Security Directory

G

Geldersch Landschap en Kasteelen

glk.nl

72

Geldersch Landschap en Kasteelen (GLK) is a well-established Dutch non-profit organization founded in 1929, dedicated to the conservation and management of nature areas, castles, and estates in the Gelderland region. The organization offers public engagement through excursions, activities, and donor programs, positioning itself as a trusted steward of cultural and natural heritage. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to nature enthusiasts and local communities. Technically, the site leverages modern web technologies including WordPress CMS, imgix for image delivery, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, GLK's website demonstrates high trustworthiness, professionalism, and alignment with its mission and audience.

L

Landgoedhotel Woodbrooke

woodbrookebarchem.nl

62

Landgoedhotel Woodbrooke is a medium-sized hospitality business located in the Netherlands, offering hotel accommodations, conference facilities, and event hosting services. The company positions itself as a leading meeting and event hotel in East Netherlands, with a focus on regional and organic products and outdoor activities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers and integrates with third-party booking and marketing platforms. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit security policies. Overall, the website is trustworthy and well-maintained, supporting the business's market position effectively.

H

Havezathe Carpe Diem

hotelcarpediem.nl

45

Havezathe Carpe Diem is a historic hotel and restaurant located in the Achterhoek region of the Netherlands, offering accommodation, dining, meeting, and event services. The website is professionally designed using WordPress with multilingual support for Dutch, English, and German, targeting tourists and business clients. The technical infrastructure includes modern SEO tools, Google Analytics, and a booking widget integrated from Cubilis, reflecting a moderate digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, though the absence of publicly accessible privacy and terms policies indicates room for compliance improvement. Overall, the website presents a trustworthy and professional image with moderate tracking and marketing tools in use.

Hampshire Hotel 's Gravenhof Zutphen is a small hospitality business located in the historic city center of Zutphen, Netherlands. The hotel offers accommodation, dining, and event services, targeting tourists and visitors seeking a culturally rich experience. The website is professionally designed with multilingual support and clear navigation, facilitating direct bookings and showcasing promotional packages. The technical infrastructure includes modern JavaScript integrations, Google Tag Manager, Facebook Pixel, and a third-party PMS booking system, indicating a mature digital presence. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is basic with visible privacy and cookie policies but lacks an explicit consent mechanism. Overall, the website reflects a trustworthy and credible business with good user experience and marketing practices.

H

Herberg de Gouden Leeuw

herbergdegoudenleeuw.com

63

Herberg de Gouden Leeuw is a small boutique hotel and restaurant located in Bronkhorst, the smallest city in the Netherlands. The business offers accommodation, dining, event hosting, and related hospitality services. The website is professionally designed with clear navigation, multilingual support, and integrated booking engines from Hoteliers and Smarthotel, indicating a mature digital presence. The technical infrastructure leverages modern JavaScript libraries, a PWA service worker, and is hosted on the Duda platform with CDN support, providing good performance and mobile optimization. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding are consistent with a legitimate hospitality business. Overall, the site is suitable for general audiences with no adult content and provides clear contact information and social media presence.

R

Recras

recras.nl

55

Recras is a Dutch SaaS company providing an all-in-one reservation and management system tailored for recreation businesses such as climbing parks, watersports, escape rooms, and paintball centers. The company offers automation of bookings, staff planning, invoicing, customer communication, and payment processing, primarily targeting recreation entrepreneurs in the Netherlands, Belgium, and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies including WordPress, React, and various plugins for enhanced user experience and SEO. Privacy compliance is robust with Cookiebot consent management and a comprehensive privacy policy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the business credibility. Overall, Recras presents a trustworthy and mature digital presence suitable for its market niche.

C

CM.com

cm.com

73

CM.com is a well-established technology company specializing in AI-powered customer engagement and communication platforms. With over 25 years of experience, it offers businesses seamless omnichannel communication solutions leveraging no-code AI tools. The company targets enterprises seeking to enhance customer journeys and engagement through innovative technology. The website reflects a mature digital presence with professional design and comprehensive content, supporting its market position as a leading communication technology provider. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates advanced analytics tools like Microsoft Clarity and Google Analytics, and implements robust cookie consent mechanisms via Cookiebot. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity and technical infrastructure quality. From a security perspective, CM.com enforces HTTPS, uses multiple security headers, and maintains ISO 27001 certification, demonstrating a strong commitment to information security. However, the absence of a publicly accessible security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security communication. Overall, CM.com presents a low-risk profile with a professional and trustworthy online presence. Strategic enhancements in security policy disclosure and incident response readiness would further strengthen its security posture and stakeholder confidence.

L

Landgoed Energy Up

landgoed-energy-up.nl

56

Landgoed Energy Up is a small hospitality business operating a camping site and accommodation rentals located in Zeewolde, Netherlands. The website presents a professional and user-friendly interface built on WordPress using the Divi theme, enhanced with SEO optimizations via Yoast. The business targets campers and holidaymakers seeking nature and water-side experiences. Technically, the site employs modern JavaScript libraries and Google Tag Manager for analytics and marketing, with Cookiebot managing cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some advanced security headers and formal security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security documentation.

S

Snap Inc.

bitmoji.com

67

Bitmoji is a digital avatar creation platform owned by Snap Inc., offering users personalized cartoon emojis and stickers for use in messaging and social media. The website presents a professional and consistent brand image with clear calls to action for downloading the app on iOS and Android platforms, as well as integration with Snapchat and other messaging apps. The business model is freemium, leveraging app downloads and integrations to drive user engagement. The site targets a broad general audience interested in personalized digital expression. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with mobile optimization and app store integration. While no advanced frameworks or CMS are detected, the site is well-structured and SEO optimized. Performance is moderate with good mobile responsiveness. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS (implied by app store links and modern web standards), but no explicit security headers were detected in the provided data. No forms or sensitive data collection points are present on the main page, reducing attack surface. Privacy compliance is strong with clear links to comprehensive privacy and cookie policies, though no active cookie consent mechanism is visible. The WHOIS data is missing or unavailable, which is unusual but likely due to registry or query limitations rather than malicious intent. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. The main risk is the lack of visible security headers and incomplete WHOIS data, which should be addressed to improve transparency and security posture.

P

PlayCanvas

playcanvas.com

69

PlayCanvas is a mature and reputable web-based platform specializing in WebGL and HTML5 game engine technology. Founded in 2011, it offers an open source engine and a collaborative in-browser editor for developers and studios to create games, visualizations, VR, AR, and interactive ads. The platform enjoys a strong market position with trusted brand associations and a clear focus on performance and cross-platform support. Technically, the website leverages modern JavaScript libraries and multimedia content to deliver a fast, mobile-optimized experience hosted on AWS infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

V

Vera&John

verajohncasino.com

48

Vera&John operates as an online casino platform offering a wide variety of gambling games including slots, live casino, bingo, and promotional events. The website targets adult users interested in online gambling entertainment. The platform demonstrates a modern technical infrastructure utilizing JavaScript frameworks, web workers for token management, and integrates analytics and cookie consent tools. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected in the provided content. Privacy and cookie policies are not clearly found in the analyzed content, which is a compliance gap. The absence of WHOIS data for the subdomain is typical and does not necessarily indicate risk, but limits full verification of domain registration details. Overall, the site is professional and functional but would benefit from enhanced transparency in privacy and contact information.

The analyzed domain currently serves a Chrome internal error page indicating that the actual website content is inaccessible or blocked. The page contains embedded scripts related to the Chrome offline T-Rex runner game, which is a default browser feature when no internet connection is available or the site cannot be reached. There is no business or contact information, no privacy or cookie policies, and no security or compliance documentation present. The lack of accessible content and metadata prevents meaningful assessment of the business or its market position. Technically, the page uses standard HTML, CSS, and JavaScript with Chromium-specific scripts but lacks modern SEO, accessibility, or security features. The security posture is weak due to missing HTTPS and security headers. Overall, the domain appears inactive or misconfigured, and the trustworthiness is low.

I

International Lean Six Sigma Institute

ilssi.org

44

The International Lean Six Sigma Institute (ILSSI) is a small educational organization specializing in Lean Six Sigma coaching, certifications, research, and conferences. It positions itself as an internationally accredited certification provider focused on advancing Lean, Sustainable, and Smart business processes aligned with Industry 4.0 and digital transformation. The website is professionally designed using WordPress and Elementor, with a moderate performance profile and good mobile optimization. The technical infrastructure includes modern plugins such as WooCommerce and Contact Form 7, indicating e-commerce and contact capabilities. Security posture is adequate with HTTPS enabled and domain registration protected by privacy services, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site demonstrates high business credibility and trustworthiness but would benefit from enhanced privacy and security disclosures.

P

Privacy Coalitie

privacycoalitie.org

51

Privacy Coalitie is a Dutch non-profit coalition advocating for enhanced digital privacy and privacy-friendly alternatives in the Netherlands. Founded in 2022, it brings together multiple organizations and individuals to promote awareness, responsible data use, and societal dialogue on digital privacy. The coalition positions itself as a thought leader aiming to influence both policy and public behavior towards a more privacy-respecting digital society. The website serves as an informational and advocacy platform, providing a manifesto, member lists, and contact points for engagement. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery 3.6.0, hosted by Combell NV. The site is mobile responsive with good navigation and content structure. However, no CMS or advanced backend technologies are detected. Performance is moderate with basic accessibility and SEO optimizations in place. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has clientTransferProhibited domain status, but lacks DNSSEC and security headers, which are recommended for improved security posture. No privacy or cookie policies are published, representing a compliance gap with GDPR best practices. Contact is provided solely via email, with no forms or phone numbers. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website is trustworthy and professional for its advocacy purpose but would benefit from enhanced privacy compliance documentation and improved security hardening. The domain registration is consistent and legitimate, supporting the coalition's credibility.

H

Hasartmängusõltuvuse Nõustamiskeskus

15410.ee

46

Hasartmängusõltuvuse Nõustamiskeskus is an Estonian non-profit organization focused on providing psychological counseling and psychotherapy services for gambling and digital addiction. The website is professionally designed and maintained using WordPress with modern plugins such as Yoast SEO and Slider Revolution. The services are funded by the Estonian Ministry of Social Affairs and offered free of charge to those in need. The site targets individuals struggling with addiction and their families, offering both in-person and e-counseling options. Contact information is clearly presented, and forms are protected by Google reCAPTCHA to prevent abuse. The domain is registered with a reputable Estonian registrar and has been active since 2010, supporting the organization's legitimacy.

Z

Zimpler

zimpler.com

58

Zimpler AB is a licensed Swedish payment institution specializing in instant bank payment solutions that enable businesses to streamline deposits, payouts, and cross-border payments. The company serves a broad market including iGaming and investment platforms, processing billions in yearly volume and reaching hundreds of millions of bank accounts across multiple countries. Their website reflects a mature digital presence built on WordPress with modern SEO and performance optimizations. Security posture is strong with HTTPS, security headers, and regulatory compliance clearly stated. However, explicit incident response and vulnerability disclosure policies are not publicly visible. Overall, Zimpler demonstrates a professional, trustworthy, and scalable fintech business with a solid market position.

W

WiQhit

wiqhit.com

59

WiQhit is a Netherlands-based technology company specializing in website personalization tools aimed at increasing conversions for businesses across various sectors including e-commerce, B2B, travel, and lead generation. Their SaaS platform offers modules such as personalizations, A/B testing, recommendations, decision aids, and search personalization, supported by a strong partner network and over 250 active users. The website demonstrates a mature digital presence with modern technologies like Webflow CMS, JavaScript libraries, and integration with Google Tag Manager and LinkedIn Insight for analytics and marketing. From a security perspective, WiQhit employs HTTPS with strong SSL configurations and security headers, ensuring secure data transmission and protection against common web vulnerabilities. The site respects user privacy by loading tracking scripts only after cookie consent and does not collect privacy-sensitive data by default. However, explicit security policies and incident response contacts are not publicly detailed, indicating room for improvement in transparency and compliance documentation. Overall, WiQhit presents a professional and trustworthy online presence with excellent content quality, user experience, and technical implementation. The business is well-positioned in its niche with clear value propositions and customer testimonials. Strategic enhancements in privacy compliance and security disclosures would further strengthen their risk posture and customer trust.

S

Stadsschouwburg Utrecht

ssbu.nl

73

Stadsschouwburg Utrecht is a well-established cultural venue in the Netherlands, offering theater performances, event hosting, and hospitality services. The website reflects a professional and consistent brand image, targeting a broad audience interested in cultural events and theater. The business model centers on ticket sales, venue rental, and food and beverage services, positioning itself as one of the largest theaters in the country. Technically, the website employs modern JavaScript libraries, integrates with third-party ticketing platforms, and supports multilingual access via Google Translate. The site is mobile-optimized and accessible, with good SEO practices and structured event data. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is strong, featuring a comprehensive privacy and cookie policy with user consent mechanisms. Overall, the site is trustworthy and professionally maintained, with no critical security or content safety concerns.

Y

Yellowgrape and Hipex

ecookie.nl

52

Ecookie.nl is a Dutch website offering a free, easy-to-install cookie banner solution designed to help e-commerce businesses comply with the GDPR (AVG) regulations. Developed collaboratively by the e-commerce agency Yellowgrape and Magento hosting specialist Hipex, the service targets webshops seeking to manage cookie consent efficiently and in their own branding style. The website provides a registration form for users to create accounts and download a whitepaper on privacy laws for webshops. The site is well-structured, mobile-optimized, and presents a professional image consistent with its niche market position. From a technical perspective, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Symfony PHP framework for user registration. Hosting is likely provided by Hipex, a Magento hosting specialist, indicating a reliable infrastructure. The site performs moderately well with good mobile responsiveness and basic accessibility features. However, explicit security headers are not detected, and no detailed privacy or security policies are published, which are areas for improvement. Security posture is adequate with HTTPS usage and secure form handling including CSRF tokens and mandatory consent checkboxes. No vulnerabilities or exposed sensitive data were identified in the provided content. The absence of published privacy and cookie policies reduces privacy compliance confidence. No incident response or vulnerability disclosure information is available, limiting transparency in security management. Overall, ecookie.nl presents a trustworthy and professional service for GDPR cookie compliance in the Dutch e-commerce sector. Strategic improvements in publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts would strengthen its security posture and compliance standing.

N

Nederlands Openluchtmuseum

openluchtmuseum.nl

65

The Nederlands Openluchtmuseum is a well-established cultural heritage institution in the Netherlands, offering immersive historical experiences, educational programs, and event hosting services. The website effectively targets families, educational groups, and business clients, positioning itself as a leading open-air museum with strong regional and national recognition. The digital infrastructure leverages modern frontend technologies such as Elm, integrates multiple analytics and marketing tools, and maintains good mobile and accessibility standards. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence aligned with the museum's mission and audience.

E

Energie aanbiedingen + Cadeau of cashback tot € 545,00

energie-aanbiedingen.com

69

The website energie-aanbiedingen.com operates as a Dutch energy offer comparison and cashback platform targeting consumers interested in energy deals and promotional gifts such as Nintendo Switch or Apple iPad. The site is positioned as a consumer-focused affiliate or comparison service within the energy sector in the Netherlands. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates Google Analytics 4 and Google Tag Manager for analytics and marketing. The site is well-structured with good SEO meta tags and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and multiple security headers present, but lacks explicit privacy and cookie policies, which impacts compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Social media presence is established on YouTube, Facebook, and Twitter, enhancing brand visibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and clearer contact information.

K

Kassa Kool llc

kassa-kool.com

45

Kassa Kool LLC is a small, local HVAC service provider based in Austin, Texas, specializing in residential HVAC system repair and maintenance including heat pumps, gas furnaces, and mini-splits. The company positions itself as a competitively priced service provider with quick response times and customer satisfaction guarantees. The website is built on WordPress using the Astra theme and Elementor page builder, hosted on HostGator, and incorporates common plugins such as Rank Math SEO and Chaty for marketing and communication. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The site uses Google Analytics for tracking but does not provide cookie or privacy consent mechanisms, indicating gaps in privacy compliance. Overall, the website is professional and trustworthy for its business scope but would benefit from enhanced security and privacy practices.

LifeWave is a health and wellness company operating an e-commerce platform focused on products that promote vitality and longevity. The website is professionally designed with a consistent brand presence and targets health-conscious consumers. The technical infrastructure leverages modern JavaScript libraries, a headless CMS (Sanity.io), and integrates analytics and cookie consent tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and formal security policies. Overall, the website is accessible without WAF or blocking mechanisms, indicating stable hosting and domain management. Strategic improvements in privacy policy publication, security headers, and incident response readiness would enhance trust and compliance.

D

Data Den

getdataden.com

57

Data Den is a small technology company offering an open-source, MIT licensed customizable data grid plugin targeted at developers and software projects. The website presents a professional and consistent brand with good content quality and clear navigation, focusing on technical documentation and examples. The technical infrastructure leverages modern JavaScript libraries, Hugo CMS, and is hosted by OVH sas, indicating a moderate level of digital maturity. Security posture is basic with HTTPS enabled and domain protections in place, but lacks advanced security headers, vulnerability disclosure, and incident response information. Privacy compliance is minimal with no explicit cookie consent or GDPR indicators. Overall, the website is functional and trustworthy but could improve in privacy and security transparency.

G

Gong

codeforcroatia.org

67

Code for Croatia is a Croatian non-profit civic technology community platform focused on open data, open government, and open source projects. It serves as a discussion forum and collaboration space for designers, programmers, and activists aiming to foster positive social change. The website is powered by the Discourse forum software and hosted with Cloudflare DNS services, reflecting a modern and community-oriented technical infrastructure. The platform demonstrates good digital maturity with a well-structured forum, active categories, and integration of various plugins to enhance user engagement. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Overall, the website is trustworthy, professionally maintained, and serves a clear community purpose with moderate tracking via Google Analytics. Strategic recommendations include enhancing privacy compliance with cookie consent mechanisms and formalizing security incident response documentation.

C

Counter

counter.dev

60

Counter.dev is a small technology company offering a privacy-friendly, open source web analytics platform designed to track unique visitors, referrals, and geographical data without compromising user privacy. The business model is based on voluntary payments with a 'pay when ready' approach, targeting website owners and developers who prioritize privacy and simplicity. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery and OwlCarousel, and integrates PayPal SDK for payment processing. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating good accessibility. However, some security best practices like security headers and cookie consent mechanisms are missing. The site is mobile optimized and SEO friendly but could improve accessibility features. From a security perspective, the site demonstrates a strong privacy stance by avoiding cookies and IP fingerprinting, minimizing data collection, and using HTTPS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement. Overall, the site maintains a good security posture but could enhance transparency and compliance. The overall risk assessment is low with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing security headers, publishing security and incident response policies, adding cookie consent if applicable, and improving accessibility. These steps will strengthen trust, compliance, and security culture while supporting the company’s privacy-focused brand.

The website goplay.se is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any business or content information. The domain is registered since 2005 with Safenames LTD and is active without privacy protection, indicating a legitimate registration. However, no privacy policies, cookie notices, terms of service, or contact information are available on the blocked page. The technical infrastructure relies on Cloudflare for security and performance, but the lack of DNSSEC and security headers is noted. Due to the WAF block, a full security and compliance assessment cannot be performed, resulting in a low AI score and limited insights.

M

Markus Liljestrand

casinousl.com

51

CasinoUSL.com is a Swedish-language online media platform specializing in providing comprehensive guides, reviews, and rankings for online casinos without Swedish licenses. The site targets Swedish players seeking alternatives to the regulated Swedish gambling market, offering information on foreign casinos, payment methods, bonuses, and how to play without restrictions such as Spelpaus. The business operates as an affiliate and informational site, leveraging detailed content and structured data to build trust and authority in its niche. Technically, the site is built on WordPress with modern plugins like WPBakery and Rank Math SEO, and uses Google Tag Manager for analytics. The site is mobile-optimized and well-structured, though it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and security headers. Overall, the site is accessible without WAF or blocking mechanisms, providing a safe and professional user experience focused on adult gambling content.

L

Localcities

localcities.ch

65

Localcities is a Swiss-focused digital platform providing residents and stakeholders with comprehensive municipality-related information including events, clubs, contacts, weather, emergency numbers, and directories. The platform serves as a centralized hub for local community engagement and information dissemination, targeting Swiss municipalities and their inhabitants. Technically, the website employs modern web technologies including responsive design, SVG icons, and Google Tag Manager for analytics, ensuring a good user experience across devices. The presence of cookie consent and privacy policies indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website is professional, trustworthy, and well-positioned in its niche, with room for improvement in explicit security disclosures and contact transparency.

T

Toys for Bob

toysforbob.com

57

Toys for Bob is an independent game development studio with a long-standing history since 1989, known for crafting epic adventures featuring iconic characters such as Crash Bandicoot and Spyro. The company operates primarily in the technology sector, focusing on game development across multiple platforms. Their website reflects a professional and consistent brand image, leveraging Squarespace CMS for content delivery. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security-wise, the site benefits from HTTPS and HSTS but could improve by adding additional security headers and formal security policies. Overall, the website presents a trustworthy and professional front but should enhance privacy compliance and contact transparency to improve user confidence and regulatory adherence.

B

Blizzard Entertainment

vvisions.com

79

Blizzard Entertainment is a globally recognized leader in the video game industry, known for developing and publishing iconic game franchises. The analyzed website serves as a professional career portal targeting job seekers interested in opportunities at Blizzard, particularly in Albany and other locations. The site is well-branded, professionally designed, and provides comprehensive job listings and application functionality. Technically, the site leverages modern recruitment platforms and integrates OAuth for social login, enhancing user experience and security. The security posture is strong with HTTPS enforcement and security headers, though explicit incident response contacts are not found. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is trustworthy, professional, and aligned with Blizzard's enterprise stature.

H

Holiday Media

holidaymedia.nl

60

Holiday Media is a specialized internet service provider focused on the Dutch recreation and travel sector, delivering website design, maintenance, and online booking integration to over 250 clients. Their market position is strong within this niche, supported by a professional website, client testimonials, and active social media presence. Technically, the website employs modern web technologies including Google Analytics and Tag Manager, custom fonts, and responsive design, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and secure login forms, though lacking in explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-targeted to its audience, but could improve in privacy and security transparency.

H

Holiday Media

hmcms.nl

60

Holiday Media is a specialized internet service provider focusing on the Dutch recreation and travel sector, delivering website design, maintenance, and integration with booking systems to over 250 clients. Their market position is that of a niche expert with a strong local presence and a comprehensive service offering including internet marketing, photography, and videography. Technically, the website employs modern web technologies including jQuery, Google Analytics, and a proprietary CMS, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, but lacks visible security headers and explicit privacy compliance mechanisms such as cookie consent banners. Overall, the site is professional and trustworthy, with clear contact information and social media presence.

D

DAAD (Deutscher Akademischer Austauschdienst)

study-in-germany.com

65

The website www.study-in-germany.com is an authoritative educational portal aimed at international students interested in studying in Germany. It is supported by the German Academic Exchange Service (DAAD) and the Federal Ministry of Education and Research (BMBF), providing comprehensive information on study planning, visa requirements, financing, and living in Germany. The site is professionally designed with clear navigation and rich content primarily in German, targeting prospective international students. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, with analytics provided by eTracker. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms comply with GDPR, but explicit security headers and incident response contacts are not evident. The WHOIS data for the domain is missing or unavailable, which is unusual and reduces trust in domain registration transparency, although the website content and branding strongly suggest legitimacy. Overall, the site scores well on content quality and privacy compliance but has room for improvement in security posture and business credibility transparency.

S

Specialdelivery

specialdeliverysandiego.org

57

Special Delivery San Diego is a small non-profit organization dedicated to providing nutritional support to the San Diego community through home-delivered meals, a nutrition pantry, and diabetic education programs. The organization relies on donations and volunteer efforts to serve over 800 families monthly. The website is built on the Wix platform, featuring a professional design with clear navigation and calls to action for volunteering and donations. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features. No WHOIS data was available due to query failure or privacy protection, but the domain and website content appear consistent with a legitimate non-profit entity. Overall, the site demonstrates good business credibility and content quality but should improve privacy policies and security practices to enhance trust and compliance.

Southern California Bulldog Rescue is a small non-profit organization dedicated to rescuing and rehoming bulldogs in the Southern California region. The website serves as an informational platform to support their mission, targeting animal lovers, potential adopters, and donors. The organization has a long-standing presence since 2006, reflected in the domain registration data. Technically, the website is built on the Snap Cloud CMS platform, hosted on AWS infrastructure, and uses common web technologies such as JavaScript and Google Fonts. The site is accessible and uses HTTPS, but lacks advanced security headers and privacy compliance features. There is minimal content and no visible contact or policy pages, which limits user engagement and trust signals. Security posture is moderate with room for improvement in headers and policy disclosures. Overall, the website is functional but basic, with recommendations to enhance security, privacy compliance, and user trust.

T

Tiny Frog

tinyfrog.com

63

Tiny Frog is a well-established web design and development agency based in San Diego, founded in 2003. The company positions itself as a top-rated local agency offering a range of services including web design, development, search marketing, e-commerce solutions, and web accessibility. The website reflects a professional and consistent brand image targeting businesses seeking digital solutions. Technically, the site is built on WordPress with the Genesis Framework, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Google Ads, and LiveChat. Security practices include HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and published policies. Overall, the site demonstrates good digital maturity and business credibility.

8

8x8, Inc.

8x8.vc

58

8x8 Work is a professional video conferencing platform targeting businesses of all sizes, leveraging the open-source Jitsi Meet technology. The platform offers secure, reliable, and feature-rich video meetings with capabilities such as live streaming, recording, transcription, and collaborative whiteboarding. The website reflects a mature enterprise-grade service with consistent branding and a focus on business users. Technically, the site employs modern web technologies including React, WebRTC, and integrates analytics tools like Google Analytics, Amplitude, and Treasure Data. The infrastructure appears robust with service workers and token-based authentication mechanisms in place. Security posture is strong with HTTPS enforced and secure WebRTC configurations; however, explicit security policies and incident response information are not publicly visible. Privacy compliance is partially addressed with clear privacy and terms of service pages, but lacks a visible cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness.

The website europazagradane.hr is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and no meaningful user engagement features. The domain was registered recently in 2022 by a Bulgarian registrar and uses parking name servers, consistent with domain parking practices. Technically, the site uses basic HTML and JavaScript with third-party ad networks such as Google Adsense Domains CAF and Youseasky. There is no evidence of a CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers detected, and no privacy or cookie consent mechanisms implemented. No contact or business information is provided, limiting trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.

P

Popravi.to

popravi.to

54

Popravi.to is a Croatian civic technology platform enabling local residents to report, view, and discuss street-related problems such as graffiti, illegal waste dumping, and damaged infrastructure. The platform is powered by the open source FixMyStreet software and targets community members interested in improving their local environment. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and OpenLayers for mapping, supported by multiple analytics tools and Cloudflare hosting. The site is mobile optimized and uses HTTPS with some security best practices like CSRF tokens and service workers. However, it lacks explicit privacy and cookie policies, and no direct contact information is provided on the homepage. Security posture is good but could be improved with additional headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent with the website's Croatian civic focus, indicating legitimacy and trustworthiness.

P

Plus Hosting Grupa d.o.o.

parlametar.hr

53

Parlametar is a Croatian government-focused digital platform that provides detailed analysis and tracking of parliamentary activities, including voting records and speech transcripts of Croatian Parliament members. The platform targets citizens, journalists, and political analysts interested in transparent and accessible parliamentary data. It operates as an informational service with a specialized niche in political data visualization and analysis. Technically, the website employs a modern yet somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.3, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The domain is registered with a reputable Slovenian hosting provider, consistent with the website's operational profile. Overall, the site is professional, trustworthy, and serves a clear public interest function.

M

MDBootstrap

mdbootstrap.com

68

MDBootstrap is a well-established provider of Material Design UI kits and Bootstrap templates, trusted by over 2 million developers and designers worldwide. The company offers a comprehensive suite of frontend development resources including UI components, plugins, and extensive documentation, positioning itself as a leader in the web development tools market. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome to deliver a rich user experience. The technical infrastructure is robust, with good mobile optimization, SEO practices, and performance considerations. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in publishing explicit privacy, cookie, and security policies. Overall, MDBootstrap presents a professional and trustworthy digital presence with strong market credibility.

A

algoo

galae.net

62

Galae is a French-based email service provider offering high deliverability, unlimited email addresses and domains, and advanced configuration options. The service is positioned as an ethical, GDPR-compliant alternative focused on autonomy and sovereignty, leveraging open source software and hosted exclusively in France. The business is relatively new, founded in 2023, and operated by the parent company algoo. The website presents a professional image with clear pricing, client testimonials, and a community support platform. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, with hosting provided by Scaleway SAS. Security practices include support for email authentication standards (DKIM, SPF, DMARC) and data redundancy, but lack visible security headers and explicit incident response information. Privacy compliance is partially demonstrated but lacks explicit privacy and cookie policies on the site. Overall, galae demonstrates a solid business and technical foundation with room for improvement in security transparency and privacy disclosures.

C

Citus Data

citusdata.com

75

Citus Data is a technology company specializing in distributed PostgreSQL database solutions. Their core offering is the Citus extension, which enables horizontal scaling of Postgres databases through distributed tables and parallel query execution. The company provides both an open source version and a managed cloud service integrated with Microsoft Azure Cosmos DB for PostgreSQL. Positioned as a niche leader in scalable Postgres solutions, Citus Data targets developers and enterprises requiring high-performance, scalable database infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and strong Microsoft branding, indicating a medium-sized enterprise with solid market positioning. Technically, the website leverages modern web technologies including Google Fonts, SVG graphics, JavaScript, Marketo forms for lead capture, and Google reCAPTCHA for bot protection. The hosting and cloud service references suggest Microsoft Azure as the underlying platform. The site is well optimized for mobile devices, SEO, and accessibility, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers are not detected, and there is no published security policy or incident response information, which are areas for improvement. The absence of WHOIS data for the domain is unusual but mitigated by the strong Microsoft association and trust signals such as customer testimonials and GitHub presence. Overall, the website presents a trustworthy and professional front for Citus Data's business, with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and security posture.

U

Uitjes.nl

uitjes.nl

52

Uitjes.nl is a well-established Dutch online platform founded in 1999, specializing in providing inspiration and listings for leisure activities and day trips across the Netherlands and Belgium. The platform caters to a broad audience including families, friends, and corporate groups, offering a wide range of activities such as sports, cultural events, and special outings. It features user reviews, promotional offers, and a reservation/payment system to facilitate bookings. Technically, the website employs modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA, ensuring a functional and moderately optimized user experience with good mobile responsiveness. Security-wise, the site benefits from HTTPS, DNSSEC, and reCAPTCHA integration, but lacks visible security headers and published security policies, indicating room for improvement in security transparency and defense-in-depth. Overall, the domain's WHOIS data confirms a long-standing and legitimate presence, supporting the platform's credibility and trustworthiness.

D

Duurzaamnieuws

duurzaamnieuws.nl

59

Duurzaamnieuws is a Dutch independent media outlet focused on sustainability, climate, energy, and related topics. The website provides current news, opinion pieces, and insights aimed at a general audience interested in a sustainable future. It operates on a membership and donation-supported business model, positioning itself as a trusted source for sustainability news in the Netherlands. The site uses WordPress CMS with a professional theme and SEO optimization, supported by social media channels on Facebook, Twitter, Mastodon, and LinkedIn. Technical infrastructure includes modern plugins and Google Analytics for tracking, with a cookie consent mechanism in place. From a security perspective, the website enforces HTTPS and uses basic security best practices but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Incident response and vulnerability disclosure information are also absent. Overall, the website is well-structured, mobile-optimized, and provides relevant content with moderate user tracking. The domain registration details are consistent with the business claims, indicating legitimacy. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and adding vulnerability disclosure information to improve trust and compliance.

P

Pure Benefit

purebenefit.eu

56

Pure Benefit is a small environmental consultancy specializing in the hospitality sector, offering services such as energy audits, CO2 footprint analysis, and compliance with European energy directives. The website is professionally designed using the Squarespace platform, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, but lacks some security headers and privacy compliance features. The absence of privacy and cookie policies, as well as contact information, limits trust and compliance. WHOIS data is privacy protected, typical for small businesses using third-party registrars. Overall, the website presents a legitimate business with room for improvement in privacy and security transparency.

E

Era Networks DMCC

suiscan.xyz

62

Suiscan.xyz is a blockchain explorer and analytics platform dedicated to the Sui protocol, providing users with comprehensive data on market capitalization, token prices, transaction volumes, DeFi projects, NFTs, and validator information. The platform targets blockchain developers, investors, and enthusiasts seeking detailed insights into the Sui ecosystem. The website is professionally designed with a consistent brand presence and offers a rich set of features tailored to its niche audience. Technically, the site leverages modern web technologies including React.js and is hosted via Cloudflare, ensuring reliable performance and baseline security. However, some areas such as privacy compliance and contact transparency are lacking, with no visible privacy or cookie policies and no direct contact information provided. Security posture is solid with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and publishing vulnerability disclosure policies. Overall, Suiscan.xyz presents a credible and functional service with room for enhancement in compliance and user trust features.

Z

Ziggo

ziggo.nl

78

Ziggo is a leading Dutch telecommunications provider offering internet, TV, streaming, and fixed and mobile telephony services. The website reflects a mature digital presence with integration into the VodafoneZiggo group, providing a broad range of consumer and business services. The technical infrastructure is modern, leveraging Vue.js, Adobe Experience Manager, AWS hosting, and advanced analytics and marketing tools. Security posture is strong with HTTPS enforcement and cookie consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-optimized for users.

C

Civic Science Fellows

civicsciencefellows.org

47

Civic Science Fellows is a US-based non-profit organization focused on fostering leadership and collaboration between science and society through its fellowship program. The website presents a professional and well-structured platform built on WordPress, hosted on DigitalOcean, with a clear focus on community engagement and educational content. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, and no GDPR indicators are present. Contact information is limited to a contact form and newsletter signup, with no direct emails or phone numbers provided. Overall, the site is trustworthy and safe for general audiences but would benefit from improved privacy and security practices.