Security Directory

I

iwa

iwa.info

72

IWA OutdoorClassics is a globally recognized trade exhibition specializing in the hunting, target sports, and outdoor industry. The event serves as a premier platform for manufacturers, retailers, distributors, and media to showcase new products, network, and explore market trends. The website reflects a professional and well-structured digital presence, emphasizing event details, exhibitor information, and industry insights. Technically, the site leverages modern web technologies including React and Next.js, hosted likely on infrastructure associated with NürnbergMesse GmbH, the event organizer. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, the absence of a public security policy or incident response contact is noted. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

Q

QubicaAMF

qubicaamf.com

65

QubicaAMF is a leading global supplier and service provider in the bowling industry, offering a comprehensive range of products and services including bowling alley construction, modernization, maintenance, and business support. The company positions itself as an innovation leader, targeting bowling business owners and investors worldwide. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Plone 6 with React, integrates Google Analytics and Sentry for monitoring, and employs modern web standards with good performance and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though the absence of a public security policy and incident response details suggests room for improvement. The WHOIS data is notably missing, which raises some concerns about domain registration transparency, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing transparency around security policies and incident response, and verifying domain registration details to strengthen trust.

L

Logix On Cloud (v. / 3.37.0.48 beta)

logixoncloud.com

65

Logix On Cloud is a software platform currently in beta version 3.37.0.48, hosted on a domain registered in 2020 via GoDaddy.com, LLC. The website appears to be a cloud-based service with a modern React and Material UI frontend. However, the site lacks critical business and compliance information such as privacy policies, cookie consent mechanisms, terms of service, and contact details. The technical infrastructure shows use of modern web technologies but lacks visible security headers and SSL configuration details, which raises concerns about security posture. No analytics or advertising scripts were detected, indicating minimal tracking. Overall, the site is functional but basic, with limited content and low trust indicators.

S

StudyKIK

studykik.com

72

StudyKIK is a healthcare technology company specializing in patient recruitment and retention for clinical trials. Founded in 2013 and operating under the parent company Syneos Health, StudyKIK offers a comprehensive platform that connects patients, clinical trial sites, and sponsors to accelerate medical research and treatment development. Their services include patient recruitment, eConsent, virtual visits, study websites, and trial reporting, targeting patients, families, clinical sites, and sponsors. The company positions itself as a trusted partner in clinical research with a mission to bring new treatments to people faster through education and innovative technology. Technically, the website is built using modern web technologies including React, Google Tag Manager, and Cloudflare for hosting and security. It integrates third-party tools such as OneTrust for cookie consent management, PureChat for live chat support, and Hotjar for user behavior analytics. The site demonstrates good performance and mobile optimization, with a professional and accessible design. SEO and privacy compliance are well addressed with proper meta tags, privacy and cookie policies, and GDPR consent mechanisms. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses clientTransferProhibited status to protect domain transfers. However, DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistent registration history. Contact information is clearly provided, including email, phone numbers, and social media channels. Overall, StudyKIK's website reflects a mature digital presence with strong business credibility and a solid security posture. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a vulnerability disclosure program to further enhance trust and compliance.

W

Walgreens

walgreens.com

74

Walgreens is a leading US-based retail pharmacy chain offering a broad range of pharmacy, health, wellness, and photo services both in-store and online. The website serves as a comprehensive digital platform for customers to refill prescriptions, shop health products, and create photo gifts, reflecting a mature e-commerce presence. The site leverages enterprise-grade technologies including Adobe Experience Manager, Adobe Analytics, and Akamai CDN to deliver a performant and user-friendly experience. Privacy and cookie consent mechanisms are robust, indicating compliance with GDPR and other regulations. Security posture is strong with HTTPS enforcement and modern security headers, though explicit security policies and vulnerability disclosures are not publicly detailed. WHOIS data is unavailable, likely due to privacy protection or registry issues, but the website's branding and content strongly affirm its legitimacy. Overall, Walgreens.com demonstrates a high level of digital maturity, security awareness, and business credibility.

E

EmVenio

emvenio.com

69

EmVenio is a healthcare-focused clinical research services provider specializing in increasing clinical trial participation through innovative approaches such as mobile visits, site networks, and patient navigation. The company operates globally with presence in over 80 countries and has supported more than 800 studies since its founding in 2008. Their business model centers on bringing clinical trials closer to patients by meeting them in their communities, thereby improving enrollment and retention rates. Technically, the website is built using modern frameworks like Next.js and React, hosted on Microsoft Azure, and integrates multimedia content and advanced cookie consent mechanisms. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs multiple security headers, and uses consent management tools, indicating a strong security posture. However, the absence of publicly available WHOIS data and lack of explicit contact emails or phone numbers slightly reduce trustworthiness. There is also no visible security policy or incident response information, which could be improved. Overall, EmVenio presents a professional and trustworthy online presence with a solid technical foundation and good privacy compliance. The main risk lies in the opaque domain registration details, which should be addressed to enhance legitimacy and trust.

P

PubPub

pubpub.org

53

PubPub is a community publishing platform focused on collaborative knowledge creation and dissemination. It is evolving towards a full-stack knowledge infrastructure platform under the parent organization Knowledge Futures Group. The website targets academic and research communities, providing tools for community publishing and knowledge sharing. The platform maintains a niche position in the technology and education sectors with a small organizational size. Technically, the website is built using modern web technologies including React and Blueprint.js, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and privacy policies are lacking. The WHOIS data is unavailable due to a malformed query, which slightly reduces trustworthiness but the active social presence and consistent branding support legitimacy. Overall, the site is professional and safe for general audiences.

K

Kenjo

kenjo.io

68

Kenjo is a technology company offering workforce management software tailored for small and medium enterprises (SMEs) with deskless teams. Their platform consolidates HR tasks such as shift planning, time tracking, and payroll preparation into a single solution, positioning them as a specialized SaaS provider in the HR tech space. The website reflects a professional and consistent brand image with clear messaging targeting SMEs managing deskless workers. Technically, the site leverages modern frameworks like Next.js and React, integrates multiple analytics and marketing tools, and employs a cookie consent mechanism compliant with GDPR standards. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and incident response information are absent. Overall, the site is well-structured, performant, and trustworthy, with no signs of blocking or WAF interference.

S

Smart Agence

smartagence.com

62

Smart Agence is a French digital consulting agency specializing in UX design and digital transformation, founded in 2004. The agency offers a comprehensive range of services including digital strategy, UX research and design, and project animation, targeting businesses and organizations seeking to enhance digital engagement. Technically, the website is built using modern frameworks such as Next.js and React, with a WordPress backend for blog content, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are absent. Overall, the website presents a professional and trustworthy digital presence, though the lack of WHOIS data reduces domain trustworthiness. Strategic recommendations include publishing security and incident response policies and enhancing transparency around vulnerability disclosures.

M

Maven

maven.com

68

Maven.com is an established online education platform specializing in live courses led by real-world experts across domains such as AI, product management, leadership, design, data engineering, marketing, sales, and business finance. The platform targets professionals seeking career growth and skill enhancement through expert-led interactive learning experiences. Technically, the website leverages modern web technologies including Next.js, React, and Cloudflare for hosting and CDN, ensuring fast performance and excellent mobile optimization. The presence of multiple analytics and marketing tools such as Google Tag Manager, Amplitude, Hotjar, and Sprig indicates a mature digital marketing strategy with extensive user tracking capabilities. Security-wise, the site enforces HTTPS, implements key security headers, and uses Cloudflare DNS, contributing to a strong security posture. However, the absence of DNSSEC and lack of published privacy and cookie policies represent compliance gaps. Overall, Maven.com presents a professional, trustworthy, and technically sound platform with room for improvement in privacy compliance and transparency.

E

Ezoic

ezoic.net

65

Ezoic is a leading technology company specializing in data-driven ad monetization solutions for digital publishers and content creators. Their platform leverages AI and first-party data to optimize ad revenue and user engagement, supported by strong partnerships with Google, Cloudflare, and Amazon Ads. The website demonstrates a mature digital infrastructure using modern frameworks like React and Next.js, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent management mechanisms. Overall, Ezoic presents a professional and trustworthy online presence, though the lack of WHOIS data transparency and direct contact information slightly reduces domain trustworthiness.

V

Ville et Eurométropole de Strasbourg

strasbourgaimesesetudiants.eu

63

The website 'Strasbourg aime ses étudiants' is a public service platform managed by the Ville et Eurométropole de Strasbourg, aimed at supporting and informing students studying in Strasbourg and its surrounding communes. It provides comprehensive information on housing, transport, cultural events, student aid, and integration activities. The platform is well-positioned as a local government initiative with strong partnerships and a clear target audience of students. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as React, Swiper.js, and Bootstrap, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforcement and standard security headers, though it lacks explicit published security policies or incident response contacts. Privacy compliance is addressed with visible cookie consent mechanisms and links to privacy policies, reflecting good GDPR adherence. Overall, the site is trustworthy, professional, and serves its public service mission effectively.

S

Sousedé

sousede.cz

59

Sousedé.cz is a Czech Republic based digital platform specializing in the management and collaboration of residential communities, specifically SVJ (homeowners associations) and apartment buildings. The platform connects committees, property managers, management companies, and unit owners to streamline communication, legal compliance, and administrative tasks. It offers key services such as duty monitoring, online voting, document management, and integration with established property management systems like DOMUS. The website positions itself as a leading portal in its niche with over 2,000 buildings and 45,000 users, emphasizing ease of use and comprehensive features for all stakeholders. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance and excellent mobile responsiveness. It integrates analytics and marketing tools such as Google Analytics and HubSpot, and employs security best practices including HTTPS and security headers. The site features a well-structured user interface with clear navigation and professional design, supporting a positive user experience. From a security perspective, the platform demonstrates good practices with encrypted connections and role-based access controls. However, there is no publicly visible incident response or vulnerability disclosure policy, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. Overall, Sousedé.cz presents a mature and professional digital service for residential community management in the Czech market. Strategic recommendations include improving transparency by publishing domain registration details, establishing a formal security incident response policy, and adding a security.txt file to facilitate vulnerability reporting.

ThingLink is a well-established company founded in 2010, specializing in immersive and spatial learning solutions powered by AI and no-code tools. Their platform supports a wide range of industries including education, business, healthcare, and museums, offering scalable and interactive training experiences across devices including XR headsets. The website demonstrates a high level of professionalism, rich multimedia content, and clear navigation, reflecting a mature digital presence. Technically, the site uses modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong, evidenced by ISO 27001 certification and a dedicated Trust Center, although WHOIS data is missing, which slightly impacts trust but does not undermine the overall credibility. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, ThingLink presents as a credible and trustworthy business with a robust technical and security foundation.

M

MTV Oy

mtv.fi

69

MTV.fi is the official website of MTV Oy, a leading Finnish media company offering a broad range of entertainment, news, and sports content. The site prominently features streaming services including subscription-based premium content branded as MTV Katsomo+. The platform targets the Finnish general public with a focus on popular TV shows, live sports, and news programming. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile devices and accessibility. Technically, it leverages modern web technologies such as React and Next.js, with robust performance and security configurations including HTTPS and security headers. However, explicit privacy policy and terms of service pages were not detected in the provided content, indicating an area for improvement in privacy compliance. No direct contact information or incident response contacts were found, which could be enhanced to improve transparency and trust. Overall, the site demonstrates a strong security posture and business credibility, supported by consistent WHOIS data and legitimate domain registration.

Asociace českých cestovních kanceláří a agentur (AČCKA) is a well-established professional association representing Czech travel agencies and tour operators since 1991. The organization provides advocacy, information, networking opportunities, and educational resources to its members, positioning itself as a key player in the Czech travel and tourism industry. The website reflects this professional focus with clear content, membership benefits, and public information for travelers. Technically, the site is built on modern web technologies including Next.js and React, with integration of Matomo analytics and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though it lacks some advanced security headers and formal security policies. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy policy transparency and security disclosures.

E

Ecedi

ecedi.fr

63

Ecedi is a French digital communication agency founded in 2001, specializing in responsible and ethical web communication services. The agency serves a diverse clientele including non-profits, public sector entities, and private organizations, emphasizing accessibility, social inclusion, and eco-design in its projects. Ecedi is part of the Ctrl-a group, which includes several partner agencies. The website demonstrates a mature digital presence with comprehensive service offerings ranging from strategy and conception to production and maintenance, supported by a modern technology stack including Drupal, WordPress, and various web frameworks. Technically, the website employs modern web technologies and frameworks, with good mobile optimization, accessibility, and SEO practices. The use of FriendlyCaptcha for form protection and Matomo for analytics indicates a focus on privacy and security. However, explicit security headers and cookie consent mechanisms are not evident, suggesting areas for improvement in security posture and privacy compliance. From a security perspective, the site uses HTTPS and anti-bot measures but lacks visible security headers and an incident response policy. The WHOIS data is unavailable, which reduces domain registration trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but should enhance security and privacy features. Strategically, Ecedi should focus on improving security headers, publishing a security policy, and implementing explicit cookie consent to strengthen compliance and trust. The agency's strong market position in responsible digital communication and its reputable client base provide a solid foundation for growth and enhanced digital maturity.

P

Poper

poper.ai

70

Poper is a technology company specializing in AI-powered onsite engagement tools such as smart popups, widgets, notifications, and gamification features designed to enhance user interaction and increase conversion rates for websites and e-commerce platforms. The company positions itself as a modern SaaS provider serving over 2000 brands, focusing on delivering personalized and dynamic engagement solutions. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting website owners and marketers seeking to boost engagement and sales. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance, mobile optimization, and good SEO practices. The presence of structured data and social media integration further enhances its digital maturity. Security-wise, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data, reflecting a solid security posture. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the website and business demonstrate a high level of professionalism and trustworthiness, with privacy policies and cookie consent mechanisms in place indicating compliance with GDPR. The WHOIS data is privacy protected but shows no suspicious patterns, consistent with a legitimate tech startup. The risk profile is low, with recommendations to enhance transparency around security and incident response. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and providing direct security contact information to strengthen trust and compliance further.

CET Group Co., Ltd. is a well-established global manufacturer specializing in high-quality compatible spare parts and consumables for the office imaging industry. Founded in 1996 and headquartered in Beijing, China, CET Group has expanded its operations worldwide with subsidiaries in the USA, Japan, Singapore, Russia, Dubai, and Central Asia. The company offers a broad product portfolio including toner cartridges, drum units, fuser assemblies, bulk toner, and precision parts, supported by strong R&D and quality control centers. CET Group positions itself as a leader in the office imaging consumables market with a focus on innovation, quality, and customer satisfaction. Technically, the website is built using modern web technologies including React and Next.js, with a responsive design and good SEO practices. The site performs moderately well and provides a professional user experience with clear navigation and comprehensive content. However, some accessibility features could be improved. From a security perspective, the website uses HTTPS and follows basic best practices but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, CET Group's website reflects a credible and professional business with a strong global presence and solid technical infrastructure. Strategic improvements in security policies, privacy compliance, and accessibility could further enhance trust and compliance.

Longines is a well-established Swiss luxury watch manufacturer with a rich heritage dating back to 1832. The website serves as the official German-language portal for the brand, offering customers a guided selection process for purchasing watches. The site is professionally designed, mobile-optimized, and integrates modern web technologies such as React and Next.js, ensuring a smooth user experience. Social media presence is strong with verified accounts across major platforms, reinforcing brand credibility. From a technical perspective, the website employs advanced monitoring and analytics tools including New Relic and Google Analytics, alongside a consent management platform for GDPR compliance. Security best practices are observed with HTTPS enforcement and appropriate security headers, contributing to a robust security posture. However, explicit links to privacy and cookie policies were not found in the provided content, indicating an area for improvement in transparency and compliance. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness from a domain registration perspective. Despite this, the overall professionalism, branding consistency, and technical maturity suggest the website is legitimate and trustworthy. No signs of content blocking or WAF challenges were detected, allowing full access to the site content. Overall, Longines' website demonstrates a high level of digital maturity and security readiness, with minor gaps in privacy policy visibility. Strategic recommendations include enhancing privacy disclosures, maintaining up-to-date security practices, and improving incident response visibility to further strengthen trust and compliance.

S

Smart4City

smart4city.cz

59

Smart4City operates a mobile application platform enabling cashless parking payments across multiple Czech cities. The service targets drivers seeking convenient, paperless parking solutions, leveraging modern payment methods such as Apple Pay and Google Pay. The company has established a solid regional presence since its domain registration in 2016, reflecting a mature and stable business model focused on transportation technology. Technically, the website is built on a modern stack including Next.js and React, with integration of Google Maps API for location services, hosted and secured via Cloudflare. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and published security policies. Overall, the website and business exhibit high professionalism and trustworthiness, with clear service offerings and user-friendly design.

R

Resume-Library Inc

resume-library.com

60

Resume-Library Inc operates a leading US-based online job board established in 2013, providing job seekers with tools to upload resumes, search jobs across multiple industries, and receive career advice. The platform also serves employers by offering job posting and resume search services. It is part of the CV-Library Group, a UK-based parent company, indicating a strong backing and international presence. The website is professionally designed, mobile-optimized, and rich in content, targeting primarily US job seekers and employers. Technically, the site leverages modern frameworks such as React and Next.js, integrates analytics and marketing tools like Google Analytics and Criteo, and employs security best practices including HTTPS and security headers. However, WHOIS data for the domain is unavailable, which slightly impacts trust but is mitigated by the site's transparency and business information. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user data protection. Overall, Resume-Library presents a mature digital presence with a solid market position in the online recruitment sector.

W

WellSpan Health

wellspan.org

73

WellSpan Health is a nationally recognized healthcare system serving South Central Pennsylvania and northern Maryland, providing a wide range of hospital and outpatient services. The organization targets patients and community members seeking comprehensive healthcare solutions. The website reflects a mature and professional digital presence with modern technologies such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website demonstrates a high level of business credibility and technical maturity, suitable for a large healthcare provider.

U

University of Pennsylvania Health System

pennmedicine.org

71

Penn Medicine, the University of Pennsylvania Health System, is a leading academic medical center in the United States providing comprehensive healthcare services, medical research, and education. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content targeting patients, healthcare professionals, and researchers. The business model focuses on patient care and academic medicine, supported by a strong institutional brand and affiliation with the University of Pennsylvania. Technically, the website leverages modern technologies including React and Sitecore CMS, with integrations for analytics and marketing tools such as Tealium and Maze. The site is mobile optimized, accessible, and performs moderately well, indicating a robust technical infrastructure suitable for an enterprise healthcare organization. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic improvements in security transparency and incident response readiness would further strengthen its security posture and stakeholder confidence.

T

Thomas Jefferson University Hospitals Inc

jeffersonhealth.org

68

Jefferson Health is a well-established healthcare provider serving the Greater Philadelphia and South Jersey regions, offering a wide range of clinical specialties including cancer care, cardiology, neurology, and telehealth services. The organization is positioned as a leading regional healthcare system with a strong reputation supported by multiple awards and accreditations. The website reflects a mature digital presence with comprehensive content, patient resources, and community engagement. Technically, the site leverages modern frameworks such as React and Adobe Experience Manager, integrating advanced analytics and marketing tools to optimize user experience and operational insights. Security posture is robust with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, supporting its role as a major healthcare institution.

K

Kraft Heinz

kraftheinz.com

74

Kraft Heinz is a leading global food and beverage company known for iconic brands such as Heinz, Lunchables, Oscar Mayer, and Kraft Singles. The company operates primarily in the manufacturing and retail sectors, targeting consumers seeking quality food products and culinary experiences. The website reflects a mature digital presence with modern technologies including React and Next.js, integrated search via Algolia, and robust consent management through OneTrust. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is unusual but does not detract from the site's legitimacy given the brand's global recognition and consistent online presence. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

U

Univention GmbH

univention.social

10

Univention GmbH operates the Mastodon instance univention.social, providing decentralized social media services powered by the open source Mastodon platform. The company specializes in open source software development focused on digital identity management and IT application integration, with flagship products like Univention Corporate Server (UCS) and UCS@school tailored for educational institutions. Their market position is that of an established mid-sized technology provider serving public sector and enterprise clients primarily in Germany. Technically, the website leverages modern web technologies including React and Mastodon 4.4.8, with media hosted via an S3 proxy. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and script integrity checks, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service visible. WHOIS data is limited due to TLD registry constraints, but website content and contact information support legitimacy. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

V

Ville et Eurométropole de Strasbourg

strasbourg.eu

64

The website www.strasbourg.eu serves as the official digital portal for the City and Eurométropole of Strasbourg, France. It provides comprehensive information and services to residents, tourists, professionals, students, and other stakeholders. The site features news, event calendars, administrative procedures, cultural content, and community engagement tools, positioning itself as a central hub for local government communication and citizen interaction. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI, ensuring a responsive and accessible user experience. Security measures such as HTTPS enforcement, security headers, and cookie consent mechanisms are in place, reflecting a mature security posture. However, explicit privacy policy and terms of service pages are not clearly identified, and contact information is not prominently displayed, which are areas for improvement. Overall, the site is trustworthy, professionally maintained, and aligned with its public service mission.

The website interakcieliekov.sk is a Slovak healthcare informational platform dedicated to providing a drug interaction database for patients and pharmacists. It is part of a social responsibility initiative by the Slovak Pharmaceutical Chamber, aiming to enhance patient safety and public knowledge about pharmacotherapy. The platform offers tools to evaluate drug combinations and potential risks, along with educational content and pharmacist consultation options. The site is targeted primarily at Slovak patients and healthcare professionals. Technically, the site is built using modern React and Material-UI frameworks, hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure and reliable user experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information for security or data protection matters, which are areas for improvement. Overall, the domain registration data aligns well with the website's purpose and origin, supporting its legitimacy and trustworthiness.

S

Staatsbibliothek zu Berlin and Zentral- und Landesbibliothek Berlin (ZLB)

openbiblio.social

60

OpenBiblio.Social is a specialized Mastodon instance serving the German-speaking library and information professional community. It is hosted and administered by reputable public institutions, namely the Staatsbibliothek zu Berlin and the Zentral- und Landesbibliothek Berlin (ZLB). The platform provides a decentralized social media environment focused on fostering professional dialogue and networking within the library sector. The website content is primarily in German and offers clear guidance on community rules, moderation, and first steps for new users. Technically, the site leverages Mastodon 4.4.8, Ruby on Rails, and modern JavaScript frameworks, ensuring a contemporary and mobile-optimized user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is good with a clear privacy policy, but lacks cookie consent mechanisms and terms of service documentation. Overall, the site demonstrates a high level of professionalism and trustworthiness, supported by institutional backing and open-source transparency.

I

Infigy

infigy.cz

52

Infigy is a Czech-based company specializing in smart energy management solutions that integrate photovoltaic systems, batteries, heat pumps, boilers, and electric vehicle chargers. Their platform optimizes energy consumption and production to maximize self-consumption and cost savings, targeting residential and commercial customers as well as energy communities. The company is relatively young, founded in 2022, but presents a professional and mature digital presence with strong local partnerships and certifications. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and well-positioned in the Czech energy market.

S

Smallstep

smallstep.com

65

Smallstep is a technology company specializing in device identity and certificate management solutions, positioning itself as an innovator in Zero Trust security. The company offers a unified platform that secures devices and enforces hardware-bound credentials, targeting enterprises that require strong device authentication. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, integrated with HubSpot for marketing and forms. The site is well-designed, mobile-optimized, and features strong branding with endorsements from major enterprise customers. Security posture is solid with HTTPS and domain protections, though improvements like enabling DNSSEC and publishing security policies are recommended. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and technically sound, with minor gaps in privacy and security transparency.

L

LED

weareled.fr

50

LED is a French digital agency specializing in designing, developing, and optimizing digital products such as websites, e-commerce platforms, and applications. As a subsidiary of Groupe Les Enchanteurs, LED positions itself as a user-centric agency with expertise in digital strategy, UX/UI design, development, and project management. The website reflects a professional and consistent brand image targeting organizations and brands seeking digital transformation. Technically, the site is built on WordPress with integrations of modern frameworks like Laravel, React, and Next.js, hosted by OVH. It employs Google Tag Manager and Axeptio for analytics and cookie consent, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, well-structured, and compliant with GDPR, though it could improve by publishing detailed security policies and vulnerability disclosure information.

Seekube is a French-based technology platform specializing in event organization and facilitation, primarily targeting professional networking and recruitment events. The website presents a modern and professional interface built with React and Tailwind CSS, indicating a moderate level of digital maturity. However, the absence of explicit privacy, cookie, and terms of service policies suggests gaps in compliance and transparency. Security posture is limited due to missing security headers and lack of visible incident response or vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy. Strategic improvements in privacy compliance, security best practices, and contact transparency are recommended to enhance trust and regulatory adherence.

T

Todon.eu

todon.eu

60

Todon.eu operates as a small, volunteer-run Mastodon instance focused on radical leftist and anti-authoritarian communities, providing decentralized social media services. The platform supports multiple languages and offers enhanced Mastodon features such as increased character limits and custom themes. The website is well-branded and consistent with its community-driven mission, emphasizing privacy and anti-discrimination policies. Technically, the site runs Mastodon version 4.4.8 with a modern tech stack including Ruby on Rails and React. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and privacy-conscious defaults, but lacks formal security policies and some security headers. Overall, the site is trustworthy and safe, with no adult or explicit content. Contact information is limited but present via email. There are no signs of malicious activity or suspicious domains. Strategic improvements include adding a cookie consent mechanism, formalizing security policies, and enhancing accessibility. This positions Todon.eu as a niche but credible player in the decentralized social media space, serving a specific activist audience with a strong privacy and community focus.

G

GoDaddy Operating Company, LLC

arawa.com

71

This website is a professional domain sales landing page operated by GoDaddy, offering the premium domain 'arawa.com' for purchase. It targets individuals and businesses interested in acquiring premium domain names, providing secure transactions, multiple payment options, and customer support. The site is well-branded and consistent with GoDaddy's domain aftermarket business model. Technically, the site uses modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, although explicit incident response and vulnerability disclosure information are not present. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy compliance. Overall, the site is trustworthy and professionally maintained, serving as a reliable platform for domain sales.

A

Adfinis

adfinis.com

63

Adfinis is a well-established open source IT solutions provider with over 25 years of experience, offering a broad range of services including cloud infrastructure, security, system automation, and digital sovereignty. The company operates globally with multiple locations and strong partnerships with industry leaders such as Red Hat, SUSE, GitLab, and HashiCorp. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on business transformation through open source technologies. Technically, the site is built on modern frameworks like Next.js and React, hosted on DigitalOcean, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and secure forms, though some security policies and incident response information are not publicly disclosed. Privacy compliance is good with a detailed privacy policy, but lacks a cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website and business present a credible and professional image with room for improvement in transparency and privacy controls.

K

Kabubu

kabubu.fr

48

Kabubu is a French non-profit association dedicated to promoting the social and professional inclusion of exiled individuals through the power of sport. The organization offers weekly sports activities, training programs, and workshops aimed at fostering friendship and integration. Their market position is niche, focusing on social inclusion within France, supported by partnerships with recognized organizations and media outlets. Technically, the website is built using modern frameworks such as React and Ionic, with good mobile optimization and moderate performance. Security posture is solid with enforced HTTPS and absence of trackers, though it lacks some security headers and formal privacy documentation. Overall, the site is professional and trustworthy, but the absence of WHOIS data and privacy policies slightly reduce credibility. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

E

En Boîte Le Plat

enboiteleplat.fr

46

En Boîte Le Plat is a French initiative dedicated to promoting the use of reusable and returnable glass containers to reduce disposable packaging waste in the take-away food sector. The project targets a diverse audience including restaurant professionals, event organizers, citizens, local communities, and enterprises. It operates as a collective model supported by local teams and a national coordinating body, emphasizing environmental sustainability and waste prevention. The website reflects a niche, environmentally conscious non-profit or collective with a growing presence across multiple French territories. Technically, the website is built using modern frontend technologies such as React and the Ionic framework, incorporating Google Fonts and Material Icons for design consistency. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Performance is moderate, with no major technical issues detected. However, accessibility features are basic and SEO optimization could be improved. From a security perspective, the site enforces HTTPS and avoids the use of cookies or trackers that require user consent, which is a positive privacy practice. Nonetheless, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a privacy policy or terms of service, which are critical for compliance and user trust. No vulnerabilities or exposed sensitive data were detected, but the absence of these policies and headers suggests room for improvement in security posture. Overall, the website is trustworthy and professional, though the lack of WHOIS data and domain registration details slightly reduce the domain trustworthiness score. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include adding comprehensive privacy and security policies, implementing security headers, and enhancing accessibility and SEO to strengthen compliance and user confidence.

H

HiPay

hipay.com

69

HiPay is a well-established European payment solution provider founded in 2004, offering a comprehensive suite of services including payment management, fraud protection, and conversion optimization tailored for retailers and businesses. The website demonstrates a modern technical infrastructure utilizing React and Next.js frameworks, supported by Cloudflare DNS and analytics tools such as Matomo and Google Analytics. Security posture is strong with HTTPS and Content-Security-Policy headers, though there is room for improvement in privacy compliance and explicit security policies. Overall, the site is professional, trustworthy, and well-positioned in the finance and e-commerce sectors.

M

MASMOVIL

masmovil.com

67

MASMOVIL is a major Spanish telecommunications company offering mobile telephony, fiber optic internet, fixed telephony, and television services. The company targets general consumers and businesses in Spain with a business model focused on simple, flexible tariffs and competitive pricing. The website reflects a strong market position with clear branding and comprehensive service offerings. Technically, the site is built on modern frameworks such as Next.js and React, integrated with Contentful CMS and various marketing and payment platforms, ensuring a robust and scalable digital presence. Security posture is solid with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear contact information. However, WHOIS data is inaccessible, limiting domain legitimacy verification.

N

Norsk Hydro ASA

r-100.no

58

The website www.r-100.no represents a project by Norsk Hydro ASA focused on promoting Hydro CIRCAL R100, an innovative aluminium product made entirely from recycled post-consumer scrap. The site highlights collaborations with prominent designers and showcases exhibitions, targeting design professionals and sustainability advocates. The business model centers on corporate branding and sustainable innovation promotion within the energy and manufacturing sectors. Technically, the site is built using modern frameworks such as Next.js and Sanity CMS, with integration of privacy-focused analytics via Plausible. The site demonstrates good mobile optimization and a professional design, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

I

IONOS SARL

1and1.fr

65

IONOS SARL is a prominent web hosting and cloud services provider targeting both individual and professional customers primarily in France and Europe. The company offers a comprehensive portfolio including domain registration, web hosting, email solutions, cloud services, website building tools, and e-commerce hosting. Their market position is that of a large enterprise with a strong brand presence and consistent digital footprint across multiple country-specific domains. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital infrastructure. Technically, the site leverages modern web technologies such as Next.js and React, ensuring a responsive and performant user experience. The presence of structured data and comprehensive meta tags supports good SEO practices. Security-wise, the website enforces HTTPS, implements key security headers, and uses secure forms, indicating a solid security posture. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security governance. The WHOIS data for the domain is notably missing or unavailable, which is unusual for a major enterprise and could be due to registry policies or privacy protection. While this does not directly indicate malicious intent, it reduces the transparency of domain ownership and registration details, slightly impacting trustworthiness. Overall, the website is safe, professional, and trustworthy, with no signs of adult or questionable content. Strategically, IONOS should enhance its security transparency by publishing detailed security policies and incident response contacts, and consider providing vulnerability disclosure channels. These steps will strengthen customer trust and compliance posture. Continued investment in technical modernization and privacy compliance will support sustained market leadership.

R

Regenerate Hub

regeneratehub.org

56

Regenerate Hub is a platform focused on promoting circular economy principles and nature-based solutions. The website presents minimal content with a clear title and description but lacks detailed business information, contact details, or policy documentation. The platform appears to target a general audience interested in sustainability and environmental solutions. Technically, the site uses modern web technologies such as React, Webpack, and integrates third-party services like Hotjar and Google Tag Manager for analytics and user engagement. However, the absence of privacy and cookie policies despite the use of tracking scripts indicates a gap in privacy compliance. Security posture is limited by lack of visible security headers and unknown SSL configuration. The WHOIS data is unavailable, likely due to privacy protection or query failure, which reduces transparency and trustworthiness. Overall, the site is functional but basic in content and security maturity.

Wirth & Horn Informationssysteme GmbH is a German technology company founded in 2020 specializing in innovative digital solutions primarily for e-commerce and publishing sectors. Their offerings include enterprise web applications, master data management platforms (PIM.RED), AI integrations such as LLM and RAG systems, UX/UI design, cloud hosting, and business intelligence services. The company targets publishers and enterprises seeking scalable, secure, and customer-oriented digital sales platforms. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS and CDN, and optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site demonstrates professionalism, good content quality, and compliance with GDPR, reflecting a trustworthy and credible business presence.

S

S-Markt & Mehrwert GmbH & Co. KG

s-reisewelt.de

68

S-Reisewelt is a German travel portal operated by S-Markt & Mehrwert GmbH & Co. KG, affiliated with the Sparkasse banking group. The website offers a wide range of travel services including package holidays, cruises, hotels, flights, car rentals, and travel insurance. It targets German-speaking travelers seeking quality and affordable travel options with a focus on customer service and personalized recommendations. The platform integrates multiple partners such as Booking.com, GetYourGuide, and PAYBACK to enhance user experience and loyalty benefits. Technically, the website is built using modern web technologies like React and Apollo GraphQL, hosted likely on T-Systems infrastructure, and optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no dedicated security policy or incident response contacts are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and well-positioned in the German travel market.

Y

youngCaritas

youngcaritas.ch

9

youngCaritas is a Swiss non-profit organization dedicated to engaging youth in social projects and community service, including organizing awards for nominated projects. The website is built using modern web technologies such as React and Gatsby, styled with Tailwind CSS, providing a fast and mobile-optimized user experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain registration data aligns well with the organization's identity, indicating legitimacy. Overall, the website is professional and relevant to its target audience but would benefit from enhanced security and privacy features.

M

Maschinenringe Deutschland GmbH

mr-wetter.de

64

Maschinenringe Deutschland GmbH operates a specialized agricultural weather service website providing reliable weather forecasts, precipitation data, wind speed, and other meteorological information tailored for the German agricultural sector. The website serves farmers and agricultural professionals by offering free, accessible weather-related services to support plant protection and farming activities. The company maintains a strong market position in Germany with a medium-sized business profile and consistent branding across its digital presence. Technically, the website is built on modern frameworks such as Gatsby and React, ensuring fast performance and good mobile optimization. The use of consent management tools indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

G

Give

give.do

10

Give.do is an online donation platform focused on facilitating donations to verified NGOs and social causes primarily in India. The platform offers monthly giving missions, gift cards, and supports fundraisers, positioning itself as a trusted and leading donation platform in the Indian non-profit sector. The website demonstrates a modern technical infrastructure using React and Next.js, hosted on AWS, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and CleverTap. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the platform is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

I

Visit Iceland | Official travel info for Iceland

iceland.is

65

The website www.visiticeland.com serves as an official travel information portal for Iceland, showcasing the country's natural wonders such as glaciers, northern lights, hot springs, and cultural heritage. The site targets tourists and travelers interested in exploring Iceland, providing rich content about attractions and travel tips. The business model focuses on tourism promotion and information dissemination, positioning itself within the hospitality industry. Technically, the site is built using modern web technologies including Gatsby and React, with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is weak due to lack of security headers, privacy policies, and contact information for incident response. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trustworthiness.