served over HTTPS with a good SSL configuration. However, it lacks DNSSEC and important security headers, which are recommended for improved security posture. The site shows basic mobile optimization and accessibility but has poor SEO and content quality due to minimal content. From a security perspective, the site benefits from HTTPS but lacks additional security headers and privacy compliance mechanisms such as cookie consent banners. No contact or incident response information is provided, and no certifications or security frameworks are referenced. The domain WHOIS data is consistent and legitimate, with no suspicious patterns detected. Overall, the site scores low on content quality, business credibility, and privacy compliance, resulting in a moderate overall AI score. It is safe for general audiences but offers limited value beyond domain resale. Strategic improvements in security headers, privacy compliance, and business transparency would enhance trust and professionalism.

S

Società Italiana per lo Studio delle Cefalee

sisc2025.it

50

The website sisc2025.it represents the official online presence for the 39th National Congress of the Società Italiana per lo Studio delle Cefalee (SISC), a specialized medical society focused on headache disorders. The site provides comprehensive information about the event, including scientific committee members, thematic areas, registration details, ECM accreditation, and abstract submission guidelines. The target audience is healthcare professionals involved in headache treatment and research. The business model centers on professional education and event organization with paid registrations and official accreditation. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and various UI libraries to deliver a responsive and user-friendly experience. The site is mobile optimized and well-structured, though it lacks a CMS and advanced SEO or accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain benefits from DNSSEC and HTTPS (implied by URL), but the website lacks visible HTTP security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data shows the domain is newly registered specifically for the 2025 event, which is consistent but limits long-term trust signals. Contact information is clearly provided, enhancing credibility. Overall, the site is professional and fit for purpose but would benefit from improved privacy compliance and security hardening to meet modern standards and regulatory requirements.

M

Marián Kadaňka

kadanka.net

59

Kadanka.net is a small Slovakian web design and development business operated by Marián Kadaňka, specializing in custom WordPress and WooCommerce solutions along with IT systems management. The website serves as a professional portfolio and contact point, targeting businesses and individuals seeking tailored web services. The site demonstrates a moderate level of digital maturity with a clean, responsive design and basic SEO optimization, but lacks advanced technical frameworks or CMS detection. Security posture is moderate; while domain registration is consistent and secure with transfer prohibitions, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

I

indieprize

indieprize.org

54

indieprize.org is a niche content website dedicated to World of Warcraft players, providing daily news, in-depth guides, and expert tips focused on Mythic+ dungeons and raid content. The site targets WoW gamers seeking practical and tested gameplay advice to enhance their experience. Technically, the site is built on WordPress with a modern block-based theme, hosted behind Cloudflare DNS, and uses HTTPS with standard domain protections. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. Privacy compliance is minimal, with a basic privacy policy but no cookie consent mechanism or GDPR indicators. No contact or incident response information is provided, limiting transparency. Overall, the site is professionally designed with good content quality and moderate technical implementation, but security and privacy practices need enhancement to meet higher standards.

D

Digitalna Avantura Ltd.

rebootdevelopblue.com

51

Reboot Develop Blue is a specialized boutique conference focused on game developers and the games industry in Europe, celebrating its 10th anniversary in 2025. The event is held in Dubrovnik, Croatia, and targets industry professionals including developers, publishers, investors, and managers. The business operates primarily as an event organizer providing conference sessions, B2B expo booths, sponsorship opportunities, and accommodation booking services. The website is built on WordPress with modern SEO and analytics integrations, reflecting a moderate to high level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, serving a niche but influential market segment.

F

Fairlead Group

fairleadgroup.com

65

Fairlead Group is a private investigation service provider established in 2019, offering a range of investigative services including open-source, social media, surveillance, SIU, and canvasses investigations. The company targets businesses and professionals seeking credible and effective investigative strategies, positioning itself as a niche provider with an integrated investigation management platform. The website is professionally designed using GoDaddy Website Builder, featuring modern web technologies and multimedia content such as embedded Vimeo videos. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and domain registration locks in place, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating gaps in compliance. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

The website clickslogistics.com currently serves as a parked domain with minimal content and no active business presence. The domain was registered recently in May 2023 through IONOS SE, a known registrar and hosting provider. The site content consists primarily of a cookie consent modal referencing third-party Sedoparking policies, with no company branding, contact information, or descriptive business content. Technically, the site uses basic HTML, CSS, and JavaScript, with DNS hosted on Cloudflare name servers. There is no evidence of HTTPS enforcement or security headers, and no forms or user data collection mechanisms are present. From a security perspective, the site lacks fundamental protections and does not demonstrate compliance with privacy regulations beyond basic cookie consent. Overall, the domain appears to be held as a placeholder or for future use rather than an active business website.

F

Fondazione Bologna Welcome

bolognawelcome.com

59

Fondazione Bologna Welcome operates the official tourism portal for Bologna and its metropolitan area, providing comprehensive information on places to visit, events, activities, and hospitality services. The website serves tourists and visitors with multilingual support, ticketing, and merchandise sales, positioning itself as a key resource for tourism promotion in the region. The site is well-branded, professionally designed, and supported by official government and regional partners, enhancing its market credibility. Technically, the website leverages modern web technologies including Angular 15, integrates analytics and consent management tools such as Microsoft Clarity and Cookiebot, and employs security best practices with HTTPS and security headers. The site is optimized for mobile devices and accessibility, ensuring a positive user experience across platforms. From a security perspective, the site demonstrates a strong posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contacts, which are recommended for enhanced security transparency. Overall, the website presents a low risk profile with high trustworthiness and professionalism. The absence of WHOIS data slightly reduces domain trust but is mitigated by the site's official nature and strong partner ecosystem. Strategic recommendations include publishing a vulnerability disclosure policy and incident response information to further strengthen security and compliance.

A

aaPanel Team

aapanel.com

67

aaPanel is an established provider of a free and open-source web hosting control panel designed primarily for Linux servers. The company offers a robust platform that simplifies server management with features such as one-click installation of popular web environments (LNMP/LAMP/OpenLiteSpeed), WP Toolkit, mail server management, and file management. The website positions aaPanel as a widely adopted solution with over 3 million installations, targeting server administrators and hosting providers. The business model includes a free edition and a paid Pro version with enhanced features. Technically, the website is well-constructed using modern web technologies and integrates analytics and consent management tools, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies and some recommended security headers. The absence of WHOIS data limits domain legitimacy verification, though the website's content and trust signals suggest a credible operation. Overall, aaPanel demonstrates a strong market position in the hosting control panel niche with room for improvement in privacy and security transparency.

V

VPSServer.com

vpsserver.com

66

VPSServer.com is a VPS and cloud hosting provider offering secure, scalable, and affordable virtual private servers with a global footprint. The company, legally known as Kamatera Inc, claims a founding year of 1995 and operates multiple data centers worldwide. Their services include Linux and Windows VPS, managed and unmanaged hosting, and a custom control panel for easy server management. The website is professionally designed with clear navigation and comprehensive service descriptions, targeting individuals and businesses seeking reliable VPS hosting solutions. Technically, the website employs modern web technologies including HTML5, CSS3, and JavaScript, with a focus on performance using NvME SSD storage and Intel Xeon processors. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and secure forms, but lacks explicit security policy and incident response information. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. However, the absence of WHOIS domain registration data introduces uncertainty about domain legitimacy. Security and privacy practices could be enhanced by adding formal policies and consent mechanisms. The company maintains active social media channels and provides clear contact information, supporting business credibility.

T

TransIP

transip.nl

70

TransIP is a leading Dutch hosting provider and the largest domain registrar in the Netherlands, serving over 150,000 customers. Their core business revolves around domain registration, web hosting, VPS, and colocation services, targeting both individuals and businesses seeking reliable internet infrastructure solutions. The website is professionally designed, well-branded, and optimized for the Dutch market with clear navigation and relevant content. Technically, the site employs modern web standards, uses reputable third-party services such as HubSpot for marketing and Iubenda for cookie compliance, and enforces HTTPS with strong security headers, reflecting a mature digital infrastructure. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency and trust. Overall, the security posture is strong with no detected vulnerabilities or suspicious content, and privacy compliance is well addressed with comprehensive policies and consent mechanisms. The domain registration details align well with the business claims, reinforcing legitimacy and trustworthiness. Strategic recommendations include publishing dedicated security and incident response pages, implementing a vulnerability disclosure policy, and enhancing accessibility features to meet broader compliance standards.

T

TransIP B.V.

transip.net

70

TransIP B.V. is a well-established Dutch hosting provider and domain registrar, recognized as the largest registrar in the Netherlands with over 150,000 customers. The company offers a range of services including domain registration, web hosting, VPS, and colocation, targeting both individuals and businesses. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Dutch, reflecting their primary market focus. Technically, the site employs modern web technologies, integrates reputable third-party services for marketing and privacy compliance, and maintains good performance and SEO practices. Security-wise, the website enforces HTTPS, implements key security headers, and uses a cookie consent mechanism, although it lacks a dedicated security policy or incident response page. Overall, the domain registration details align well with the business claims, indicating high legitimacy and trustworthiness.

The website viacarpatia.eu serves primarily as a navigation portal linking to several related regional and community project websites in Slovakia. It appears to support initiatives such as small project funds and active aging centers, targeting local communities and stakeholders interested in these projects. The website is relatively simple, with basic content and navigation, and does not provide direct business or contact information on the landing page. Technically, the site is built on WordPress with a custom theme and hosted by a reputable Slovak registrar, WebSupport s.r.o. The technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. Security posture is minimal, with no detected security headers or privacy policies, and no visible analytics or tracking scripts. The site uses HTTPS but lacks advanced security best practices. Overall, the site is safe for general audiences and does not contain any adult or explicit content. The domain registration is consistent with the website's regional focus and shows no suspicious patterns. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, adding contact information, and establishing a vulnerability disclosure policy to improve trust and compliance.

Remeselnícky inkubátor Gemer is a Slovak regional non-profit organization dedicated to supporting traditional folk craftsmen and folk-art producers in the Košice region. The website serves as a platform to promote cultural heritage through education, certification, and facilitation of sales and exhibitions. It is backed by regional government and cultural institutions, positioning itself as a key regional incubator for crafts. Technically, the website is built on Drupal 10, featuring a modern but basic design with good mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No visible vulnerabilities or exposed sensitive data were found. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

The analyzed content corresponds to an internal Chrome browser error page, specifically the offline dinosaur game page, served under the 'chrome-error://chromewebdata/' URL. There is no external business or commercial website content available. The page is designed to provide a user experience when the browser is offline, featuring a simple game and error messaging. No privacy, cookie, or terms of service policies are present, nor is there any contact or security information. The technical infrastructure is based on HTML5, JavaScript, and Canvas API, embedded within the Chrome browser environment. Security posture is minimal due to the nature of the page being a local browser resource, with no external hosting or SSL considerations. Overall, this is not a public-facing website but an internal browser page with limited content and no business relevance.

B

BENEFICIAL APPS AS

bnfcl.io

52

The website bnfcl.io is a newly registered domain operated by BENEFICIAL APPS AS, a Norwegian company specializing in domain registration, domain parking, and web hosting services. The site presents basic information about its offerings with a simple design and limited content. The technical infrastructure includes Cloudflare DNS services but lacks advanced DNS security features such as DNSSEC. The site is accessible without any WAF or security challenge mechanisms, indicating no blocking or filtering. However, the website lacks critical privacy and cookie policies, contact information, and security policies, which are essential for compliance and user trust. The absence of these elements, combined with the very recent domain registration, suggests the business is in an early stage or the site is primarily a domain parking page.

T

Three.js Journey — Learn WebGL with Three.js

threejs-journey.com

50

Three.js Journey is a specialized online educational platform offering comprehensive video courses on WebGL and Three.js, targeting developers from beginners to advanced levels. The platform positions itself as a leading resource in the niche of 3D web development education, with a strong user base of over 47,000 students and positive industry testimonials. The business model centers on lifetime access course sales, providing extensive content totaling 93 hours of video tutorials. Technically, the website employs modern web technologies including Three.js, Google Tag Manager, and Google Analytics, hosted via Scaleway SAS with domain registration consistent with the business age and activity. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, excellent content quality, and trustworthy business credibility, but should enhance privacy and security transparency to align with best practices.

KOLOC oil, operated by PROTEGO s.r.o., is a regional fuel station operator in the Czech Republic offering a variety of quality fuels including unleaded gasoline and diesel variants, along with premium fuel options. The company also provides convenience store goods, refreshments, parking, and accepts multiple payment cards, positioning itself as a comprehensive service provider for motorists. The website reflects a medium-sized business with consistent branding and a clear focus on customer service. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and likely Bootstrap and jQuery for UI components. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site employs a Content-Security-Policy header but weakens it by allowing unsafe inline scripts and eval, which could be improved. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with the business claims. Overall, the site scores well in business credibility and content quality but has room for improvement in privacy compliance and security hardening.

R

Realitní kancelář Pubec

pubec.cz

44

Realitní kancelář Pubec is a Czech real estate agency specializing in property sales and rentals primarily in Plzeň and its surrounding region. Established since 1990, the company offers a comprehensive portfolio including residential and commercial properties, legal services, market valuations, auctions, and mortgage assistance. The website reflects a professional and customer-focused business with strong trust indicators such as high ratings on Google and Firmy.cz, and numerous positive client testimonials. Technically, the website employs modern web technologies and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. However, the absence of WHOIS registration data and explicit privacy and cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS usage and reCAPTCHA integration but lacks visible security headers and detailed security policies. Overall, the website presents a credible and professional real estate business with room to enhance privacy compliance and security best practices.

The website 'Win Rolla' appears to be a minimal or placeholder site with limited content and no visible privacy, cookie, or terms of service policies. The site title suggests a gaming or casino-related theme, but no detailed business description or contact information is provided. The technical infrastructure includes Cloudflare DNS hosting without DNSSEC enabled, and the site uses standard HTML and CSS technologies. No advanced frameworks or CMS are detected. Security posture is basic with no security headers observed and SSL configuration is minimal. The WHOIS data reveals a suspicious domain creation date set in the future (March 2025), which raises concerns about the legitimacy and maturity of the domain. Overall, the site lacks transparency and trust indicators, resulting in a low business credibility score.

The website pistolo1.com/de/ appears to be a newly created site with minimal content and limited business information. The domain was registered in January 2025, consistent with the website's build date in October 2025. The site uses Cloudflare DNS and Google Fonts but lacks common business trust indicators such as privacy policies, contact information, or social media presence. The technical infrastructure is basic with no detected CMS or frameworks. Security posture is limited, with no security headers or advanced configurations detected, and no GDPR compliance indicators present. Overall, the site appears to be in an early development or placeholder stage, with low business credibility and limited content quality.