Security Directory

H

Holiday Media

hmcms.nl

60

Holiday Media is a specialized internet service provider focusing on the Dutch recreation and travel sector, delivering website design, maintenance, and integration with booking systems to over 250 clients. Their market position is that of a niche expert with a strong local presence and a comprehensive service offering including internet marketing, photography, and videography. Technically, the website employs modern web technologies including jQuery, Google Analytics, and a proprietary CMS, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, but lacks visible security headers and explicit privacy compliance mechanisms such as cookie consent banners. Overall, the site is professional and trustworthy, with clear contact information and social media presence.

D

DAAD (Deutscher Akademischer Austauschdienst)

study-in-germany.com

65

The website www.study-in-germany.com is an authoritative educational portal aimed at international students interested in studying in Germany. It is supported by the German Academic Exchange Service (DAAD) and the Federal Ministry of Education and Research (BMBF), providing comprehensive information on study planning, visa requirements, financing, and living in Germany. The site is professionally designed with clear navigation and rich content primarily in German, targeting prospective international students. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, with analytics provided by eTracker. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms comply with GDPR, but explicit security headers and incident response contacts are not evident. The WHOIS data for the domain is missing or unavailable, which is unusual and reduces trust in domain registration transparency, although the website content and branding strongly suggest legitimacy. Overall, the site scores well on content quality and privacy compliance but has room for improvement in security posture and business credibility transparency.

S

Specialdelivery

specialdeliverysandiego.org

57

Special Delivery San Diego is a small non-profit organization dedicated to providing nutritional support to the San Diego community through home-delivered meals, a nutrition pantry, and diabetic education programs. The organization relies on donations and volunteer efforts to serve over 800 families monthly. The website is built on the Wix platform, featuring a professional design with clear navigation and calls to action for volunteering and donations. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features. No WHOIS data was available due to query failure or privacy protection, but the domain and website content appear consistent with a legitimate non-profit entity. Overall, the site demonstrates good business credibility and content quality but should improve privacy policies and security practices to enhance trust and compliance.

Southern California Bulldog Rescue is a small non-profit organization dedicated to rescuing and rehoming bulldogs in the Southern California region. The website serves as an informational platform to support their mission, targeting animal lovers, potential adopters, and donors. The organization has a long-standing presence since 2006, reflected in the domain registration data. Technically, the website is built on the Snap Cloud CMS platform, hosted on AWS infrastructure, and uses common web technologies such as JavaScript and Google Fonts. The site is accessible and uses HTTPS, but lacks advanced security headers and privacy compliance features. There is minimal content and no visible contact or policy pages, which limits user engagement and trust signals. Security posture is moderate with room for improvement in headers and policy disclosures. Overall, the website is functional but basic, with recommendations to enhance security, privacy compliance, and user trust.

T

Tiny Frog

tinyfrog.com

63

Tiny Frog is a well-established web design and development agency based in San Diego, founded in 2003. The company positions itself as a top-rated local agency offering a range of services including web design, development, search marketing, e-commerce solutions, and web accessibility. The website reflects a professional and consistent brand image targeting businesses seeking digital solutions. Technically, the site is built on WordPress with the Genesis Framework, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Google Ads, and LiveChat. Security practices include HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and published policies. Overall, the site demonstrates good digital maturity and business credibility.

8

8x8, Inc.

8x8.vc

58

8x8 Work is a professional video conferencing platform targeting businesses of all sizes, leveraging the open-source Jitsi Meet technology. The platform offers secure, reliable, and feature-rich video meetings with capabilities such as live streaming, recording, transcription, and collaborative whiteboarding. The website reflects a mature enterprise-grade service with consistent branding and a focus on business users. Technically, the site employs modern web technologies including React, WebRTC, and integrates analytics tools like Google Analytics, Amplitude, and Treasure Data. The infrastructure appears robust with service workers and token-based authentication mechanisms in place. Security posture is strong with HTTPS enforced and secure WebRTC configurations; however, explicit security policies and incident response information are not publicly visible. Privacy compliance is partially addressed with clear privacy and terms of service pages, but lacks a visible cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness.

The website europazagradane.hr is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and no meaningful user engagement features. The domain was registered recently in 2022 by a Bulgarian registrar and uses parking name servers, consistent with domain parking practices. Technically, the site uses basic HTML and JavaScript with third-party ad networks such as Google Adsense Domains CAF and Youseasky. There is no evidence of a CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers detected, and no privacy or cookie consent mechanisms implemented. No contact or business information is provided, limiting trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.

P

Popravi.to

popravi.to

54

Popravi.to is a Croatian civic technology platform enabling local residents to report, view, and discuss street-related problems such as graffiti, illegal waste dumping, and damaged infrastructure. The platform is powered by the open source FixMyStreet software and targets community members interested in improving their local environment. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and OpenLayers for mapping, supported by multiple analytics tools and Cloudflare hosting. The site is mobile optimized and uses HTTPS with some security best practices like CSRF tokens and service workers. However, it lacks explicit privacy and cookie policies, and no direct contact information is provided on the homepage. Security posture is good but could be improved with additional headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent with the website's Croatian civic focus, indicating legitimacy and trustworthiness.

P

Plus Hosting Grupa d.o.o.

parlametar.hr

53

Parlametar is a Croatian government-focused digital platform that provides detailed analysis and tracking of parliamentary activities, including voting records and speech transcripts of Croatian Parliament members. The platform targets citizens, journalists, and political analysts interested in transparent and accessible parliamentary data. It operates as an informational service with a specialized niche in political data visualization and analysis. Technically, the website employs a modern yet somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.3, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The domain is registered with a reputable Slovenian hosting provider, consistent with the website's operational profile. Overall, the site is professional, trustworthy, and serves a clear public interest function.

M

MDBootstrap

mdbootstrap.com

68

MDBootstrap is a well-established provider of Material Design UI kits and Bootstrap templates, trusted by over 2 million developers and designers worldwide. The company offers a comprehensive suite of frontend development resources including UI components, plugins, and extensive documentation, positioning itself as a leader in the web development tools market. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome to deliver a rich user experience. The technical infrastructure is robust, with good mobile optimization, SEO practices, and performance considerations. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in publishing explicit privacy, cookie, and security policies. Overall, MDBootstrap presents a professional and trustworthy digital presence with strong market credibility.

A

algoo

galae.net

62

Galae is a French-based email service provider offering high deliverability, unlimited email addresses and domains, and advanced configuration options. The service is positioned as an ethical, GDPR-compliant alternative focused on autonomy and sovereignty, leveraging open source software and hosted exclusively in France. The business is relatively new, founded in 2023, and operated by the parent company algoo. The website presents a professional image with clear pricing, client testimonials, and a community support platform. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, with hosting provided by Scaleway SAS. Security practices include support for email authentication standards (DKIM, SPF, DMARC) and data redundancy, but lack visible security headers and explicit incident response information. Privacy compliance is partially demonstrated but lacks explicit privacy and cookie policies on the site. Overall, galae demonstrates a solid business and technical foundation with room for improvement in security transparency and privacy disclosures.

C

Citus Data

citusdata.com

75

Citus Data is a technology company specializing in distributed PostgreSQL database solutions. Their core offering is the Citus extension, which enables horizontal scaling of Postgres databases through distributed tables and parallel query execution. The company provides both an open source version and a managed cloud service integrated with Microsoft Azure Cosmos DB for PostgreSQL. Positioned as a niche leader in scalable Postgres solutions, Citus Data targets developers and enterprises requiring high-performance, scalable database infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and strong Microsoft branding, indicating a medium-sized enterprise with solid market positioning. Technically, the website leverages modern web technologies including Google Fonts, SVG graphics, JavaScript, Marketo forms for lead capture, and Google reCAPTCHA for bot protection. The hosting and cloud service references suggest Microsoft Azure as the underlying platform. The site is well optimized for mobile devices, SEO, and accessibility, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers are not detected, and there is no published security policy or incident response information, which are areas for improvement. The absence of WHOIS data for the domain is unusual but mitigated by the strong Microsoft association and trust signals such as customer testimonials and GitHub presence. Overall, the website presents a trustworthy and professional front for Citus Data's business, with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and security posture.

U

Uitjes.nl

uitjes.nl

52

Uitjes.nl is a well-established Dutch online platform founded in 1999, specializing in providing inspiration and listings for leisure activities and day trips across the Netherlands and Belgium. The platform caters to a broad audience including families, friends, and corporate groups, offering a wide range of activities such as sports, cultural events, and special outings. It features user reviews, promotional offers, and a reservation/payment system to facilitate bookings. Technically, the website employs modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA, ensuring a functional and moderately optimized user experience with good mobile responsiveness. Security-wise, the site benefits from HTTPS, DNSSEC, and reCAPTCHA integration, but lacks visible security headers and published security policies, indicating room for improvement in security transparency and defense-in-depth. Overall, the domain's WHOIS data confirms a long-standing and legitimate presence, supporting the platform's credibility and trustworthiness.

D

Duurzaamnieuws

duurzaamnieuws.nl

59

Duurzaamnieuws is a Dutch independent media outlet focused on sustainability, climate, energy, and related topics. The website provides current news, opinion pieces, and insights aimed at a general audience interested in a sustainable future. It operates on a membership and donation-supported business model, positioning itself as a trusted source for sustainability news in the Netherlands. The site uses WordPress CMS with a professional theme and SEO optimization, supported by social media channels on Facebook, Twitter, Mastodon, and LinkedIn. Technical infrastructure includes modern plugins and Google Analytics for tracking, with a cookie consent mechanism in place. From a security perspective, the website enforces HTTPS and uses basic security best practices but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Incident response and vulnerability disclosure information are also absent. Overall, the website is well-structured, mobile-optimized, and provides relevant content with moderate user tracking. The domain registration details are consistent with the business claims, indicating legitimacy. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and adding vulnerability disclosure information to improve trust and compliance.

P

Pure Benefit

purebenefit.eu

56

Pure Benefit is a small environmental consultancy specializing in the hospitality sector, offering services such as energy audits, CO2 footprint analysis, and compliance with European energy directives. The website is professionally designed using the Squarespace platform, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, but lacks some security headers and privacy compliance features. The absence of privacy and cookie policies, as well as contact information, limits trust and compliance. WHOIS data is privacy protected, typical for small businesses using third-party registrars. Overall, the website presents a legitimate business with room for improvement in privacy and security transparency.

E

Era Networks DMCC

suiscan.xyz

62

Suiscan.xyz is a blockchain explorer and analytics platform dedicated to the Sui protocol, providing users with comprehensive data on market capitalization, token prices, transaction volumes, DeFi projects, NFTs, and validator information. The platform targets blockchain developers, investors, and enthusiasts seeking detailed insights into the Sui ecosystem. The website is professionally designed with a consistent brand presence and offers a rich set of features tailored to its niche audience. Technically, the site leverages modern web technologies including React.js and is hosted via Cloudflare, ensuring reliable performance and baseline security. However, some areas such as privacy compliance and contact transparency are lacking, with no visible privacy or cookie policies and no direct contact information provided. Security posture is solid with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and publishing vulnerability disclosure policies. Overall, Suiscan.xyz presents a credible and functional service with room for enhancement in compliance and user trust features.

Z

Ziggo

ziggo.nl

78

Ziggo is a leading Dutch telecommunications provider offering internet, TV, streaming, and fixed and mobile telephony services. The website reflects a mature digital presence with integration into the VodafoneZiggo group, providing a broad range of consumer and business services. The technical infrastructure is modern, leveraging Vue.js, Adobe Experience Manager, AWS hosting, and advanced analytics and marketing tools. Security posture is strong with HTTPS enforcement and cookie consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-optimized for users.

C

Civic Science Fellows

civicsciencefellows.org

47

Civic Science Fellows is a US-based non-profit organization focused on fostering leadership and collaboration between science and society through its fellowship program. The website presents a professional and well-structured platform built on WordPress, hosted on DigitalOcean, with a clear focus on community engagement and educational content. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, and no GDPR indicators are present. Contact information is limited to a contact form and newsletter signup, with no direct emails or phone numbers provided. Overall, the site is trustworthy and safe for general audiences but would benefit from improved privacy and security practices.

S

SITPI

colter.social

65

colter.social is a specialized Mastodon instance serving agents, services, and elected officials of French local authorities. Administered by SITPI, the platform provides a decentralized social networking service tailored to this professional community. The website is primarily in French and leverages the Mastodon open source platform version 4.2.15, hosted by Gandi SAS. The domain registration details align well with the stated purpose and geographic focus, indicating legitimacy and consistency. Technically, the site demonstrates moderate performance and basic mobile optimization, with HTTPS enabled and a clientTransferProhibited domain status enhancing security. However, DNSSEC is not enabled, and no advanced security headers are detected, representing areas for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism and terms of service. Contact information and incident response details are not publicly available, limiting transparency. Overall, the site is functional and trustworthy for its niche audience but could benefit from enhanced security and compliance features.

The website 'ICE Detention Map' operated by Lockdown Systems provides an interactive and detailed visualization of ICE detention facilities across the United States. It offers data on detainee counts, criminal versus non-criminal status, and ICE threat levels, serving as a valuable resource for activists, researchers, and the general public interested in immigration detention transparency. The platform positions itself as a niche non-profit advocacy tool focused on government and immigration issues. Technically, the site employs modern web technologies including Leaflet.js for mapping and OpenStreetMap for base tiles. The infrastructure is straightforward, with moderate performance and good mobile optimization. The site uses minimal tracking via Plausible Analytics, reflecting a privacy-conscious approach. However, the absence of privacy and cookie policies, as well as missing security headers, indicates areas for compliance and security improvement. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. The WHOIS data presents anomalies with a future domain creation date and no registrant details, which reduces trustworthiness but does not necessarily indicate malicious intent given the site's content and affiliations. Overall, the website is functional, informative, and safe for general audiences but would benefit from improved privacy compliance, security hardening, and clearer business contact information to enhance trust and regulatory adherence.

S

Science & Design, Inc

onionshare.org

52

OnionShare is an open-source privacy-focused software project that enables anonymous peer-to-peer file sharing, chatting, and web hosting over the Tor network. The project is developed by Science & Design, Inc and partners with reputable privacy organizations such as The Calyx Institute, Guardian Project, and the Tor Project. The website serves a privacy-conscious audience including security specialists and users of privacy-centric operating systems like QubesOS and Tails. The business model is community-driven with donation support and open-source contributions. Technically, the website is well-built using modern web standards and hosted on DigitalOcean, with good mobile optimization and accessibility. Security practices include PGP signature verification for downloads and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial with a privacy policy present but no cookie consent or terms of service. Overall, the site is professional, trustworthy, and aligned with its privacy-centric mission.

S

Study in Germany

study-in-germany.de

65

Study in Germany is an educational information platform targeting international students interested in pursuing higher education in Germany. The website provides comprehensive resources including study programs, visa guidance, and cultural information, positioning itself as a key resource in the education sector focused on Germany. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contact, which could be improved to enhance trust. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure indicate a legitimate and professional operation. Overall, the site scores well in content quality and security posture but could benefit from improved business credibility transparency and explicit security disclosures.

N

Nederlandse Vereniging Beheer keurmerk Aangepaste Vakanties

nbav.nl

53

The website www.nbav.nl represents the Nederlandse Vereniging Beheer keurmerk Aangepaste Vakanties, a Dutch organization providing certification for entities focused on people with disabilities. The site is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard JavaScript polyfills. The content is primarily in Dutch and targets organizations and stakeholders in the disability support sector. The business model revolves around certification and association management within a niche market in the Netherlands. Technical infrastructure is standard for Wix-hosted sites, with moderate performance and good mobile optimization but limited SEO due to meta robots noindex directive. Security posture is basic, lacking advanced security headers and policies, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional but would benefit from enhanced security and privacy measures to improve trust and compliance.

S

Stichting KMVK

duurzaam-gastvrij.nl

63

Duurzaam Gastvrij is a Dutch sustainability certification organization focused on the leisure sector, operated by Stichting KMVK. The website serves as a comprehensive platform to promote sustainable business practices, certify companies, and provide resources and support for sustainability efforts. It holds a strong market position as a recognized sustainability mark endorsed by Green Key, targeting leisure businesses in the Netherlands. The site offers clear navigation, rich content, and multiple trust signals including partner logos and certifications. Technically, the website uses modern web technologies including jQuery, Swiper.js, and Google Analytics, hosted on a CMS platform (HMCMS). It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence with strong business credibility and privacy compliance.

A

allotropia software GmbH

zetaoffice.net

44

ZetaOffice is a technology-focused company offering a LibreOffice-based office suite accessible via web browsers, desktop, and soon mobile platforms. The company operates under allotropia software GmbH, based in Hamburg, Germany, and positions itself as a niche provider enabling businesses to leverage LibreOffice with options for self-hosting or CDN deployment. Their business model combines open source software with paid professional support and CDN services. Technically, the website employs modern web technologies and integrates privacy-friendly analytics, but lacks some advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business goals.

M

Metoki GmbH

metoki.ch

58

Metoki GmbH is a Swiss-based consulting firm specializing in digital marketing, website development, and knowledge management services primarily for small and medium enterprises, non-profit organizations, startups, and self-employed professionals. The company leverages over 20 years of experience to deliver tailored digital strategies, WordPress-based websites, social media presence, email marketing via Mailchimp, SEO, and e-learning solutions. Their market position is that of a niche, trusted partner with a strong focus on client-centric, lean project execution supported by a network of specialists. Technically, the website is built on WordPress using modern frameworks and technologies such as Bricks Builder, jQuery, and integrates analytics tools like Google Analytics and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. The presence of multiple client references and a professional design further enhance their digital maturity. From a security perspective, the site enforces HTTPS and employs standard best practices such as form anti-spam measures and reCAPTCHA. However, explicit security headers and published security policies are absent, indicating room for improvement in formal security posture and transparency. No vulnerabilities or exposed sensitive data were detected. Overall, Metoki GmbH presents a low-risk profile with a professional online presence, clear contact channels, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and implementing explicit cookie consent mechanisms to further strengthen trust and compliance.

H

HAN University of Applied Sciences

han.nl

75

HAN University of Applied Sciences is a large Dutch educational institution offering a wide range of programs including bachelor, master, associate degree, and post-hbo courses. It serves diverse audiences such as students, professionals, and mbo'ers, positioning itself as a key regional player in applied sciences education. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content that supports its educational mission. Security posture is strong with HTTPS enforcement, consent management via Cookiebot, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, supporting HAN's reputation as a credible educational provider.

Anchorage Daily News Store operates as a niche e-commerce retailer specializing in Alaska-themed apparel, merchandise, and local artist collaborations. The website is built on the Shopify platform using the Symmetry theme, leveraging a mature e-commerce infrastructure with integrations for marketing, analytics, and fulfillment. The store targets consumers interested in uniquely Alaskan products, positioning itself as a regional specialty retailer with a focused product catalog. Technically, the site demonstrates good performance, mobile optimization, and accessibility, with a comprehensive privacy policy and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and use of CAPTCHA for forms, though explicit security headers and incident response information are lacking. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

AlCoda GmbH

alcoda.info

39

AlCoda GmbH operates the domain alcoda.info, which currently hosts a default Plesk generated placeholder page indicating hosting control panel availability. The company appears to be involved in providing hosting services or web management solutions leveraging the Plesk platform. The website content is minimal and does not provide detailed business descriptions or customer engagement features. Technically, the site uses standard HTML, CSS, and JavaScript with Plesk infrastructure but lacks advanced security headers and privacy compliance mechanisms. The security posture is basic with no evident vulnerabilities but also no enhanced protections. Overall, the website is low in content quality and business credibility due to its placeholder nature. Strategic recommendations include implementing privacy and cookie policies, adding contact information, enabling DNSSEC, and improving security headers to enhance trust and compliance.

M

MiXiT

mixitconf.org

57

MiXiT is a specialized technology conference based in Lyon, France, focusing on ethics, diversity, and social responsibility within the tech industry. Founded in 2017, it hosts annual events featuring speakers, workshops, and sessions that engage developers, designers, and product managers. The conference emphasizes accessibility, safe environments, and eco-friendly practices, supported by a community-driven approach and sponsorships from notable companies. The website serves as an information hub for event details, ticketing, and multimedia content including podcasts and videos. Technically, the site uses modern web standards with Bootstrap and JavaScript, hosted by OVH sas, a reputable French provider. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance its security posture and compliance transparency.

A

April

candidats.fr

51

Candidats.fr is a French non-profit advocacy platform operated by the April association, focused on promoting free software and digital freedoms within the political landscape. The website provides resources, campaigns, and information encouraging political candidates to commit to free software principles through the Pacte du Logiciel Libre. The platform targets political candidates, free software advocates, and citizens interested in digital rights, positioning itself as a niche but trusted voice in the French technology and government sectors. Technically, the website is built on the Dotclear CMS and uses legacy JavaScript libraries such as jQuery 1.6.2 and jQuery UI 1.8.16. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. However, it lacks modern security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The absence of security headers and formal privacy compliance documentation reduces its security posture score. WHOIS data is unavailable, limiting domain legitimacy verification, but the association with April provides moderate trustworthiness. Overall, Candidats.fr is a credible and focused advocacy site with good content quality and user experience but would benefit from enhanced security practices and privacy compliance to strengthen trust and protect user data.

C

casinoutansvensklicens.website

casinoutansvensklicens.website

36

The website casinoutansvensklicens.website appears to be a parked domain primarily used for advertising and affiliate marketing related to gambling without a Swedish license. It lacks substantive business content, contact information, or clear service offerings, indicating it is not an operational business site but rather a placeholder or monetization platform. The technical infrastructure relies on basic HTML, CSS, and JavaScript with integration of Google Adsense and Bodis domain parking scripts. The site is accessible without WAF or blocking mechanisms but lacks modern security practices such as security headers and cookie consent mechanisms. Overall, the security posture is weak, with minimal privacy compliance and no incident response or security policy information available. The domain uses privacy-protected WHOIS registration, which reduces trust and transparency. The site targets a mature audience interested in gambling but does not provide any direct gambling services or content. Strategic recommendations include improving security headers, implementing privacy and cookie consent mechanisms, and providing clear business and contact information to enhance trust and compliance.

C

Casino utan Svensk Licens 365

casinoutansvensklicens365.com

48

Casino utan Svensk Licens 365 is a Swedish-language online information portal specializing in providing comprehensive guides, reviews, and resources about online casinos operating without a Swedish license. The website targets Swedish players seeking access to foreign casinos, offering detailed information on payment methods, bonuses, and playing despite restrictions like Spelpaus. Technically, the site is built on WordPress with modern plugins for SEO and user experience, featuring good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, though it lacks explicit security headers and detailed privacy policies. The domain registration data aligns well with the website's content and business focus, supporting its legitimacy. Overall, the site serves as a reliable resource for its niche audience but would benefit from enhanced privacy and security disclosures.

N

NyaCasinonUtanSvenskLicens.com

nyacasinonutansvensklicens.com

52

NyaCasinonUtanSvenskLicens.com operates as a Swedish language affiliate and informational website specializing in guiding players to online casinos without a Swedish license. The site provides comprehensive content on casino bonuses, payment methods, legal considerations, and the differences between licensed and unlicensed casinos, targeting Swedish players seeking alternatives outside the regulated Swedish market. The business model is primarily affiliate-based, offering curated lists and recommendations to its audience. Technically, the site is built on WordPress with modern plugins and themes, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies, terms of service, and security headers, which are recommended for improvement. The domain is relatively new, registered in 2021, with privacy protection typical for this industry. Overall, the website is professional, content-rich, and serves a niche market effectively, though it would benefit from enhanced compliance and security disclosures.

O

Kasyno Online Holandia ① Najlepsze Kasyna Internetowe 2025

onlinekasyno.nl

53

OnlineKasyno.nl is a niche affiliate and review website focused on providing Polish players in the Netherlands with information about the best online casinos, bonuses, and trustworthy reviews. The website positions itself as a resource for Polish-speaking gamblers interested in Dutch online gambling platforms. Technically, the site is built on WordPress and uses common web technologies including JavaScript, Google Tag Manager for analytics, and Trustpilot widgets to enhance trust. The site is accessible over HTTPS, indicating a basic level of security, but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. The absence of contact information and formal policies reduces transparency and may impact user confidence. Overall, the site is functional and professionally designed but could improve its privacy compliance and security posture to better serve its audience and meet regulatory requirements.

The website spelpausad.com is currently inaccessible beyond a Cloudflare security challenge page that verifies visitors are human before granting access. This indicates the site is protected by Cloudflare's Turnstile captcha service, which blocks automated access and bots. Due to this, no actual business content, contact information, or policies are visible for analysis. The domain is relatively new, registered in April 2022, and uses Cloudflare for DNS and security services. There is no evidence of privacy or cookie policies, terms of service, or any business-related disclosures on the accessible page. The lack of visible content and business information limits the ability to assess the company's market position, services, or compliance posture. The site appears to be in a pre-access state, likely to mitigate abuse or attacks.

C

Casinobernie

casinobernie.com

67

Casinobernie operates as a German-language online casino comparison and review platform, targeting players in Germany seeking trustworthy information about online casinos. The website offers extensive reviews, bonus comparisons, and payment method overviews for over 500 online casinos, positioning itself as a reliable affiliate partner in the gambling sector. Technically, the site is built using modern frameworks such as Astro, employs structured data for SEO, and integrates tracking tools like Google Tag Manager and Zaraz for analytics and marketing. Security-wise, the site enforces HTTPS and follows good practices but lacks explicit security headers and visible privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly diminishes trust. Overall, the site is professional, well-structured, and optimized for its target audience but should improve transparency and compliance documentation.

AFAS is a well-established technology company providing business software solutions, primarily in the Netherlands. The analyzed website is a dedicated status page for AFAS services, offering real-time updates on system status, incidents, and scheduled maintenance. The page is designed to inform customers and users about the operational status of various AFAS products and integrations. The business model is SaaS-focused, targeting business customers who rely on AFAS software for their operations. Technically, the status page is hosted on the Statuspal platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and hCaptcha for bot protection. The site is mobile-optimized and performs well with fast loading times. However, it lacks some advanced accessibility and SEO features. The use of HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are important for GDPR compliance. There is no published incident response or vulnerability disclosure information, which could be improved to enhance trust and transparency. Overall, the website is professional, trustworthy, and serves its purpose effectively. The main risks relate to privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear security contact information to improve compliance and user trust.

The website monpetitsite.org currently serves only a 404 error page indicating that the requested resource is not found. The domain is registered to a French organization named L'Échappée Belle, created recently in November 2023, suggesting a new or small business. There is no visible business content, contact information, or policies on the site, which limits the ability to assess the business model or market position. The hosting appears to be provided by Infomaniak based on the nameservers. Technically, the site uses basic HTML, CSS, and JavaScript with mobile responsive design but lacks SEO optimization and accessibility features. Security posture is minimal with no security headers detected and no HTTPS status visible from the provided data. No privacy or cookie policies are present, indicating poor privacy compliance. Overall, the site is not currently functional for business purposes and lacks trust and credibility indicators.

L

Les métiers en Église

metiers-eglise.ch

9

Les métiers en Église is a small-scale informational website focused on presenting various vocations and professions within the Catholic Church, primarily targeting a general audience interested in religious careers. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, with a moderate level of technical maturity. It uses HTTPS and standard Wix scripts but lacks advanced security headers and privacy compliance mechanisms. The site includes Google Tag Manager for analytics but does not provide visible privacy or cookie policies, nor contact information for users or security incidents. Overall, the website is professionally designed with good content relevance but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

L

La Doc - Librairie et médiathèque

catedoc.ch

50

La Doc - Librairie et médiathèque is a small, local library and bookstore service based in Fribourg, Switzerland, specializing in religious and liturgical materials. The website provides access to thematic collections aligned with liturgical seasons and offers user account management for borrowing and searching resources. The business appears community-focused with a clear target audience interested in religious education and media. Technically, the site uses a modern web stack including Bootstrap, jQuery, and Google Fonts, running on the NetBiblio WebOPAC platform. While the site is functional and well-structured, mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking important security headers and anti-CSRF protections. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and contact information support legitimacy. Overall, the site is suitable for its educational purpose but requires improvements in security and privacy transparency.

Spojené nástroje elektronické s.r.o. is a small Czech technology company specializing in electronic public procurement solutions. The company operates a platform aggregating public tenders in the Czech Republic, notably through the portal FEN.cz, and collaborates with government ministries on digitalization projects. Their market position is important within the Czech public procurement sector, serving businesses and public entities involved in tenders. The website reflects a professional business presence with clear contact information and a focused description of their services. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The absence of analytics and tracking scripts suggests minimal user tracking. From a security perspective, the site lacks visible security headers, privacy and cookie policies, and incident response information. HTTPS status is unknown from the data but should be verified. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected but notable gaps in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enforcing HTTPS, and publishing incident response contacts to enhance trust and compliance.

T

Travis CI

travis-ci.community

68

Travis CI Community is an official community forum platform for users of Travis CI, a continuous integration service. The site provides categorized discussion areas for announcements, environment-specific questions, integrations, deployment, language support, enterprise discussions, and product feedback. The platform is built on Discourse, a modern forum software, and is hosted with CDN support for performance. The domain is registered to Travis CI in Germany, consistent with the business identity. The website is well-structured, mobile-optimized, and provides a good user experience for its target audience of developers and CI users. However, it lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled and no explicit security or incident response policies are published.

HAN University of Applied Sciences is a well-established educational institution in the Netherlands offering a wide range of English-taught Bachelor and Master programs targeted at international students. The university emphasizes practice-based education and has a strong online presence with comprehensive information about programs, admissions, research, and collaboration. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and Cookiebot for consent management, indicating compliance with privacy regulations. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the strong branding and external references. Overall, the site represents a credible and professional educational entity with a solid digital presence.

The website www.koganpage.com is currently inaccessible due to an AWS WAF CAPTCHA challenge page that requires human verification before access. This prevents retrieval of any meaningful content, metadata, or business information. The WHOIS query for the domain returned no registration data, indicating the domain may not be registered or WHOIS data is unavailable. Consequently, no privacy, cookie, or terms of service policies, nor contact or business details, could be extracted or analyzed. The technical infrastructure is limited to AWS WAF security scripts, with no visible CMS or analytics tools. The security posture cannot be properly assessed due to lack of access, but the presence of a WAF challenge indicates some level of protection against automated threats. Overall, the site’s trustworthiness and legitimacy cannot be confirmed, and the domain registration status raises concerns.

Léa-Linux is a French community-driven website dedicated to Linux and free software, providing news, documentation, forums, and mailing lists to support and promote open source software and digital freedom. The site targets French-speaking Linux users and free software enthusiasts, operating as a small, non-profit community platform with a long history dating back to 2000. The website is hosted by OVH sas, a reputable French hosting provider, and uses WordPress as its content management system. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie policy or consent mechanism detected, representing a compliance gap. The site does not display commercial advertising or tracking technologies, focusing instead on community content and resources. Overall, the website is legitimate, stable, and trustworthy but would benefit from enhanced security and privacy practices.

L

LES EDITIONS DIAMOND

ed-diamond.com

60

LES EDITIONS DIAMOND operates a professional online boutique offering subscriptions and single-issue sales of specialized technology magazines focused on Linux, cybersecurity, embedded systems, and open source. The company targets IT professionals and enthusiasts with a niche market presence in France. The website is well-structured, mobile-optimized, and provides multiple digital and print reading options, including a digital content platform named Diamond Connect. Technically, the site uses modern web technologies and a PrestaShop CMS, with good security practices including HTTPS and security headers. No critical vulnerabilities or security incidents were detected. Privacy and cookie policies are present and GDPR compliant. Overall, the website demonstrates a mature digital presence with a strong business credibility and trustworthy user experience.

É

Éditions Eyrolles

editions-eyrolles.com

56

Éditions Eyrolles is a well-established independent French publishing house founded in 1925, specializing in a broad range of book genres including personal development, literature, creative hobbies, and professional skills. The website presents a professional and content-rich platform targeting readers interested in educational and leisure reading materials. Technically, the site uses modern web technologies such as Google Tag Manager and slick carousel for user experience enhancements, with good mobile optimization and SEO practices. However, the security posture is moderate due to lack of visible security headers and unclear SSL configuration. Privacy compliance is weak, with no explicit privacy or cookie policies found in the analyzed content. The WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy despite the strong brand presence. Overall, the site is functional and professional but would benefit from improved transparency and security measures.

M

Marie Claire

marieclaire.com

73

Marie Claire is a well-established media brand focused on fashion, celebrity news, beauty, and culture. The website targets women interested in lifestyle content and operates under a professional media publishing model likely managed by Future plc. The site features a modern technical infrastructure with JavaScript frameworks, CDN usage, and standard advertising and analytics integrations. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS registration data reduces transparency but does not detract from the site's apparent legitimacy. Overall, the website provides a good user experience with quality content and consistent branding.

Doe Maar Musical is a Dutch entertainment website promoting a musical event featuring hits from the popular Dutch pop group Doe Maar. The site targets a general audience interested in musical theater and live performances, positioning itself as a niche event promoter in the Netherlands. The business model revolves around ticket sales and event promotion. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile optimized and provides a good user experience with consistent branding and relevant content. Security-wise, HTTPS is enabled, and cookie consent is implemented, but there is a lack of security headers and explicit privacy or security policies. No contact information or incident response details are provided, which could be improved to enhance trust and compliance. Overall, the website is legitimate, safe, and professionally maintained but could benefit from enhanced privacy and security disclosures.