Security Directory

E

Emercoin

emercoin.com

67

Emercoin is a blockchain platform established in 2013, providing decentralized solutions and a suite of blockchain-based services targeting businesses and individual coinholders. The platform offers a variety of services including decentralized DNS, secure SSH, SSL certificates, ownership ledgers, micropayments, and file validation, positioning itself as a versatile blockchain infrastructure provider. The website demonstrates a professional and consistent brand presence with credible media coverage and partnerships, reinforcing its market position in the blockchain technology sector. Technically, the site uses modern web technologies, is mobile-optimized, and hosted behind Cloudflare DNS, ensuring moderate performance and accessibility. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is partial, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, with room for enhancements in security and privacy transparency.

O

OHSU-PSU School of Public Health

ohsu-psu-sph.org

65

The OHSU-PSU School of Public Health is a collaborative academic institution formed by two leading Oregon universities, focusing on educating future public health leaders through community-engaged learning and research. The website serves prospective and current students, faculty, researchers, and public health professionals, offering comprehensive information on degree programs, research initiatives, and community resources. The institution holds a solid regional market position in public health education and research. Technically, the website is built on WordPress with a modern tech stack including analytics and tracking tools, hosted via Akamai, and optimized for mobile devices. Security posture is good with HTTPS and domain protections, but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but could improve compliance and security transparency.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) displaying the offline dinosaur game. There is no commercial or business-related content, no privacy or cookie policies, and no contact or company information. The page is designed for user experience during offline or error states within the Chrome browser environment. The technical infrastructure relies on HTML5, JavaScript, and Canvas APIs embedded within the browser, with no external dependencies or third-party scripts. Security posture is inherently strong due to the lack of external exposure and absence of user data collection. Overall, this page does not represent a public-facing website or business entity and thus lacks typical web compliance and business credibility indicators.

F

freieFarbe e.V.

freiefarbe.de

50

freieFarbe e.V. is a small non-profit organization based in Germany dedicated to promoting color communication and freeing color from constraints. The website serves as an educational platform targeting professionals and enthusiasts interested in color standards and communication. It offers resources and advocacy services related to color communication. Technically, the website is built on WordPress with a modern plugin ecosystem including Real Cookie Banner for GDPR-compliant consent management, and uses reputable third-party services such as Google Fonts, YouTube, and Vimeo. The site is hosted on kasserver.com and employs HTTPS with good security headers, indicating a solid security posture. However, no explicit security policy or incident response information is published, which could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

G

Galaxy Gauge ... Tools for Graphic Designers & Scientists

galaxygauge.com

40

Galaxy Gauge is a niche provider of professional-grade graphic design tools and scientific instruments, including translucent rulers, CMYK color charts, font references, and promotional products. The website targets graphic designers and scientists seeking specialized physical tools to enhance their design and production workflows. The business appears to operate primarily through product sales via its website, which has been active since 2001, indicating a long-standing presence in its market niche. Technically, the website is built on basic web technologies including an outdated version of jQuery and standard CSS. It is hosted on Bluehost and uses name servers associated with this provider. The site lacks modern web development practices such as mobile optimization, accessibility features, and SEO best practices. The absence of HTTPS in the provided content is a significant technical and security shortfall. From a security perspective, the website shows minimal security posture. There are no security headers, no DNSSEC, and the use of an outdated JavaScript library introduces potential vulnerabilities. The lack of privacy and cookie policies, as well as absence of contact information, further weakens the site's compliance and trustworthiness. However, no malicious or adult content is present, and the domain registration data supports legitimacy. Overall, the website is functional but basic, with critical improvements needed in security, privacy compliance, and technical modernization to enhance trust and user experience.

dtp studio is a small, specialized media design and print prepress company based in Oldenburg, Germany, with over 25 years of experience. They provide web design, print prepress services, and develop color software products, including founding the non-profit freieFarbe e.V. Their market position is niche with a focus on quality and expertise in color management and media design. The website is professionally designed with clear navigation and responsive layout, using modern frontend technologies such as Bootstrap and jQuery. Hosting is provided via kasserver.com. Security posture is moderate with no visible security headers and unknown SSL configuration, but no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and safe for general audiences.

T

The Document Foundation

documentliberation.org

56

The Document Liberation Project website represents a focused open source initiative supported by The Document Foundation, aimed at freeing users from proprietary document format lock-in. The project develops software libraries that enable access to legacy and proprietary document formats, facilitating data liberation and transition to open standards. The site is well-positioned within the open source ecosystem, integrated with major projects such as LibreOffice and Inkscape, targeting developers, organizations, and governments concerned with digital freedom. Technically, the website is built on the SilverStripe CMS platform and uses Piwik/Matomo for analytics, indicating a moderate level of digital maturity. The site is accessible, with good content quality and navigation, though mobile optimization and accessibility could be improved. Security posture is moderate; no forms or sensitive data are exposed, but security headers are not evident, and cookie consent mechanisms are absent despite analytics usage. From a security perspective, the site shows no critical vulnerabilities or blocking mechanisms. The WHOIS data is privacy protected, which is typical and justified for a non-profit open source project. The domain appears legitimate and actively maintained, though detailed registrant data is unavailable. Privacy compliance is good, with a comprehensive privacy policy linked from the site. Overall, the website is trustworthy and professional, serving a niche but important role in the open source and digital freedom community. Strategic improvements in security headers, cookie consent, and mobile accessibility would enhance the site's security posture and user experience.

Z

Trending - Zappiens.br

zappiens.br

61

Zappiens.br is a PeerTube-based video hosting platform focused on delivering digital content in the Portuguese language, primarily targeting Brazilian users. The platform offers video streaming services including trending, recently added, and local videos, positioning itself as a niche content provider within the open-source PeerTube ecosystem. The website's branding and content quality are good, with consistent design and a clear focus on Portuguese digital media consumption. Technically, the site leverages modern web technologies including Angular and PeerTube version 6.3.3, ensuring a contemporary user experience. The platform is accessible, mobile-optimized, and uses HTTPS for secure communications. However, some areas such as security headers and privacy compliance policies are lacking, which could be improved to enhance trust and regulatory adherence. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy and cookie policies represent gaps in the security posture. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's Brazilian focus, supporting legitimacy. Overall, Zappiens.br is a functional and legitimate video platform with room for improvement in privacy, security policies, and contact transparency. Strategic enhancements in these areas would strengthen user trust and compliance readiness.

B

Ben Stocker Johnson

bensjohnson.com

41

Ben Stocker Johnson is a seasoned art director, designer, and illustrator specializing in visual storytelling for social good. The website serves as a professional portfolio showcasing a broad range of creative services including art direction, user experience, brand identity, illustration, and print design. The target audience primarily consists of mission-driven organizations such as nonprofits, government agencies, and social innovators. The business model is consultancy and creative services with a strong emphasis on cause-based projects. The website reflects over 20 years of experience, consistent with the domain age dating back to 2000. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Font Awesome icons. It integrates Google Analytics and Google Tag Manager for tracking and analytics. Hosting appears to be managed via Google Cloud DNS with domain registration through Squarespace Domains II LLC. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site uses domain status flags to prevent unauthorized domain transfer or deletion but lacks DNSSEC and visible security headers. There is no privacy or cookie policy present, which impacts compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. The site does not appear to be behind a WAF or security challenge, and no malicious or suspicious content is detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. However, it would benefit from enhanced privacy compliance, improved security headers, and explicit policies to strengthen its security posture and regulatory adherence.

LinuxSi is a niche community website operated under the auspices of the Italian Linux Society, providing an updated directory and map of Linux-friendly stores across Italy. The platform targets Linux users seeking to purchase hardware with Linux preinstalled or without an OS, as well as those looking for Linux support services. The website is well-branded and consistent with the Italian Linux Society's mission, offering valuable community resources and social media engagement. From a technical perspective, the website employs standard web technologies including Bootstrap CSS, jQuery 1.9.1, Raphael.js for SVG graphics, and Matomo for privacy-conscious analytics. Hosting and domain registration are stable and consistent with the website's history dating back to 2005. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is moderate but could be improved. HTTPS is enabled, and Matomo analytics respects Do Not Track and disables cookies, enhancing user privacy. However, the absence of DNSSEC, security headers, privacy and cookie policies, and vulnerability disclosure mechanisms represent compliance and security gaps. The use of an outdated jQuery version may expose the site to known vulnerabilities. Overall, LinuxSi is a trustworthy and valuable resource for the Italian Linux community but should prioritize implementing privacy policies, cookie consent, security headers, and updating libraries to strengthen its security and compliance stance.

W

Witter.cz

witter.cz

57

Witter.cz operates as a Mastodon social networking server, providing an open platform for users to share, inform, and discuss with respect and privacy. The platform emphasizes no advertising, no personal data collection, and no user tracking, positioning itself as a privacy-conscious alternative within the fediverse. The website is relatively new, established in 2022, and targets a general audience interested in decentralized social media. Technically, it runs Mastodon version 4.3.5 with a React-based frontend, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no trackers or ads, but lacks some security headers and cookie consent mechanisms. Overall, the site is trustworthy and legitimate, with consistent WHOIS data and no blocking mechanisms detected.

Acquire.com operates as a professional online marketplace facilitating the buying and selling of profitable online businesses. The platform boasts a large user base of over 500,000 qualified buyers and thousands of vetted listings, positioning itself as a leading player in the online business acquisition market. Key services include M&A advisory, legal assistance, and escrow services, enhancing the transaction security and trustworthiness for users. The website's content and branding are consistent and professionally presented, targeting entrepreneurs and business buyers/sellers.

E

Ecere Corporation

ec-lang.org

38

Ecere Corporation operates the website ec-lang.org, which promotes the eC programming language and the Ecere SDK. The site targets software developers interested in a C-style object-oriented programming language with cross-platform capabilities. The business is small and technology-focused, with a niche market position. The website provides extensive sample code and links to a GitHub repository, indicating active development and community engagement. Technically, the site uses standard web technologies including JavaScript, jQuery, Google Analytics, and Facebook SDK, hosted via NameCheap. The site is accessible and functional but lacks advanced SEO and accessibility features. Security posture is moderate; the domain registration is legitimate and consistent, but DNSSEC is not enabled and no security headers are present. Privacy compliance is poor due to the absence of privacy and cookie policies and no visible contact information for data protection or incident response. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

N

Netto

netto.co.uk

60

Netto is a specialized affiliate and review website focusing on UK online casinos and betting sites that operate outside the UK Gambling Commission's GamStop self-exclusion scheme. The platform provides detailed reviews, bonus offers, and guides tailored for UK players seeking non-GamStop gambling options. The website is relatively new, launched in 2024, and targets a niche market with a clear business model based on affiliate marketing. Technically, the site is built on WordPress with modern SEO and tracking tools, including Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent. The site is mobile-friendly and well-structured, offering a good user experience. Security-wise, the site uses HTTPS and basic security best practices but lacks some advanced security headers and explicit privacy and security policies. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the site scores well on content quality and business credibility but could improve privacy compliance and security posture.

R

RTBF

rtbf.be

60

RTBF is a leading Belgian public broadcasting organization providing comprehensive news coverage, including national and international news, sports, culture, and entertainment. The website serves as a primary digital platform for RTBF's news and media content, targeting a broad general audience interested in Belgian and global current events. The business model centers on public media broadcasting with multiple channels and digital content offerings. Technically, the website employs modern web technologies such as Next.js and React, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are not clearly linked in the provided content. The WHOIS data is restricted due to DNS Belgium policies, which is typical but limits domain ownership transparency. Overall, RTBF's website is professional, trustworthy, and content-rich, reflecting its status as a major public media entity.

The website madebyoll.in is a personal technical blog operated by Ollin Boer Bohan, focusing on AI, neural networks, and machine learning projects. It serves as a platform to share detailed project posts and technical insights, targeting technology enthusiasts and developers interested in advanced AI topics. The site positions itself as a niche personal blog rather than a commercial enterprise, with content primarily consisting of project summaries and posts. From a technical perspective, the website uses standard HTML5, CSS, and JavaScript with asynchronous scripts to enhance typography and layout. There is no indication of a CMS or advanced frameworks, suggesting a lightweight and manually maintained site. Mobile optimization is good, and the site structure is clear, though SEO and accessibility features are basic. Performance is moderate, with no evident use of analytics or tracking technologies. Security posture is minimal; no HTTPS status or security headers were detected in the provided data, and no privacy or cookie policies are present. Contact information is limited to a single email address in the footer, with no dedicated security or incident response contacts. The absence of security best practices and compliance documentation indicates a low security maturity level, appropriate for a personal blog but not for commercial or sensitive data handling. Overall, the site is safe and suitable for general audiences, with no adult or questionable content. The domain registration data aligns with the website's personal nature, supporting legitimacy. However, the lack of HTTPS and privacy policies are notable gaps. Strategic improvements in security and compliance would enhance trust and professionalism.

D

David Revoy

davidrevoy.com

42

David Revoy is an independent artist and instructor specializing in digital illustration using exclusively Free/Libre and Open-Source software since 2009. The website serves as a portfolio, blog, tutorial repository, and patronage platform, targeting artists and open-source enthusiasts. The business model relies on freelance work and community support via Patreon, Liberapay, Tipeee, and donations. The site maintains a consistent brand and high-quality content, positioning itself as a niche leader in open-source digital art education. Technically, the website is built on the PluXml CMS, utilizing standard HTML5, CSS3, and JavaScript. It demonstrates good mobile optimization and SEO practices but lacks visible advanced security headers and cookie consent mechanisms. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. The absence of WHOIS data for the domain is a notable anomaly, though the site content and social media presence suggest legitimacy. From a security perspective, the site shows moderate maturity with no exposed sensitive data or vulnerable libraries detected. However, the lack of explicit security headers and cookie consent reduces compliance with modern privacy regulations such as GDPR. Incident response and security policies are not publicly documented. Overall, the site is safe and trustworthy but could improve its security posture and privacy compliance. The overall risk is moderate with recommendations to enhance security headers, implement cookie consent, clarify privacy policies, and investigate the domain registration status to improve trust and compliance.

PIXLS.US is a niche online platform dedicated to free and open source photography, providing tutorials, workflows, and a community forum for enthusiasts and professionals interested in F/OSS photography software. Founded in 2011, it serves a small but engaged audience with quality content authored primarily by Pat David. The website is hosted under the registrar Gandi SAS with a stable domain registration and no privacy protection, reflecting transparency and legitimacy. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and Piwik/Matomo analytics for privacy-conscious user tracking. The site is mobile optimized with good navigation and content relevance, though it lacks a CMS and advanced frameworks.

H

HELLOTUX

hellotux.com

53

HELLOTUX is a small e-commerce retailer specializing in Linux and free software themed apparel, targeting Linux enthusiasts globally. The website offers a range of embroidered T-shirts, polo shirts, sweatshirts, and jackets, emphasizing ethical production and environmental consciousness. The business model is niche-focused retail with a clear target audience of open source software users and environmentally aware consumers. Technically, the website uses standard HTML5, CSS, and JavaScript with jQuery, hosted on Linux servers. The site is mobile optimized with good navigation and content quality, though it lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks, indicating a simple but functional technical infrastructure. From a security perspective, the site lacks visible HTTPS/SSL confirmation and security headers, which are critical for protecting user data and trust. The presence of a captcha on the newsletter form and frame busting scripts are positive but insufficient. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is functional and content-rich for its niche but requires significant improvements in security posture, domain legitimacy verification, and privacy compliance to enhance trust and protect users. Strategic recommendations include implementing HTTPS, adding security headers, verifying domain registration, and introducing cookie consent mechanisms.

K

KAMAX

kamax.com

50

KAMAX is a globally operating manufacturing company specializing in the development and production of high-strength fasteners, complex cold-formed parts, precision components, and assemblies primarily for the automotive and mobility industries. The company positions itself as a pioneer in its sector with a presence across Europe, America, and Asia, serving industrial clients with tailored solutions. The website is professionally designed using TYPO3 CMS, featuring multilingual support and modern web technologies including consent management and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive privacy and cookie policies. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and external partner links suggest a credible business. No direct contact emails or phone numbers were found in the HTML content, and no explicit security or incident response policies are published, indicating areas for improvement.

P

Privacy service provided by Withheld for Privacy ehf

cyberpunk.gay

54

Cyberpunk.gay is a niche social networking platform launched in 2024, focused on cyberpunk culture with an adult-only community. It offers content sharing and community engagement services, positioning itself as a specialized social instance with a unique thematic focus. The platform requires email and approval for signup, emphasizing controlled community access. Technically, the site uses modern web technologies including JavaScript, CSS, and a custom Sharkey platform built with Vite tooling. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are published. The domain is privacy protected, consistent with the community's privacy needs. Overall, the site is functional and trustworthy for its niche but would benefit from enhanced security and compliance documentation.

F

FédiMon

fedi.monster

57

Fedi.monster is an ethical, anarcho-communist collective providing hosting services for fediverse social media instances such as Mastodon, Pixelfed, and GoToSocial. The organization focuses on affordable, reliable, and community-driven hosting without reliance on corporate or predatory entities. Their market position is niche, targeting communities and individuals seeking ethical and non-commercial social media hosting solutions. The business operates transparently with finances managed via OpenCollective and offers flexible pricing plans with daily backups and export options. Technically, the website uses standard HTML5, CSS frameworks like Pure.css and Fork Awesome, and JavaScript for interactivity. The site is mobile-optimized with good design and navigation but lacks advanced frameworks or CMS. Performance is moderate with basic SEO and accessibility features. Hosting provider details are not explicitly stated, but the domain registrar is Key-Systems LLC. Security posture is moderate; the domain has clientTransferProhibited status but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no incident response or vulnerability disclosure policies are evident. The site does not use analytics or tracking scripts, enhancing privacy but limiting business intelligence. Overall, the site is safe with no adult or explicit content. The overall risk is moderate with recommendations to improve DNS security, publish privacy and cookie policies, implement security headers, and establish incident response contacts to enhance trust and compliance.

D

DNStination Inc.

trovo.live

53

Trovo.live is an interactive live streaming platform focused on gaming content, targeting gamers, creators, and enthusiasts. The platform offers live game streaming, community engagement, and content sharing services. The company behind the domain is DNStination Inc., registered in the US in 2020, consistent with the platform's market presence as a relatively new but growing player in the gaming streaming industry. Technically, the website uses modern JavaScript frameworks, Google Analytics, Firebase, and AWS for hosting and DNS services, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with consistent branding and professional design. Security-wise, the site enforces HTTPS and includes basic security headers but lacks DNSSEC and more comprehensive security policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a significant gap. Overall, the platform is functional and trustworthy but should improve privacy disclosures and security practices to enhance user trust and regulatory compliance.

B

Black Duck Software

blackduck.com

84

Black Duck Software is a well-established enterprise software company specializing in application security solutions, including software composition analysis, static and dynamic testing, and application security posture management. Recognized as a leader by Gartner and Forrester, Black Duck serves organizations seeking to secure their software supply chains and integrate security into DevOps workflows. The website reflects a mature digital presence with comprehensive content, strong branding, and clear market positioning. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript frameworks, and integrates advanced marketing and analytics tools such as Adobe Launch and Coveo Search. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policy pages and vulnerability disclosure mechanisms are not evident. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a local offline error page within the Chrome browser. The content primarily consists of embedded JavaScript and CSS for the Chrome offline dinosaur game, with no external website content, business information, or user-facing policies. Consequently, there is no commercial or organizational data to assess. The technical infrastructure is limited to client-side scripting and canvas rendering within the browser environment. Security posture and privacy compliance cannot be evaluated meaningfully due to the absence of external hosting or networked content. Overall, this page is a browser internal resource and not a public website.

M

MagicSpace Entertainment

live-at-the-eccles.com

59

Live at the Eccles is a professional entertainment venue website operated by MagicSpace Entertainment, focusing on live events such as concerts, comedy shows, and family-friendly performances primarily at the Eccles Theater in Salt Lake City, Utah. The platform offers ticketing services, event information, and community engagement through newsletters and social media. The website is well-branded and targets a general audience interested in cultural and live entertainment events. Technically, the site is built on OctoberCMS with modern front-end technologies including HTML5, CSS3, JavaScript, and popular libraries like Slick Slider. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and AdRoll, indicating a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses Cloudflare protections, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is basic with a privacy policy present but no dedicated cookie policy page. The site collects user data via newsletter signup forms and tracking pixels, with moderate to extensive user tracking. Overall, the website is professional, secure, and credible with minor gaps in privacy and security policy transparency. Strategic improvements in cookie consent, DNS security, and published security policies would enhance trust and compliance.

A

Alphonsio

alphons.io

42

Alphonsio is an AI-based smart chatbot service designed to answer millions of questions using advanced artificial intelligence models. The website presents a clean, focused interface primarily for interacting with the chatbot, targeting a general audience interested in AI-driven question answering. The business model appears to be centered around providing AI chatbot services, though detailed business information and market positioning are not disclosed on the site. Technically, the website uses modern JavaScript and integrates Google Tag Manager for analytics. The site is served over HTTPS, ensuring secure communication. The design is responsive and mobile-friendly with good SEO meta tags. However, accessibility features are basic, and no CMS or hosting provider details are evident. Performance is moderate based on the content and scripts loaded. From a security perspective, the site benefits from HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or terms of service, which are critical for compliance and user trust. No contact information or incident response details are provided, limiting transparency and support options. Overall, the site is functional and professional in appearance but lacks comprehensive privacy, security, and business credibility disclosures. This presents moderate risk from a compliance and trust perspective. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance user trust and regulatory compliance.

Lulu's blog is a personal technical blog authored by Philippe Lucidarme, focusing on robotics, computer science, Arduino, Linux, sensors, actuators, and web development. The site serves a niche audience of technology enthusiasts, students, and hobbyists seeking educational content and practical tutorials. The business model is primarily content publishing supported by donations via PayPal and Tipeee. The website is hosted by Scaleway SAS and uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Hotjar for analytics and user behavior tracking. Consent management for GDPR is implemented via InMobi's CMP, although explicit privacy and cookie policies are not published. Security posture is good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Overall, the site is trustworthy, professionally maintained, and provides high-quality content with moderate tracking and advertising.

I

Input Objects GmbH

inputobjects.eu

57

Input Objects GmbH is a small technology company based in Berlin, Germany, specializing in SaaS product development and bespoke software consulting services. Their website presents a professional image with clear branding and a focus on delivering innovative software solutions to business clients. The company emphasizes long-term partnerships and continuous improvement in their offerings. Technically, the website is built using modern frameworks such as Nuxt.js and PrimeVue, with Tailwind CSS for styling, resulting in a fast and mobile-optimized user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is partially addressed via an external privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its target audience of businesses seeking software development expertise.

G

Geonix

proxy-sale.com

68

Geonix is a proxy service provider offering a variety of proxy types including private datacenter IPv4, IPv6, residential, mobile, and ISP proxies. The company targets businesses and individuals requiring proxy services globally, boasting IP pools across 200+ countries and 24/7 support. The website is professionally designed, mobile-optimized, and uses modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is managed via Cloudflare DNS, enhancing performance and security. The domain is well-established, created in 1999, indicating a mature business presence. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear cookie and privacy policies and GDPR adherence. However, the absence of explicit contact information and terms of service pages slightly reduces business credibility. Overall, the site is functional, secure, and compliant, suitable for its target audience.

Creative Fabrica B.V. operates a leading e-commerce platform specializing in crafting resources including fonts, graphics, embroidery designs, and digital crafting tools. The company targets hobbyists, designers, and small businesses with a subscription-based model offering access to a vast library of premium digital assets. Their market position is strong within the crafting niche, supported by a professional and content-rich website. Technically, the site leverages modern frameworks such as Next.js and React, with CDN hosting via Amazon Cloudfront ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure form handling, although explicit security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of content blocking or security challenges.

M

Mohammad Younes

alertifyjs.com

54

AlertifyJS is an open source JavaScript framework designed to provide developers with customizable and visually appealing browser dialogs and notifications. Founded in 2014 by Mohammad Younes, the project targets web developers seeking an extensible and themeable dialog solution. The website serves as the primary distribution and documentation portal, featuring examples, tutorials, and GitHub integration. The business model is based on open source licensing under GPLv3, with no direct commercial offerings evident on the site. Technically, the website leverages a modern JavaScript stack including jQuery, Semantic UI, Font Awesome, and Google Fonts, with DocPad as the CMS. The site is moderately optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. External dependencies include Google Analytics for tracking and Carbon Ads for monetization. Hosting is inferred to be via NameCheap based on WHOIS data. From a security perspective, the site uses HTTPS (implied by external resource URLs), but lacks explicit security headers and DNSSEC is not enabled, representing moderate security posture. No forms or sensitive data collection mechanisms are present, reducing attack surface. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact and incident response information are not provided, limiting transparency. Overall, the website is a well-maintained open source project site with good content quality and technical implementation but has room for improvement in security hardening and privacy compliance. The domain registration is consistent and transparent, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact and incident response channels to enhance trust and compliance.

N

Netza&CO

netzaeco.com.br

57

Netza&CO is a Brazilian marketing company specializing in integrated marketing solutions, positioning itself as a reference in the marketing sector. The website presents a professional design with clear branding and content focused on marketing services. The technical infrastructure is built on modern web technologies including Readymag platform, Google Tag Manager for analytics, and uses popular web fonts to enhance user experience. Mobile optimization is good, and the site loads with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

L

Lukas Hermann

stagetimer.io

68

Stagetimer.io is a technology company founded in 2020 by Lukas Hermann in Germany, offering a remote-controlled countdown timer service primarily targeting video producers, event organizers, and presenters. The platform provides a browser-based fullscreen timer controlled remotely, with additional features such as messaging, agenda sharing, and API integrations with popular production tools. The business model is SaaS with free and paid tiers, trusted by over 21,000 users including major global brands. Technically, the website uses modern frameworks like Astro and Firebase, hosted on Google Cloud with Cloudflare DNS, delivering fast and mobile-optimized performance. Security posture is strong with HTTPS, security headers, and privacy compliance, though DNSSEC is not enabled and no public vulnerability disclosure is found. Overall, the site is professional, trustworthy, and well-positioned in its niche.

L

Laburity

laburity.com

74

Laburity is a professional and holistic cybersecurity research lab and services provider established in 2022. The company offers tailored cybersecurity services including vulnerability assessments, penetration testing, dark web monitoring, secure code analysis, and managed SOC services. The website positions Laburity as a trusted partner recognized by major companies, aiming to safeguard the digital future of its clients. The technical infrastructure is based on WordPress with Elementor, supported by Cloudflare DNS and integrated marketing and analytics tools such as Google Analytics and MonsterInsights. The website demonstrates good design quality, mobile optimization, and SEO practices, providing a positive user experience. Security posture is solid with HTTPS enabled and domain transfer protection, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, Laburity presents a credible and professional cybersecurity business with room for enhanced transparency and security best practices.

U

Université Libre de Bruxelles

ulb.be

60

Université Libre de Bruxelles (ULB) is a major Belgian public university offering a wide range of higher education programs and research activities. The website serves students, researchers, and prospective students with comprehensive information about academic offerings, admissions, and campus life. The site is professionally designed with consistent branding and clear navigation, supporting both French and English languages. Technically, the site uses a custom CMS (K-Sup), JavaScript, and Matomo analytics, indicating a mature digital infrastructure with privacy-conscious tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. WHOIS data is restricted due to DNS Belgium policies but the domain aligns with the university's identity, supporting legitimacy. Overall, the site is a trustworthy and well-maintained digital presence for ULB.

D

Dstny

dstny.com

59

Dstny is a telecommunications company specializing in innovative business communications solutions tailored for service providers and local businesses. Their website presents a professional and modern digital presence, leveraging HubSpot CMS and integrating advanced marketing and analytics tools such as Google Tag Manager and Cookiebot. The company positions itself as an innovative player in the business communications sector, focusing on making communication effortless and delightful for their target audience. The website content is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies, reflecting a commitment to GDPR compliance and user privacy. From a technical perspective, the website employs modern web technologies and frameworks, ensuring good performance and accessibility. The use of HubSpot CMS and integration with multiple analytics and marketing platforms indicates a mature digital infrastructure. Security best practices are observed, including HTTPS enforcement and appropriate security headers, contributing to a strong security posture. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security readiness. The security posture is robust with no evident vulnerabilities or exposed sensitive data. The website employs cookie consent mechanisms and complies with GDPR requirements, enhancing user trust. Despite the professional presentation, the WHOIS data for the domain www.dstny.com is unavailable, showing a 'No match' response, which may indicate privacy protection or recent registration. This lack of domain registration transparency slightly reduces the overall trust score but does not detract significantly from the website's legitimacy based on content and technical indicators. Overall, Dstny's website demonstrates a solid business and technical foundation with good privacy and security practices. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance further. Additionally, providing direct company contact information would improve business credibility and user confidence.

Codethink Ltd. is a UK-based software engineering consultancy established in 2007, specializing in open source system software and embedded systems across diverse industries such as automotive, finance, medical devices, and agriculture. The company positions itself as a trusted partner for international clients, including Fortune 500 companies and startups, delivering high-performance software solutions with a focus on quality, integrity, and open source collaboration. Their business model centers on providing expert teams to solve complex software challenges, accelerate product time-to-market, and reduce costs. Technically, the website demonstrates a mature digital presence with modern web technologies including responsive design, Google Fonts, and privacy-conscious analytics (Plausible). Marketing automation is handled via Mautic forms. The site is well-structured with clear navigation and professional branding. However, some security best practices such as explicit security headers and cookie consent mechanisms are not visibly implemented. From a security perspective, Codethink holds ISO 27001 and ISO 9001 certifications, indicating a strong commitment to information security and quality management. The website uses HTTPS and does not expose sensitive data. The absence of a vulnerability disclosure policy or incident response contact is a minor gap. WHOIS data could not be retrieved for the subdomain queried, but this is due to an invalid WHOIS query on 'www.codethink.co.uk' rather than the registered domain 'codethink.co.uk'. Overall, Codethink presents a professional, trustworthy, and technically competent front with minor areas for improvement in privacy compliance and security transparency. The risk profile is low, and the company appears well-positioned in its niche market.

L

Loomio Cooperative Limited

loomio.com

64

Loomio Cooperative Limited operates a collaborative decision-making platform designed to help organizations make inclusive, transparent, and efficient decisions without the need for meetings. The website positions Loomio as a tool for membership organizations, governance boards, and self-managing companies, emphasizing open source availability and privacy. The platform offers cloud hosting with options for private hosting and self-hosting, supporting various voting and polling methods and integration APIs. Technically, the website uses modern web technologies including Alpine.js and custom CSS, with a fast, mobile-optimized, and accessible design. Security posture is strong with HTTPS enforced and minimal third-party tracking, though some security headers and explicit incident response policies are absent. Privacy policies are comprehensive and GDPR compliant, but no cookie consent mechanism is present. WHOIS data for the domain is unavailable, which slightly reduces trust but the overall professional presentation and trust indicators support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and adding cookie consent mechanisms.

D

Domains By Proxy, LLC

rakudo.org

57

Rakudo.org is the official website for the Rakudo compiler, the most mature and production-ready implementation of the Raku programming language. The site targets developers and programmers interested in Raku, providing downloads, documentation, community links, and issue tracking resources. The business model is centered around open source software development and community engagement, positioning Rakudo as a leading technology project within the programming language ecosystem. Technically, the website is built with standard HTML5, CSS, and JavaScript, served via Cloudflare DNS infrastructure. The site demonstrates good mobile optimization and SEO practices, with clear navigation and professional design. However, no CMS or advanced frameworks are detected, indicating a lightweight and straightforward technical implementation. From a security perspective, the site uses HTTPS and reputable domain registration services with privacy protection. However, DNSSEC is not enabled, and no explicit security headers or vulnerability disclosure policies are present. The absence of privacy and cookie policies indicates a gap in compliance with modern privacy regulations such as GDPR. No contact information or incident response channels are provided, limiting transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and incident response information. The domain's age and registration details support legitimacy, consistent with an established open source project.

T

Twitch

twitch.com

75

Twitch is a leading interactive livestreaming platform primarily focused on gaming, entertainment, sports, and music content. Owned by Amazon, it serves a global audience with a robust platform that supports live video streaming, community interaction, and monetization through advertising and subscriptions. The website demonstrates a high level of professionalism, with excellent design quality, clear navigation, and mobile optimization. Technically, Twitch employs modern web technologies including React and GraphQL, hosted likely on Amazon Web Services, ensuring fast performance and scalability. Security posture is strong with HTTPS enforcement, OAuth-based authentication, and cookie consent mechanisms, though explicit public security policies and incident response contacts are not found. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR consent mechanisms. Overall, Twitch presents a trustworthy and mature digital presence with a high level of business credibility and technical sophistication.

F

Forem

forem.com

70

Forem is a well-established open source community platform focused on software development and engineering communities, boasting over 3.3 million members. It provides a blogging-forward social network experience and powers notable platforms such as DEV. The website demonstrates a mature market position with a clear focus on technology professionals and developers. Technically, Forem leverages Ruby on Rails and modern JavaScript technologies, with hosting infrastructure likely on AWS, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and domain registration protections, although DNSSEC is not enabled and explicit security policies are not published. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be improved. Overall, Forem presents a professional, trustworthy, and content-rich platform with moderate user tracking and good SEO and accessibility practices.

N

Neon, Inc.

neon.tech

64

Neon, Inc. operates a modern serverless Postgres database platform designed to accelerate application development by providing scalable, reliable, and developer-friendly database services. Positioned as a trusted technology provider, Neon targets developers and technology teams seeking cloud-native database solutions with features like autoscaling, branching, and instant provisioning. The company enjoys a strong market position supported by industry certifications and a growing user base. Technically, the website demonstrates a mature digital infrastructure leveraging Next.js and React frameworks, optimized for performance and mobile responsiveness. The platform integrates with popular developer tools and languages, showcasing a modern tech stack and cloud hosting likely on AWS. The site is well-structured with comprehensive documentation and community engagement channels. From a security perspective, Neon exhibits a robust posture with HTTPS enforcement, multiple security headers, and compliance with major standards including ISO 27001, SOC 2, GDPR, and HIPAA. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement. Overall, Neon presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing privacy compliance with cookie consent mechanisms, publishing incident response and vulnerability disclosure information, and maintaining transparency to further strengthen security culture and customer confidence.

D

Distributed Social Network Organization LLC.

mastodon.cloud

67

Mastodon.cloud is a publicly accessible instance of the decentralized Mastodon social network, maintained by Sujitech, LLC and registered under Distributed Social Network Organization LLC. The platform offers a federated social networking service with an active user base of approximately 2,100 monthly active users. The website provides a modern, responsive interface with good content quality and user engagement, supporting multimedia posts and trending topics. Technically, it leverages the Mastodon Ruby on Rails framework, uses Cloudflare for DNS, and employs WebSocket for real-time streaming. Security measures include HTTPS enforcement, CSRF protection, and script integrity checks, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR-specific indicators. Business credibility is supported by transparent WHOIS data, consistent domain registration, and clear branding. Overall, the site is trustworthy and functional but could improve privacy and security transparency.

W

Wise People

itiswise.com

56

Wise People is a Poland-based web agency specializing in UX/UI design, branding, strategy, and web development services tailored for entrepreneurs, B2B firms, software houses, and marketing agencies. Founded in 2019, the company has established a strong market presence with a portfolio of case studies and a 5.0 rating on Clutch, reflecting high client satisfaction. Their business model focuses on delivering comprehensive digital solutions that improve user experience and brand identity. Technically, the website is built on a modern stack including React.js, Laravel, and WordPress, ensuring fast performance, mobile optimization, and good accessibility. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, although some advanced security headers are missing. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates professionalism, trustworthiness, and a mature digital infrastructure.

B

Blue Field Agency

bluefieldagency.com

65

Blue Field Agency is a Dutch technology-focused digital agency specializing in AI-driven data analytics, creative design, and training services. Established in 2012, it serves business clients seeking to leverage AI and data for impactful growth. The company offers a range of services including AI content assistants (AI Buddys), analytics, technology consulting, and benchmarking. Their market position is supported by ISO certifications and a strong partnership ecosystem. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies and fonts. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. The hosting and domain registration are stable and consistent with the company's profile. Security posture is solid with HTTPS enforced and ISO 27001 certification, but improvements are recommended in DNSSEC and security headers. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. No incident response or vulnerability disclosure information is found. Overall, the website presents a professional, trustworthy, and business-oriented digital presence with moderate to good technical and security maturity. Strategic improvements in security practices and incident response transparency would enhance their risk posture and trust further.

B

Blowfish

blowfish.page

57

Blowfish is an open source, lightweight theme designed for the Hugo static site generator. It targets developers and users seeking a powerful yet simple theme solution for their Hugo-based websites. The website serves as a demo, documentation hub, and community showcase for the theme, supported by social media presence on Twitter and GitHub. The business model revolves around open source distribution with community engagement and merchandising. Technically, the site is built with Hugo 0.142.0, uses modern JavaScript libraries such as jQuery and medium-zoom, and is optimized for mobile and accessibility. Performance is fast with good SEO practices. Security posture is moderate; HTTPS is used, but explicit security headers are missing and no privacy or cookie policies are present. No forms collect sensitive data, reducing risk exposure. The domain uses privacy protection in WHOIS, which is typical for small open source projects. Overall, the site is professional and trustworthy but lacks formal privacy and security documentation.

M

MastodonCzech

mastodonczech.cz

64

MastodonCzech is a Czech-language Mastodon social network instance launched in 2022, targeting the Czech community interested in decentralized social networking. It offers typical Mastodon features such as profile directories, public timelines, and explore functionalities. The platform is managed by an identified administrator and serves a modest active user base, positioning itself as a community-focused social network within the Fediverse ecosystem. Technically, the website uses Mastodon version 4.3.5 with modern web technologies including JavaScript, SVG graphics, and WebSockets, ensuring a responsive and moderately performant user experience. Security-wise, the site enforces HTTPS with Subresource Integrity and nonce-based CSP, but lacks some security headers and published policies related to security and incident response. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service clearly available. Overall, the site is safe, professional, and trustworthy for general audiences.

F

FLOSS/fund

floss.fund

54

FLOSS/fund is a recently established non-profit initiative founded in 2023, dedicated to providing up to $1 million annually to support free and open source software projects globally. The website clearly communicates its mission and offers an application portal for projects seeking funding. The initiative is positioned as a niche funder within the open source ecosystem, supported by a parent company, Zerodha, and partnered with FOSS United Foundation. Technically, the website employs modern web standards including HTTPS, Google Fonts, and Cloudflare DNS services, delivering a good user experience with responsive design and clear navigation. However, it lacks key compliance documents such as privacy and cookie policies, and does not provide contact information or security incident channels, which limits transparency and user trust. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security disclosures.

G

Gemeinde Düdingen

duedingen.ch

59

The website www.duedingen.ch serves as the official online portal for the municipality of Düdingen in Switzerland. It provides residents and visitors with comprehensive information about local government services, cultural events, administrative procedures, and community news. The site is well-positioned as a local government resource, offering key services such as an online service counter, event calendars, and contact information. The target audience primarily consists of local residents and stakeholders interested in municipal affairs. Technically, the website employs modern web standards with responsive design, leveraging a CMS platform (i-web CMS) and standard web technologies like JavaScript and CSS. The site is hosted likely on Swiss infrastructure, ensuring good performance and data locality. Accessibility and SEO practices are well implemented, enhancing usability and discoverability. From a security perspective, the site uses HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and a public security or incident response policy are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms the domain's legitimacy and alignment with the municipality's identity. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, providing a trustworthy and professional digital presence for the municipality. Strategic enhancements in security policy transparency and technical security headers would further strengthen its security maturity.