Security Directory

*

*instinctools

instinctools.com

77

The website www.instinctools.com represents *instinctools, a software product development and consulting company headquartered in Germany and the USA. The company offers a broad range of services including digital product engineering, AI software development, SaaS development, cloud computing, and business intelligence. The site is professionally designed, mobile-optimized, and provides comprehensive information about services, industries served, and company approach. The technical infrastructure is modern, leveraging WordPress with Elementor, NitroPack for performance, and multiple analytics and marketing tools such as HubSpot and Google Tag Manager. Security posture is strong with HTTPS enforced, security headers present, and ISO 27001 certification indicated. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, WHOIS data is unavailable, possibly due to privacy protection, which slightly reduces trustworthiness. Overall, the website is a credible and professional digital presence for a mid-sized technology company.

T

The Greenhouse I/O

thegreenhouse.io

56

The Greenhouse I/O is a personal business operated by Owen Buckley, focusing on helping local entrepreneurs and small businesses leverage technology to improve their workflows and competitive advantage. The website serves as a personal and professional platform offering consulting, mentorship, and development services. The business targets a niche local market with a strong emphasis on community engagement and personal branding. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, and uses custom web components for UI structure. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and IP anonymization in analytics, but lacks explicit security policies and headers. WHOIS data is not publicly available, indicating privacy protection which is justified for this personal business. Overall, the site is professional and trustworthy with moderate risk and some compliance gaps.

S

Software Development UK

softwaredevelopment.co.uk

64

Software Development UK is a UK-based bespoke software development company founded in 2019, specializing in tailored digital transformation and software solutions for enterprises of all sizes. The company offers a broad range of services including bespoke software development, cloud software, MVP development, and 2D & 3D visualisation, leveraging cutting-edge technologies and agile methodologies. Their market position is that of a leading innovator in the UK bespoke software sector, supported by a professional online presence and verified business registration. Technically, the website is built on WordPress using the Astra theme, hosted on a reputable managed WordPress hosting provider. It employs modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and HubSpot, with good SEO and mobile optimization. The site uses HTTPS with strong security headers and secure forms with CAPTCHA, indicating a solid security posture. However, the WHOIS lookup for the domain www.softwaredevelopment.co.uk failed due to domain naming rules, which raises questions about the exact domain registration status. Despite this, the website content, social media presence, and official company registration data support the legitimacy of the business. No explicit security policy or incident response information is published, and no vulnerability disclosure mechanism is found. Overall, the website presents a professional, secure, and compliant digital presence with moderate user tracking and good privacy practices. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and providing incident response contacts to enhance trust and security culture.

The website medikoo.com is a personal portfolio site for Mariusz Nowak, a JavaScript programmer. It primarily serves as a simple online presence linking to social media profiles such as GitHub and Twitter, with minimal content and no commercial or business services offered. The domain is long-standing, created in 2004, which aligns with the presence of an old homepage link, indicating a consistent personal use over time. The site targets developers or recruiters interested in the individual's programming skills. Technically, the site uses basic HTML, CSS, and JavaScript with Typekit fonts, hosted via GoDaddy's infrastructure. The site is minimalistic with basic mobile optimization and accessibility but lacks advanced SEO or modern frameworks. Security posture is weak, with no detected security headers or privacy policies, and DNSSEC is not enabled. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user engagement. Overall, the site is safe, with no adult or questionable content, but lacks professional security and privacy compliance features.

ZenRows is a technology company specializing in providing a next-generation web scraping API designed to avoid blocking by using rotating proxies and advanced anti-bot bypass techniques. The company targets developers, data engineers, and businesses requiring reliable data extraction infrastructure. Their market position is that of a specialized, reliable service provider with a high success rate and a customer base of over 2,000 companies. The website demonstrates a modern technical infrastructure with use of React-like SPA frameworks, integration of analytics tools such as Microsoft Clarity and Visual Website Optimizer, and customer support via Intercom. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks publicly disclosed security policies or incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy from a content and technical perspective, but domain registration data is missing, which reduces trust from a domain legitimacy standpoint.

L

Linux Foundation

webdriver.io

58

WebdriverIO is an advanced open source browser and mobile automation testing framework primarily targeting Node.js developers and QA engineers. Owned and governed by the Linux Foundation and part of the OpenJS Foundation, it enjoys strong community support and corporate sponsorship from companies like BrowserStack, Jetify, and LambdaTest. The website offers comprehensive documentation, multilingual support, and integration with popular developer tools such as Chrome DevTools and Google Lighthouse, positioning WebdriverIO as a versatile and feature-rich testing solution in the automation market. Technically, the website is built using modern frameworks including Docusaurus and leverages technologies like Node.js, JavaScript, and Appium. It is hosted on AWS infrastructure, optimized for fast performance, mobile responsiveness, and accessibility. The site employs Google Analytics for user tracking and Algolia DocSearch for search functionality, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and some recommended security headers, and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy and GDPR compliance, but no cookie consent mechanism was found. Overall, WebdriverIO's website demonstrates high professionalism, trustworthiness, and technical maturity with minor areas for improvement in security and privacy compliance. The domain registration data aligns well with the organizational claims, reinforcing legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security and incident response policies to enhance trust and compliance.

D

DontPayFull: Coupon Codes, Coupons, Promo Codes, Free Shipping and Discounts

dontpayfull.com

72

DontPayFull.com is an online coupon and promo code aggregator providing users with thousands of discount offers and free shipping deals updated daily. The website targets online shoppers seeking savings across various e-commerce platforms. It operates primarily as an affiliate marketing business, driving traffic and conversions to partner retailers through coupon codes and deals. The site presents a modern, mobile-optimized design with a clear focus on user experience and content relevance. Technically, it employs common web technologies including Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance, although no CMS or hosting provider details are evident. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service documentation. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced compliance and security disclosures.

L

Localize Corporation

localizejs.com

70

Localize Corporation operates a mature SaaS platform specializing in AI-driven localization tools for web apps, websites, mobile apps, emails, subtitles, and documents. The company targets businesses and developers seeking no-code, scalable translation solutions to enhance global user engagement. Their market position is supported by integrations with popular platforms and a diverse customer base across industries such as SaaS, financial services, healthcare, government, and education. Technically, the website leverages modern web technologies including Webflow CMS, HubSpot marketing, FullStory and Microsoft Clarity for analytics, and VWO for A/B testing, indicating a digitally mature infrastructure. Security posture is solid with HTTPS enforced and reputable hosting via Cloudflare, though improvements are recommended in DNSSEC and security header implementation. Privacy compliance is limited by the absence of explicit privacy and cookie policies on the main site, which should be addressed to meet GDPR and global standards. Overall, the website is professional, trustworthy, and well-branded, with extensive tracking and marketing tools deployed. The domain WHOIS data confirms legitimacy with consistent registration details and no privacy protection, aligning with the company’s transparency. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing security headers to strengthen trust and compliance.

R

Recreatiepark De Achterste Hoef

achterstehoef.nl

53

Recreatiepark De Achterste Hoef is a family-oriented camping and accommodation business located in the Netherlands, offering a variety of recreational and lodging services. The website is well-structured, professionally designed, and targets families seeking a nature-rich holiday experience. The technical infrastructure leverages modern web technologies and a specialized hospitality CMS platform, ensuring a responsive and user-friendly experience. Security measures include HTTPS and Google reCAPTCHA Enterprise, though additional security headers and explicit privacy compliance mechanisms could enhance the security posture. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

E

Ethnio

ethn.io

69

Ethnio operates a specialized SaaS platform focused on user research recruiting and participant management, serving product and research teams to facilitate continuous discovery. The company has an established market presence since 2010, offering a suite of services including panel management, intercepts, incentives, scheduling, screeners, and participant management. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website leverages modern JavaScript frameworks and integrates advanced monitoring and analytics tools such as New Relic, Google Tag Manager, and Facebook SDK. Hosting is managed via AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, Ethnio enforces HTTPS with strong SSL configuration and employs standard security headers. The domain registration is consistent with the business identity, showing a long-standing presence without privacy protection, which aligns with transparency expectations. However, enabling DNSSEC and publishing a security.txt file would enhance security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, Ethnio presents a low-risk profile with a mature digital presence, good security hygiene, and compliance with privacy regulations such as GDPR and CCPA. Strategic recommendations include enhancing DNS security, formalizing vulnerability disclosure, and expanding incident response transparency to further strengthen trust and resilience.

A

ACSI

eurocampings.de

58

Eurocampings.de is a well-established online platform specializing in camping site search and booking across Europe, operated under the ACSI brand, a recognized camping specialist since 1965. The website offers a comprehensive selection of campgrounds, annual inspections, and extensive user reviews, targeting camping enthusiasts primarily in Germany and Europe. The platform integrates multiple partner sites to provide additional services such as discount cards and camping products. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and third-party marketing and analytics tools, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSP monitoring, and reCAPTCHA integration, reflecting a good security posture. However, explicit privacy policies and contact information are not clearly presented in the provided content, indicating areas for compliance improvement. Overall, the site demonstrates a strong market position with good technical and security maturity but would benefit from enhanced transparency and privacy compliance documentation.

C

CM.com

cxcompany.com

74

CM.com is a large technology company specializing in conversational AI cloud platforms that enable businesses to build AI chatbots without coding. Their market position is strong within the AI and telecommunications sectors, offering multi-channel chatbot deployment and customer support automation services. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Microsoft Clarity, indicating a high level of digital maturity and performance optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not published. Overall, the website and business demonstrate legitimacy and professionalism, with privacy protection applied to WHOIS data, which is common for enterprises of this scale.

K

Kontomatik

kontomatik.com

79

Kontomatik is a fintech company specializing in open banking solutions primarily serving the Central and Eastern European region. Their platform enables businesses to access and analyze financial data through a unified API, supporting services such as identity verification, risk analysis, transaction labeling, and PDF document analysis. The company positions itself as a trusted partner for financial institutions and businesses seeking data-driven decision-making capabilities. Technically, the website is built on modern web technologies including Webflow CMS, Cookiebot for consent management, and integrates Google Analytics and Google Ads for marketing and analytics. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical for fintech firms. Overall, the website reflects a professional and trustworthy business with a solid digital presence.

The website luckycasino.ca appears to be an online casino platform operated by Glitnor Marketing Ltd., a company registered in Gibraltar since 2019. The site is currently inaccessible due to a Cloudflare Turnstile captcha security challenge, preventing direct content analysis. The domain registration data is consistent and legitimate, matching the business type and location. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or legal information limit the ability to fully assess the website's compliance and professionalism. The technical infrastructure relies on Cloudflare for security and hosting, but no further technology stack or CMS details are available due to content blocking. Security posture cannot be fully evaluated, but the presence of a WAF challenge indicates some level of protection. Overall, the site scores low on content quality and privacy compliance due to inaccessibility and missing policies, resulting in a low AI overall score.

A

ACSI

eurocampings.nl

59

ACSI Eurocampings is a well-established European camping specialist offering a comprehensive online platform for camping search, booking, and reviews. The company has a strong market position with a history dating back to 1965 and operates multiple related brands and services. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, analytics, and performance optimization techniques. Security posture is strong with HTTPS, security headers, and secure authentication mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for camping enthusiasts in Europe.

B

BeyondCamping

beyondcamping.de

50

BeyondCamping is a German-based small business specializing in camping and outdoor lifestyle retail and content. The website serves as a platform for camping product reviews, guides, and affiliate marketing, targeting camping enthusiasts primarily in German-speaking regions. The business positions itself as a niche leader with a consistent brand and good content quality. Technically, the site is built on WordPress using a modern theme and caching technologies, hosted on a German hosting provider. Security posture is good with HTTPS enforced and standard security headers, though improvements in CSP and incident response disclosures are recommended. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile users.

A

ACSI Eurocampings

campingcard.co.uk

58

CampingCard ACSI is a well-established European camping discount card provider, offering affordable off-season camping options across more than 3000 campsites in Europe. The website serves as a portal for customers to find campsites, order discount cards, and access related services such as mobile apps and customer support. The brand is part of the reputable ACSI group, which has a strong market presence since 1965. Technically, the website employs modern web technologies including React, Google Tag Manager, and New Relic for performance monitoring. It integrates third-party services such as Talkdesk chat and Google reCAPTCHA to enhance user interaction and security. The security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with no signs of malicious activity or content blocking.

V

Vliersche Veld Groepsaccommodaties

vlierscheveld.nl

62

Vliersche Veld Groepsaccommodaties operates a niche hospitality business specializing in luxury group accommodations in the Achterhoek region of the Netherlands. Their offerings include venues for meetings, weddings, and weekend getaways, targeting groups seeking premium lodging experiences. The website reflects a small-sized business with a clear focus on regional hospitality services, supported by a professional and consistent brand presence. Technically, the site is built on WordPress using the Divi theme and several plugins for booking, SEO, and GDPR compliance, indicating a moderate level of digital maturity. The infrastructure includes modern tracking and marketing tools such as Google Analytics and Google Tag Manager, with a cookie consent mechanism in place to ensure privacy compliance. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the website is well-structured, user-friendly, and trustworthy, with clear contact information and social media integration enhancing credibility.

G

Geldersch Landschap en Kasteelen

glk.nl

72

Geldersch Landschap en Kasteelen (GLK) is a well-established Dutch non-profit organization founded in 1929, dedicated to the conservation and management of nature areas, castles, and estates in the Gelderland region. The organization offers public engagement through excursions, activities, and donor programs, positioning itself as a trusted steward of cultural and natural heritage. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to nature enthusiasts and local communities. Technically, the site leverages modern web technologies including WordPress CMS, imgix for image delivery, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, GLK's website demonstrates high trustworthiness, professionalism, and alignment with its mission and audience.

L

Landgoedhotel Woodbrooke

woodbrookebarchem.nl

62

Landgoedhotel Woodbrooke is a medium-sized hospitality business located in the Netherlands, offering hotel accommodations, conference facilities, and event hosting services. The company positions itself as a leading meeting and event hotel in East Netherlands, with a focus on regional and organic products and outdoor activities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers and integrates with third-party booking and marketing platforms. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit security policies. Overall, the website is trustworthy and well-maintained, supporting the business's market position effectively.

H

Havezathe Carpe Diem

hotelcarpediem.nl

45

Havezathe Carpe Diem is a historic hotel and restaurant located in the Achterhoek region of the Netherlands, offering accommodation, dining, meeting, and event services. The website is professionally designed using WordPress with multilingual support for Dutch, English, and German, targeting tourists and business clients. The technical infrastructure includes modern SEO tools, Google Analytics, and a booking widget integrated from Cubilis, reflecting a moderate digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, though the absence of publicly accessible privacy and terms policies indicates room for compliance improvement. Overall, the website presents a trustworthy and professional image with moderate tracking and marketing tools in use.

Hampshire Hotel 's Gravenhof Zutphen is a small hospitality business located in the historic city center of Zutphen, Netherlands. The hotel offers accommodation, dining, and event services, targeting tourists and visitors seeking a culturally rich experience. The website is professionally designed with multilingual support and clear navigation, facilitating direct bookings and showcasing promotional packages. The technical infrastructure includes modern JavaScript integrations, Google Tag Manager, Facebook Pixel, and a third-party PMS booking system, indicating a mature digital presence. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is basic with visible privacy and cookie policies but lacks an explicit consent mechanism. Overall, the website reflects a trustworthy and credible business with good user experience and marketing practices.

H

Herberg de Gouden Leeuw

herbergdegoudenleeuw.com

63

Herberg de Gouden Leeuw is a small boutique hotel and restaurant located in Bronkhorst, the smallest city in the Netherlands. The business offers accommodation, dining, event hosting, and related hospitality services. The website is professionally designed with clear navigation, multilingual support, and integrated booking engines from Hoteliers and Smarthotel, indicating a mature digital presence. The technical infrastructure leverages modern JavaScript libraries, a PWA service worker, and is hosted on the Duda platform with CDN support, providing good performance and mobile optimization. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding are consistent with a legitimate hospitality business. Overall, the site is suitable for general audiences with no adult content and provides clear contact information and social media presence.

R

Recras

recras.nl

55

Recras is a Dutch SaaS company providing an all-in-one reservation and management system tailored for recreation businesses such as climbing parks, watersports, escape rooms, and paintball centers. The company offers automation of bookings, staff planning, invoicing, customer communication, and payment processing, primarily targeting recreation entrepreneurs in the Netherlands, Belgium, and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies including WordPress, React, and various plugins for enhanced user experience and SEO. Privacy compliance is robust with Cookiebot consent management and a comprehensive privacy policy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the business credibility. Overall, Recras presents a trustworthy and mature digital presence suitable for its market niche.

C

CM.com

cm.com

73

CM.com is a well-established technology company specializing in AI-powered customer engagement and communication platforms. With over 25 years of experience, it offers businesses seamless omnichannel communication solutions leveraging no-code AI tools. The company targets enterprises seeking to enhance customer journeys and engagement through innovative technology. The website reflects a mature digital presence with professional design and comprehensive content, supporting its market position as a leading communication technology provider. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates advanced analytics tools like Microsoft Clarity and Google Analytics, and implements robust cookie consent mechanisms via Cookiebot. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity and technical infrastructure quality. From a security perspective, CM.com enforces HTTPS, uses multiple security headers, and maintains ISO 27001 certification, demonstrating a strong commitment to information security. However, the absence of a publicly accessible security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security communication. Overall, CM.com presents a low-risk profile with a professional and trustworthy online presence. Strategic enhancements in security policy disclosure and incident response readiness would further strengthen its security posture and stakeholder confidence.

L

Landgoed Energy Up

landgoed-energy-up.nl

56

Landgoed Energy Up is a small hospitality business operating a camping site and accommodation rentals located in Zeewolde, Netherlands. The website presents a professional and user-friendly interface built on WordPress using the Divi theme, enhanced with SEO optimizations via Yoast. The business targets campers and holidaymakers seeking nature and water-side experiences. Technically, the site employs modern JavaScript libraries and Google Tag Manager for analytics and marketing, with Cookiebot managing cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some advanced security headers and formal security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security documentation.

S

Snap Inc.

bitmoji.com

67

Bitmoji is a digital avatar creation platform owned by Snap Inc., offering users personalized cartoon emojis and stickers for use in messaging and social media. The website presents a professional and consistent brand image with clear calls to action for downloading the app on iOS and Android platforms, as well as integration with Snapchat and other messaging apps. The business model is freemium, leveraging app downloads and integrations to drive user engagement. The site targets a broad general audience interested in personalized digital expression. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with mobile optimization and app store integration. While no advanced frameworks or CMS are detected, the site is well-structured and SEO optimized. Performance is moderate with good mobile responsiveness. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS (implied by app store links and modern web standards), but no explicit security headers were detected in the provided data. No forms or sensitive data collection points are present on the main page, reducing attack surface. Privacy compliance is strong with clear links to comprehensive privacy and cookie policies, though no active cookie consent mechanism is visible. The WHOIS data is missing or unavailable, which is unusual but likely due to registry or query limitations rather than malicious intent. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. The main risk is the lack of visible security headers and incomplete WHOIS data, which should be addressed to improve transparency and security posture.

P

PlayCanvas

playcanvas.com

69

PlayCanvas is a mature and reputable web-based platform specializing in WebGL and HTML5 game engine technology. Founded in 2011, it offers an open source engine and a collaborative in-browser editor for developers and studios to create games, visualizations, VR, AR, and interactive ads. The platform enjoys a strong market position with trusted brand associations and a clear focus on performance and cross-platform support. Technically, the website leverages modern JavaScript libraries and multimedia content to deliver a fast, mobile-optimized experience hosted on AWS infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

V

Vera&John

verajohncasino.com

48

Vera&John operates as an online casino platform offering a wide variety of gambling games including slots, live casino, bingo, and promotional events. The website targets adult users interested in online gambling entertainment. The platform demonstrates a modern technical infrastructure utilizing JavaScript frameworks, web workers for token management, and integrates analytics and cookie consent tools. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected in the provided content. Privacy and cookie policies are not clearly found in the analyzed content, which is a compliance gap. The absence of WHOIS data for the subdomain is typical and does not necessarily indicate risk, but limits full verification of domain registration details. Overall, the site is professional and functional but would benefit from enhanced transparency in privacy and contact information.

The analyzed domain currently serves a Chrome internal error page indicating that the actual website content is inaccessible or blocked. The page contains embedded scripts related to the Chrome offline T-Rex runner game, which is a default browser feature when no internet connection is available or the site cannot be reached. There is no business or contact information, no privacy or cookie policies, and no security or compliance documentation present. The lack of accessible content and metadata prevents meaningful assessment of the business or its market position. Technically, the page uses standard HTML, CSS, and JavaScript with Chromium-specific scripts but lacks modern SEO, accessibility, or security features. The security posture is weak due to missing HTTPS and security headers. Overall, the domain appears inactive or misconfigured, and the trustworthiness is low.

I

International Lean Six Sigma Institute

ilssi.org

44

The International Lean Six Sigma Institute (ILSSI) is a small educational organization specializing in Lean Six Sigma coaching, certifications, research, and conferences. It positions itself as an internationally accredited certification provider focused on advancing Lean, Sustainable, and Smart business processes aligned with Industry 4.0 and digital transformation. The website is professionally designed using WordPress and Elementor, with a moderate performance profile and good mobile optimization. The technical infrastructure includes modern plugins such as WooCommerce and Contact Form 7, indicating e-commerce and contact capabilities. Security posture is adequate with HTTPS enabled and domain registration protected by privacy services, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site demonstrates high business credibility and trustworthiness but would benefit from enhanced privacy and security disclosures.

P

Privacy Coalitie

privacycoalitie.org

51

Privacy Coalitie is a Dutch non-profit coalition advocating for enhanced digital privacy and privacy-friendly alternatives in the Netherlands. Founded in 2022, it brings together multiple organizations and individuals to promote awareness, responsible data use, and societal dialogue on digital privacy. The coalition positions itself as a thought leader aiming to influence both policy and public behavior towards a more privacy-respecting digital society. The website serves as an informational and advocacy platform, providing a manifesto, member lists, and contact points for engagement. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery 3.6.0, hosted by Combell NV. The site is mobile responsive with good navigation and content structure. However, no CMS or advanced backend technologies are detected. Performance is moderate with basic accessibility and SEO optimizations in place. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has clientTransferProhibited domain status, but lacks DNSSEC and security headers, which are recommended for improved security posture. No privacy or cookie policies are published, representing a compliance gap with GDPR best practices. Contact is provided solely via email, with no forms or phone numbers. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website is trustworthy and professional for its advocacy purpose but would benefit from enhanced privacy compliance documentation and improved security hardening. The domain registration is consistent and legitimate, supporting the coalition's credibility.

H

Hasartmängusõltuvuse Nõustamiskeskus

15410.ee

46

Hasartmängusõltuvuse Nõustamiskeskus is an Estonian non-profit organization focused on providing psychological counseling and psychotherapy services for gambling and digital addiction. The website is professionally designed and maintained using WordPress with modern plugins such as Yoast SEO and Slider Revolution. The services are funded by the Estonian Ministry of Social Affairs and offered free of charge to those in need. The site targets individuals struggling with addiction and their families, offering both in-person and e-counseling options. Contact information is clearly presented, and forms are protected by Google reCAPTCHA to prevent abuse. The domain is registered with a reputable Estonian registrar and has been active since 2010, supporting the organization's legitimacy.

Z

Zimpler

zimpler.com

58

Zimpler AB is a licensed Swedish payment institution specializing in instant bank payment solutions that enable businesses to streamline deposits, payouts, and cross-border payments. The company serves a broad market including iGaming and investment platforms, processing billions in yearly volume and reaching hundreds of millions of bank accounts across multiple countries. Their website reflects a mature digital presence built on WordPress with modern SEO and performance optimizations. Security posture is strong with HTTPS, security headers, and regulatory compliance clearly stated. However, explicit incident response and vulnerability disclosure policies are not publicly visible. Overall, Zimpler demonstrates a professional, trustworthy, and scalable fintech business with a solid market position.

W

WiQhit

wiqhit.com

59

WiQhit is a Netherlands-based technology company specializing in website personalization tools aimed at increasing conversions for businesses across various sectors including e-commerce, B2B, travel, and lead generation. Their SaaS platform offers modules such as personalizations, A/B testing, recommendations, decision aids, and search personalization, supported by a strong partner network and over 250 active users. The website demonstrates a mature digital presence with modern technologies like Webflow CMS, JavaScript libraries, and integration with Google Tag Manager and LinkedIn Insight for analytics and marketing. From a security perspective, WiQhit employs HTTPS with strong SSL configurations and security headers, ensuring secure data transmission and protection against common web vulnerabilities. The site respects user privacy by loading tracking scripts only after cookie consent and does not collect privacy-sensitive data by default. However, explicit security policies and incident response contacts are not publicly detailed, indicating room for improvement in transparency and compliance documentation. Overall, WiQhit presents a professional and trustworthy online presence with excellent content quality, user experience, and technical implementation. The business is well-positioned in its niche with clear value propositions and customer testimonials. Strategic enhancements in privacy compliance and security disclosures would further strengthen their risk posture and customer trust.

S

Stadsschouwburg Utrecht

ssbu.nl

73

Stadsschouwburg Utrecht is a well-established cultural venue in the Netherlands, offering theater performances, event hosting, and hospitality services. The website reflects a professional and consistent brand image, targeting a broad audience interested in cultural events and theater. The business model centers on ticket sales, venue rental, and food and beverage services, positioning itself as one of the largest theaters in the country. Technically, the website employs modern JavaScript libraries, integrates with third-party ticketing platforms, and supports multilingual access via Google Translate. The site is mobile-optimized and accessible, with good SEO practices and structured event data. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is strong, featuring a comprehensive privacy and cookie policy with user consent mechanisms. Overall, the site is trustworthy and professionally maintained, with no critical security or content safety concerns.

Y

Yellowgrape and Hipex

ecookie.nl

52

Ecookie.nl is a Dutch website offering a free, easy-to-install cookie banner solution designed to help e-commerce businesses comply with the GDPR (AVG) regulations. Developed collaboratively by the e-commerce agency Yellowgrape and Magento hosting specialist Hipex, the service targets webshops seeking to manage cookie consent efficiently and in their own branding style. The website provides a registration form for users to create accounts and download a whitepaper on privacy laws for webshops. The site is well-structured, mobile-optimized, and presents a professional image consistent with its niche market position. From a technical perspective, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Symfony PHP framework for user registration. Hosting is likely provided by Hipex, a Magento hosting specialist, indicating a reliable infrastructure. The site performs moderately well with good mobile responsiveness and basic accessibility features. However, explicit security headers are not detected, and no detailed privacy or security policies are published, which are areas for improvement. Security posture is adequate with HTTPS usage and secure form handling including CSRF tokens and mandatory consent checkboxes. No vulnerabilities or exposed sensitive data were identified in the provided content. The absence of published privacy and cookie policies reduces privacy compliance confidence. No incident response or vulnerability disclosure information is available, limiting transparency in security management. Overall, ecookie.nl presents a trustworthy and professional service for GDPR cookie compliance in the Dutch e-commerce sector. Strategic improvements in publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts would strengthen its security posture and compliance standing.

N

Nederlands Openluchtmuseum

openluchtmuseum.nl

65

The Nederlands Openluchtmuseum is a well-established cultural heritage institution in the Netherlands, offering immersive historical experiences, educational programs, and event hosting services. The website effectively targets families, educational groups, and business clients, positioning itself as a leading open-air museum with strong regional and national recognition. The digital infrastructure leverages modern frontend technologies such as Elm, integrates multiple analytics and marketing tools, and maintains good mobile and accessibility standards. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence aligned with the museum's mission and audience.

E

Energie aanbiedingen + Cadeau of cashback tot € 545,00

energie-aanbiedingen.com

69

The website energie-aanbiedingen.com operates as a Dutch energy offer comparison and cashback platform targeting consumers interested in energy deals and promotional gifts such as Nintendo Switch or Apple iPad. The site is positioned as a consumer-focused affiliate or comparison service within the energy sector in the Netherlands. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates Google Analytics 4 and Google Tag Manager for analytics and marketing. The site is well-structured with good SEO meta tags and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and multiple security headers present, but lacks explicit privacy and cookie policies, which impacts compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Social media presence is established on YouTube, Facebook, and Twitter, enhancing brand visibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and clearer contact information.

K

Kassa Kool llc

kassa-kool.com

45

Kassa Kool LLC is a small, local HVAC service provider based in Austin, Texas, specializing in residential HVAC system repair and maintenance including heat pumps, gas furnaces, and mini-splits. The company positions itself as a competitively priced service provider with quick response times and customer satisfaction guarantees. The website is built on WordPress using the Astra theme and Elementor page builder, hosted on HostGator, and incorporates common plugins such as Rank Math SEO and Chaty for marketing and communication. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The site uses Google Analytics for tracking but does not provide cookie or privacy consent mechanisms, indicating gaps in privacy compliance. Overall, the website is professional and trustworthy for its business scope but would benefit from enhanced security and privacy practices.

LifeWave is a health and wellness company operating an e-commerce platform focused on products that promote vitality and longevity. The website is professionally designed with a consistent brand presence and targets health-conscious consumers. The technical infrastructure leverages modern JavaScript libraries, a headless CMS (Sanity.io), and integrates analytics and cookie consent tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and formal security policies. Overall, the website is accessible without WAF or blocking mechanisms, indicating stable hosting and domain management. Strategic improvements in privacy policy publication, security headers, and incident response readiness would enhance trust and compliance.

D

Data Den

getdataden.com

57

Data Den is a small technology company offering an open-source, MIT licensed customizable data grid plugin targeted at developers and software projects. The website presents a professional and consistent brand with good content quality and clear navigation, focusing on technical documentation and examples. The technical infrastructure leverages modern JavaScript libraries, Hugo CMS, and is hosted by OVH sas, indicating a moderate level of digital maturity. Security posture is basic with HTTPS enabled and domain protections in place, but lacks advanced security headers, vulnerability disclosure, and incident response information. Privacy compliance is minimal with no explicit cookie consent or GDPR indicators. Overall, the website is functional and trustworthy but could improve in privacy and security transparency.

G

Gong

codeforcroatia.org

67

Code for Croatia is a Croatian non-profit civic technology community platform focused on open data, open government, and open source projects. It serves as a discussion forum and collaboration space for designers, programmers, and activists aiming to foster positive social change. The website is powered by the Discourse forum software and hosted with Cloudflare DNS services, reflecting a modern and community-oriented technical infrastructure. The platform demonstrates good digital maturity with a well-structured forum, active categories, and integration of various plugins to enhance user engagement. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Overall, the website is trustworthy, professionally maintained, and serves a clear community purpose with moderate tracking via Google Analytics. Strategic recommendations include enhancing privacy compliance with cookie consent mechanisms and formalizing security incident response documentation.

C

Counter

counter.dev

60

Counter.dev is a small technology company offering a privacy-friendly, open source web analytics platform designed to track unique visitors, referrals, and geographical data without compromising user privacy. The business model is based on voluntary payments with a 'pay when ready' approach, targeting website owners and developers who prioritize privacy and simplicity. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery and OwlCarousel, and integrates PayPal SDK for payment processing. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating good accessibility. However, some security best practices like security headers and cookie consent mechanisms are missing. The site is mobile optimized and SEO friendly but could improve accessibility features. From a security perspective, the site demonstrates a strong privacy stance by avoiding cookies and IP fingerprinting, minimizing data collection, and using HTTPS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement. Overall, the site maintains a good security posture but could enhance transparency and compliance. The overall risk assessment is low with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing security headers, publishing security and incident response policies, adding cookie consent if applicable, and improving accessibility. These steps will strengthen trust, compliance, and security culture while supporting the company’s privacy-focused brand.

The website goplay.se is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any business or content information. The domain is registered since 2005 with Safenames LTD and is active without privacy protection, indicating a legitimate registration. However, no privacy policies, cookie notices, terms of service, or contact information are available on the blocked page. The technical infrastructure relies on Cloudflare for security and performance, but the lack of DNSSEC and security headers is noted. Due to the WAF block, a full security and compliance assessment cannot be performed, resulting in a low AI score and limited insights.

M

Markus Liljestrand

casinousl.com

51

CasinoUSL.com is a Swedish-language online media platform specializing in providing comprehensive guides, reviews, and rankings for online casinos without Swedish licenses. The site targets Swedish players seeking alternatives to the regulated Swedish gambling market, offering information on foreign casinos, payment methods, bonuses, and how to play without restrictions such as Spelpaus. The business operates as an affiliate and informational site, leveraging detailed content and structured data to build trust and authority in its niche. Technically, the site is built on WordPress with modern plugins like WPBakery and Rank Math SEO, and uses Google Tag Manager for analytics. The site is mobile-optimized and well-structured, though it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and security headers. Overall, the site is accessible without WAF or blocking mechanisms, providing a safe and professional user experience focused on adult gambling content.

L

Localcities

localcities.ch

65

Localcities is a Swiss-focused digital platform providing residents and stakeholders with comprehensive municipality-related information including events, clubs, contacts, weather, emergency numbers, and directories. The platform serves as a centralized hub for local community engagement and information dissemination, targeting Swiss municipalities and their inhabitants. Technically, the website employs modern web technologies including responsive design, SVG icons, and Google Tag Manager for analytics, ensuring a good user experience across devices. The presence of cookie consent and privacy policies indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website is professional, trustworthy, and well-positioned in its niche, with room for improvement in explicit security disclosures and contact transparency.

T

Toys for Bob

toysforbob.com

57

Toys for Bob is an independent game development studio with a long-standing history since 1989, known for crafting epic adventures featuring iconic characters such as Crash Bandicoot and Spyro. The company operates primarily in the technology sector, focusing on game development across multiple platforms. Their website reflects a professional and consistent brand image, leveraging Squarespace CMS for content delivery. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security-wise, the site benefits from HTTPS and HSTS but could improve by adding additional security headers and formal security policies. Overall, the website presents a trustworthy and professional front but should enhance privacy compliance and contact transparency to improve user confidence and regulatory adherence.

B

Blizzard Entertainment

vvisions.com

79

Blizzard Entertainment is a globally recognized leader in the video game industry, known for developing and publishing iconic game franchises. The analyzed website serves as a professional career portal targeting job seekers interested in opportunities at Blizzard, particularly in Albany and other locations. The site is well-branded, professionally designed, and provides comprehensive job listings and application functionality. Technically, the site leverages modern recruitment platforms and integrates OAuth for social login, enhancing user experience and security. The security posture is strong with HTTPS enforcement and security headers, though explicit incident response contacts are not found. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is trustworthy, professional, and aligned with Blizzard's enterprise stature.

H

Holiday Media

holidaymedia.nl

60

Holiday Media is a specialized internet service provider focused on the Dutch recreation and travel sector, delivering website design, maintenance, and online booking integration to over 250 clients. Their market position is strong within this niche, supported by a professional website, client testimonials, and active social media presence. Technically, the website employs modern web technologies including Google Analytics and Tag Manager, custom fonts, and responsive design, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and secure login forms, though lacking in explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-targeted to its audience, but could improve in privacy and security transparency.