Security Directory

S

SITPI

colter.social

65

colter.social is a specialized Mastodon instance serving agents, services, and elected officials of French local authorities. Administered by SITPI, the platform provides a decentralized social networking service tailored to this professional community. The website is primarily in French and leverages the Mastodon open source platform version 4.2.15, hosted by Gandi SAS. The domain registration details align well with the stated purpose and geographic focus, indicating legitimacy and consistency. Technically, the site demonstrates moderate performance and basic mobile optimization, with HTTPS enabled and a clientTransferProhibited domain status enhancing security. However, DNSSEC is not enabled, and no advanced security headers are detected, representing areas for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism and terms of service. Contact information and incident response details are not publicly available, limiting transparency. Overall, the site is functional and trustworthy for its niche audience but could benefit from enhanced security and compliance features.

The website 'ICE Detention Map' operated by Lockdown Systems provides an interactive and detailed visualization of ICE detention facilities across the United States. It offers data on detainee counts, criminal versus non-criminal status, and ICE threat levels, serving as a valuable resource for activists, researchers, and the general public interested in immigration detention transparency. The platform positions itself as a niche non-profit advocacy tool focused on government and immigration issues. Technically, the site employs modern web technologies including Leaflet.js for mapping and OpenStreetMap for base tiles. The infrastructure is straightforward, with moderate performance and good mobile optimization. The site uses minimal tracking via Plausible Analytics, reflecting a privacy-conscious approach. However, the absence of privacy and cookie policies, as well as missing security headers, indicates areas for compliance and security improvement. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. The WHOIS data presents anomalies with a future domain creation date and no registrant details, which reduces trustworthiness but does not necessarily indicate malicious intent given the site's content and affiliations. Overall, the website is functional, informative, and safe for general audiences but would benefit from improved privacy compliance, security hardening, and clearer business contact information to enhance trust and regulatory adherence.

S

Science & Design, Inc

onionshare.org

52

OnionShare is an open-source privacy-focused software project that enables anonymous peer-to-peer file sharing, chatting, and web hosting over the Tor network. The project is developed by Science & Design, Inc and partners with reputable privacy organizations such as The Calyx Institute, Guardian Project, and the Tor Project. The website serves a privacy-conscious audience including security specialists and users of privacy-centric operating systems like QubesOS and Tails. The business model is community-driven with donation support and open-source contributions. Technically, the website is well-built using modern web standards and hosted on DigitalOcean, with good mobile optimization and accessibility. Security practices include PGP signature verification for downloads and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial with a privacy policy present but no cookie consent or terms of service. Overall, the site is professional, trustworthy, and aligned with its privacy-centric mission.

S

Study in Germany

study-in-germany.de

65

Study in Germany is an educational information platform targeting international students interested in pursuing higher education in Germany. The website provides comprehensive resources including study programs, visa guidance, and cultural information, positioning itself as a key resource in the education sector focused on Germany. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contact, which could be improved to enhance trust. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure indicate a legitimate and professional operation. Overall, the site scores well in content quality and security posture but could benefit from improved business credibility transparency and explicit security disclosures.

N

Nederlandse Vereniging Beheer keurmerk Aangepaste Vakanties

nbav.nl

53

The website www.nbav.nl represents the Nederlandse Vereniging Beheer keurmerk Aangepaste Vakanties, a Dutch organization providing certification for entities focused on people with disabilities. The site is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard JavaScript polyfills. The content is primarily in Dutch and targets organizations and stakeholders in the disability support sector. The business model revolves around certification and association management within a niche market in the Netherlands. Technical infrastructure is standard for Wix-hosted sites, with moderate performance and good mobile optimization but limited SEO due to meta robots noindex directive. Security posture is basic, lacking advanced security headers and policies, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional but would benefit from enhanced security and privacy measures to improve trust and compliance.

S

Stichting KMVK

duurzaam-gastvrij.nl

63

Duurzaam Gastvrij is a Dutch sustainability certification organization focused on the leisure sector, operated by Stichting KMVK. The website serves as a comprehensive platform to promote sustainable business practices, certify companies, and provide resources and support for sustainability efforts. It holds a strong market position as a recognized sustainability mark endorsed by Green Key, targeting leisure businesses in the Netherlands. The site offers clear navigation, rich content, and multiple trust signals including partner logos and certifications. Technically, the website uses modern web technologies including jQuery, Swiper.js, and Google Analytics, hosted on a CMS platform (HMCMS). It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence with strong business credibility and privacy compliance.

A

allotropia software GmbH

zetaoffice.net

44

ZetaOffice is a technology-focused company offering a LibreOffice-based office suite accessible via web browsers, desktop, and soon mobile platforms. The company operates under allotropia software GmbH, based in Hamburg, Germany, and positions itself as a niche provider enabling businesses to leverage LibreOffice with options for self-hosting or CDN deployment. Their business model combines open source software with paid professional support and CDN services. Technically, the website employs modern web technologies and integrates privacy-friendly analytics, but lacks some advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business goals.

M

Metoki GmbH

metoki.ch

58

Metoki GmbH is a Swiss-based consulting firm specializing in digital marketing, website development, and knowledge management services primarily for small and medium enterprises, non-profit organizations, startups, and self-employed professionals. The company leverages over 20 years of experience to deliver tailored digital strategies, WordPress-based websites, social media presence, email marketing via Mailchimp, SEO, and e-learning solutions. Their market position is that of a niche, trusted partner with a strong focus on client-centric, lean project execution supported by a network of specialists. Technically, the website is built on WordPress using modern frameworks and technologies such as Bricks Builder, jQuery, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. The presence of multiple client references and a professional design further enhance their digital maturity. From a security perspective, the site enforces HTTPS and employs standard best practices such as form anti-spam measures and reCAPTCHA. However, explicit security headers and published security policies are absent, indicating room for improvement in formal security posture and transparency. No vulnerabilities or exposed sensitive data were detected. Overall, Metoki GmbH presents a low-risk profile with a professional online presence, clear contact channels, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and implementing explicit cookie consent mechanisms to further strengthen trust and compliance.

H

HAN University of Applied Sciences

han.nl

75

HAN University of Applied Sciences is a large Dutch educational institution offering a wide range of programs including bachelor, master, associate degree, and post-hbo courses. It serves diverse audiences such as students, professionals, and mbo'ers, positioning itself as a key regional player in applied sciences education. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content that supports its educational mission. Security posture is strong with HTTPS enforcement, consent management via Cookiebot, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, supporting HAN's reputation as a credible educational provider.

Anchorage Daily News Store operates as a niche e-commerce retailer specializing in Alaska-themed apparel, merchandise, and local artist collaborations. The website is built on the Shopify platform using the Symmetry theme, leveraging a mature e-commerce infrastructure with integrations for marketing, analytics, and fulfillment. The store targets consumers interested in uniquely Alaskan products, positioning itself as a regional specialty retailer with a focused product catalog. Technically, the site demonstrates good performance, mobile optimization, and accessibility, with a comprehensive privacy policy and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and use of CAPTCHA for forms, though explicit security headers and incident response information are lacking. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

AlCoda GmbH

alcoda.info

39

AlCoda GmbH operates the domain alcoda.info, which currently hosts a default Plesk generated placeholder page indicating hosting control panel availability. The company appears to be involved in providing hosting services or web management solutions leveraging the Plesk platform. The website content is minimal and does not provide detailed business descriptions or customer engagement features. Technically, the site uses standard HTML, CSS, and JavaScript with Plesk infrastructure but lacks advanced security headers and privacy compliance mechanisms. The security posture is basic with no evident vulnerabilities but also no enhanced protections. Overall, the website is low in content quality and business credibility due to its placeholder nature. Strategic recommendations include implementing privacy and cookie policies, adding contact information, enabling DNSSEC, and improving security headers to enhance trust and compliance.

M

MiXiT

mixitconf.org

57

MiXiT is a specialized technology conference based in Lyon, France, focusing on ethics, diversity, and social responsibility within the tech industry. Founded in 2017, it hosts annual events featuring speakers, workshops, and sessions that engage developers, designers, and product managers. The conference emphasizes accessibility, safe environments, and eco-friendly practices, supported by a community-driven approach and sponsorships from notable companies. The website serves as an information hub for event details, ticketing, and multimedia content including podcasts and videos. Technically, the site uses modern web standards with Bootstrap and JavaScript, hosted by OVH sas, a reputable French provider. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance its security posture and compliance transparency.

A

April

candidats.fr

51

Candidats.fr is a French non-profit advocacy platform operated by the April association, focused on promoting free software and digital freedoms within the political landscape. The website provides resources, campaigns, and information encouraging political candidates to commit to free software principles through the Pacte du Logiciel Libre. The platform targets political candidates, free software advocates, and citizens interested in digital rights, positioning itself as a niche but trusted voice in the French technology and government sectors. Technically, the website is built on the Dotclear CMS and uses legacy JavaScript libraries such as jQuery 1.6.2 and jQuery UI 1.8.16. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. However, it lacks modern security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The absence of security headers and formal privacy compliance documentation reduces its security posture score. WHOIS data is unavailable, limiting domain legitimacy verification, but the association with April provides moderate trustworthiness. Overall, Candidats.fr is a credible and focused advocacy site with good content quality and user experience but would benefit from enhanced security practices and privacy compliance to strengthen trust and protect user data.

C

casinoutansvensklicens.website

casinoutansvensklicens.website

36

The website casinoutansvensklicens.website appears to be a parked domain primarily used for advertising and affiliate marketing related to gambling without a Swedish license. It lacks substantive business content, contact information, or clear service offerings, indicating it is not an operational business site but rather a placeholder or monetization platform. The technical infrastructure relies on basic HTML, CSS, and JavaScript with integration of Google Adsense and Bodis domain parking scripts. The site is accessible without WAF or blocking mechanisms but lacks modern security practices such as security headers and cookie consent mechanisms. Overall, the security posture is weak, with minimal privacy compliance and no incident response or security policy information available. The domain uses privacy-protected WHOIS registration, which reduces trust and transparency. The site targets a mature audience interested in gambling but does not provide any direct gambling services or content. Strategic recommendations include improving security headers, implementing privacy and cookie consent mechanisms, and providing clear business and contact information to enhance trust and compliance.

C

Casino utan Svensk Licens 365

casinoutansvensklicens365.com

48

Casino utan Svensk Licens 365 is a Swedish-language online information portal specializing in providing comprehensive guides, reviews, and resources about online casinos operating without a Swedish license. The website targets Swedish players seeking access to foreign casinos, offering detailed information on payment methods, bonuses, and playing despite restrictions like Spelpaus. Technically, the site is built on WordPress with modern plugins for SEO and user experience, featuring good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, though it lacks explicit security headers and detailed privacy policies. The domain registration data aligns well with the website's content and business focus, supporting its legitimacy. Overall, the site serves as a reliable resource for its niche audience but would benefit from enhanced privacy and security disclosures.

N

NyaCasinonUtanSvenskLicens.com

nyacasinonutansvensklicens.com

52

NyaCasinonUtanSvenskLicens.com operates as a Swedish language affiliate and informational website specializing in guiding players to online casinos without a Swedish license. The site provides comprehensive content on casino bonuses, payment methods, legal considerations, and the differences between licensed and unlicensed casinos, targeting Swedish players seeking alternatives outside the regulated Swedish market. The business model is primarily affiliate-based, offering curated lists and recommendations to its audience. Technically, the site is built on WordPress with modern plugins and themes, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies, terms of service, and security headers, which are recommended for improvement. The domain is relatively new, registered in 2021, with privacy protection typical for this industry. Overall, the website is professional, content-rich, and serves a niche market effectively, though it would benefit from enhanced compliance and security disclosures.

O

Kasyno Online Holandia ① Najlepsze Kasyna Internetowe 2025

onlinekasyno.nl

53

OnlineKasyno.nl is a niche affiliate and review website focused on providing Polish players in the Netherlands with information about the best online casinos, bonuses, and trustworthy reviews. The website positions itself as a resource for Polish-speaking gamblers interested in Dutch online gambling platforms. Technically, the site is built on WordPress and uses common web technologies including JavaScript, Google Tag Manager for analytics, and Trustpilot widgets to enhance trust. The site is accessible over HTTPS, indicating a basic level of security, but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. The absence of contact information and formal policies reduces transparency and may impact user confidence. Overall, the site is functional and professionally designed but could improve its privacy compliance and security posture to better serve its audience and meet regulatory requirements.

The website spelpausad.com is currently inaccessible beyond a Cloudflare security challenge page that verifies visitors are human before granting access. This indicates the site is protected by Cloudflare's Turnstile captcha service, which blocks automated access and bots. Due to this, no actual business content, contact information, or policies are visible for analysis. The domain is relatively new, registered in April 2022, and uses Cloudflare for DNS and security services. There is no evidence of privacy or cookie policies, terms of service, or any business-related disclosures on the accessible page. The lack of visible content and business information limits the ability to assess the company's market position, services, or compliance posture. The site appears to be in a pre-access state, likely to mitigate abuse or attacks.

C

Casinobernie

casinobernie.com

67

Casinobernie operates as a German-language online casino comparison and review platform, targeting players in Germany seeking trustworthy information about online casinos. The website offers extensive reviews, bonus comparisons, and payment method overviews for over 500 online casinos, positioning itself as a reliable affiliate partner in the gambling sector. Technically, the site is built using modern frameworks such as Astro, employs structured data for SEO, and integrates tracking tools like Google Tag Manager and Zaraz for analytics and marketing. Security-wise, the site enforces HTTPS and follows good practices but lacks explicit security headers and visible privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly diminishes trust. Overall, the site is professional, well-structured, and optimized for its target audience but should improve transparency and compliance documentation.

AFAS is a well-established technology company providing business software solutions, primarily in the Netherlands. The analyzed website is a dedicated status page for AFAS services, offering real-time updates on system status, incidents, and scheduled maintenance. The page is designed to inform customers and users about the operational status of various AFAS products and integrations. The business model is SaaS-focused, targeting business customers who rely on AFAS software for their operations. Technically, the status page is hosted on the Statuspal platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and hCaptcha for bot protection. The site is mobile-optimized and performs well with fast loading times. However, it lacks some advanced accessibility and SEO features. The use of HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are important for GDPR compliance. There is no published incident response or vulnerability disclosure information, which could be improved to enhance trust and transparency. Overall, the website is professional, trustworthy, and serves its purpose effectively. The main risks relate to privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear security contact information to improve compliance and user trust.

The website monpetitsite.org currently serves only a 404 error page indicating that the requested resource is not found. The domain is registered to a French organization named L'Échappée Belle, created recently in November 2023, suggesting a new or small business. There is no visible business content, contact information, or policies on the site, which limits the ability to assess the business model or market position. The hosting appears to be provided by Infomaniak based on the nameservers. Technically, the site uses basic HTML, CSS, and JavaScript with mobile responsive design but lacks SEO optimization and accessibility features. Security posture is minimal with no security headers detected and no HTTPS status visible from the provided data. No privacy or cookie policies are present, indicating poor privacy compliance. Overall, the site is not currently functional for business purposes and lacks trust and credibility indicators.

L

Les métiers en Église

metiers-eglise.ch

9

Les métiers en Église is a small-scale informational website focused on presenting various vocations and professions within the Catholic Church, primarily targeting a general audience interested in religious careers. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, with a moderate level of technical maturity. It uses HTTPS and standard Wix scripts but lacks advanced security headers and privacy compliance mechanisms. The site includes Google Tag Manager for analytics but does not provide visible privacy or cookie policies, nor contact information for users or security incidents. Overall, the website is professionally designed with good content relevance but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

L

La Doc - Librairie et médiathèque

catedoc.ch

50

La Doc - Librairie et médiathèque is a small, local library and bookstore service based in Fribourg, Switzerland, specializing in religious and liturgical materials. The website provides access to thematic collections aligned with liturgical seasons and offers user account management for borrowing and searching resources. The business appears community-focused with a clear target audience interested in religious education and media. Technically, the site uses a modern web stack including Bootstrap, jQuery, and Google Fonts, running on the NetBiblio WebOPAC platform. While the site is functional and well-structured, mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking important security headers and anti-CSRF protections. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and contact information support legitimacy. Overall, the site is suitable for its educational purpose but requires improvements in security and privacy transparency.

Spojené nástroje elektronické s.r.o. is a small Czech technology company specializing in electronic public procurement solutions. The company operates a platform aggregating public tenders in the Czech Republic, notably through the portal FEN.cz, and collaborates with government ministries on digitalization projects. Their market position is important within the Czech public procurement sector, serving businesses and public entities involved in tenders. The website reflects a professional business presence with clear contact information and a focused description of their services. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The absence of analytics and tracking scripts suggests minimal user tracking. From a security perspective, the site lacks visible security headers, privacy and cookie policies, and incident response information. HTTPS status is unknown from the data but should be verified. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected but notable gaps in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enforcing HTTPS, and publishing incident response contacts to enhance trust and compliance.

T

Travis CI

travis-ci.community

68

Travis CI Community is an official community forum platform for users of Travis CI, a continuous integration service. The site provides categorized discussion areas for announcements, environment-specific questions, integrations, deployment, language support, enterprise discussions, and product feedback. The platform is built on Discourse, a modern forum software, and is hosted with CDN support for performance. The domain is registered to Travis CI in Germany, consistent with the business identity. The website is well-structured, mobile-optimized, and provides a good user experience for its target audience of developers and CI users. However, it lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled and no explicit security or incident response policies are published.

HAN University of Applied Sciences is a well-established educational institution in the Netherlands offering a wide range of English-taught Bachelor and Master programs targeted at international students. The university emphasizes practice-based education and has a strong online presence with comprehensive information about programs, admissions, research, and collaboration. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and Cookiebot for consent management, indicating compliance with privacy regulations. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the strong branding and external references. Overall, the site represents a credible and professional educational entity with a solid digital presence.

The website www.koganpage.com is currently inaccessible due to an AWS WAF CAPTCHA challenge page that requires human verification before access. This prevents retrieval of any meaningful content, metadata, or business information. The WHOIS query for the domain returned no registration data, indicating the domain may not be registered or WHOIS data is unavailable. Consequently, no privacy, cookie, or terms of service policies, nor contact or business details, could be extracted or analyzed. The technical infrastructure is limited to AWS WAF security scripts, with no visible CMS or analytics tools. The security posture cannot be properly assessed due to lack of access, but the presence of a WAF challenge indicates some level of protection against automated threats. Overall, the site’s trustworthiness and legitimacy cannot be confirmed, and the domain registration status raises concerns.

Léa-Linux is a French community-driven website dedicated to Linux and free software, providing news, documentation, forums, and mailing lists to support and promote open source software and digital freedom. The site targets French-speaking Linux users and free software enthusiasts, operating as a small, non-profit community platform with a long history dating back to 2000. The website is hosted by OVH sas, a reputable French hosting provider, and uses WordPress as its content management system. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie policy or consent mechanism detected, representing a compliance gap. The site does not display commercial advertising or tracking technologies, focusing instead on community content and resources. Overall, the website is legitimate, stable, and trustworthy but would benefit from enhanced security and privacy practices.

L

LES EDITIONS DIAMOND

ed-diamond.com

60

LES EDITIONS DIAMOND operates a professional online boutique offering subscriptions and single-issue sales of specialized technology magazines focused on Linux, cybersecurity, embedded systems, and open source. The company targets IT professionals and enthusiasts with a niche market presence in France. The website is well-structured, mobile-optimized, and provides multiple digital and print reading options, including a digital content platform named Diamond Connect. Technically, the site uses modern web technologies and a PrestaShop CMS, with good security practices including HTTPS and security headers. No critical vulnerabilities or security incidents were detected. Privacy and cookie policies are present and GDPR compliant. Overall, the website demonstrates a mature digital presence with a strong business credibility and trustworthy user experience.

É

Éditions Eyrolles

editions-eyrolles.com

56

Éditions Eyrolles is a well-established independent French publishing house founded in 1925, specializing in a broad range of book genres including personal development, literature, creative hobbies, and professional skills. The website presents a professional and content-rich platform targeting readers interested in educational and leisure reading materials. Technically, the site uses modern web technologies such as Google Tag Manager and slick carousel for user experience enhancements, with good mobile optimization and SEO practices. However, the security posture is moderate due to lack of visible security headers and unclear SSL configuration. Privacy compliance is weak, with no explicit privacy or cookie policies found in the analyzed content. The WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy despite the strong brand presence. Overall, the site is functional and professional but would benefit from improved transparency and security measures.

M

Marie Claire

marieclaire.com

73

Marie Claire is a well-established media brand focused on fashion, celebrity news, beauty, and culture. The website targets women interested in lifestyle content and operates under a professional media publishing model likely managed by Future plc. The site features a modern technical infrastructure with JavaScript frameworks, CDN usage, and standard advertising and analytics integrations. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS registration data reduces transparency but does not detract from the site's apparent legitimacy. Overall, the website provides a good user experience with quality content and consistent branding.

Doe Maar Musical is a Dutch entertainment website promoting a musical event featuring hits from the popular Dutch pop group Doe Maar. The site targets a general audience interested in musical theater and live performances, positioning itself as a niche event promoter in the Netherlands. The business model revolves around ticket sales and event promotion. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile optimized and provides a good user experience with consistent branding and relevant content. Security-wise, HTTPS is enabled, and cookie consent is implemented, but there is a lack of security headers and explicit privacy or security policies. No contact information or incident response details are provided, which could be improved to enhance trust and compliance. Overall, the website is legitimate, safe, and professionally maintained but could benefit from enhanced privacy and security disclosures.

The website www.marketingbrew.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks content until human verification is completed. This prevents access to any meaningful business or technical content for analysis. The WHOIS lookup for the domain returned no registration data, indicating the domain may be unregistered, expired, or protected by privacy services with no public information. Consequently, no business details, contact information, or policies are available for review. The site is hosted behind Cloudflare's security infrastructure, which provides protection but also limits visibility into the site's actual content and security posture. Overall, the lack of accessible content and WHOIS data severely limits the ability to assess the company's legitimacy, security maturity, or compliance status.

L

Lockdown Systems

lockdown.systems

62

Lockdown Systems is a worker-owned collective focused on developing privacy and freedom-enhancing technologies. Their key offerings include open-source tools such as Cyd, OnionShare, and ICE Detention Map, alongside privacy and security consulting services. The organization targets individuals and organizations committed to protecting data privacy, including activists, journalists, and non-profits. Their business model balances commercial sustainability with mission-driven impact, emphasizing transparency and community empowerment. Technically, the website is built with modern web standards, hosted on DigitalOcean, and employs minimal tracking scripts focused on privacy. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a good level of digital maturity. However, some security best practices such as DNSSEC and security headers are not implemented, and no cookie consent mechanism is present despite privacy claims. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The lack of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. The domain registration uses privacy protection services, which aligns with the organization's privacy focus and does not raise legitimacy concerns. Overall, Lockdown Systems presents a trustworthy and professional online presence with a strong mission and solid technical foundation. Strategic enhancements in security policies, compliance mechanisms, and DNS security would further strengthen their posture and trustworthiness.

W

Wagtail CMS

wagtail.io

71

Wagtail CMS is an open-source content management system built on the Django framework and powered by Python. It targets developers, businesses, nonprofits, government, cultural, and educational institutions seeking a versatile and modern CMS solution. The website demonstrates a strong market position with active community engagement, professional services, and a clear roadmap for future development. Technically, the site uses modern web technologies including Google Analytics and Tag Manager for tracking, and Cloudflare for DNS services. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers are not evident in the HTML source. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but could improve transparency and security practices.

The website js.doip.rocks serves as the documentation portal for doip.js, an open source JavaScript library designed to verify decentralized online identities. The project is community-driven and funded by foundations such as NLnet and NGI0, with active presence on platforms like Codeberg and Mastodon. The site targets developers and contributors interested in decentralized identity verification technologies. The business model revolves around open source collaboration and community support rather than commercial sales. Technically, the website uses standard web technologies including JavaScript, HTML5, CSS, and integrates openpgp.js for cryptographic functions. The documentation is generated using JSDoc and styled with docdash. The site supports both Node.js and browser environments. Performance and mobile optimization are basic but functional, with no detected CMS or advanced frameworks. External links connect to reputable open source and community platforms. From a security perspective, the site lacks visible security headers and explicit SSL/TLS configuration details in the provided data. No forms or user input fields are present, reducing attack surface. However, absence of privacy and cookie policies, as well as contact information for security incidents, indicates gaps in compliance and incident response readiness. The WHOIS data is malformed and unavailable, which reduces domain trustworthiness despite the professional and transparent nature of the project. Overall, the website is a safe, niche technical resource with moderate trustworthiness. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance its security posture and business credibility.

F

framasoft.org

mobilizon.org

58

Mobilizon is an open-source, community-driven platform designed to facilitate event creation, sharing, and group organization within federated networks. It targets community organizers, activists, associations, and public institutions, offering a collaborative agenda solution that emphasizes privacy and decentralization. The platform is supported by framasoft.org, a French non-profit organization, and benefits from partnerships with hosting and development entities such as Kaihuri and IndieHosters, with financial backing from NLNet. The website is professionally designed using the Hugo static site generator, ensuring fast performance and good mobile optimization. However, it lacks some privacy compliance features such as cookie consent mechanisms and detailed privacy policies.

A

AFAS SB

afas-sb.nl

65

AFAS SB is a Dutch online bookkeeping software provider targeting entrepreneurs and small to medium businesses. The website presents a professional and consistent brand image, highlighting key services such as VAT filing automation, bank integration, and invoice management. The company claims a strong market presence with over 14,000 organizations using their software. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website is trustworthy, well-designed, and provides a good user experience, but could improve transparency on privacy and security policies.

A

AFAS Software

werkenbijafas.nl

67

AFAS Software operates the website werkenbijafas.nl as a recruitment portal targeting IT professionals and job seekers interested in joining their technology company. The site presents a professional design with clear branding and consistent content focused on employment opportunities. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent, and Watermelon Widget for user engagement. The site is mobile optimized and uses HTTPS with good SSL configuration, although some security headers are not explicitly detected. Privacy compliance is partially addressed through a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service were found in the provided content. No contact emails or phone numbers were identified, which could be improved for better user support and trust. The domain registration data aligns well with the business identity, indicating a legitimate and established presence. Overall, the website is professional and secure but could enhance transparency and compliance by publishing privacy and security policies explicitly.

A

AFAS Theater

afastheater.nl

67

AFAS Theater is a modern theater and event venue located in Leusden, Netherlands, established in 2021. It serves both business clients and general theater audiences, offering a unique experience with inclusive services such as parking and refreshments. The theater is part of the AFAS Software group, leveraging a strong brand and partnerships to enhance its market position. The website reflects a professional and well-structured digital presence with good content quality and user experience. Technically, the site uses modern web technologies and implements essential security measures including HTTPS and security headers. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website and business demonstrate a high level of credibility and trustworthiness.

A

AFAS Foundation

afas.foundation

65

The AFAS Foundation is a Dutch non-profit organization dedicated to inspiring and supporting social projects that create significant positive impact. The foundation focuses on funding and facilitating initiatives that help many people and inspire change. Their website is professionally designed, mobile-optimized, and provides detailed information about ongoing projects, events, and news updates. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, and Google Tag Manager for analytics. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies. The absence of WHOIS data limits full verification of domain legitimacy, but the website content and branding are consistent with a reputable non-profit entity. Overall, the foundation demonstrates a solid digital presence with room for improvement in privacy compliance and security best practices.

AFAS Online operates as a business software platform providing secure user authentication services through its login portal. The website targets business users and clients of AFAS software solutions, offering modern authentication options including passkey (FIDO2) technology. The platform appears professionally designed with consistent branding and a focus on usability for enterprise customers. Technically, the site uses standard web technologies and ASP.NET MVC framework patterns, with moderate performance and good mobile optimization. Security measures include CSRF tokens and advanced login methods, though the absence of visible security headers and privacy policies suggests room for improvement. Overall, the domain and website content align with a legitimate business software provider, though WHOIS data is unavailable for the subdomain, which is typical and not concerning. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security header implementation to strengthen trust and compliance.

V

Vidmob

vidmob.com

67

Vidmob is a technology-driven creative data company founded in 2006, specializing in AI-powered tools that enable brand, creative, and media teams to optimize marketing and media decisions. The company positions itself as a leader in creative data analytics, trusted by major global brands. The website is built on HubSpot CMS, leveraging modern web technologies and marketing tools, with a professional design and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit policies are missing. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service in the provided content. Overall, the domain registration and website content align well, indicating a legitimate and credible business presence.

S

Samenwerkingsorganisatie Beroepsonderwijs Bedrijfsleven

s-bb.nl

68

Samenwerkingsorganisatie Beroepsonderwijs Bedrijfsleven (SBB) is a key Dutch organization bridging vocational education and the business sector. Commissioned by the Ministry of Education, Culture and Science, SBB facilitates recognition and guidance of training companies, develops qualification structures, and provides labor market information. The website reflects a professional and comprehensive digital presence targeting companies, educational institutions, students, and labor market partners. Technically, the site uses modern web technologies including Umbraco CMS, Google Tag Manager, and cookie consent mechanisms, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-positioned in its sector, though it lacks explicit privacy and security policy disclosures.

A

Association Linuxfr

linuxfr.org

53

LinuxFr.org is a well-established French-language community platform dedicated to free software news, discussions, and collaborative content. Operated by the Association Linuxfr since 1998, it serves a niche audience of francophone free software enthusiasts and contributors. The site offers a variety of services including news articles, user journals, forums, and wiki pages, all managed by a volunteer editorial team. The content is predominantly licensed under Creative Commons, emphasizing openness and community sharing. Technically, the website uses standard web technologies (HTML5, CSS, JavaScript) with a custom or unknown CMS. It is hosted by joker.com, a reputable registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some modern security enhancements like DNSSEC and security headers are missing. The domain is secured with HTTPS and has domain transfer protections in place. From a security perspective, the site shows moderate maturity with secure forms including CSRF tokens and active moderation. However, it lacks explicit privacy and cookie policies, security.txt files, and vulnerability disclosure mechanisms. No signs of WAF or content blocking were detected, and the WHOIS data is consistent and trustworthy, reinforcing the site's legitimacy. Overall, LinuxFr.org is a credible, community-driven platform with excellent content quality and good technical implementation. To enhance trust and security posture, it should implement explicit privacy and cookie policies, enable DNSSEC, add security headers, and publish vulnerability disclosure information.

Libre à lire ! is a French non-profit initiative affiliated with April, focused on transcribing audio and video recordings related to free software and digital freedoms. The website serves a niche audience interested in open source, digital rights, and related topics, providing accessible textual content from various conferences and talks. The business model is centered on content transcription and dissemination without commercial intent, positioning itself as a trusted resource within the free software community. Technically, the website is built on the SPIP CMS platform, uses JavaScript and Matomo analytics for privacy-conscious user tracking, and is served over HTTPS ensuring secure communications. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS but lacks several recommended security headers and does not provide explicit security policies or incident response information. The absence of a cookie consent mechanism is a notable gap in GDPR compliance. WHOIS data is unavailable due to privacy protection or malformed queries, which is common for non-profit organizations prioritizing privacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include implementing security headers, adding cookie consent for compliance, and publishing security and incident response policies to enhance trust and security posture.

The Northern Institute of Technology Management (NIT) is a private business school affiliated with the Hamburg University of Technology (TUHH) in Germany. It specializes in offering MBA and Master's degree programs in Technology Management and Business Analytics & AI, targeting engineers and technology professionals globally. The institution emphasizes practice-oriented education with international faculty and a strong focus on leadership and innovation. The website reflects a mature digital presence built on the HubSpot CMS platform, featuring modern design, mobile responsiveness, and comprehensive content. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers could enhance protection. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. The absence of WHOIS data limits domain trust assessment, but the website's professional branding, accreditation, and academic partnerships strongly indicate legitimacy.

S

Studierendenwerk Hamburg

stwhh.de

47

Studierendenwerk Hamburg is a non-profit public institution supported by the city of Hamburg, providing comprehensive services to over 73,000 students and higher education institutions. Their offerings include student housing, financial aid, counseling, gastronomy, family services, and international student support. The website is built on TYPO3 CMS and employs Matomo analytics for privacy-conscious user tracking. The site demonstrates good technical maturity with fast performance, mobile optimization, and clear navigation. However, explicit privacy policies, terms of service, and contact information are not clearly presented in the accessible content, which could be improved for better compliance and user trust. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks some security headers and vulnerability disclosure mechanisms.

T

Technische Universität Hamburg (TU Hamburg)

stuhhdium.de

11

Technische Universität Hamburg (TU Hamburg) is a reputable public university specializing in engineering and technology education with a strong emphasis on addressing climate change challenges. The website provides comprehensive information about their Bachelor and Master programs, dual study options, research focus, and student life. It targets prospective students, including international candidates, offering detailed program descriptions and support resources. The university maintains an active presence on major social media platforms and integrates modern web technologies to deliver a professional and engaging user experience. The site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website reflects a trustworthy and well-established educational institution with a strong digital presence.

R

Registry Services, LLC

garr.tv

56

GARR.tv is a specialized video streaming platform built on the PeerTube open-source software, dedicated to serving the education and research community primarily in Italy and internationally. It offers live streaming and video on-demand services, enabling users to broadcast, record, and share educational and research-related events and content. The platform leverages modern web technologies including Angular and integrates OpenID Connect for authentication, enhancing user access control. Matomo analytics is used for tracking user interactions with privacy-conscious configurations. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. However, explicit privacy and cookie policies are absent, which is a compliance gap.