Security Directory

M

muenster.im

muenster.im

51

muenster.im operates as an independent Mastodon server providing a federated social media platform primarily targeting users in Münster, Germany, and the broader fediverse community. The platform offers microblogging services with a focus on community engagement and decentralized social networking. The website content reflects active user participation with trending posts and a visible admin presence, indicating a small but engaged user base. Technically, the site leverages modern web technologies including React and ES modules, ensuring a responsive and user-friendly experience across devices. However, the hosting provider is not explicitly identified, and media assets are served from third-party object storage, suggesting a cloud-based infrastructure. Security posture is moderate; HTTPS is enforced, but critical security headers are missing, and the domain registration is expired, posing a risk to service continuity. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site is functional and trustworthy for general audiences but requires urgent domain renewal and enhanced security and compliance measures to improve resilience and user trust.

B

Bundesministerium für Digitales und Verkehr

mobilithek.info

65

Mobilithek.info is a German government-operated platform under the Bundesministerium für Digitales und Verkehr, providing open mobility data and serving as a national access point and marketplace for mobility data in Germany. The platform targets businesses, municipalities, data providers, and mobility enthusiasts from various sectors including economy, science, and public administration. It offers services such as data searching, data delivery facilitation, and community networking through a professional and well-maintained website. Technically, the website employs modern web technologies including JavaScript ES modules and Vue.js framework, with a responsive and accessible design optimized for mobile devices. The site demonstrates good SEO practices and fast performance, although no common CMS or hosting provider details are evident. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit incident response or vulnerability disclosure mechanisms. Overall, the security posture is solid but could be improved by implementing additional security headers and publishing a security.txt or vulnerability disclosure policy. The WHOIS data is limited due to TLD restrictions and privacy, but the domain's association with a federal ministry strongly supports legitimacy. No signs of malicious activity or suspicious content were found, and the site maintains high standards of professionalism and trustworthiness.

C

checkdomain

checkdomain.de

64

Checkdomain.de is a professional German domain registration and web hosting service provider offering a wide range of digital solutions including domain checks, web hosting, website builders, SSL certificates, and marketing tools. The company targets individuals and businesses seeking to establish or enhance their online presence, with a strong market position supported by positive customer reviews and a comprehensive product portfolio. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, and a consent management platform, ensuring good performance, mobile optimization, and SEO compliance. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-designed, and compliant with privacy regulations, making it a reliable platform for domain and hosting services.

H

Horizon Europe Community Österreich

horizon-europe-community.at

60

The Horizon Europe Community Österreich website serves as a specialized networking and collaboration platform for researchers, organizations, and citizens engaged with Horizon Europe funding in Austria. It facilitates matchmaking, event participation, and dissemination of funding opportunities, positioning itself as a niche community hub supported by the b2match platform. The site is well-structured, content-rich, and targets a professional audience interested in European research funding and cooperation. Technically, the site leverages modern web technologies including React with Next.js, Google OAuth for authentication, and WebSocket for real-time features, hosted on Google Cloud infrastructure. It demonstrates good digital maturity with mobile optimization and accessibility considerations. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, professionally maintained, and aligned with its business purpose, with no signs of malicious content or vulnerabilities.

B

Börsenmedien AG

deraktionaer.de

60

DER AKTIONÄR is a leading German financial news and stock market magazine operated by Börsenmedien AG, established in 1996. The website offers daily updated market news, investment advice, podcasts, videos, and subscription services including e-paper and reports. It targets investors and financial market participants primarily in Germany. The business model combines content publishing with subscription and e-commerce revenue streams. Technically, the site uses modern JavaScript, GDPR-compliant consent management, and integrates advertising and tracking services responsibly. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, privacy management, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the site is professional, trustworthy, and well-maintained.

O

ORF - Österreichischer Rundfunk

orf.at

73

ORF.at is the official news portal of ORF - Österreichischer Rundfunk, Austria's public broadcasting organization. The website delivers up-to-date news content including text, images, videos, weather, and sports, targeting the general Austrian public and international audiences interested in Austrian news. The site is well-branded and consistent with ORF's identity, reflecting its position as a leading media outlet in Austria. Technically, the website employs modern web technologies such as ES6 JavaScript, WOFF2 fonts, asynchronous script loading, and responsive design, ensuring good performance and accessibility across devices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not found in the provided content. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements fully. Overall, ORF.at is a professional, trustworthy, and technically mature news platform with room for improvement in privacy transparency and security disclosures.

V

Viega

viega.de

72

Viega Deutschland operates a professional and comprehensive website focused on plumbing, heating, and building technology products and services. The company positions itself as an established leader in energy-efficient and hygienic building solutions, targeting professionals and businesses in the construction and building services sector. The website is built on a mature technical infrastructure leveraging Adobe Experience Manager and Adobe Analytics, with GDPR-compliant consent management via Usercentrics. Security posture is good with HTTPS and tracking controls, though explicit security policies and contact information for incidents are not publicly visible. Overall, the site is well-designed, user-friendly, and trustworthy, supporting Viega's market position as a quality manufacturer and service provider in the energy and manufacturing sectors.

P

Peter Kaiser

peter-kaiser.com

63

Peter Kaiser is a historic and established European women's shoe brand with a strong online presence through its e-commerce platform. The website offers a wide range of women's shoes and bags, emphasizing quality, style, and fast delivery. The brand leverages modern digital tools including Shopware CMS, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The lack of WHOIS data reduces domain trustworthiness but the website content and branding strongly indicate a legitimate business. Overall, the site is professional, user-friendly, and trustworthy for its target audience.

J

Jugamax-Casino

jugamax-casino.com

57

Jugamax Casino is an online gambling platform targeting the Paraguayan market, offering a wide range of casino games including slots, live casino, video bingo, and poker. The site emphasizes legal compliance with Paraguayan regulations and provides various bonuses and promotions to attract players. Technically, the website uses modern web technologies such as JavaScript modules, React-like components, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security-wise, the platform employs SSL 256-bit encryption and holds PCI DSS certification, but lacks some advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. The domain WHOIS data is suspicious due to a future creation date and lack of registrant transparency, which lowers trust in the domain's legitimacy. Overall, Jugamax Casino presents a professional and engaging gambling platform with room for improvement in privacy and domain transparency.

F

Fastweb S.p.A.

fastweb.it

75

Fastweb S.p.A. is a leading Italian telecommunications and energy service provider offering fiber optic and ADSL internet, mobile telephony, and energy solutions for families, businesses, and enterprises. The company positions itself as a major player in Italy's digital transformation, providing bundled services and innovative digital tools such as FastwebAI and a comprehensive customer app. The website reflects a mature digital presence with clear service segmentation and strong branding consistency. Technically, the website employs modern web technologies including responsive design, video backgrounds, SVG icons, and advanced analytics tools like Piwik PRO and Google Tag Manager. The site is optimized for performance and mobile devices, with good accessibility and SEO practices. Security is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms integrated into forms and user interactions. The security posture is strong, with publicly available security policies and responsible disclosure channels, although explicit DPO contact details and a security.txt file are not found. No vulnerabilities or suspicious patterns were detected. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and secure, supporting Fastweb's market position as a reputable telecommunications and energy provider in Italy. Strategic recommendations include enhancing transparency around data protection officer contacts and formalizing vulnerability reporting mechanisms.

D

Docusign

springcm.com

73

The website login.springcm.com serves as the secure login portal for DocuSign's SpringCM Contract Lifecycle Management platform. DocuSign, a leading enterprise in digital agreement management, provides this portal to enable business users to securely access contract management services. The site features professional branding consistent with DocuSign's corporate identity and supports advanced security features such as two-factor authentication. The technical infrastructure leverages modern web technologies including AngularJS and SpringCM's UX framework, with assets delivered via Akamai CDN to ensure performance and reliability. From a security perspective, the site enforces HTTPS and includes anti-CSRF tokens in its forms, demonstrating adherence to standard security best practices. However, explicit security headers such as Content-Security-Policy or X-Frame-Options are not evident in the HTML content, and no cookie consent mechanism is present, which could be improved to enhance privacy compliance. The absence of contact information and vulnerability disclosure pages limits transparency but is typical for login portals. Overall, the website presents a secure and professional interface aligned with enterprise standards. The lack of WHOIS data for the subdomain is expected and does not detract from legitimacy, as subdomains are not separately registered. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and publishing vulnerability disclosure information to strengthen trust and compliance.

P

Parkhotel Laurin

laurin.it

63

Parkhotel Laurin is a historic luxury hotel located in Bolzano, Italy, established in 1910. The website presents a comprehensive hospitality business offering hotel accommodations, gourmet dining, bar services, meeting and event spaces, and direct booking benefits. The site targets tourists and business travelers seeking premium services in the South Tyrol region. Technically, the website employs modern tracking and consent management tools such as Google Tag Manager, Matomo Analytics, and Usercentrics CMP, hosted likely on Zeppelin Group infrastructure. The design is professional, mobile-optimized, and SEO-friendly, with clear navigation and multilingual support. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is supported by a consent mechanism, but explicit privacy and terms of service pages were not detected. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is trustworthy, professional, and well-maintained.

S

Stadtwerke Krefeld

swk.de

63

Stadtwerke Krefeld (SWK) is a regional utility provider in Germany offering a broad range of services including electricity, gas, heat, water, mobility, and waste management primarily serving private and business customers in Krefeld and the Niederrhein region. The company positions itself as a strong local partner with a focus on sustainable energy solutions such as 100% TÜV-certified green electricity and innovative mobility offerings including car sharing and public transport services. The website reflects a professional and modern digital presence built on Next.js with a focus on user experience and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy policies and security disclosures are not prominently found. The domain is hosted on Vodafone IP infrastructure and appears legitimate with consistent branding and partner ecosystem integration. Overall, SWK demonstrates a mature business and digital infrastructure with room for improvement in transparency around privacy and security policies.

S

Stadt Wuppertal

wuppertal.de

63

The website www.wuppertal.de serves as the official digital presence of the city government of Wuppertal, Germany. It provides comprehensive information and services related to citizen services, culture, education, economy, tourism, politics, and administration. The site targets residents, tourists, businesses, and cultural enthusiasts, positioning itself as a central hub for municipal information and interaction. The business model is that of a public sector entity delivering government services and information digitally. Technically, the website is built on the Sitepark CMS platform, leveraging modern web technologies including responsive design, SVG icons, and privacy-focused analytics via Matomo. Hosting and DNS are managed through Cloudflare, ensuring performance and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs DNSSEC, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and minimal user tracking. However, explicit security policies and incident response contacts are not prominently available, which could be improved. Overall, the website reflects a mature digital infrastructure appropriate for a large municipal government entity. It balances user experience, privacy, and security effectively, supporting its role as a trusted source of official information and services.

M

MerchantPro

merchantpro.com

66

MerchantPro is a SaaS eCommerce platform provider offering a comprehensive suite of tools for merchants to create, manage, and grow online shops and marketplaces. With over 15 years of experience and more than 5000 merchants worldwide, the company positions itself as a stable and scalable solution for businesses of all sizes. The website reflects a professional and modern digital presence, emphasizing performance, security, and customer support. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and LinkedIn Insight for analytics and marketing, with responsive design and good SEO practices. Security posture is solid with HTTPS and secure cookie settings, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, but no direct company contact emails or phone numbers are provided, relying instead on contact forms and social media channels.

P

PlanetHoster

planethoster.com

60

PlanetHoster is a medium-sized technology company specializing in premium web hosting solutions including shared hosting, dedicated servers, hybrid cloud, and private cloud services. Established in 2007, it operates data centers in Canada, France, and Switzerland, serving over 60,000 customers worldwide. The company emphasizes performance, security, customer experience, and environmental responsibility, positioning itself as a top hosting provider in its markets. Technically, the website is built on a modern Angular framework with responsive design and good SEO practices. The infrastructure is self-hosted with proprietary network and advanced security measures such as DDoS protection, firewalls, SSL encryption, and regular backups. However, explicit security headers are not detected, and no public security policy or incident response contacts are found. The security posture is strong with 99.9% uptime guarantees and multiple certifications including ISO, PCI, SOC 2, and ICANN accreditations. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data for the domain is a concern, creating some uncertainty about domain registration legitimacy. Overall, PlanetHoster presents a professional and trustworthy web hosting service with robust technical and security foundations. Strategic improvements in transparency around security policies and domain registration details would enhance trust and compliance.

N

Netim

netim.com

76

Netim is a well-established ICANN-accredited domain registrar founded in 2004, offering a broad portfolio of over 1,300 TLDs including ccTLDs. The company provides domain registration, transfer services, email hosting, SSL certificates, and reseller and affiliate programs targeting individuals, SMEs, agencies, and corporations globally. The website demonstrates a professional and user-friendly design with clear navigation and relevant content tailored to its audience. Technically, the site uses modern frameworks such as Bootstrap and integrates analytics tools like Matomo and Cloudflare Insights, ensuring moderate performance and good mobile optimization. Security features include HTTPS, 2FA, login alerts, and DNSSEC support, although explicit security headers are not detected. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. WHOIS data for the domain is missing or inaccessible, which is unusual and warrants further verification, though the overall legitimacy is supported by the company's market presence and trust signals. Overall, Netim presents a credible and secure platform for domain and hosting services with room for minor improvements in security headers and privacy mechanisms.

S

stempelservice.de

stempelservice.de

52

Stempelservice.de is a well-established German e-commerce retailer specializing in custom stamps and related accessories, boasting over 25 years of industry experience. The website offers a user-friendly online configurator for personalized stamps including text, logos, and various stamp types such as date, wood, and motivational stamps. Their market position is strengthened by strong customer trust signals including Trusted Shops and eKomi certifications, as well as positive customer reviews. The target audience includes businesses, schools, and private customers seeking quality stamp products.

iléwatt is a regional electric vehicle charging service operated by the European Metropolis of Lille (MEL), targeting residents and EV users within the metropolitan area. The service offers a subscription model with preferential rates and a mobile app for locating chargers and monitoring charging sessions in real time. The website is professionally designed, mobile-optimized, and provides comprehensive information about the service, subscription offers, and pricing. It integrates modern web technologies including Angular and Tealium for tag management and analytics. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR requirements. However, the absence of WHOIS data and lack of explicit security policy or incident response contact information slightly reduce the overall trustworthiness. The site maintains a high security posture with HTTPS and secure form practices, but could improve by adding explicit security headers and a vulnerability disclosure policy.

S

Sologne Nature Environnement

obssologne.fr

9

Obs'Sologne is a French regional biodiversity information platform managed by the non-profit association Sologne Nature Environnement. The website provides a comprehensive database of flora and fauna observations in the Sologne region, aiming to enhance knowledge and protection of local biodiversity. It targets naturalists, researchers, and the general public interested in environmental conservation. The platform offers species data, observation records, photos, mapping tools, and news updates. The business model is non-commercial and community-driven, relying on user contributions and association management. Technically, the website is built on a custom or lightweight CMS using Bootstrap 5.3 and SVG icons for a responsive and accessible user interface. Hosting is provided by Scaleway with DNS managed by o2switch.net. The site performs moderately well with good mobile optimization and basic SEO. However, it lacks advanced analytics, advertising, or tracking scripts, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by domain registrar and modern standards) but lacks visible security headers and explicit incident response or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with legal mentions present but no cookie consent mechanism. Contact is only available via a form, with no direct emails or phone numbers published. Overall, the website is trustworthy and professionally presented for its niche non-profit purpose. Strategic improvements include implementing cookie consent, enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information. These steps would improve compliance, security posture, and user trust.

P

PFANNER, spol. s r.o.

pfanner.cz

69

PFANNER, spol. s r.o. is a family-owned company with over 30 years of tradition in the Czech and Slovak markets, specializing in the distribution and sale of premium food and beverage products. The company operates an e-shop and serves gastro businesses and suppliers, offering a portfolio of 31 brands and nearly 1000 products. The website reflects a professional and modern digital presence with clear navigation, mobile optimization, and rich content describing the company's history and offerings. Technically, the site uses modern web technologies including JavaScript modules, Google reCAPTCHA Enterprise for form security, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is good with HTTPS enforced and secure form handling, though security headers are not explicitly detected and no public security policy or incident response contacts are provided. The WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and contact information support legitimacy. Overall, the site is well-designed, compliant with GDPR, and suitable for its target audience.

B

Bouvet

bouvet.se

48

Bouvet is a Scandinavian publicly listed IT consultancy specializing in system development, business development, and design, with a strong focus on healthcare, public sector, and energy sectors. The company emphasizes creating digital solutions that contribute to societal benefits such as stable energy supply, efficient public services, and improved public health in Sweden. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation, targeting business and public sector clients. Technically, the site uses modern web technologies including Google Fonts, YouTube embeds, Matomo analytics, and LinkedIn Insight tags, hosted likely behind Cloudflare CDN, and built on the Enonic CMS platform. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and ISO 27001 certification, though some security headers could be improved and incident response contacts are not publicly detailed. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting Bouvet's market position as a leading IT consultancy in Scandinavia.

A

Amasty

amasty.com

76

Amasty is a well-established Magento 2 extension developer and ecommerce service provider with over a decade of market presence. The company offers a broad portfolio of Magento 2 Hyva-compatible plugins and professional development services aimed at improving ecommerce store performance and functionality. Their market position is strong within the Magento ecosystem, targeting ecommerce businesses and developers seeking reliable Magento solutions. Technically, the website demonstrates modern frontend technologies including Alpine.js and Hyvä UI, with Cloudflare DNS and CDN services ensuring performance and security. The site is mobile-optimized, SEO-friendly, and provides a smooth user experience. Security posture is solid with HTTPS, domain transfer protection, and no visible vulnerabilities, although DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. Recommendations include enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure page to enhance transparency and security readiness.

M

Městský úřad Nymburk

mesto-nymburk.cz

47

The website www.mesto-nymburk.cz serves as the official online portal for the city of Nymburk, Czech Republic. It provides residents and visitors with comprehensive municipal information including news updates, event calendars, administrative services, and contact details. The site is well-structured to cater to the local community's needs, offering online appointment systems and access to official documents. The presence of social media links and a citizen portal enhances engagement and service accessibility. Technically, the site employs a custom CMS (vismoWeb5) with modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google services like reCAPTCHA and Translate for security and accessibility. The website is mobile-optimized and includes accessibility features, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is addressed with privacy and cookie policies, though the cookie consent mechanism could be improved for explicit user consent. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain trust verification, but the official nature and consistent branding support legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance the security posture and compliance.

B

Be Bouncy

bebouncy.com

9

Be Bouncy is an AI-driven social media management platform designed to simplify and optimize social media growth for creators, SMBs, and agencies. The platform offers a suite of tools including smart scheduling, analytics, automated moderation, and gamified team management, all powered by its AI agent Nimbus. The website demonstrates a modern technical infrastructure built on React and Next.js, providing a responsive and user-friendly experience. However, the absence of WHOIS registration data and some minor issues such as a suspicious YouTube link domain and lack of cookie consent mechanisms slightly reduce trustworthiness. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the platform presents a professional and promising solution in the social media SaaS market, but domain legitimacy verification and enhanced privacy compliance are recommended.

O

OpenStreetMap

osm.org

11

OpenStreetMap is a globally recognized open source mapping platform that provides free, editable maps created by a community of contributors. It holds a strong market position as a leading provider of open geospatial data and mapping services. The website offers a comprehensive suite of tools including map editing, search, directions, GPS trace uploads, and community engagement features, targeting a broad audience from casual users to professional mappers. Technically, the site employs modern JavaScript frameworks such as Leaflet.js and Turbo (Hotwire), with hosting provided by Fastly, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement, CSRF protection, and use of Content Security Policy nonces, although some standard security headers are missing. Privacy compliance is basic, with a privacy policy and terms of use present but lacking explicit cookie consent mechanisms or GDPR-specific statements. No contact emails or phone numbers are provided on the main page, and no vulnerability disclosure or security.txt files are found. Overall, the site is professional, trustworthy, and safe for general audiences, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

Z

Zalando

zalando.sk

59

Zalando.sk is a localized e-commerce platform operated by Zalando SE, a leading European online fashion retailer. The website offers a comprehensive range of fashion products including clothing, footwear, and accessories for women, men, and children. It features modern design, personalized recommendations, and seasonal promotions, targeting a broad general audience in Slovakia. The platform demonstrates strong digital maturity with a robust technical infrastructure leveraging React, RequireJS, and advanced consent management via Usercentrics. The site is well-optimized for mobile and accessibility, providing a seamless user experience. Security posture is solid with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly evident. Privacy compliance is supported by cookie consent mechanisms but lacks visible detailed privacy policy links in the provided content. Overall, Zalando.sk presents a trustworthy, professional, and secure online retail environment.

M

Mastodon.green

mastodon.green

62

Mastodon.green is an independent Mastodon server focused on providing a federated social networking platform with an environmental mission to plant trees while users engage. The site targets a general audience interested in decentralized social media, originally aimed at EU users but now open globally. The platform offers trending posts, hashtags, and user profiles, leveraging the open-source Mastodon software version 4.4.7. Technically, the site uses modern web technologies including React, ES modules, and secure HTTPS connections with script integrity checks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and content security policies implied, though explicit security headers and incident response policies are absent. Privacy compliance is moderate with a privacy policy present but lacking cookie consent mechanisms and terms of service. WHOIS data is privacy protected, typical for such community-run servers, and does not detract from the site's legitimacy. Overall, Mastodon.green presents a trustworthy, well-maintained social platform with room for improvement in security transparency and privacy controls.

R

renault

renault.fr

79

Renault France operates a comprehensive and professionally designed website dedicated to showcasing and selling new vehicles, including electric, hybrid, and utility models. The site targets a broad audience of vehicle buyers primarily in France, reflecting Renault's position as a major automotive brand. The website leverages modern web technologies such as React, Google Analytics, and OneTrust for cookie consent, ensuring a smooth user experience and compliance with privacy regulations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data is typical for AFNIC-managed domains and does not detract from the site's legitimacy. Overall, the site demonstrates high professionalism, good technical implementation, and solid privacy compliance.

Z

Zalando

zalando.cz

47

Zalando.cz is a major European e-commerce platform specializing in fashion, shoes, and accessories. The website offers a broad assortment of products with a focus on fast delivery and free shipping for most orders. The platform targets a general audience including women, men, and children, providing a comprehensive online shopping experience. Technically, the site uses modern web technologies including React and RequireJS, and integrates a consent management platform to comply with GDPR requirements. The security posture is strong with HTTPS enforced and use of security best practices, although explicit security headers and vulnerability disclosure mechanisms are not visible in the provided data. Overall, Zalando.cz presents a professional, trustworthy, and user-friendly online retail environment.

2

20ecolesdechimie

20ecolesdechimie.com

41

20ecolesdechimie.com is the official website of the Fédération Gay-Lussac, a federation of 20 chemistry and process engineering schools in France. The site serves as an informational and promotional platform targeting prospective students, educators, and partners interested in chemistry engineering education. It provides detailed information on admissions, student life, international programs, and federation activities, positioning itself as a key resource in the French higher education sector for chemistry engineering. The federation is well-established, with a domain registered since 2015 and a consistent brand presence. Technically, the website is built on WordPress, utilizing common plugins such as Formidable Forms for contact and newsletter forms, Mailjet for email marketing, and Matomo for analytics. The site employs modern web technologies including lazy loading for images and SVG icons, ensuring good performance and mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags, structured data, and language alternates. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and some recommended security headers, which could be improved. The presence of a cookie consent mechanism and privacy policy indicates GDPR awareness, though no explicit security policy or incident response contact was found. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. It demonstrates a solid digital maturity level with room for security enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns.

S

Somfy d.o.o.

somfypro.rs

67

Somfy d.o.o. operates a professional B2B website targeting partners and customers in Serbia and the Balkan region, offering window and door automation products and home automation solutions. The company recently consolidated its regional presence by merging its distributor Migro d.o.o. into Somfy d.o.o., reinforcing its market leadership. The website is built on a modern Liferay CMS platform with integrated analytics and marketing tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and secure login forms, though security headers and incident response information could be improved. Privacy compliance is basic but includes cookie consent mechanisms and a privacy policy. Overall, the site reflects a credible and established business with consistent branding and professional content.

S

Somfy

somfy.at

71

Somfy is a well-established company specializing in motorized shading solutions and smart home automation products. The website www.somfy.at serves the Austrian market with a comprehensive product catalog, e-commerce integration, and extensive customer support resources. The company targets private customers, professional partners, and technical planners, positioning itself as a leader in smart home technology and automation. The site is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website employs modern web technologies including responsive images, SVG icons, JSON-LD structured data, and uses Akamai CDN for performance optimization. The platform appears custom-built with a focus on user experience and SEO best practices. Security measures such as HTTPS, security headers, and privacy compliance mechanisms are well implemented, although explicit security policy and incident response pages are not found. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR. The absence of WHOIS data is noted but likely due to privacy protection, which is justified for a commercial brand site. Trust indicators such as Trusted Shops certification and active social media presence further enhance credibility. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Recommendations include publishing explicit security policies and vulnerability disclosure information to further enhance transparency and trust.

A

ARTE Radio

arteradio.com

42

ARTE Radio is a well-established French podcast platform affiliated with the ARTE media group, offering a rich catalog of cultural and documentary audio content. The website demonstrates a high level of content quality, professional design, and user experience, targeting a broad audience interested in podcasts related to culture, society, and music. Technically, the site uses modern frameworks such as Next.js and React, ensuring good mobile optimization and accessibility. However, the security posture is moderate due to the absence of visible security headers and privacy policies. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the strong brand association with ARTE. Overall, the site is trustworthy and professional but would benefit from improved transparency in privacy and security practices.

V

Ville de Paris

paris.fr

67

The website paris.fr is the official digital portal of the City of Paris, providing comprehensive access to municipal services, practical information, news, and events for residents and visitors. It serves as a central hub for public service delivery and environmental data dissemination, including water quality and air pollution monitoring. The site demonstrates a high level of digital maturity with modern technologies such as Matomo analytics for privacy-conscious tracking, Algolia for search, and Font Awesome for iconography. The design is professional, mobile-optimized, and accessible, reflecting the city's commitment to user experience. From a security perspective, the site enforces HTTPS and uses asynchronous script loading to enhance performance and security. However, explicit security headers and vulnerability disclosure mechanisms are not evident, suggesting room for improvement in security hardening and transparency. Privacy compliance is basic, with no clear privacy or cookie policies detected in the provided content, which is a critical area for enhancement given GDPR requirements. Overall, the site is trustworthy and authoritative, consistent with its role as a government portal. The absence of WHOIS data is likely due to registry policies or privacy protection common for government domains and does not detract from the site's legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen security posture and user trust.

N

NEO handpan

handpan-vyroba.cz

46

The website handpan-vyroba.cz represents a small Czech manufacturing business specializing in the handcrafting of handpans, a unique musical instrument. The business is branded as NEO handpan and led by maker Jiří Káš. The site provides detailed information about the manufacturing process, emphasizing quality materials and manual craftsmanship. The target audience includes musicians and enthusiasts interested in high-quality, artisanal handpans. Technically, the site is built on WordPress 6.8.3, hosted on a Czech hosting provider, and uses modern web technologies such as CanvasJS and SVG icons. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. No contact emails or phone numbers are explicitly provided, which limits direct communication channels. Overall, the site is legitimate, consistent with the business profile, and free from suspicious elements or blocking mechanisms.

S

SIPPEREC

sipperec.fr

42

SIPPEREC is a French public syndicate specializing in energy and digital services for member municipalities, holding a leading market position in electricity concession, renewable energy production, and digital infrastructure in the Île-de-France region. The website is built on TYPO3 CMS and employs modern web technologies including Matomo for privacy-conscious analytics and Tarteaucitron.js for cookie consent management. The site is well-structured, mobile-optimized, and provides comprehensive content relevant to its target audience of local governments and residents. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are not visibly implemented. Privacy compliance is strong with clear policies and consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but is common for French domains under AFNIC. Overall, the site presents a professional and trustworthy digital presence for a public sector entity.

K

KERAIN, a.s.

kerain.cz

56

KERAIN, a.s. is a Czech company specializing in real estate rental services including residential and commercial properties, alongside production, trade, and other services outside the scope of standard trade licensing annexes. The company maintains strategic partnerships with KERAMOST and KERACLAY, key players in the mining and processing of mineral raw materials in the Czech Republic and abroad, combining traditional manufacturing with modern technological innovations. The website presents a professional and business-focused image with clear contact details and links to official Czech business registries, supporting its market credibility. Technically, the website employs a basic but functional technology stack including jQuery 1.11.3 and Swiper.js for UI elements. The site is mobile-optimized with good design quality and navigation clarity, though some accessibility features could be improved. No advanced CMS or hosting provider details were detected. Performance is moderate, with no evident analytics or tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance. The use of an outdated jQuery version poses potential security risks. No forms collecting sensitive data were found, reducing immediate exposure risks. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional site content. Overall, the website is safe, business-oriented, and trustworthy for general audiences. However, improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security posture.

E

Enel Group

enel.com

72

Enel Group is a large multinational energy company operating in over 30 countries, focusing on sustainable and innovative energy solutions. The company offers a broad range of services including energy production, distribution, and renewable energy technologies. Their market position is strong, supported by a consistent brand and a comprehensive digital presence. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and Adobe Analytics for data insights. The site is well-optimized for SEO, accessibility, and mobile devices, providing a professional user experience. Security posture is good with HTTPS and secure form mechanisms, though some security headers are not explicitly detected and could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website reflects a mature digital infrastructure aligned with the company's business goals and market stature.

J

Jiří Káš

handpanista.cz

55

The website handpanista.cz is a professionally designed personal business site dedicated to the handpan musical instrument activities of Jiří Káš. It focuses on the production of NEO handpans, handpan courses, workshops, and performances. The site targets handpan enthusiasts and musicians interested in learning and purchasing handpans. The business operates in a niche artisanal musical instrument sector within the Czech Republic and is relatively small in scale, founded in 2019. Technically, the site is built on WordPress 6.8.3 with a custom theme and hosted on cesky-hosting.eu. The site shows good mobile optimization and SEO practices but lacks some advanced accessibility features. Performance is moderate, and the site uses modern web technologies including JavaScript and SVG icons. From a security perspective, HTTPS is enabled ensuring encrypted communication. However, the site lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve its security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is safe with no adult or questionable content detected. The domain registration data is consistent with the website content and business claims, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact information to enhance compliance and trust.

J

Jiří Káš

handpan-kurz.cz

55

The website handpan-kurz.cz is a small-scale educational platform focused on teaching handpan music, primarily through in-person courses and workshops led by Jiří Káš, a recognized handpan player in the Czech Republic. The site offers rich content including detailed explanations, images, and links to related handpan resources and artists, targeting individuals interested in learning and mastering the handpan instrument. Technically, the site is built on WordPress using the Donovan theme, hosted by a Czech hosting provider, and employs modern web technologies such as JavaScript and SVG icons. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, which limits its compliance posture. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is legitimate and consistent with its domain registration data, but improvements in privacy compliance and security best practices are recommended.

H

Handpan s.r.o.

handpan.cz

55

Handpan s.r.o., operating the website handpan.cz, is a Czech Republic based small business specializing in the manufacturing, sale, and education of handpan musical instruments. The company offers handpan production under the NEO handpan brand, organizes workshops and courses primarily for beginners and enthusiasts, and provides rich content about handpan history and playing techniques. The website reflects a niche market position with a focus on quality and community engagement. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Contact information is limited but includes a phone number and physical address in Říčany near Prague. Social media presence on Facebook and YouTube supports brand trust and outreach. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy compliance and security practices.

E

ecosystem

ecosystem.eco

73

ecosystem is a French eco-organization dedicated to extending the lifecycle of electrical and electronic equipment through repair, reuse, and recycling. Accredited by public authorities, it serves both individuals and professionals with services including locating repairers, donation and recycling points, and providing educational resources. The website is professionally designed, content-rich, and well-structured, targeting a broad audience interested in sustainable management of electrical waste. Technically, the site employs modern analytics tools such as Matomo and Google Tag Manager, along with Cookiebot for consent management. The site is mobile-optimized and accessible, with good SEO practices. However, explicit security headers and detailed security policies are not evident, representing an area for improvement. Security posture is moderate with HTTPS implied but lacking visible advanced security headers or incident response information. The absence of WHOIS data limits domain trust assessment, though the website's professional presentation and public accreditation support its legitimacy. Overall, ecosystem presents a trustworthy and authoritative platform in its domain, with recommendations to enhance security transparency and domain registration visibility to further strengthen trust and compliance.

S

Somfy

somfy.ro

61

Somfy Romania operates as a regional branch of the global Somfy Group, specializing in smart home automation solutions including motorized blinds, security systems, and energy-efficient products. The website demonstrates a professional and consistent brand presence with a clear focus on residential customers and certified professional installers. The technical infrastructure leverages modern JavaScript libraries, structured data, and is hosted on a reputable CDN provider, ensuring moderate to good performance and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially met with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting Somfy's market position as a leading smart home solutions provider in Romania.

S

Somfy

somfy.ma

10

Somfy Maroc is a regional branch of the global Somfy Group, specializing in home automation and connected home solutions. The website presents a comprehensive catalog of products including motors for shutters, alarms, cameras, heating, and lighting automation, targeting Moroccan consumers and homeowners. The company leverages its established brand reputation and offers extensive customer support and sales channels including showrooms and professional installers. Technically, the website uses modern web technologies, including JavaScript frameworks, tag management, and performance monitoring tools, hosted likely on Akamai infrastructure. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some advanced security headers could be added. The absence of WHOIS data for the domain is a concern for domain legitimacy verification but does not detract from the strong brand presence and professional content. Overall, the website is well-structured, trustworthy, and compliant with privacy regulations.

S

Somfy

somfy.it

67

Somfy is a well-established company specializing in motors, automation, controls, and smart home solutions primarily targeting residential consumers and professionals in Italy and internationally. The website reflects a mature digital presence with a comprehensive product catalog, multilingual support, and integration with e-commerce and customer account management systems. Technically, the site uses modern web technologies including JSON-LD structured data, SVG icons, and performance monitoring tools, hosted likely on Akamai infrastructure with Magento as the e-commerce backend. Security posture is strong with HTTPS enforcement and standard security headers, though improvements are recommended in cookie consent and explicit security policies. Overall, the site is professional, trustworthy, and aligned with GDPR compliance, supporting Somfy's market position as a leader in home automation.

S

Somfy

somfy.gr

53

Somfy Greece operates as a regional branch of the international Somfy Group, specializing in home automation products including motorized blinds, shutters, security cameras, alarms, heating, and lighting solutions. The website targets both consumers and professionals, offering a comprehensive product catalog and support services. The company is well-established with a founding date of 1969 and maintains a strong market position in the smart home and energy-saving sectors within Greece. Technically, the website is modern, responsive, and well-optimized for SEO and accessibility, leveraging structured data and a robust tech stack including JavaScript and jQuery. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some advanced security headers could be added. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the site reflects a professional, trustworthy, and mature digital presence aligned with business goals.

S

Somfy

somfy.es

66

Somfy Spain operates a comprehensive website offering smart home automation solutions including motors, controls, alarms, and security cameras. The company targets both consumers and professionals, providing a broad product catalog and professional installation services. The website demonstrates a mature digital presence with structured data, social media integration, and multimedia content, positioning Somfy as a reputable player in the smart home technology sector in Spain. Technical infrastructure leverages modern JavaScript libraries and performance monitoring tools, ensuring a responsive and engaging user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is partial, with cookie consent implemented but privacy policy not clearly linked. WHOIS data is unavailable due to registry restrictions, limiting domain trust verification. Overall, the site is professional, trustworthy, and well-optimized, with room for improvement in privacy transparency and security disclosures.

S

Somfy

somfy.ch

69

Somfy is a well-established company specializing in motorized shading products and smart home automation solutions, targeting both private customers and professional partners. The website reflects a mature digital presence with comprehensive product offerings, multilingual support, and clear navigation tailored for the Swiss market. The company leverages modern web technologies and performance monitoring tools to ensure a fast and responsive user experience. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, although some security headers could be enhanced. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

S

Somfy

somfy.com.br

66

Somfy Brazil is a leading manufacturer and provider of motorized solutions for window coverings and smart home automation, serving both residential consumers and professional markets. The company offers a wide range of products including motors for blinds, curtains, awnings, gates, garage doors, and integrated smart home controls. The website is well-structured, professionally designed, and optimized for performance and mobile devices, reflecting a mature digital presence. The technical infrastructure leverages modern JavaScript frameworks, responsive design, and performance monitoring tools, hosted on a reliable CDN and infrastructure provider. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in explicit security policies and vulnerability disclosure. Overall, the domain registration and WHOIS data align well with the company's branding and history, supporting high legitimacy and trustworthiness.