Security Directory

S

STRATO GmbH

strato.com

56

STRATO GmbH appears to be a German web hosting and domain registration company, as indicated by the website title and metadata. However, the WHOIS data for the domain www.strato.com is unavailable, showing 'No match' in the registry, which raises questions about the domain's registration status or WHOIS privacy restrictions. The website content is minimal and truncated, with no visible privacy, cookie, or terms of service policies, and no contact information or security policies are found. Technically, the site uses older JavaScript libraries such as jQuery 2.2.4 and AngularJS 1.5.6, and the CMS is identified as IMPERIA 8.6.0. There is no evidence of modern security headers or SSL configuration details. Overall, the site shows basic technical implementation but lacks critical compliance and security information, resulting in a low trust and legitimacy score.

C

CookieTractor

cookietractor.eu

71

CookieTractor is a specialized European technology company offering a user-friendly, legally compliant cookie consent solution designed to meet GDPR and ePrivacy Directive requirements. The company emphasizes accessibility, supporting WCAG 2.2 AAA standards and the European Accessibility Act, targeting website owners who require robust cookie management with clear user consent mechanisms. Their business model is subscription-based with tiered pricing according to website size, serving a niche market with notable clients such as Volvo and UNICEF, enhancing their market credibility. Technically, the website employs modern web technologies including ASP.NET Core, jQuery, and integrates analytics tools like Google Analytics and Matomo. Hosting and CDN services are provided via Cloudflare, ensuring fast performance and global reach. The site is mobile-optimized and highly accessible, with a strong focus on user experience and compliance. However, explicit security headers are not detected, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS, uses anti-forgery tokens in forms, and implements cookie consent mechanisms that prevent non-essential cookies before user approval. Despite these strengths, the absence of a published security policy or vulnerability disclosure reduces transparency. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy, though the website content and references suggest a legitimate business. Overall, CookieTractor presents a professional, trustworthy, and technically sound service with strong compliance and accessibility features. The main risk lies in the lack of visible domain registration data and some security header omissions. Strategic recommendations include publishing security policies, adding security headers, and verifying domain registration details to strengthen trust and compliance.

T

Trinket

trinket.io

59

Trinket is a US-based educational technology company founded in 2014 that provides an online platform for writing, running, and sharing code directly in web browsers. The platform targets individual learners, educators, and schools, offering free interactive coding resources and premium subscription plans to enhance the learning experience. Trinket positions itself as a niche player in the education sector, focusing on accessible coding education without the need for software installation. Technically, the website employs a modern but somewhat dated tech stack including AngularJS, jQuery, and various JavaScript libraries, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and integrates Google reCAPTCHA for form security. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is supported by a clear privacy policy and terms of service, but lacks a visible cookie consent mechanism. Business credibility is strong with consistent WHOIS data and transparent company information. Overall, the website is professional, secure, and trustworthy, with room for improvement in security headers and cookie consent.

T

Travel Beyond

travelbeyond.se

60

Travel Beyond is a Swedish luxury travel agency specializing in tailor-made travel experiences to the world's best hotels, safaris, and resorts. The company operates under the parent organization Unlimited Travel Group and targets affluent travelers seeking exclusive and personalized travel services. The website demonstrates a high level of professionalism, rich content, and strong branding consistency, supported by partnerships with prestigious hotel groups and travel networks. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and CookieTractor for consent management, and is likely built on Umbraco CMS. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the exact domain reduces domain trust slightly, but the overall business credibility remains high due to transparent contact information and strong partner affiliations.

M

Mattecentrum

pluggakuten.se

62

Pluggakuten is a Swedish educational platform providing free homework help and discussion forums across a wide range of subjects. It operates as a non-profit service under Mattecentrum, a recognized educational organization in Sweden. The website targets students and learners seeking academic assistance and live help sessions. The platform is well-positioned in the Swedish education sector as a trusted resource for collaborative learning and homework support. Technically, the site uses modern web technologies including React, jQuery, MathJax, and Google Tag Manager, ensuring a responsive and interactive user experience. Privacy and cookie consent mechanisms are robust, reflecting compliance with GDPR standards. Security posture is good with HTTPS enforced and anti-CSRF protections, though additional security headers could enhance protection. The absence of WHOIS data for the exact domain queried suggests a possible subdomain or lookup issue, but the association with Mattecentrum supports legitimacy. Overall, Pluggakuten presents a professional, secure, and user-friendly educational service with moderate technical sophistication and strong privacy compliance.

U

Unlimited Travel Group

unlimitedtravelgroup.se

63

Unlimited Travel Group is Sweden's largest publicly listed travel and event group, specializing in acquiring and managing niche travel and event companies. The group comprises nine subsidiaries offering tailored travel experiences, group trips, conferences, events, and business travel services targeting discerning corporate and private clients. The company positions itself as a market leader with a clear growth strategy through organic expansion and acquisitions. Technically, the website is built on ASP.NET Core with modern JavaScript libraries and integrates Google Tag Manager and CookieTractor for analytics and cookie consent management. The site is mobile-optimized, SEO-friendly, and professionally designed, reflecting a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and privacy policy pages indicates room for improvement. The WHOIS data is missing or inaccessible, which raises concerns about domain registration transparency but does not directly contradict the professional business presentation. Overall, the website and business appear credible, with recommendations to enhance security and compliance documentation.

C

CookieTractor

cookietractor.se

70

CookieTractor is a Swedish technology company specializing in cookie consent solutions designed to help websites comply with GDPR and ePrivacy directives. Their product is a user-friendly, accessible cookie banner that supports multiple languages and offers detailed cookie management features. The company targets website owners who require compliant and accessible cookie consent mechanisms, positioning itself as a trusted and sustainable Swedish solution with a growing customer base including notable organizations. Technically, the website uses modern web technologies including ASP.NET Core, jQuery, and integrates analytics and marketing tools such as Google Analytics, Matomo, and Hubspot. The infrastructure emphasizes performance, accessibility, and compliance, with data hosted on Swedish servers. Security posture is strong with HTTPS, secure forms, and cookie blocking until consent, though explicit security policies and incident response contacts are not published. The WHOIS data for the exact domain queried is missing, likely due to querying a subdomain, which slightly reduces domain registration trustworthiness. Overall, CookieTractor presents a professional, compliant, and technically mature offering in the cookie consent market.

J

John Will Kommunikation

will-kommunikation.de

39

John Will Kommunikation is a small, experienced communication consultancy based in Germany, specializing in tailored communication strategies for brands, markets, and people. With over 25 years of experience, the company offers a range of services including media relations, crisis communication, media training, and social media management. The website reflects a professional and consistent brand image, targeting corporate clients across various sectors in the German-speaking region. Technically, the site is built on WordPress with common plugins and libraries, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

C

CookieTractor

cookietractor.com

69

CookieTractor is a specialized European technology company providing a user-friendly, accessible cookie consent solution designed to help websites comply with GDPR and the ePrivacy Directive. The company emphasizes accessibility, supporting WCAG 2.2 AAA standards and the European Accessibility Act, and offers a customizable cookie banner with multi-language support. Their business model is SaaS-based with tiered pricing according to website size. The website content is professional and well-structured, targeting website owners needing compliant cookie management solutions. Technically, the site uses modern JavaScript libraries, integrates Matomo and Google Analytics for tracking, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS and secure form handling, although explicit security headers and a public security policy are absent. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. However, the lack of WHOIS registration data reduces trustworthiness and business credibility, suggesting the domain may be unregistered or privacy protected. Overall, CookieTractor presents a mature, compliant, and accessible solution with room for improvement in transparency and security documentation.

T

Top-Light GmbH & Co.KG

top-light.shop

46

Top-Light GmbH & Co.KG operates a professional B2B e-commerce platform specializing in high-quality lighting products for indoor and outdoor applications. The company is well-established in Germany, with a strong market position supported by multiple design and quality awards. Their website targets professional dealers and offers a comprehensive catalog of lighting solutions, emphasizing handcrafted production and high standards. Technically, the site uses a mix of established JavaScript libraries and frameworks, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS assumed, but lacks explicit security headers and published security policies. Privacy compliance is mostly met with a comprehensive privacy policy, though cookie consent mechanisms are missing. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

IBOCO Integrated Panel Management is a medium-sized manufacturing company specializing in panel building solutions and wire management products. The company offers a broad range of products including wiring ducts, I-Flex connectors, din rails, and enclosures, targeting system integrators and engineers in the industrial sector. The website reflects a professional and consistent brand presence with detailed product catalogs and technical information. Technically, the site uses a modern JavaScript stack with jQuery, Bootstrap, and Google Analytics, and is secured with a DigiCert SSL certificate. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and clear contact information. Privacy compliance is basic, lacking cookie consent mechanisms and terms of service pages. Security posture is strong with HTTPS and security seals but could be improved with additional security headers and published policies. Overall, the site is safe, well-structured, and trustworthy from a content perspective but requires verification of domain registration and enhanced privacy compliance.

K

Kolmiokirja Oy

kolmiokirja.fi

51

Kolmiokirja Oy operates a Finnish e-commerce platform specializing in the sale of magazines, puzzle books, and hobby-related reading materials. The website targets a general audience interested in leisure reading and hobby activities, offering a variety of products including subscription packages and gift cards. The company appears to be a small-sized retail business with a consistent brand presence and a well-structured online store. The website is professionally designed with good content quality and clear navigation, supporting Finnish language users primarily. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, Swiper, and other libraries to enhance user experience and performance. It uses asynchronous loading for analytics and tracking scripts such as Google Tag Manager and Iterable Analytics. Mobile optimization is good, and SEO practices are adequately implemented. However, no CMS or hosting provider details are explicitly detected. From a security perspective, the site enforces HTTPS and uses standard analytics and marketing tools. There is a lack of visible security headers and no public security or incident response policies, which suggests room for improvement in security posture. No vulnerabilities or suspicious content were detected in the HTML content. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website is trustworthy and professionally maintained, with a solid business model focused on retail e-commerce in Finland. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to strengthen compliance and user trust.

U

Urakkamaailma.fi

urakkamaailma.fi

57

Urakkamaailma.fi is a leading Finnish online platform that connects homeowners, housing companies, and contractors for renovation projects. Owned by Alma Media Oyj, it has a strong market position with over 12 years of operation and a large user base. The platform offers free posting of renovation requests and facilitates competitive bidding from verified contractors, supported by trust indicators such as verified reviews and background checks. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, hosted likely on Alma Media infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with high trustworthiness and professional content.

S

SelectHub

selecthub.com

68

SelectHub operates a professional software selection platform designed to assist businesses in evaluating and selecting software solutions through collaborative tools, analyst research, and unbiased reviews. The company targets organizations seeking to streamline their software procurement process and offers services including research, price negotiation support, and comprehensive software category coverage. The platform is positioned as a trusted resource in the technology sector with a medium-sized business profile and a founding date around 2021. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager. Hosting appears to be on AWS infrastructure. The site demonstrates good SEO practices, mobile optimization, and structured data usage, contributing to a positive digital maturity level. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses some best practices but lacks several important security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. No critical security issues were detected, but improvements are recommended to enhance the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, SelectHub presents a trustworthy and professional online presence with a solid business model and technical foundation. The absence of WHOIS data slightly impacts trust but does not outweigh the positive indicators from the website content and security measures. Strategic recommendations include enhancing security headers, updating libraries, and improving transparency around domain registration.

L

Loudoun County, VA

loudoun.gov

62

Loudoun County, VA operates an official government website serving residents, businesses, and visitors with a broad range of public services, information, and resources. The site is positioned as a key digital portal for local government communications and citizen engagement. The technical infrastructure leverages a CivicPlus CMS platform with modern JavaScript libraries such as jQuery and AlpineJS, integrated with Google Analytics and Microsoft Application Insights for telemetry and user behavior tracking. The website demonstrates good mobile optimization, accessibility, and SEO practices, supporting a positive user experience. Security posture is strong with HTTPS enforcement and anti-forgery protections, though some security headers and explicit privacy policies are missing. WHOIS data is incomplete, typical for .gov domains, but the domain's .gov TLD and content strongly support legitimacy. Overall, the site is a well-maintained government resource with room for improvement in privacy transparency and security policy disclosures.

E

eveeno

eveeno.com

51

eveeno is a German-based SaaS company providing innovative and flexible online event management software tailored for conferences, seminars, business events, and clubs. The platform offers comprehensive features including online registration, ticket sales, payment processing, invoicing, and entry management with QR code scanning. Positioned as a growing alternative to Xing Events, eveeno serves a broad audience of event organizers with a strong emphasis on GDPR compliance and German data protection standards. The website demonstrates a professional and consistent brand presence with extensive customer references and trust seals. Technically, the site leverages a modern tech stack including jQuery, Uikit framework, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and optimized for mobile devices, with good SEO and accessibility practices. Hosting is in the EU, ensuring compliance with regional data privacy laws. Performance is moderate with room for optimization. Security posture is strong with enforced HTTPS, SSL encryption, and no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and explicit security or incident response policies are areas for improvement. No security.txt or vulnerability disclosure page was found. Overall, eveeno presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic enhancements in privacy compliance and security transparency would further strengthen its market position and user trust.

The website 'OpenID Connect Playground' serves as a developer-focused tool designed to facilitate testing and understanding of OpenID Connect protocol calls. It provides step-by-step insights into the authentication process, targeting developers and technical audiences interested in identity management and OAuth2-based authentication flows. The site leverages external trusted libraries such as jQuery and Auth0's styleguide, indicating a modern and developer-friendly technical infrastructure. The presence of a cookie consent banner demonstrates some level of privacy compliance, although explicit privacy and terms of service policies are not found in the provided content. Security posture is moderate with HTTPS enabled but lacking visible security headers or vulnerability disclosures. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content appears professional and consistent with its stated purpose.

O

OpenAgenda

openagenda.com

53

OpenAgenda is a well-established French technology company specializing in event agenda management solutions. The platform caters to organizations, federations, territories, and large event organizers by providing tools to create, interconnect, and moderate event agendas. It supports event export, integration, and offers dedicated support, positioning itself as a reliable SaaS provider in the event management space. The company has a solid market presence with notable clients and media partnerships, reflecting a mature business model and a medium-sized operational scale. Technically, the website employs a moderately modern tech stack including jQuery, Bootstrap, Matomo analytics, and Crisp chat for customer interaction. Hosting appears to be on Amazon AWS infrastructure, inferred from DNS servers. The site is mobile optimized with good SEO and accessibility basics, though some modernization opportunities exist, especially in upgrading JavaScript libraries and enhancing accessibility features. From a security perspective, the site uses HTTPS and includes script integrity hashes, but lacks visible security headers and DNSSEC is not enabled. There is no explicit security policy or incident response information published, which could be improved. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was detected. Overall, the security posture is moderate with room for enhancements. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators found. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing security and incident response policies, and adding cookie consent mechanisms to improve GDPR compliance and user trust.

C

Computer Online AG

on-res.com

48

The website on-res.com is operated by Computer Online AG, a Swiss company specializing in providing an online reservation and administration system tailored for aviation clubs, flight schools, and charter services. The platform offers real-time flight scheduling, digital flight logs approved by Swiss aviation authorities (BAZL), technical maintenance logs, and integration with Swiss accounting software (Comatic). The business model is that of an Application Service Provider (ASP), targeting niche aviation organizations primarily in Switzerland. The company has been established since 2002, indicating a mature presence in its market segment. Technically, the website employs basic web technologies including HTML, CSS, JavaScript, and jQuery 2.2.4. It supports multiple browsers and mobile devices such as iPads and iPhones, though mobile optimization is basic. The site lacks modern CMS frameworks and advanced SEO or accessibility features, reflecting a functional but dated technical infrastructure. From a security perspective, the domain is registered with a reputable registrar and has a long history, supporting legitimacy. However, the site lacks DNSSEC, security headers, and published privacy or cookie policies, which are notable compliance and security gaps. No WAF or blocking mechanisms are detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Contact information is clearly provided, enhancing trust. Overall, the website scores moderately on content quality and business credibility but lower on technical implementation and privacy compliance. Strategic improvements in security headers, privacy documentation, and modernizing the technical stack would enhance the site's security posture and user trust.

U

Université de Genève

unige.ch

69

Université de Genève is a prominent public university in Switzerland offering a wide range of academic programs and research activities. The website serves students, researchers, collaborators, and the public with information about faculties, courses, research, and services. The institution maintains a professional online presence with consistent branding and multilingual support. Technically, the website is built on the concrete5 CMS platform and utilizes modern JavaScript libraries such as jQuery, Isotope, and Nivo Slider. It employs Matomo for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity and privacy awareness. The site is mobile optimized and provides a good user experience with clear navigation. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data confirms the domain's legitimacy and consistency with the university's identity. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policy transparency and contact information availability.

S

Seismo Verlag

seismoverlag.ch

51

Seismo Verlag is a specialized academic publisher based in Switzerland focusing on social science books, journals, and open access publications. The website is multilingual (German, French, English) and targets researchers, academics, and professionals in social sciences. The business model centers on publishing scholarly content with a niche market position in Swiss social science academia. The site features rich content including new releases, journal issues, and author interviews, reflecting a strong content strategy and professional presentation. Technically, the website uses a custom CMS with JavaScript libraries such as jQuery 2.2.4, Modernizr, and lazy loading for images. The site is moderately performant and mobile-optimized with good SEO practices. However, some modernization opportunities exist, such as updating libraries and improving accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present. No signs of WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the website is professional, content-rich, and trustworthy for its academic audience but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

S

Schweizerischer Verband für Weiterbildung SVEB

formazionecontinua.swiss

47

formazionecontinua.swiss is a Swiss-based educational platform focused on providing a comprehensive search engine for continuing education courses across various sectors including management, economics, IT, coaching, languages, health, and culture. Supported by the Schweizerischer Verband für Weiterbildung SVEB, it aggregates offerings from approximately 230 Swiss course providers, targeting adult learners and professionals seeking further education. The platform emphasizes ease of use with advanced filtering options and regional selections, positioning itself as a key national resource in the Swiss continuing education market. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and a proprietary CMS (InnoWAYtor by 3way.ch). The site is mobile-optimized, accessible, and uses HTTPS with good performance metrics. However, there is room for improvement in security headers and explicit incident response disclosures. Advertising and analytics are managed primarily through Google services, with basic privacy compliance mechanisms such as cookie consent banners in place. From a security perspective, the site demonstrates a solid baseline with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The lack of detailed security policies and incident response information suggests an opportunity to enhance trust and compliance further. WHOIS data is privacy protected, which is typical for Swiss domains, and the domain appears legitimate and well-maintained. Overall, formazionecontinua.swiss presents a trustworthy, professional, and functional platform with good business credibility and technical implementation. Strategic improvements in security headers, transparency, and vulnerability disclosure would further strengthen its security posture and compliance standing.

S

Schweizerischer Verband für Weiterbildung SVEB

formationcontinue.swiss

49

formationcontinue.swiss is a Swiss-based online platform aggregating continuing education courses from approximately 230 providers across Switzerland. Powered by the Schweizerischer Verband für Weiterbildung (SVEB) and the Fédération suisse pour la formation continue (FSEA), it offers users a comprehensive searchable database of courses in management, economics, IT, coaching, languages, health, and culture. The platform targets individuals seeking professional development or leisure learning opportunities within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and the YAML CSS framework, with a CMS named InnoWAYtor by 3way.ch. The site is mobile-optimized, accessible, and uses HTTPS with cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Security posture is solid but could be improved with additional headers and documented incident response processes. WHOIS data is privacy protected, typical for Swiss .swiss domains, and the domain appears legitimate and consistent with the business purpose. Overall, the platform is professional, trustworthy, and well-positioned in the Swiss continuing education market.

S

Schweizerischer Verband für Weiterbildung SVEB

weiterbildung.swiss

48

weiterbildung.swiss is a Swiss online course portal operated in association with the Schweizerischer Verband für Weiterbildung SVEB, providing a comprehensive database of continuing education courses across Switzerland. The platform targets adult learners and professionals seeking courses in various fields such as management, IT, languages, and health. It aggregates offerings from approximately 230 course providers, facilitating course search and comparison with filters for region, price, and certifications. Technically, the website uses a custom CMS (InnoWAYtor by 3way.ch) with a modern tech stack including jQuery, Google Tag Manager, and responsive design frameworks, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is moderate with HTTPS implied but lacking explicit security headers; cookie consent and privacy policies are implemented aligning with GDPR requirements. WHOIS data is privacy protected as per Swiss Registry policies, consistent with the domain's legitimate educational purpose. Overall, the site demonstrates a professional and trustworthy presence in the Swiss education sector.

D

Dan's Tools

regexpal.com

58

RegexPal is an online developer tool focused on providing a real-time regular expression testing environment supporting Javascript and PCRE flavors. It is part of Dan's Tools, a suite of web utilities targeting developers and technical users. The site offers features such as a regex library, community pattern sharing, and substitution testing. Monetization is primarily through Google Adsense advertising. The technical infrastructure includes standard web technologies like Bootstrap, jQuery, and Google Fonts, hosted via AWS Cloudfront CDN. While the site is functional and well-structured for its niche, it lacks explicit privacy and security policies, and WHOIS data for the domain is unavailable, which raises some trust concerns. The cookie consent mechanism indicates GDPR awareness, but no comprehensive privacy policy was found on the main page. Security headers are not evident, and mobile optimization is basic with a warning about limited mobile support.

D

Dan's Tools

url-encode-decode.com

54

The website www.url-encode-decode.com is an online utility tool focused on URL encoding and decoding, providing users with a free service to convert text strings into percent-encoded formats compliant with URI standards. It is part of the Dan's Tools suite of web development utilities, targeting developers and general users needing encoding services. The site is supported primarily through advertising and uses Google Analytics for traffic monitoring. Technically, the site employs Bootstrap 3, jQuery, and Font Awesome, with assets served partly via Cloudfront CDN. The design is functional and mobile responsive, with good content quality and clear navigation. However, the site lacks advanced security headers and explicit cookie consent mechanisms, which impacts its privacy compliance posture. WHOIS data for the domain is missing or unavailable, raising concerns about domain registration legitimacy, though the site content and branding suggest a legitimate operation within a niche market. Overall, the site scores moderately on AI evaluation, with recommendations to improve security headers, privacy compliance, and domain registration transparency.

D

Dan's Tools

favicon-generator.org

55

The website www.favicon-generator.org is a specialized online tool offering favicon.ico and app icon generation services primarily targeting web developers and designers. It provides image conversion from PNG, JPG, and GIF formats to ICO files compatible with all major browsers, including legacy support for Internet Explorer. The site also features an icon gallery, an online favicon editor, and links to related web development utilities. The business operates under the brand Dan's Tools, with a small-scale, niche market presence focused on free utility tools monetized through advertising and affiliate marketing. Technically, the site employs a traditional web stack with Bootstrap 3.4.1, jQuery 2.2.4, Font Awesome 4.0.3, and Amazon Cloudfront CDN for hosting static assets. Google Analytics and Google Adsense are integrated for tracking and monetization. The site is mobile responsive and has a clear navigation structure, though some libraries are outdated. Security headers are not explicitly present in the HTML content, and no cookie consent mechanism is implemented, indicating room for improvement in privacy compliance and security hardening. Security posture is moderate; HTTPS usage is implied but not explicitly confirmed in the HTML content. No exposed sensitive data or vulnerabilities are evident, but the absence of security headers and modern privacy controls reduces the overall security score. WHOIS data is unavailable due to a malformed response, suggesting privacy protection or query issues. This limits the ability to fully verify domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site is a functional, niche utility with good content quality and business credibility but could benefit from enhanced security practices, updated technology stack, and improved privacy compliance to strengthen trust and user protection.

D

Dan's Tools

website-performance.org

57

The website www.website-performance.org is a specialized online utility offering free website speed testing and related web development tools. It targets web developers, SEO professionals, and website owners seeking to analyze and improve their website performance. The site is branded under Dan's Tools and provides a suite of helpful utilities such as CSS sprite generation and code minification. The business model appears to be free access with optional account registration for premium features, supported by advertising revenue. Technically, the site uses a Bootstrap framework with jQuery and Font Awesome, hosted with Amazon Cloudfront CDN, and integrates Google Analytics and Adsense for tracking and monetization. The design is professional and user-friendly, though mobile optimization is basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small utility sites. Overall, the site is safe, reliable, and serves a niche market effectively.

D

Dan's Tools

regextester.com

52

RegexTester.com is an online tool focused on providing developers and programmers with a platform to test, debug, and learn regular expressions in Javascript and PCRE. The site is part of Dan's Tools, a collection of web development utilities. It offers features such as real-time regex evaluation, a library of common regex patterns, and conversion tools linked from the navigation menu. The business model appears to be free access supported primarily by advertising and affiliate marketing partnerships, notably with SEMrush. The target audience is technical users seeking regex assistance.

D

Dan's Tools

htaccessredirect.net

55

The website www.htaccessredirect.net offers a specialized online tool for generating .htaccess files to assist web developers and administrators with tasks such as redirects, caching, password protection, and bot blocking. It operates under the brand Dan's Tools and appears to be a niche utility service monetized primarily through advertising and affiliate marketing. The site is technically mature, employing modern frontend frameworks like Bootstrap and jQuery, and integrates Google Analytics and Adsense for tracking and monetization. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding suggest a legitimate service. Security posture is moderate, with no advanced security headers detected and no cookie consent mechanism despite ad usage. Privacy and terms pages exist but are basic. Overall, the site provides valuable functionality but would benefit from improved security and compliance measures.

D

Dan's Tools

cleancss.com

54

CleanCSS.com is a niche online platform offering a comprehensive suite of free web development tools focused on code formatting, minification, and data conversion. The site targets web developers and programmers seeking easy-to-use utilities to beautify and optimize CSS, HTML, JavaScript, JSON, XML, and other formats. Supported primarily through advertising, the platform maintains a consistent brand identity under Dan's Tools, with a presence dating back to 2014. Technically, the site leverages Bootstrap, jQuery, Font Awesome, and Google services such as Analytics and Adsense, delivering a moderately performant and mobile-optimized experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate, with HTTPS implied but lacking explicit security headers and advanced protections on user input forms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced security and compliance measures.

D

Dan's Tools

cssfontstack.com

54

The website www.cssfontstack.com is a specialized online tool providing web developers and designers with a comprehensive collection of web safe CSS font stacks and web fonts, including previews and CSS/HTML code generation. It is part of the Dan's Tools suite of web development utilities, targeting a niche audience seeking font-related resources. The site is small in scale, relying on advertising and optional user accounts for monetization. Technically, it employs a Bootstrap 3 framework, jQuery, Font Awesome, and integrates Google Analytics and Adsense for tracking and monetization. Hosting leverages Amazon CloudFront CDN for content delivery. The site is mobile responsive with good navigation and content relevance, though accessibility features are basic.

D

Dan's Tools

danstools.com

54

Dan's Tools is a small-scale online platform offering a comprehensive suite of free utility tools primarily targeted at developers and general users. The website provides various converters, formatters, validators, and other helpful utilities to facilitate web development and data manipulation tasks. Supported by advertising and affiliate programs, the business model relies on free access to tools with monetization through ads and referrals. The market position is niche, focusing on developer convenience and utility rather than broad commercial services. Technically, the website employs a traditional web stack including Bootstrap 3.4.1, jQuery 2.2.4, and Font Awesome 4.0.3. It integrates Google Analytics and Adsense for tracking and monetization. Hosting assets are partially served via Amazon CloudFront. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, SEO and accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS. Forms use POST methods but do not show anti-CSRF tokens. No sensitive data exposure was detected, but the absence of security headers and cookie consent mechanisms indicates room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and provides valuable free tools but has moderate security and privacy compliance gaps. The lack of WHOIS data and cookie consent mechanisms are notable weaknesses. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance trust and reduce risk.

E

EDRA S.p.A.

dica33.it

59

Dica33 is a well-established Italian health and medical information portal operated by EDRA S.p.A., a recognized media company in the healthcare sector. The website offers a broad range of health-related content including news, expert Q&A, health calculators, and specialized guides targeting the general public interested in medical and wellness topics. The portal maintains a consistent brand presence with related sister sites under the EDRA umbrella, enhancing its market position as a trusted health information source in Italy. Technically, the site employs standard web technologies such as jQuery, Google Tag Manager, and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though the use of an outdated jQuery version and lack of advanced security headers present moderate risks. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and content-rich, serving its audience effectively.

Simpleview is a technology company specializing in destination management CRM software, serving the tourism and destination marketing industry. The company positions itself as a market leader with a comprehensive suite of services including email marketing, digital proposals, and integrations tailored for destination marketing organizations. The website reflects a mature digital presence with professional design, clear navigation, and extensive content targeting industry professionals. Technically, the site employs modern JavaScript libraries and tracking tools, indicating a well-maintained infrastructure with good mobile optimization and accessibility. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data is unavailable, which raises some concerns about domain transparency, but the overall business credibility remains high based on website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency.

Business Events Perth is a well-established non-profit organization focused on facilitating business events, conferences, and incentive groups in Western Australia. The website presents a professional and consistent brand image, targeting not-for-profit associations, corporations, and event planners. The organization leverages a modern technical infrastructure including Simpleview CMS, Foundation framework, and various marketing and analytics tools. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR indicators. The absence of WHOIS data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website is functional, informative, and trustworthy for its intended audience.

Z

Zentiva Group, a.s.

zentiva.co.uk

76

Zentiva Group, a.s. operates the UK website zentiva.co.uk as part of its international pharmaceutical business focused on generic medicines. The company promotes over 350 high-quality generic products and positions itself as a trusted partner to the NHS, serving patients with affordable healthcare solutions. The website content is professionally designed, well-structured, and targets healthcare professionals, NHS partners, and patients. The business model centers on pharmaceutical development, production, and distribution with a strong European footprint.

Z

Zentiva Group, a.s.

zentiva.es

66

Zentiva Group, a.s. operates a professional and comprehensive pharmaceutical website focused on providing affordable healthcare and pharmaceutical products across multiple countries, primarily in Europe. The company emphasizes innovation, manufacturing, and sustainability in its business model, targeting a broad audience including healthcare professionals and the general public. The website is well-structured, multilingual, and links to numerous country-specific subsidiaries, reflecting a large multinational presence. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Cookiebot for consent management, and other JavaScript libraries to enhance user experience and analytics. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are not explicitly detected. HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. Security posture is solid with no critical vulnerabilities detected in the content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. The WHOIS data is unavailable due to query restrictions, but the domain and website content are consistent with a legitimate, established pharmaceutical company. Overall, the website presents a trustworthy, professional front with good compliance and technical standards, suitable for its industry and audience.

Z

Zentiva Group, a.s.

zentiva.ro

76

Zentiva Romania is a prominent pharmaceutical company specializing in the development, production, and distribution of generic medicines. As part of the Zentiva Group, it holds a leading market position in Romania and operates across multiple European countries and India. The website reflects a professional corporate presence with a focus on healthcare, sustainability, and corporate responsibility. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are not publicly detailed. The WHOIS data is privacy protected by ROTLD, which is common for businesses in this sector, and the website content aligns with a legitimate pharmaceutical business. Overall, the site demonstrates good business credibility, privacy compliance, and user experience, with room for improvement in security transparency and incident response readiness.

Z

Zentiva Group, a.s.

zentiva.pt

71

Zentiva Group, a.s. operates a professional and comprehensive website focused on providing quality generic medicines primarily in Portugal and across multiple European and international markets. The company positions itself as a large healthcare entity with a strong emphasis on innovation, production, service, and sustainability. The website content is well-structured, professionally designed, and targets a broad audience including healthcare providers, pharmacies, and the general public. The presence of multiple international subsidiary domains indicates a broad market footprint and corporate maturity. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Cookiebot for consent management, and Google Fonts, ensuring good performance and mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. The site uses HTTPS with excellent SSL configuration, though explicit security headers could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, Zentiva.pt is a trustworthy, professional, and compliant website representing a reputable pharmaceutical business. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

Z

Zentiva France SAS

zentiva.fr

66

Zentiva France SAS operates as a pharmaceutical laboratory specializing in generic medicines, offering high-quality and affordable healthcare products. The company maintains a strong market presence in France and across Europe, supported by multiple international subsidiaries. The website reflects a professional and comprehensive digital presence, including detailed information about products, corporate commitments, and sustainability initiatives. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for consent management, ensuring compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be enhanced. The absence of WHOIS data limits domain registration transparency, but the overall site professionalism and content quality support legitimacy. Strategic recommendations include improving security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

(

(주)도플소프트

doppelsoft.net

50

도플소프트는 한국 내 대중교통 이용자를 위한 스마트 모바일 앱 개발 및 서비스를 제공하는 전문 기업입니다. 주요 앱으로는 지하철 종결자, 전국 스마트 버스, 스마트 무브 등이 있으며, NHN 계열사로서 안정적인 시장 위치를 확보하고 있습니다. 웹사이트는 한국어로 제공되며, 대중교통 관련 정보와 앱 다운로드를 중심으로 구성되어 있습니다. 기술적으로는 jQuery와 Swiper.js를 활용한 모던한 UI를 제공하며, 모바일 최적화도 양호한 편입니다. 보안 측면에서는 HTTPS가 적용되어 있으나, DNSSEC 미적용과 보안 헤더 부재 등 개선 여지가 있습니다. 개인정보 처리방침과 이용약관이 명확히 제공되나, 쿠키 정책 및 보안 정책은 미흡합니다. 전반적으로 신뢰할 수 있는 기업 웹사이트로 평가되며, 보안 및 개인정보 보호 강화가 권장됩니다.

C

City of Frederick, MD

cityoffrederickmd.gov

60

The City of Frederick, MD official website serves as a comprehensive portal for municipal government services, public information, and community engagement. It targets residents, businesses, and visitors by providing access to services such as payments, public meetings, parks and recreation, police information, and permits. The website is positioned as the authoritative digital presence for the city government, offering a broad range of resources and links to related government entities and services. Technically, the website utilizes a CivicPlus CMS platform with modern JavaScript libraries including jQuery and AlpineJS. It integrates Google Tag Manager and Microsoft Application Insights for analytics and telemetry. The site is mobile responsive with basic accessibility features and moderate performance. Hosting and DNS are managed by reputable providers, though DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and includes anti-forgery tokens in forms, but lacks visible security headers and DNSSEC. There is no published privacy policy, cookie consent mechanism, or security incident response information, which are gaps in compliance and transparency. The domain is a .gov domain with privacy-protected WHOIS data, consistent with government usage and legitimacy. Overall, the website is professional, trustworthy, and functional, but would benefit from enhanced privacy compliance, security header implementation, and clearer user privacy disclosures to improve its security posture and regulatory adherence.

F

Frederick County Government

frederickcountymd.gov

60

Frederick County Government operates an official website serving residents, businesses, and visitors with comprehensive information and services related to local government operations. The site provides access to government departments, business resources, news updates, event calendars, and contact information, positioning itself as a key digital portal for the county. The website targets a broad audience including local citizens, businesses, and government employees, supporting transparency and community engagement. Technically, the website leverages a CivicPlus CMS platform with modern JavaScript libraries such as jQuery and AlpineJS, alongside analytics tools including Google Tag Manager, Siteimprove Analytics, and Microsoft Application Insights. The site demonstrates good mobile responsiveness and basic accessibility features, though there is room for improvement in SEO and advanced accessibility compliance. From a security perspective, the site uses HTTPS and implements anti-forgery tokens in forms, but lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected, indicating potential gaps in GDPR compliance. The domain is a mature .gov domain with privacy protection justified for government use, supporting legitimacy. Overall, the website is professional, trustworthy, and functional, with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and privacy compliance would strengthen the site’s security and regulatory posture.

Public Notice Illinois is a website affiliated with the Illinois Press Association, serving as a platform for publishing and accessing public notices across Illinois. The site targets a general audience including the public, journalists, and legal professionals seeking official notices. The business model focuses on information dissemination and legal compliance through public notice publication. Technically, the site employs ASP.NET Web Forms, jQuery, and integrates Google Analytics and Google Tag Manager for tracking. The design and content quality are basic, with moderate mobile optimization and SEO features. Security posture is limited, with no detected security headers and unknown SSL configuration, indicating room for improvement in protecting user data and site integrity. Privacy and cookie policies are absent, which may affect compliance with regulations such as GDPR. Overall, the domain's WHOIS data is unavailable, raising questions about registration legitimacy, though the website content aligns with a legitimate government-related service. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, verifying domain registration, and improving contact transparency.

利

利市博客网

lishiboke.com

48

利市博客网 is a Chinese-language blog specializing in sharing practical experience and tutorials related to internet credit payment tools such as Alipay Huabei, WeChat Fenfu, and JD Baitiao. The site provides guides on credit limit increases, risk control removal, and real-time news updates. It targets Chinese users interested in financial knowledge and credit payment strategies. Technically, the site runs on Z-BlogPHP CMS with common JavaScript libraries like jQuery and Swiper.js, hosted by DNSPod, Inc. The website is mobile-optimized and has a moderate performance profile. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. WHOIS data shows inconsistencies with a domain creation date in the future, which raises trust concerns despite the site's ICP license and visible contact information. Overall, the site is functional and content-rich but would benefit from improved security and compliance measures.

The website sensheying.com operates as a Chinese language online platform specializing in free streaming of short drama series across multiple genres including romance, suspense, fantasy, and comedy. It targets a general audience interested in short-form entertainment content, offering daily updates and a broad catalog without registration or advertisements. The business is small scale, founded in 2014, and registered under Hefei Juming Network Technology Co., Ltd, consistent with the domain registration and ICP license information. The platform leverages the Z-BlogPHP CMS and uses common web technologies such as jQuery and Prism.js for content presentation. From a technical perspective, the website shows moderate digital maturity with a functional but somewhat dated technology stack. Mobile optimization and SEO practices are adequate, but accessibility features are basic. Performance is moderate, with no critical errors detected in the HTML content. However, security posture is limited due to lack of DNSSEC, absence of HTTP security headers, and no visible SSL/TLS verification in the provided data. Privacy compliance is weak, with no privacy or cookie policies present, which could expose the business to regulatory risks. Security evaluation reveals moderate risks primarily from missing security best practices and lack of formal policies. The domain registration is transparent and consistent with the website's operational region, supporting legitimacy. No adult or explicit content is present, making the site safe for general audiences. Tracking is limited to a single analytics provider (51.la), with no major ad networks or retargeting services detected. Overall, the website is functional and serves its niche well but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing DNSSEC, adding security headers, verifying SSL/TLS configuration, and publishing privacy and cookie policies to align with best practices and legal requirements.

InstalReporter is a Polish digital magazine focused on the installation and energy sector, providing free PDF issues and email newsletters to subscribers. The website targets professionals in the installation industry, offering news, reports, and product information. The business operates on a free subscription model, supported by advertising partnerships with industry-related companies. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Security posture is strong with HTTPS, DNSSEC, and reCAPTCHA, though explicit cookie consent is missing. Overall, the site is professional, well-branded, and trustworthy, with a domain age consistent with its business history.

A

Alibaba Cloud Computing (Beijing) Co., Ltd.

xinshinet.com

55

新时高考网 is a Chinese education-focused website providing comprehensive and authoritative information on college entrance exams, admission policies, score lines, and volunteer application guidance. It targets Chinese high school students, parents, and educators seeking up-to-date and detailed exam-related content. The website is well-positioned as a trusted portal in the Chinese education sector with regularly updated content and a consistent brand presence. Technically, the site uses a traditional CMS (EmpireCMS) with common web technologies such as jQuery and Swiper.js for UI components. It is hosted on Alibaba Cloud, ensuring reliable infrastructure and HTTPS security. The site is moderately optimized for mobile devices and SEO, though accessibility features are basic. From a security perspective, the site employs HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. No privacy or cookie policies are present, indicating compliance gaps with data protection regulations such as GDPR. No incident response or vulnerability disclosure mechanisms are found. Overall, the website is functional, content-rich, and credible but would benefit from improved privacy compliance and enhanced security measures to strengthen trust and regulatory adherence.

ChinaFactCheck.com is a Chinese language fact-checking website specializing in verifying international news. Founded in 2020, it provides fact-check reports, user-submitted verification requests, and fact-checking tools. The site targets Chinese-speaking users interested in accurate international news verification. The business operates as a niche media platform with a small team and focuses on content publishing and fact-checking services. Technically, the website is built on WordPress with a custom theme and uses jQuery 2.2.4. The site is moderately optimized for mobile devices and has a clear navigation structure. However, there is no evidence of advanced SEO or accessibility features. The hosting and domain registration are managed via GoDaddy, with no DNSSEC enabled and no visible security headers or HTTPS enforcement in the HTML content. From a security perspective, the site shows basic domain protection via registrar status flags but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact or incident response information is provided. There are no signs of malicious content or adult material, and the site appears safe for general audiences. The overall risk is moderate due to missing privacy and security best practices. Strategic recommendations include implementing DNSSEC, adding HTTPS enforcement with security headers, publishing privacy and cookie policies, and providing clear contact information for security and business inquiries to improve trust and compliance.