Security Directory

6

6Minutes Media GmbH

mydealz.de

77

mydealz.de is a leading German e-commerce community platform operated by 6Minutes Media GmbH, a subsidiary of Atolls GmbH. Founded in 2007, it serves as a large-scale shopping community where users share deals, coupons, and discounts. The platform is well-positioned in the market as the largest shopping community worldwide, offering key services such as deal sharing, voucher distribution, community discussions, and deal alerts. The target audience primarily consists of consumers seeking savings and smart shopping decisions. The business model leverages community engagement combined with affiliate marketing and advertising revenue streams. Technically, the website employs modern web technologies including Vue.js, ES modules, and Cloudflare DNS/CDN services, ensuring fast performance and mobile optimization. The site uses structured data (JSON-LD) for enhanced SEO and integrates advertising scripts responsibly. Security posture is strong with HTTPS enforced and Cloudflare protection, though explicit security headers and policies could be more visible. Privacy compliance is basic with cookie consent implemented but lacking explicit privacy and terms of service pages in the analyzed content. Overall, the security posture is good with no detected vulnerabilities or blocking mechanisms. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. The site maintains a high level of professionalism, trustworthiness, and user experience, making it a reliable platform for deal seekers. Strategic improvements include publishing comprehensive privacy and security policies and enhancing transparency around incident response and vulnerability disclosures.

R

ruhrkultur.jetzt

ruhrkultur.jetzt

51

ruhrkultur.jetzt is a digital cultural guide focused on the Ruhr metropolitan area in Germany, providing users with event calendars, ticket information, and location tips related to the RuhrKunstMuseen and RuhrBühnen networks. The website targets culture enthusiasts, tourists, and local residents interested in arts and cultural events. It operates as a regional informational portal with a small business profile founded in 2017. Technically, the website employs modern web technologies including the Ionic Framework and StencilJS, ensuring good mobile optimization and accessibility. The site is served over HTTPS, enhancing security, but lacks some advanced security headers and DNSSEC is not enabled. No CMS or third-party analytics/tracking scripts were detected, indicating a lightweight and privacy-conscious implementation. From a security perspective, the site has a cookie consent mechanism compliant with GDPR but lacks a published privacy policy, terms of service, and explicit security policies or incident response contacts. The domain registration is consistent and transparent, supporting the legitimacy of the business. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, ruhrkultur.jetzt presents a trustworthy and professionally designed cultural guide with room for improvement in privacy documentation and security hardening. Strategic recommendations include publishing privacy and terms documents, enabling DNSSEC, adding security headers, and providing clear contact information for security incidents.

A

AXA S.A.

axa-research.org

56

The AXA Research Fund website represents a well-established non-profit research funding initiative under the AXA Group, focusing on advancing scientific research in health, climate & environment, and socio-economy & new technologies. The site effectively communicates its mission, grant programs, and impact, targeting researchers and academic institutions globally. The technical infrastructure is modern, leveraging JavaScript modules, CSS, and cookie consent tools, with evidence of mobile optimization and accessibility considerations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the website reflects a mature digital presence aligned with its business objectives and parent company branding.

A

AXA Atout Cœur

axa-atoutcoeur.fr

63

AXA Atout Cœur is a French non-profit association affiliated with AXA France, focused on combating social exclusion, risk prevention, and environmental protection. Established in 2009, it mobilizes thousands of volunteers annually to engage in community and environmental actions. The website serves as a platform to inform visitors about the association's mission, upcoming events, and opportunities for engagement such as skills sponsorship. Technically, the site is built using modern React technology with asynchronous loading of analytics scripts including Google Tag Manager and Piano Analytics, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response information are absent. Overall, the site presents a professional and trustworthy digital presence for the association.

H

Honeybadger Industries

honeybadger.social

63

Honeybadger.social is an official Mastodon instance operated by Honeybadger Industries, providing a platform for users to participate in the fediverse. The website serves as a niche social networking platform affiliated with Honeybadger.io, targeting general users interested in decentralized social media. The business is small, technology-focused, and founded in 2017, consistent with the domain registration data. Technically, the site uses Mastodon version 4.4.1 with modern JavaScript modules and is hosted on AWS infrastructure, indicating a moderate level of digital maturity. The site is mobile-optimized and provides basic accessibility features but lacks advanced SEO and privacy compliance mechanisms. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for improvement. Overall, the site is functional but basic in content and compliance, with no detected vulnerabilities or adult content. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and security culture.

P

Private by Design, LLC

ruby.social

68

Ruby.social is a niche Mastodon instance dedicated to the Ruby programming language community, operated by Private by Design, LLC based in the US. The platform offers a federated social networking experience tailored for Ruby enthusiasts, with active user engagement and a clear community focus. Technically, the site runs Mastodon version 4.4.1 with modern web technologies including Ruby on Rails and React, delivering a good user experience with mobile optimization and accessible navigation. Security posture is moderate, with HTTPS enforced and domain registration protections in place, but lacking security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service. Overall, the website is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

N

Neos Foundation e.V.

neos.social

64

Neos.social is a niche Mastodon instance operated by Neos Foundation e.V., focused on providing a social networking platform for discussions related to Neos and connecting users to the broader Fediverse. The platform leverages the open-source Mastodon software (version 4.4.1) and modern web technologies such as React and JavaScript ES modules, delivering a responsive and user-friendly experience. The website content is well-structured and relevant to its target audience, with a consistent branding approach and clear community focus. From a technical perspective, the site employs modern frameworks and technologies, including WebSockets for real-time communication, and uses CDN resources for media delivery. However, some security best practices such as enabling DNSSEC and implementing security headers are not observed, which could be improved to enhance the overall security posture. The absence of cookie consent mechanisms and limited privacy compliance indicators suggest room for improvement in regulatory adherence. Security-wise, the domain registration is transparent and consistent with the organization's identity, enhancing trustworthiness. The domain is protected against unauthorized transfers, but lacks DNSSEC. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site maintains a moderate security posture but would benefit from enhanced security policies and compliance measures. Strategically, Neos.social serves a small but focused community, positioning itself as a specialized social platform within the Fediverse ecosystem. The lack of commercial advertising and tracking aligns with privacy-conscious user expectations. To strengthen its market position and trust, the platform should consider publishing more comprehensive privacy and security policies, implementing cookie consent, and improving technical security controls.

C

Contact Privacy Inc. Customer 0152436388

aus.social

69

Aus.Social operates as an independent Mastodon instance branded as 'thundertoot', providing a federated social networking platform within the fediverse. It targets general users interested in decentralized social media without ads or algorithms. The platform leverages the open-source Mastodon software, currently running version 4.5.0-alpha.1, and employs modern web technologies including React and JavaScript ES modules. Hosting and CDN services are provided via bunny.net, ensuring fast content delivery and good mobile optimization. The website design is professional and consistent with Mastodon's branding, offering clear navigation and user-friendly experience.

S

Smart Network Business Center s.r.o.

smart-network.cz

56

Smart Network Business Center s.r.o. operates a well-established business networking club in the Czech Republic, focusing on connecting entrepreneurs through various event types and membership models. The company has been active since 2013 and hosts hundreds of networking events annually, targeting a broad audience from small business owners to CEOs. Their business model revolves around paid memberships and event participation fees, leveraging personal recommendations and community building as core value propositions. The website is professionally designed, mobile-optimized, and rich in content, including multimedia and educational podcasts, enhancing user engagement and trust. Technically, the website employs modern JavaScript modules, integrates Google Tag Manager, Google Analytics, and Smartlook for analytics and user behavior tracking, and uses CookieHub for cookie consent management. The site is served over HTTPS with good SSL configuration, though explicit security headers could be improved. The presence of a cookie consent mechanism and privacy policy indicates a good level of privacy compliance, though no explicit terms of service or incident response contacts were found. Security posture is solid with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces trust slightly, as it prevents verification of domain ownership and registration details. Overall, the website presents a trustworthy and professional front for the business networking club, with minor recommendations for enhancing security headers and incident response transparency.

A

ANDREAS STIHL AG & Co. KG

stihl-sso.com

67

The website analyzed is the official STIHL dealer portal login page, designed to provide authorized dealers and partners access to account management and related services. STIHL, a well-established German manufacturer of power tools and equipment, uses this portal to facilitate secure Single Sign-On (SSO) authentication for its dealer network. The site is professionally branded, consistent with the corporate identity, and targets a B2B audience. The portal includes essential features such as login, password reset, and registration completion links, with clear references to privacy and terms documents hosted on trusted cloudfront URLs. Technically, the site employs modern web technologies including JavaScript ES modules and likely a SPA framework such as Vue.js, hosted on AWS infrastructure. The site is mobile optimized with a responsive design and uses HTTPS to secure communications. However, some security best practices such as DNSSEC and security headers are not enabled or visible in the provided data. The site lacks a cookie consent mechanism, which is a minor compliance gap. From a security perspective, the portal demonstrates a solid baseline with encrypted login forms and no exposed sensitive data. The domain registration is consistent with the business, and the domain age is appropriate for a corporate SSO service. No signs of phishing, malware, or blocking by WAFs were detected. Privacy policies and terms of service are clearly linked, supporting GDPR compliance. Overall, the site is trustworthy and professionally maintained. The overall risk is low, but improvements in security headers, DNSSEC, and cookie consent would enhance the security posture and compliance. Strategic recommendations include implementing these controls and publishing explicit security and incident response policies to strengthen trust and readiness.

P

Private by Design, LLC

wikis.world

67

Wikis World operates as a niche Mastodon social media instance targeting wiki enthusiasts and general users interested in decentralized social networking. The platform is community-driven, emphasizing open content licensed under Creative Commons and governed by clear moderation policies. The business is small, US-based, and founded in 2022, with transparent administration and no commercial advertising, positioning itself as a trusted community hub within the fediverse. Technically, the website leverages Mastodon 4.4.1 with modern JavaScript modules and React components, hosted by masto.host in the EU. The infrastructure is adequate with moderate performance and good mobile optimization, though some accessibility and SEO features are basic. The absence of DNSSEC and security headers suggests room for security enhancements. Security posture is solid with HTTPS enforced and domain status locks, but lacks published security policies or incident response contacts. Privacy compliance is basic with a privacy policy present but no cookie consent or GDPR-specific details. No vulnerabilities or malicious indicators were detected. Overall, the website presents a trustworthy, well-maintained community platform with good business credibility and technical foundation but could improve in security hardening and privacy compliance to enhance user trust and resilience.

L

Lentiamo s.r.o.

lentiamo.at

73

Lentiamo s.r.o. operates a professional e-commerce platform specializing in the sale of contact lenses, prescription glasses, sunglasses, and related accessories primarily targeting the Austrian market and other European countries. The website demonstrates a strong market position with a broad product catalog, virtual try-on features, and a loyalty program, supported by a Trusted Shops certification and excellent customer ratings. Technically, the site employs modern web technologies including Google Tag Manager, ES modules, and JSON-LD structured data, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS enforcement, secure login forms, and cookie consent mechanisms, though the absence of a published security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable gap, slightly impacting trustworthiness, but overall the site presents as a credible and professional retail platform.

S

Samurai69

meghanabowen.design

58

Samurai69 is an Indonesian e-commerce website focused on providing links and access to online slot gaming platforms, emphasizing turbo freespin and maxwin features. The site is hosted on the Shopify platform, utilizing the Horizon theme and standard Shopify analytics and security tools such as hCaptcha. While the website is accessible and functional, it lacks publicly available WHOIS registration data, which raises concerns about domain legitimacy and trustworthiness. The site includes basic privacy and terms of service pages but lacks comprehensive GDPR compliance and cookie consent mechanisms. Contact information is limited to a contact form without explicit emails or phone numbers. Security posture is moderate with HTTPS enforced but minimal security headers detected.

O

Galerie kulturních osobností Oldřicha Škáchy

oldrichskacha.cz

59

The website oldrichskacha.cz/galerie-osobnosti serves as a cultural gallery dedicated to Oldřich Škácha and other prominent Czech cultural figures, with a strong emphasis on photographic documentation of Czech history and personalities such as Václav Havel. It targets cultural enthusiasts, historians, and the general public interested in Czech cultural heritage. The site is associated with the Václav Havel Library, enhancing its cultural credibility. Technically, the site employs modern JavaScript modules including PhotoSwipe for image galleries, jQuery, and Selectize.js for search functionality, hosted by cesky-hosting.eu. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is moderate with HTTPS implied but no detected security headers or explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. WHOIS data reveals a very recent domain registration date inconsistent with the historical nature of the content, which may affect trust. Overall, the site is professionally designed and trustworthy for cultural content but requires improvements in privacy, security, and transparency to enhance compliance and credibility.

P

Premium OOH, a.s.

premiumooh.com

45

Premium OOH, a.s. operates a premium digital out-of-home advertising network focused on innovative 3D billboards located in prime locations in Prague, Czech Republic. The company targets brands seeking high-impact advertising solutions in Central Europe. Their website reflects a modern, professional digital presence built on Nuxt.js and Tailwind CSS, offering good mobile optimization and user experience. Contact and company information is clearly presented, supporting business credibility. However, the absence of WHOIS data raises questions about domain registration legitimacy and age. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

C

CEWE FOTOKNIHA - fotoobrazy, fotky a ďalšie fotoprodukty | CEWE.sk

cewe.sk

61

The website www.cewe.sk represents a regional e-commerce platform specializing in photo products such as photobooks, photo prints, photo gifts, and related services. It targets consumers in Slovakia interested in personalized photo products and offers a dedicated mobile app for photo projects. The business model is retail-focused with a medium-sized market presence and consistent branding. Technically, the site employs modern web technologies including JavaScript ES modules, SVG icons, responsive images, and integrates consent management via Usercentrics. Google Tag Manager and Adobe DTM are used for analytics and marketing tag management, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and published security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the provided content. Overall, the site is professional, user-friendly, and trustworthy but could improve transparency around privacy and security policies.

Day One Journal is a digital journaling service operated by DNStination Inc., a US-based company established in 2011. The service focuses on capturing life moments through a subscription-based journaling application. The website's branding and metadata reflect a consistent and focused business offering. Technically, the site uses modern JavaScript modules and is hosted on Amazon AWS infrastructure, indicating a moderate level of digital maturity. However, the provided HTML content is minimal, showing only the login page skeleton without visible forms or contact details. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site appears legitimate and moderately professional but would benefit from enhanced transparency and security practices.

S

Sekyra Group, a. s.

sekyragroup.com

62

Sekyra Group, a. s. is a well-established Czech real estate development company with a strong market presence since 1996. The company specializes in residential and commercial property development, including large urban district projects in Prague such as Smíchov City and Rohan City. Their website reflects a professional and consistent brand image targeting investors, multinational corporations, and property buyers or tenants. The business model focuses on real estate investment and development with sales and leasing services. Technically, the website uses modern JavaScript modules, Vite build tooling, and Google Tag Manager for analytics, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or headers. Overall, the site is trustworthy and content-rich, with no suspicious or adult content detected.

T

Tycová & partneři, advokátní kancelář s.r.o.

paragrafybezrizika.cz

47

Paragrafy bez rizika is a Czech legal service platform focused on providing comprehensive legal support to municipalities and towns. The website is professionally designed using modern frontend technologies such as React and Material-UI, offering a user-friendly experience with clear navigation and mobile optimization. The business operates under the legal entity Tycová & partneři, advokátní kancelář s.r.o., with contact details and physical address clearly presented, enhancing trust and credibility. The service targets local government clients seeking affordable legal assistance. Despite the professional presentation, the absence of WHOIS registration data raises some concerns about domain legitimacy, though the website content and contact information appear consistent and reliable. Privacy and cookie policies are implemented, indicating compliance with GDPR requirements.

G

GASAG-Gruppe

gasag-gruppe.de

59

GASAG-Gruppe is a well-established energy company based in Berlin, Germany, with a history dating back to 1847. The company operates primarily in the energy sector, focusing on sustainable and climate-neutral energy solutions including the supply of green gas and electricity, energy services, and renewable energy production. The website reflects a mature digital presence with modern technologies such as Usercentrics for consent management and Google Tag Manager for analytics, hosted on Microsoft Azure DNS infrastructure. The site is professionally designed, mobile-optimized, and provides comprehensive corporate information and navigation. Security posture is strong with HTTPS enforced and consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and domain registration data indicate a legitimate and credible business with a strong regional market position.

S

Slovenský zväz pre chladenie, klimatizáciu a tepelné čerpadlá (SZ CHKT)

cerpajteplo.sk

54

The website www.cerpajteplo.sk serves as an informational platform dedicated to heat pump technology and subsidies in Slovakia. It is backed by a partnership of 11 companies and affiliated with the Slovak Association for Refrigeration, Air Conditioning, and Heat Pumps (SZ CHKT). The site targets Slovak homeowners and individuals interested in energy-efficient heating solutions, providing educational content, subsidy guidance, cost calculators, and case studies. The business model focuses on education and promotion rather than direct sales, positioning itself as a trusted industry resource. Technically, the site employs modern web technologies including Bootstrap 5, JavaScript ES modules, and Google Tag Manager for analytics. It is mobile-optimized with good SEO practices and a clear navigation structure. Performance is moderate, with embedded multimedia content enhancing user engagement. Security measures include HTTPS enforcement and a cookie consent mechanism, though additional security headers and formal policies are absent. From a security perspective, the website demonstrates a solid baseline with encrypted connections and CSRF token usage. However, the lack of explicit privacy policies, terms of service, and security headers suggests room for improvement in compliance and defense-in-depth. No vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is a credible, well-maintained resource with good content quality and business credibility. Strategic enhancements in privacy compliance, security policies, and accessibility would further strengthen its posture and trustworthiness.

R

Robert Bosch SIA

bosch.lv

61

Robert Bosch SIA operates the Latvian localized website for Bosch, a leading multinational technology and engineering company. The website serves as a corporate portal presenting Bosch's product offerings in mobility, home solutions, and industrial sectors. It targets both general consumers and business clients in Latvia, providing comprehensive information about products, company history, and contact channels. The site maintains consistent branding aligned with Bosch's global identity and offers content primarily in Latvian with English alternatives.

vis.social is a niche Mastodon instance serving a community of creative professionals and researchers in scientific art, science communication, data visualization, and creative coding. It operates as a decentralized social media platform leveraging the open-source Mastodon software, providing a welcoming environment with a focus on inclusion and community engagement. The platform encourages sharing, discussion, and critique among its members, primarily English-speaking users interested in scientific and artistic topics. The business model is community-driven with free registration and optional donations to support the instance's operation. Technically, vis.social employs a modern web stack centered around Mastodon version 4.4.1, utilizing JavaScript ES modules, CSS with integrity checks, and SVG assets for UI elements. The site is mobile-optimized and demonstrates good SEO practices. Hosting details are partially inferred from the registrar (Gandi SAS), with no explicit CMS detected. Performance is moderate, with no major technical debt or errors observed. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and security headers are not explicitly present in the analyzed content. There is no published security policy or incident response contact information. Privacy compliance is partial, with a basic privacy policy available but lacking cookie consent mechanisms and terms of service. No vulnerabilities or exposed sensitive data were detected. Overall, vis.social presents a trustworthy and professional community platform with a solid technical foundation and good business credibility. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would enhance its security posture and user trust.

S

STRIVE Magazine

strive-magazine.de

68

STRIVE Magazine is a German-language digital magazine and e-commerce platform focused on female empowerment in business, career, finance, and psychology. The website is built on the Shopify platform, leveraging various Shopify apps and third-party JavaScript libraries to provide marketing, countdown timers, and form functionalities. The site targets a general audience interested in innovative economic stories and role models, positioning itself as a niche media outlet in the German market. Technically, the site is well-structured with modern technologies and good mobile optimization, hosted on Shopify's secure CDN infrastructure with HTTPS enforced. However, the absence of explicit privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Security posture is generally good due to Shopify's platform security, but additional security headers and formal policies would enhance trust. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer contact information to strengthen business credibility and user trust.

K

KOVOS družstvo Teplice

konfigurace-stolu.cz

69

The website konfigurace-stolu.cz represents KOVOS družstvo Teplice, a small manufacturing business specializing in professional work tables. The site offers an electronic configurator allowing customers to customize work tables for workshops, garages, and laboratories. The business model is e-commerce focused, providing both ready-made and configurable products. The company targets professional users requiring durable and customizable workstations. The website is well-designed with modern frontend technologies such as Stimulus JS, Swup, and Tailwind CSS, ensuring good performance and mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, enhancing user trust. However, the absence of WHOIS data and lack of visible security headers slightly reduce the overall trustworthiness. No contact emails or phone numbers are explicitly provided on the homepage, which could impact customer support perception. Overall, the site is professional and functional, serving a niche manufacturing market effectively.

H

Helicopter Alliance

helicopter-alliance.com

74

Helicopter Alliance is a newly established (2023) consortium of six leading helicopter companies specializing in the full lifecycle of UH-60 Black Hawk helicopters. Their services include sale, delivery, modernization, maintenance, training, and mission equipment installation, targeting military, law enforcement, commercial, and aerial firefighting sectors. The company positions itself as a niche leader with a global presence headquartered in the US and Europe. Technically, the website employs modern web technologies with a focus on multimedia content and responsive design, though some improvements in accessibility and security headers could be made. Security posture is solid with HTTPS and GDPR compliance, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

S

Simplea pojišťovna, a.s.

simpleapoistovna.sk

70

Simplea pojišťovna, a.s. is a Slovak life insurance company focused on providing straightforward risk life insurance products covering life, disability, and income loss. The company emphasizes simplicity, fast claims processing, and higher coverage compared to competitors. The website is professionally designed, mobile-optimized, and provides clear contact information and social proof, positioning the company as a trustworthy niche player in the Slovak insurance market. Technically, the site uses modern JavaScript frameworks and lazy loading for performance, with Google Tag Manager for analytics. Security posture is good with HTTPS and no visible vulnerabilities, though security policies and incident response information are lacking. Overall, the site is compliant with GDPR and provides cookie consent mechanisms, supporting privacy compliance. The domain registration aligns well with the business claims, enhancing legitimacy. Strategic recommendations include publishing security and incident response policies and adding vulnerability disclosure information to improve trust and compliance.

A

Apple Music

applemusic.com

79

Apple Music is a leading global digital music streaming service operated by Apple Inc., offering millions of songs, music videos, and live performances accessible via web, app, and Android platforms. The service targets a broad general audience with a subscription-based business model, positioning itself as a major player in the media and entertainment industry. The website demonstrates a high level of digital maturity, employing modern web technologies such as AMP and Svelte for optimized performance and mobile responsiveness. The branding is consistent and professional, reinforcing trust and market leadership. From a security perspective, the website enforces HTTPS and employs strict referrer policies, though explicit security headers are not visible in the provided HTML content. No vulnerabilities or suspicious elements were detected. However, the absence of visible privacy and cookie policies and incident response contacts suggests areas for improvement in compliance and transparency. The WHOIS data for the domain is unavailable due to registry restrictions, which is typical for large enterprises like Apple and does not detract from the domain's legitimacy. Overall, Apple Music's web presence is robust, secure, and user-friendly, with excellent content quality and business credibility. Strategic enhancements in privacy disclosures and security header implementation would further strengthen its compliance posture and user trust.

S

Safichem Invest

saficheminvest.com

69

Safichem Invest is a private real estate investment and asset management company established in 2012 as part of the Safichem Group. The company focuses on high-value commercial and residential properties, leveraging premium locations and property management expertise. Their portfolio includes 13 current projects with a total value of approximately €387.4 million. The website reflects a professional and consistent brand image, targeting investors and stakeholders in the real estate sector primarily in the Czech Republic and Slovakia. Technically, the site uses modern JavaScript modules, Google Maps API, and cookie consent mechanisms, though no explicit CMS or hosting provider is identified. Security posture is good with HTTPS and CSRF protections, but DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with a GDPR policy and consent mechanisms on forms. Overall, the site is trustworthy and well-maintained but could improve by adding terms of service and explicit security policies.

RECOM REALITY s.r.o. is a well-established real estate company based in the Czech Republic, with over 31 years of experience primarily serving the Karlovy Vary and Prague regions. The company focuses on property sales, rentals, and real estate consulting, emphasizing a family-oriented and local approach. Their website reflects a professional and consistent brand image, targeting property buyers, sellers, and renters in the Czech market. Technically, the site uses modern JavaScript frameworks such as Vue.js and Inertia.js, integrates Google Maps for location services, and employs Google Tag Manager and Facebook Pixel for analytics and marketing. The hosting is managed via Microsoft Online services, indicating a reliable infrastructure. Security-wise, the website enforces HTTPS and provides a comprehensive cookie consent mechanism compliant with GDPR, although it lacks explicit security headers and detailed security policies. No critical vulnerabilities or suspicious content were detected, and the domain registration data supports the legitimacy and longevity of the business. Overall, the website presents a trustworthy and professional digital presence with room for security enhancements and expanded policy disclosures.

Č

ČESKÝ INTERNET s.r.o.

ceskereality.cz

54

ČESKÉREALITY.cz is a prominent Czech real estate portal operated by ČESKÝ INTERNET s.r.o., aggregating over 65,000 property listings from more than 1,000 real estate agencies. The platform offers comprehensive services including property sales, rentals, auctions, developer projects, and detailed profiles of real estate agents. It targets property buyers, sellers, renters, and real estate professionals within the Czech Republic, positioning itself as a leading marketplace in the local real estate sector. The website features a modern, responsive design with good navigation and content relevance, supported by a robust technical stack including Vue.js and Symfony frameworks.

O

OeAD - Austria's Agency for Education and Internationalisation

studyinaustria.at

53

The website studyinaustria.at is an official educational portal managed by OeAD, Austria's Agency for Education and Internationalisation, a government-owned non-profit entity. It provides comprehensive information and services for international students interested in studying in Austria, including study programmes, institutions, scholarships, and visa guidance. The site is well-positioned as an authoritative source in the education sector, targeting prospective students globally. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, a consent management platform (Usercentrics), and Matomo analytics for privacy-conscious tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and integrates privacy-compliant cookie consent. No vulnerabilities or exposed sensitive data were detected. However, the site could improve by publishing explicit terms of service, vulnerability disclosure policies, and direct security contact information. Overall, the website presents a low-risk profile with strong trust indicators, professional content, and compliance with GDPR. Strategic recommendations include enhancing transparency around security incident response and expanding legal documentation to further bolster user trust.

A

abfallplus

abfallplus.de

45

abfallplus is a German-based company specializing in digital solutions for waste management and municipal citizen services. Their offerings include smart modules for waste collection, complaint management, and communication support aimed at simplifying citizen interactions and automating administrative workflows. The website is built on WordPress using the Divi theme and incorporates modern web technologies including JavaScript ES modules and Matomo analytics for user tracking. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is limited by the absence of a clear privacy policy, though a cookie consent mechanism is present. Business credibility is supported by professional content and consistent branding, but contact information is not explicitly found in the provided content. Overall, the website is functional and professional but would benefit from enhanced security and privacy disclosures to improve trust and compliance.

S

Shift Your Branding Agency

shiftyouragency.com

55

Shift Your Branding Agency is a newly established creative and strategic branding agency founded in 2023. The company focuses on transforming brands through services such as branding, design, rebranding, consulting, and communication campaigns. Their market position is that of a specialized boutique agency targeting businesses seeking comprehensive brand identity and digital presence enhancements. The website showcases multiple case studies demonstrating their expertise across various branding and design projects. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Bing Ads for marketing and analytics purposes. The site is hosted on Amenworld servers and uses Statamic CMS inferred from HTML attributes. Performance and mobile optimization are good, with responsive images and modern JavaScript modules. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating gaps in privacy compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and security posture. Overall, the website is professional and functional but would benefit from adding privacy and cookie policies, improving security headers, and publishing incident response details. The domain registration is consistent with the business age and shows no suspicious patterns, supporting legitimacy. The risk level is moderate with recommendations to enhance privacy compliance and security best practices.

D

Digitoimisto Dude Oy

mementomori.social

71

Mementomori.social is an independent Mastodon social media instance operated by the Finnish digital agency Digitoimisto Dude Oy. It serves as a federated social platform connecting users to the broader Fediverse, emphasizing privacy and open-source values. The platform targets general social media users interested in decentralized social networking without algorithmic interference. Technically, the site runs a modern Mastodon version with React-based UI components, hosted with Cloudflare DNS services, and uses HTTPS with good SSL configuration. The site is moderately performant and mobile-optimized but lacks some advanced SEO and accessibility features. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism despite usage of a tracking script. Overall, the site is trustworthy and professionally maintained, with a good balance of content quality and technical implementation.

S

SIA 1k.lv

1k.lv

60

1k.lv is a Latvian technology-driven real estate marketplace and agency offering a full spectrum of property sales services including valuation, marketing, legal support, and transaction closure. The company positions itself as a professional and licensed agent with 15 years of experience, targeting property sellers and buyers in Latvia. The website is well-structured with clear business information and contact details, supported by structured data for SEO. Technically, the site uses modern React-based infrastructure with module scripts, Google Fonts, and integrates with services like Supabase and Google Analytics. Security posture is good with HTTPS and a strict Content Security Policy, though the use of 'unsafe-inline' and 'unsafe-eval' in CSP reduces security effectiveness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or Terms of Service page. Overall, the site is professional, trustworthy, and well-optimized for its market, but could improve security and compliance aspects.

G

glammr.us

glammr.us

66

glammr.us operates as a niche Mastodon instance dedicated to individuals interested in galleries, libraries, archives, museums, memory work, and records (GLAMMR). It provides a decentralized, harassment-free social media platform emphasizing inclusivity and community support. The platform encourages diverse content beyond GLAMMR topics, fostering a welcoming environment for all users. The business model relies on community donations via Patreon and Ko-Fi to sustain server operations. Technically, the site is built on the Mastodon platform using modern web technologies including React and ES modules, delivering a moderately performant and mobile-optimized user experience. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR-specific disclosures. Overall, the site demonstrates good business credibility and technical maturity for a small independent social media server.

T

tech.lgbt Moderators

tech.lgbt

60

tech.lgbt operates as a niche Mastodon instance providing a federated social networking platform primarily for LGBTQIA+ individuals and allies interested in technology and academic topics. The platform fosters community engagement through posts, hashtags, and news aggregation from across the fediverse, positioning itself as a trusted space for marginalized identities within the tech sector. The website's content and user base reflect a focused community with approximately 2.7K active users, indicating a small but engaged audience. The business model centers on community-driven social networking without commercial advertising or tracking, emphasizing privacy and inclusivity. From a technical perspective, the site leverages modern web technologies including React and JavaScript ES modules, hosted on DigitalOcean with domain registration via NameCheap. The platform runs Mastodon version 4.4.0-alpha.5+glitch, indicating active maintenance and use of open-source social networking software. The website demonstrates good mobile optimization and basic accessibility features, though SEO and performance optimizations are moderate. The absence of cookie consent mechanisms and some security headers suggests areas for improvement in compliance and security hardening. Security posture is solid with HTTPS enforced and no exposed sensitive data detected. However, the lack of DNSSEC and security headers such as CSP or HSTS represents potential vulnerabilities. The WHOIS data shows privacy protection for the domain registrant, which is justified given the community nature of the platform. No incident response or vulnerability disclosure policies are publicly available, which could be enhanced to improve trust and security readiness. Overall, tech.lgbt presents a professional, trustworthy, and community-focused platform with a strong emphasis on privacy and inclusivity. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, adding cookie consent and vulnerability disclosure policies, and providing clearer contact information for security incidents. These steps would enhance compliance, security posture, and user trust, supporting sustainable growth and resilience in the federated social networking space.

C

Chambre des Députés

propositions.lu

62

The website propositions.lu is an official government platform managed by the Chambre des Députés of Luxembourg. It serves as a digital interface for citizens to participate in the legislative process by submitting and supporting Propositions Motivées aux Fins de Légiférer (PML). The platform is well-structured, primarily in French, and offers clear guidance and resources for legislative participation. The site targets Luxembourgish voters aged 18 and above, providing a transparent and accessible channel for democratic engagement. Technically, the site is built on a modern Angular framework with a responsive design optimized for mobile devices. It employs standard web technologies including Font Awesome and Bootstrap CSS variables. The site uses HTTPS with strong SSL configuration, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. Accessibility is addressed but with some noted deficiencies. From a security perspective, the site demonstrates good practices such as encrypted data transmission and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits the ability to fully verify domain registration legitimacy. The site includes comprehensive privacy and legal notices, with a clearly identified Data Protection Officer contact. Overall, the platform presents a trustworthy and professional government service with room for minor improvements in security headers and privacy mechanisms. Strategically, the site supports Luxembourg's democratic processes by enabling direct citizen involvement in lawmaking. It is positioned as a key digital government service with high trustworthiness and professional content quality.

Z

ZONER, a.s.

zonerai.com

45

Zoner AI Image Creator is a recently launched online platform by ZONER, a.s., offering free and easy-to-use AI-powered image generation with 4K resolution. The service targets general users interested in creative AI-generated images and is accessible globally via web browsers. The website is built using modern web technologies including Material UI and JavaScript ES modules, hosted likely on infrastructure associated with ZonerCloud. The domain is newly registered in 2023, consistent with the launch of this new service. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating room for compliance improvements.

P

Private by Design, LLC

bolha.one

63

Bolhinha is an independent Mastodon instance serving a Portuguese-speaking community. It offers a moderated social networking platform without a specific theme, leveraging the Mastodon federated social network technology. The site is relatively new, founded in 2022, and operated by Private by Design, LLC, a US-based entity. The platform targets Portuguese speakers interested in decentralized social networking and community engagement.

T

TurtleIsland.social

turtleisland.social

63

TurtleIsland.social is a niche Mastodon instance dedicated to serving Native/Indigenous people and their true Allies, providing a decentralized, ad-free, and culturally respectful social media platform. Founded in 2023 and administered by members of the Mvskoke Nation, it emphasizes Indigenous sovereignty and community safety through strict moderation policies. The platform leverages the Mastodon open-source software and is federated with the broader Fediverse network, enabling users to interact across multiple instances. The business model is donation and administrator funded, with no fees charged to users.

C

c/o whoisproxy.com

vmst.io

68

vmst.io operates as an independent Mastodon server catering to respectful technologists, geeks, and nerds. It provides a federated social networking platform allowing users to participate in the fediverse with features such as trending posts, hashtag exploration, and user profiles. The platform is positioned as a niche community server with a small but active user base, emphasizing respectful and tech-focused interactions. The business model revolves around hosting and community management rather than commercial advertising or monetization. Technically, the site leverages Mastodon version 4.5.0-alpha.1, React for frontend rendering, and is hosted on DigitalOcean with domain registration via 1API GmbH using privacy proxy services. The infrastructure is modern and supports mobile optimization and accessibility at a basic level. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not active and security headers are not explicitly detected. Privacy compliance is supported by the presence of privacy and terms of service pages, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

M

Mastodon Brasil

mastodon.com.br

70

Mastodon Brasil operates as an independent Mastodon server instance primarily serving Portuguese Brazilian speakers. It provides a federated social networking platform that emphasizes inclusivity and a welcoming environment for diverse communities. The platform leverages the open-source Mastodon software, positioning itself as a community-driven alternative to mainstream social networks. Its market position is niche but important within the Brazilian and Portuguese-speaking fediverse ecosystem. Technically, the website is hosted on DigitalOcean and employs modern web technologies including React and WebSockets, ensuring a responsive and interactive user experience. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and shows no signs of exposed vulnerabilities or sensitive data leaks. However, it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the site is trustworthy, safe, and well-maintained, but could improve in privacy and security documentation to enhance user trust and compliance.

K

Královehradecký kraj

kr-kralovehradecky.cz

63

Královehradecký kraj operates an official regional government website providing comprehensive information about the regional administration, public services, news, and community resources. The site targets residents and stakeholders within the Královéhradecký region of the Czech Republic, offering key services such as contact directories, grant information, and cultural portals. The website is built on a modern Drupal 10 CMS platform, utilizing contemporary web technologies including Bootstrap and Google Tag Manager, ensuring a responsive and accessible user experience. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature privacy posture. However, the absence of security headers and a security.txt file indicates room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The lack of WHOIS data is unusual but likely due to registry or query limitations rather than malicious intent, given the official nature of the site. Overall, the website demonstrates a solid technical infrastructure and professional presentation consistent with government standards. It maintains good privacy compliance and user trust indicators, including clear contact information and social media engagement. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security posture.

L

La Gran Escapada

lagranescapada.com.mx

55

La Gran Escapada is a government-supported Mexican tourism promotion platform aimed at boosting national tourism through special discounts and offers on hotels, restaurants, and experiences. The website targets a general audience interested in domestic travel and leverages modern web technologies such as Angular and Bootstrap to deliver a responsive and visually appealing user experience. The platform positions itself as a trusted source for tourism promotions backed by official government entities, enhancing its credibility in the hospitality sector. Technically, the website employs a modern frontend stack with Angular 13 and Bootstrap 5.3, ensuring good mobile optimization and a clean design. However, there is room for improvement in accessibility and SEO optimization. The site loads external resources from reputable CDNs but lacks advanced analytics or tracking tools, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files were found. The absence of cookie consent mechanisms and limited privacy compliance indicators suggest the site could improve its adherence to data protection regulations. No suspicious or vulnerable scripts were detected, and no exposed sensitive data was found. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy notices, and incident response transparency would enhance trust and compliance.

G

goget.online is available for purchase - Sedo.com

goget.online

54

The website is a domain sales landing page hosted by Sedo.com, a well-known domain marketplace platform. It offers the domain goget.online for purchase. The business model revolves around domain aftermarket sales, brokerage, and auctions, targeting domain investors and buyers. The platform is established with a long domain age and reputable registrar, World4You Internet Services GmbH, indicating legitimacy and trustworthiness. Technically, the site uses modern web technologies including JavaScript modules, web fonts, and Cloudflare DNS, providing a moderate performance and good mobile optimization. However, the content quality is basic, primarily focused on domain sales without extensive business or contact information. Security posture is moderate with domain transfer protection and DNS via Cloudflare, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no explicit privacy or terms of service found, though a cookie consent mechanism is present. Overall, the site is safe with no adult or explicit content detected, but lacks comprehensive compliance and contact transparency.

S

Sabiedrība ar ierobežotu atbildību “Veselības centrs 4”

vc4.lv

67

Veselības centrs 4 is a well-established healthcare provider in Latvia, operating for approximately 30 years and offering a wide range of multi-profile medical services. The website reflects a professional presence with clear branding and comprehensive information about services and privacy practices. The target audience primarily consists of Latvian patients seeking medical treatment and diagnostics. Technically, the site leverages modern JavaScript modules, Cloudflare hosting, and integrates Google services such as Analytics and reCAPTCHA, indicating a mature digital infrastructure. Security measures include HTTPS enforcement, CSRF tokens, and a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a strong security posture and good privacy compliance, though explicit terms of service and security policy pages are absent.

B

Bizneo HR

bizneohr.com

61

Bizneo HR is a technology company specializing in human capital management and talent management software solutions. Their platform targets HR teams and companies seeking integrated HR tools, positioning themselves as a preferred choice for professional HR management. The website serves as a portal entry point for company-specific access, indicating a SaaS business model focused on enterprise clients. Technically, the website employs modern JavaScript modules, Google Tag Manager, Google Analytics, and Cloudflare DNS services. The site is mobile-optimized with good design quality and user experience, though accessibility features are basic. Performance is moderate, and SEO optimization is basic but present. From a security perspective, the site uses HTTPS and includes CSRF tokens and reCAPTCHA for form security. However, DNSSEC is not enabled, and no explicit HTTP security headers were detected, which are areas for improvement. Privacy and cookie policies are absent, indicating a gap in compliance with GDPR and related regulations. Overall, the website is professional and trustworthy with moderate security posture and technical maturity. Strategic improvements in privacy compliance, DNS security, and security headers would enhance trust and reduce risk.

The website myvaillantweb.ch is associated with the Vaillant Group, a large company operating in the energy sector, likely focusing on heating and ventilation solutions. The site appears to serve as a customer or partner portal for the Swiss market. However, the visible content is minimal, primarily showing a loading screen with no accessible user content or navigation elements. The technical infrastructure uses modern JavaScript modules and Material-UI components, indicating a contemporary frontend framework. Analytics and consent management are implemented via Google Tag Manager and ConsentManager respectively. Security posture is limited due to lack of visible security headers and absence of privacy or terms of service pages. No contact information or forms are present in the HTML content, limiting user engagement and transparency. Overall, the site is accessible without WAF or security challenges but lacks comprehensive content and compliance documentation.