Security Directory

U

urbnups UG (haftungsbeschränkt)

urbnups.app

68

urbnups UG (haftungsbeschränkt) operates a travel and experience discovery platform focused on providing users with local insider tips, popular attractions, and personal recommendations. The platform supports community sharing of unique moments and offers AI solutions for business partners. The company is positioned as a niche player in the travel and local experience market, targeting travelers and local experience seekers primarily in Germany. The business was founded in 2021 and maintains a small company size with a consistent and professional online presence. Technically, the website is built using modern web technologies including React, Next.js, and Material-UI, hosted by Hetzner Online GmbH. The site is optimized for mobile devices, loads quickly, and incorporates privacy-conscious analytics via Matomo. The presence of comprehensive privacy and cookie policies indicates a good level of GDPR compliance. However, direct contact information such as company emails or phone numbers is not publicly listed, relying instead on a contact form. From a security perspective, the site enforces HTTPS, uses standard security headers, and shows no visible vulnerabilities or exposed sensitive data. The domain registration is transparent and consistent with the business age and profile, enhancing trustworthiness. There is no published security policy or incident response information, which could be improved to strengthen security posture. Overall, urbnups presents a trustworthy, well-implemented digital platform with good privacy and security practices. Strategic improvements in security transparency and direct contact information could further enhance trust and compliance.

K

Klassik Radio

klassikradio.de

57

Klassik Radio operates as a German-based classical music streaming and radio broadcasting service, offering curated music channels, live concert events, and premium ad-free subscriptions. The website is professionally designed with excellent content quality and user experience, targeting classical music enthusiasts and general audiences interested in cultural music content. Technically, the site leverages modern frameworks such as Next.js and React, with mobile optimization and SEO best practices well implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the domain and website present a trustworthy and mature digital presence in the media sector.

R

Rausgegangen GmbH

zentrale.events

61

Rausgegangen GmbH operates the website zentrale.events as a centralized platform for event organizers, venues, and artists primarily in Germany. The platform offers integrated services including event publishing, ticketing, and targeted marketing, positioning itself as one of the largest event recommendation platforms in Germany. The business model leverages a freemium approach with additional marketing services, targeting cultural professionals and event goers. Technically, the site is built using modern web technologies such as React and Next.js, with privacy-conscious analytics via Matomo and a comprehensive cookie consent mechanism provided by Iubenda. The website is mobile-optimized and well-structured, providing a good user experience.

C

Christie's

christies.com

69

Christie's is a globally recognized auction house specializing in fine art, luxury goods, and antiques. The company operates both live and online auctions, complemented by bespoke private sales, targeting collectors and luxury buyers worldwide. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as React and StencilJS, integrates advanced analytics tools including Microsoft Application Insights and Adobe DTM, and employs robust cookie consent mechanisms to ensure privacy compliance. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the brand's prominence and website quality. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and compliance.

C

CollabDays | For the community, by the community.

collabdays.org

49

CollabDays is a community-focused event platform that facilitates collaboration and engagement among its audience. The website is built on WordPress using the Divi theme and incorporates modern JavaScript libraries such as React and jQuery, indicating a moderate level of technical maturity. The site design is professional and mobile-optimized, providing a good user experience. However, the absence of privacy, cookie, and terms of service policies, as well as lack of explicit contact information, limits its compliance posture and business credibility. Security-wise, the site uses HTTPS with a good SSL configuration but lacks security headers and formal incident response details. The WHOIS data is unavailable due to malformed output, which restricts domain trust verification. Overall, the site is safe and suitable for general audiences, but improvements in privacy compliance and security best practices are recommended.

N

nph Kinderhilfe Lateinamerika e.V.

nph-kinderhilfe.org

61

nph Kinderhilfe Lateinamerika e.V. is a well-established non-profit organization dedicated to improving the lives of children in Latin America and Haiti through education, protection, and family support. With a history dating back to 1954, the organization operates with a clear mission to provide safe environments and opportunities for children to grow and thrive. The website reflects a professional and consistent brand image, targeting donors, supporters, and stakeholders interested in child welfare. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Directus as a CMS. It demonstrates good performance, mobile optimization, and SEO practices. The presence of Google Tag Manager indicates moderate user tracking for analytics and marketing purposes. From a security perspective, the site uses HTTPS with strong SSL configuration and includes essential security headers. However, there is no explicit security policy or incident response information publicly available, which could be improved. The WHOIS data is unavailable due to query failure or privacy protection, which is common for non-profits but slightly reduces trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

P

Strong Random Password Generator

passwordsgenerator.com

47

The website www.passwordsgenerator.com offers a free online tool for generating strong, random passwords based on current security standards. It targets general internet users seeking to improve their password security by providing customizable password generation options. The site is built on modern web technologies including Next.js and React, hosted on Vercel, and uses PostHog for analytics. The technical infrastructure is modern and optimized for fast performance and mobile responsiveness. However, the site lacks visible privacy, cookie, or terms of service policies, and does not provide contact or company information, which limits transparency and trust. Security posture is moderate with no visible security headers and no HTTPS confirmation in the provided data, though no obvious vulnerabilities or sensitive data exposures are present. The absence of WHOIS registration data is a notable concern, reducing trustworthiness and raising questions about domain legitimacy. Overall, the site functions well as a utility but would benefit from improved compliance and transparency measures.

C

Coloring Labs

coloringlabs.com

57

Coloring Labs is a small technology company specializing in the development of family-friendly coloring apps for iPad users, targeting children and parents. Their market position is niche, focusing on creative and educational digital content for kids. The website presents a professional and consistent brand image with clear messaging about their app offerings. Technically, the site is built using modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. However, accessibility features are basic and could be improved. From a security perspective, the website benefits from HTTPS encryption but lacks important security headers and formal security policies such as privacy or cookie policies. The use of PostHog analytics indicates moderate user tracking without visible consent mechanisms, which may raise privacy compliance concerns. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The absence of detailed business registration data and security policies suggests room for improvement in transparency and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and expanding contact information to build greater trust and compliance.

M

MicroMovieMedia Gesellschaft fuer Medienproduktionen mbH

cultur.social

65

Cultur.social is a decentralized social networking platform operating as a Mastodon instance, administered by MicroMovieMedia Gesellschaft fuer Medienproduktionen mbH based in Germany. The platform targets creative individuals interested in federated social media, offering services such as user profiles, post exploration, and community interaction. The website is built on Mastodon 4.2.21 with a React frontend, demonstrating a modern technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the platform appears legitimate and trustworthy with consistent WHOIS data and transparent administration, but could improve in security and privacy transparency.

B

BotTalk

bottalk.io

60

BotTalk is a specialized AI voice solution provider targeting news publishers and media companies. Their platform aggregates multiple leading text-to-speech providers into a single audio hub, enabling easy integration, paywall support, and audio monetization through advertising partnerships. The company positions itself as a niche leader with a clear focus on enhancing user engagement and subscription value through audio content. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and integrates analytics and form services for marketing and support. Security posture is good with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

K

Klarna

sofort.de

68

Klarna is a leading European payment service provider that has integrated Sofortüberweisung into its platform, offering customers a seamless, secure, and familiar payment experience. The website clearly targets German-speaking online shoppers and merchants, emphasizing ease of use, security, and buyer protection. Klarna's market position is strong, supported by a comprehensive suite of payment options and a well-branded digital presence. Technically, the site uses modern web technologies including React and integrates analytics and tracking tools such as Google Analytics and FullStory, ensuring good performance and user experience across devices. Security is robust with HTTPS, multi-factor authentication, and buyer protection prominently featured, although explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact channels and comprehensive policy documentation.

F

FREI DAY

frei-day.org

45

FREI DAY is an educational non-profit initiative based in Germany, focused on innovative learning formats that empower students to engage with future-oriented questions and projects. The website positions itself as a resource and community hub for educators, students, and schools, supported by the parent organization Schule im Aufbruch. The platform offers programs, workshops, and materials to facilitate the FREI DAY learning approach. Technically, the website is built on WordPress using Elementor and Gravity Forms, with modern analytics tools like Google Tag Manager and Hotjar integrated. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features could be improved. Cookie consent is managed via a GDPR-compliant plugin, but explicit privacy and terms of service pages are not detected in the provided content. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and published security policies or incident response contacts. No critical vulnerabilities or malicious content were detected. Overall, the site appears trustworthy and professionally maintained, suitable for its educational mission. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing accessibility and compliance documentation to strengthen trust and regulatory adherence.

I

idealo.de

flights-idealo.co.uk

65

Flights-idealo.co.uk is a UK-targeted flight price comparison website operated by idealo internet GmbH, a well-established company in the online price comparison market. The platform aggregates flight offers from numerous airlines and travel agents, providing users with a comprehensive and user-friendly interface to find cheap flights quickly. The website is part of the idealo brand family, which operates multiple regional sites, enhancing its market presence and trustworthiness. Technically, the site employs modern web technologies including React, Apollo GraphQL, and styled components, ensuring a responsive and performant user experience. The use of HTTPS and consent management tools like Usercentrics demonstrates a commitment to security and privacy compliance. However, the WHOIS data for the domain is unavailable due to a domain registration error related to naming rules, which does not appear to impact the legitimacy or operation of the site. Security posture is good but could be improved by adding explicit security headers and publishing a security policy. Overall, the site is professional, trustworthy, and well-positioned in the flight comparison market.

V

Verein österreichischer betrieblicher und behördlicher Datenschutzbeauftragter

privacyofficers.social

67

The website privacyofficers.social serves as a Mastodon instance dedicated to the Austrian data protection community, specifically targeting data protection officers and privacy professionals. It positions itself as the largest Austrian community for data protection officers, providing members access to the global Mastodon fediverse network. The platform is relatively new, founded in 2022, and operates under the governance of the Verein österreichischer betrieblicher und behördlicher Datenschutzbeauftragter. The business model centers on community networking and social interaction within the privacy sector. Technically, the site leverages the Mastodon open-source platform with modern web technologies including React and JavaScript, hosted by Mesh Digital Limited. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance and SEO optimization.

Z

Zweckverband Abfallwirtschaft Region Trier (A.R.T.)

art-trier.de

61

The Zweckverband Abfallwirtschaft Region Trier (A.R.T.) is a regional public waste management authority responsible for waste disposal services in Trier and surrounding districts in Germany. The website serves as an information and service portal offering waste collection schedules, customer portals, educational content, and contact information. The organization targets residents and businesses within its jurisdiction, providing essential public services related to waste management and recycling. The website is well-structured, professionally designed, and includes a cookie consent mechanism compliant with GDPR regulations. Technically, the site is built using modern web technologies including React, Next.js, and Material-UI, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site reflects a trustworthy and legitimate public service entity with clear contact information and transparent privacy practices. There are no indications of malicious activity or compliance issues. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding incident response contacts to improve trust and compliance further.

I

idealo

idealo.it

72

idealo.it is a well-established Italian price comparison website operated by idealo internet GmbH, a reputable company based in Germany. The platform offers consumers the ability to compare prices across thousands of online stores, access product reviews, and receive price alerts. It targets general consumers in Italy looking for the best deals across various product categories. The website demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, with strong mobile optimization and accessibility features. Security practices include HTTPS enforcement, content security policies, and GDPR-compliant consent management, though explicit security policies and incident response details are not publicly disclosed. Overall, idealo.it presents a professional, trustworthy, and user-friendly e-commerce service with a strong market position in Italy.

M

Nationales Onlineportal für berufliche Weiterbildung | mein NOW

mein-now.de

63

The website mein-now.de serves as a national online portal dedicated to vocational training and career development in Germany. It offers online tests, tools, and information on further education, funding, and consulting services. The portal targets citizens, institutions, and companies, positioning itself as a key resource for professional development within the German education sector. Technically, the site employs modern web technologies such as Next.js and web components, hosted on infrastructure linked to official German labor agency domains, indicating a robust and professional digital presence. Security-wise, the site uses HTTPS and modern JavaScript modules but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and professionally designed but would benefit from enhanced privacy compliance and security best practices.

DoNoHarm is a small US-based software company founded in 2019, specializing in niche software products such as Monocle, Kleio, and WaterCooler, targeting developers and businesses needing specialized tools. The website is built on a modern React/Next.js stack, hosted via bunny.net, and demonstrates good mobile optimization and user experience. However, the site lacks explicit contact information and comprehensive privacy or security policies. Security posture is moderate with no detected WAF or blocking mechanisms but missing security headers and DNSSEC. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

Version.Compare is an early-stage technology company offering a SaaS product focused on continuous A/B testing and conversion optimization for websites. The service is currently in private alpha and targets website owners and marketers who want to improve visitor-to-customer conversion rates through automated experimentation. The website provides clear instructions for integration via a small embed script or React component, emphasizing ease of use and performance. Technically, the website uses modern JavaScript and React frameworks, with assets served from a globally distributed CDN (bunny.net), ensuring fast load times and good mobile optimization. The site is simple, with no complex CMS or analytics integrations detected, reflecting a lean early-stage product approach. From a security perspective, the domain is registered with privacy protection and strong domain status locks, indicating legitimate ownership and protection against unauthorized transfers or deletions. However, the website lacks published privacy, cookie, or security policies, and no security headers were detected, which limits its compliance posture and security maturity. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

X

X-BIONIC®

x-bionic.com

68

X-BIONIC® is a technology-driven sportswear brand specializing in high-performance base layers and sports apparel, with a focus on Swiss engineering and Italian manufacturing. The company targets athletes and sports enthusiasts across multiple disciplines including trail running, cycling, triathlon, and wintersports. The website is a modern e-commerce platform built on Shopify and Next.js, featuring advanced tracking and consent management tools to comply with GDPR regulations. Security posture is strong with HTTPS and security headers implemented, though some areas such as incident response and vulnerability disclosure could be improved. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive policies suggest a legitimate business. Overall, the site offers a secure, user-friendly shopping experience with good privacy compliance.

R

renault

renault.sk

70

Renault Slovakia operates a comprehensive automotive website offering new, used, and commercial vehicles, including electric and hybrid models. The site targets Slovak consumers interested in Renault's vehicle range and related services such as financing and after-sales support. The website demonstrates a solid market position as part of the global Renault brand, with consistent branding and a professional presentation. Technically, the site uses modern web technologies including React, optimized images, and integrates Google Analytics and Tag Manager for tracking. Cookie consent is managed via OneTrust, indicating attention to privacy compliance, though explicit privacy and terms of service pages were not found in the provided content. Security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing security policies. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

Stocksy United operates as a premium stock photography and video licensing platform, offering a curated collection of high-quality, royalty-free images and videos targeted at creative professionals and businesses. The company positions itself as a progressive cooperative, emphasizing unique and artistic content. The website demonstrates a mature digital presence with extensive use of modern analytics, marketing, and user experience technologies, including React, Datadog RUM, and multiple social media integrations. Security posture is strong with HTTPS enforcement, security headers, and privacy policies in place, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the professional quality and comprehensive policies support a high trust level overall.

E

European Travel Commission

visiteurope.com

63

Visiteurope.com is the official travel portal of Europe, operated under the auspices of the European Travel Commission. It provides comprehensive travel inspiration, destination guides, experiences, events, and essential travel information to tourists interested in exploring Europe. The website targets a broad audience of travelers and tourists, offering multilingual support and rich content to facilitate trip planning. The business model appears to be informational and promotional, supported by EU co-funding and partnerships with tourism bodies. The site holds a strong market position as an authoritative source for European travel information. Technically, the website is built on WordPress with modern technologies including React, jQuery, and various SEO and multilingual plugins. It leverages Cloudflare for DNS and uses Google Fonts and Google Maps APIs. The site is well-optimized for SEO, mobile-friendly, and accessible, with good performance metrics. Structured data and Open Graph tags are properly implemented to enhance search engine visibility and social media sharing. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent via Cookiebot. However, DNSSEC is not enabled, and there is no visible security policy or incident response information published. The site uses multiple third-party marketing and tracking tools, but with consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, visiteurope.com is a professional, trustworthy, and well-maintained website with strong content quality and business credibility. Minor improvements in DNS security and transparency around security policies could further enhance its security posture and user trust.

J

Junip Inc.

juniphq.com

60

Junip Inc. operates a SaaS platform focused on helping ecommerce brands collect and display customer reviews to enhance product understanding and increase conversions. The company targets online retailers and boasts over 5000 customers, positioning itself as an industry leader in ecommerce review solutions. Their services include mobile-first review collection, automated requests, review display widgets, syndication to major sales channels, moderation, tagging, analytics, and multi-store management. Founded in 2020 and based in Canada, Junip demonstrates a strong market presence with integrations to platforms like Shopify and Klaviyo.

W

Wirtschaftsbetriebe Duisburg - AöR

wb-duisburg.de

62

Wirtschaftsbetriebe Duisburg - AöR is a large municipal utility and infrastructure service provider for the city of Duisburg, Germany. The organization manages a broad range of public services including waste disposal, street cleaning, wastewater management, road and bridge construction, municipal real estate, playgrounds, green spaces, and cemeteries. The website serves as a comprehensive portal for residents and businesses to access these services, including online scheduling, information, and customer portals. The site is well structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Storyblok CMS. It integrates third-party services like Usercentrics for cookie consent management and uses legacy jQuery 1.12.4, which may pose some security risks. Performance is moderate with good SEO and accessibility features. The site uses HTTPS and has basic security best practices but lacks explicit security headers and a published security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. However, the use of an outdated jQuery version and absence of a vulnerability disclosure mechanism are areas for improvement. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website represents a trustworthy and professional municipal service portal with a solid business credibility score. Strategic recommendations include upgrading legacy libraries, publishing security policies, and enhancing security headers to further strengthen the security posture and compliance.

S

Solid Starts Inc

solidstarts.com

67

Solid Starts Inc operates a comprehensive digital platform focused on pediatric feeding and baby nutrition, offering a subscription-based app, a free First Foods® database, educational guides, and a published book. The company targets parents and caregivers seeking expert guidance on introducing solid foods to babies and toddlers. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, supported by Cloudflare DNS and CDN services. The platform integrates multiple analytics and marketing tools including Microsoft Clarity, TikTok Pixel, Facebook Pixel, and Google Tag Manager, enabling moderate user tracking with privacy compliance measures in place. Security posture is strong with HTTPS enforcement and security headers, though enabling DNSSEC would further enhance DNS security. The domain is well-established since 2014, registered through a reputable registrar with protective domain statuses, supporting the legitimacy of the business. Overall, the website is professionally designed, mobile-optimized, and provides clear navigation and rich content, fostering high trustworthiness and user engagement.

Sozialkompass.info is a German-language platform launched in 2023 that provides individuals with personalized information about social benefits they may be entitled to. The service uses a question-based approach to tailor social benefits information and offers a centralized overview of supported social benefits with relevant contact points. The website targets residents in Germany seeking guidance on social welfare programs. Technically, the site is built on a modern React and Next.js stack, hosted and DNS-managed via Cloudflare, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and some security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact is primarily via email, with no phone numbers or detailed business registration info publicly available. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

S

SendOwl

sendowl.com

63

SendOwl is a mature and well-established digital commerce platform specializing in enabling businesses and individuals to sell digital products, subscriptions, memberships, and more. The platform offers a comprehensive suite of tools including payment links, storefronts, and checkout solutions, targeting a broad audience of digital sellers from solopreneurs to scale-ups. The website demonstrates strong market positioning with over $2 billion in transactions processed and a decade-long community focus. Technically, the website is built on modern frameworks such as Next.js and React, leveraging popular analytics and marketing tools like Google Analytics, Segment, and Facebook Pixel. The site is performant, mobile-optimized, and accessible, reflecting a high level of digital maturity. Hosting and CDN services appear to be provided by Cloudflare, ensuring reliability and security. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates secure payment gateways. However, there is room for improvement in cookie consent mechanisms and publishing explicit security policies or incident response contacts. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency, but the overall trustworthiness is supported by the professional website and business signals. Overall, SendOwl presents a low-risk profile with strong business credibility and technical robustness. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing vulnerability disclosure information, and improving transparency around incident response and data retention policies.

D

Deutsche Bahn AG

bahnhof.de

63

bahnhof.de is the official platform operated by Deutsche Bahn AG providing comprehensive information about passenger train stations across Germany. It offers live departure and arrival times, station facilities, accessibility information, and local services to travelers. The website is well-positioned as a leading national transportation information portal, serving a broad audience of train passengers and mobility users. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, bahnhof.de demonstrates a mature digital presence with high trustworthiness and professional content.

C

Centre national de la musique

cnmwork.fr

49

CNMwork is a professional portal operated by the Centre national de la musique (CNM) focused on providing a directory and job, internship, and service offers within the French music sector. It serves as a national platform connecting music industry professionals and job seekers, positioning itself as a key resource in the French music employment ecosystem. The website is well-branded with official logos and government affiliation, enhancing its credibility. Technically, the site is built using modern web technologies including React, Next.js, and Material-UI, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although accessibility compliance could be improved. Performance is moderate, with no blocking or WAF detected, indicating reliable availability. Security posture is solid with HTTPS enforced and secure cookie settings, but lacks explicit security headers and documented security policies or incident response information. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, CNMwork presents a trustworthy and professional digital presence for the French music sector, though improvements in security headers and accessibility would enhance its posture. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its official backing.

K

Kino Star

kinostar.sk

55

Kino Star is a local cinema portal website targeting audiences in Slovak towns Zvolen and Lučenec. It provides a simple interface for users to select their preferred cinema location. The website is built using modern web technologies including React and Next.js, indicating a contemporary technical infrastructure. However, the content is minimal and primarily serves as a navigation gateway to subdomains for each cinema location. Security posture is basic with no detected security headers or privacy policies, and no contact information is provided on the main page. The site does not appear to use tracking or analytics services, which reduces privacy concerns but also limits business intelligence capabilities. Overall, the website is functional for its purpose but lacks comprehensive compliance and security features.

D

Divadlo Astorka Korzo '90

astorka.sk

57

Divadlo Astorka Korzo '90 is a Slovak theatre company offering unique theatrical productions with a rich history. The website serves as a portal for program information, ticket sales, and contact details, targeting theatre enthusiasts and the general public in Slovakia. The business operates primarily in the hospitality and cultural sector, focusing on live performances and audience engagement. Technically, the website is built on modern frameworks such as React and Next.js, with Material UI for styling, providing a responsive and user-friendly experience. However, performance is moderate and accessibility features are basic, indicating room for improvement. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response contacts, which could enhance trust and protection. Privacy compliance is addressed with visible privacy and cookie policies, though a consent mechanism is absent. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy features to align with best practices.

S

Sterio Kino

stercentury.sk

53

Sterio Kino is a regional cinema chain operating multiple locations across Slovakia, offering cinema screenings, online ticket sales, and special event programming. The website serves as a portal for customers to access cinema programs and purchase tickets online, targeting general cinema-going audiences. Technically, the site is built using modern web technologies including React and Next.js, with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website is professional and trustworthy, with a moderate risk profile primarily due to privacy and security policy gaps.

T

Tero Radio

teroradio.com

47

Tero Radio is a Thai-based online radio and entertainment platform offering multiple radio stations, podcasts, music charts, event promotions, and video content. The website targets a general Thai audience interested in contemporary hits, Asian music, and entertainment news. The platform is moderately mature with a domain age of approximately 3.5 years and a consistent brand presence across social media and partner subdomains. Technically, the site uses modern web technologies such as Next.js and React, with integrations for Google Tag Manager and advertising via Google DoubleClick. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is legitimate and professionally maintained but would benefit from enhanced security and privacy transparency.

M

Musée du Louvre

louvre.fr

73

The Louvre Museum's official website serves as a comprehensive digital portal for visitors, researchers, and art enthusiasts worldwide. It offers detailed information on exhibitions, events, collections, ticketing, and educational programs. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting the institution's global prominence and commitment to accessibility. Technically, the site uses modern web technologies including React and Next.js, ensuring a responsive and performant user experience. Security measures such as HTTPS and robust security headers are in place, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates high business credibility and trustworthiness, consistent with a major government cultural institution.

A

AXA Prévention

axaprevention.fr

66

AXA Prévention is a well-established prevention platform under the AXA Group umbrella, focusing on climate risk adaptation, health, safety, and cybersecurity awareness for the French public and professionals. The website offers a broad range of free services, guides, and campaigns to educate and protect its audience. Technically, the site is built on modern web technologies including React and Next.js, with good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a mature, trustworthy, and professional digital presence aligned with AXA's corporate standards.

P

Prisme.ai

gogowego.com

61

Prisme.ai is a technology platform offering scalable AI and automation solutions primarily targeting developers and enterprises. The platform provides tools for workspace creation, app development, and API integrations, positioning itself as an innovative player in the AI platform market. The website is professionally designed using modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some technical aspects such as security headers and explicit HTTPS enforcement are not clearly visible in the provided data, suggesting room for improvement in security posture. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are lacking. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security and contact transparency.

P

Prisme.ai

prisme.ai

61

Prisme.ai is a technology company offering a scalable AI platform designed to empower developers and enterprises with customizable AI and automation workspaces. The platform emphasizes flexibility and user control, positioning itself as an innovative player in the AI SaaS market. The website reflects a modern, professional digital presence built on contemporary web technologies such as Next.js and React, indicating a mature technical infrastructure. However, some aspects like hosting provider details and CMS usage remain undisclosed. Security posture is moderate; while HTTPS is implied, explicit security headers and policies are absent, and no contact information for incident response is provided. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and terms of service are missing. Overall, the website is trustworthy and professional but could improve transparency and security practices to enhance user trust and compliance.

K

KB Pojišťovna

komercpoj.cz

60

KB Pojišťovna is a Czech Republic-based insurance company offering a broad range of life and non-life insurance products including property, travel, liability, and investment-linked insurance. The company targets individuals and families seeking comprehensive insurance coverage. The website is professionally designed, well-structured, and provides clear navigation and relevant content to support customer engagement and service delivery. Technically, the site uses modern JavaScript frameworks such as React, integrates analytics tools like Matomo and Facebook Pixel, and includes accessibility features via UserWay widget. The site is mobile optimized and SEO friendly, contributing to a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although HTTP security headers are not visibly configured, and no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly reduces trust but the overall professional presentation and business information support legitimacy. The site is free from adult or questionable content and is fully accessible without WAF or blocking mechanisms. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve transparency and trust.

Czech Virtuosi, z.s. is a non-profit cultural organization based in the Czech Republic that organizes classical music concerts and international music competitions. The organization is supported by local government entities such as the city of Brno and the South Moravian Region, reflecting a strong regional presence and community engagement. Their website serves as a portal for event information, ticket sales, and news updates, targeting classical music enthusiasts and cultural event attendees. The business model relies on sponsorships, government funding, and ticket sales to sustain its activities. Technically, the website is built using modern web technologies including React and slick carousel for interactive content presentation. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Google Analytics is used for visitor tracking, though privacy compliance could be improved by implementing cookie consent mechanisms. The website lacks explicit security headers and incident response policies, which are areas for enhancement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership transparency. No critical vulnerabilities or security issues were detected in the visible content. The organization should consider publishing security policies and improving GDPR compliance measures to strengthen trust. Overall, Czech Virtuosi presents a professional and trustworthy online presence for a small non-profit cultural entity. Strategic improvements in security posture and privacy compliance will enhance their digital maturity and stakeholder confidence.

TeroAsia is a Thai media company operating a digital news and entertainment portal focused on delivering timely content related to news, sports, entertainment, and cultural programming, particularly associated with Channel 7HD. The website demonstrates a moderate level of digital maturity, leveraging modern web technologies such as Next.js and React, and integrates advertising and tracking tools like Google Tag Manager and Google Ad Manager. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security measures such as HTTPS and domain protection are in place, but additional security headers and vulnerability disclosures are absent, indicating room for improvement in security maturity. Overall, the site is legitimate and serves a broad Thai-speaking audience with relevant media content.

A

AXA Atout Cœur

axa-atoutcoeur.fr

63

AXA Atout Cœur is a French non-profit association affiliated with AXA France, focused on combating social exclusion, risk prevention, and environmental protection. Established in 2009, it mobilizes thousands of volunteers annually to engage in community and environmental actions. The website serves as a platform to inform visitors about the association's mission, upcoming events, and opportunities for engagement such as skills sponsorship. Technically, the site is built using modern React technology with asynchronous loading of analytics scripts including Google Tag Manager and Piano Analytics, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response information are absent. Overall, the site presents a professional and trustworthy digital presence for the association.

EDEKA is a leading German supermarket chain with a strong online presence offering weekly offers, recipes, nutrition information, and sustainability initiatives. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the business's market position.

Č

Česká televize

ct24.cz

66

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

Š

Škoda Auto a.s.

skoda-handy.cz

73

Škoda Auto a.s. is a leading automotive manufacturer in the Czech Republic, offering a specialized program called Škoda Handy aimed at enhancing mobility for persons with reduced mobility. The program provides expert consultancy, vehicle purchase assistance with discounts, financing options, insurance, and tailored vehicle modifications. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site employs modern web technologies including React and Bootstrap, hosted on a CDN infrastructure ensuring moderate to fast performance and excellent mobile optimization. Security posture is strong, with HTTPS enforced, modern security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. The absence of WHOIS data slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site is trustworthy, secure, and well-aligned with the business objectives of Škoda Auto.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

ffhsh.de

59

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The organization targets filmmakers and producers primarily in Northern Germany, offering funding and industry support from project inception through production and distribution. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, optimized for performance and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

moin-filmfoerderung.de

60

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering excellent performance and mobile optimization. The organization maintains a strong market position in northern Germany's media sector, providing comprehensive funding programs and industry support. Security posture is robust with HTTPS, security headers, and secure form handling, though some improvements in cookie consent and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

S

SPM MEDIA a.s.

spmmedia.cz

55

SPM MEDIA a.s. is a Czech media company founded in 2023, serving as the umbrella organization for several media brands including Echo Media, HROT MEDIA a.s, Radio Prostor, and the blogging platform Blogosvět. The company targets a general Czech audience with independent news and media content. Their business model focuses on media publishing and advertising, leveraging multiple platforms and brands to reach a broad audience. The website is professionally designed using modern web technologies such as Next.js and React, with good mobile optimization and SEO practices. Security measures include HTTPS and Google reCAPTCHA for form protection, though some security headers and policies are missing. The WHOIS data is unavailable, which limits domain trust verification, but the website content and business information appear consistent and professional. Overall, the company presents itself as a credible media group with a growing presence in the Czech media market.

I

Institute of Documentary Film

kinedok.net

67

KineDok is a cultural media project operated by the Institute of Documentary Film, specializing in the distribution and screening of documentary films from Central and Eastern Europe in alternative venues such as cafes, galleries, and open-air cinemas. The project also offers online streaming and educational programs, targeting documentary enthusiasts and cultural communities across multiple European countries. The website is well designed, mobile optimized, and uses modern web technologies including React and Next.js, hosted on Websupport.cz. Privacy and cookie policies are present and GDPR compliant, with active social media engagement. Security posture is good with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. WHOIS data shows a stable domain registration since 2014, consistent with the project's history and legitimacy. Overall, the website demonstrates a mature digital presence with strong content quality and business credibility.

S

Sleede SASU

sleede.com

68

Sleede SASU is a French digital agency specializing in web and mobile design and development, leveraging technologies such as React, React Native, Ruby on Rails, and Node JS. The company targets startups, large enterprises, and internal projects, emphasizing agile and lean methodologies. Their website showcases a professional portfolio with client testimonials, indicating a strong market position within the French technology services sector. The business model focuses on delivering tailored digital products with a passion for quality and innovation. Technically, the website employs modern JavaScript libraries and frameworks, including Tiny Slider for UI components, and integrates HubSpot tools for marketing and analytics. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. Nonetheless, no HTTP security headers were detected, and there is no visible security policy or incident response contact information. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. Despite this, the website content and business information appear credible and professional. Overall, the website scores well on content quality and technical implementation but has room for improvement in security posture and domain registration transparency. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.