Security Directory

H

Hostsharing eG

hs.coop

56

Hostsharing eG operates hostsharing.coop, a Mastodon instance dedicated to members of their cooperative hosting community. The website serves as a social networking platform within the Fediverse, enabling decentralized communication. The business is positioned as a niche cooperative provider in the technology sector, focusing on privacy-respecting social media hosting since 2018. The site content is primarily in German, targeting cooperative members and Fediverse users. Technically, the platform uses Mastodon version 4.4.8 with modern web technologies including React and ES modules, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

H

Hostsharing eG

geno.social

57

geno.social is a niche Mastodon instance dedicated to cooperatives, cooperative organizations, and cooperative activists. Operated by the cooperative Hostsharing eG, it provides a decentralized social media platform that integrates with the broader fediverse, promoting small, secure, and independent instances. The website clearly communicates its mission and target audience, offering account registration via a contact form and providing transparent contact information. The business model centers on community-driven social media hosting with a focus on cooperative values. Technically, the site runs Mastodon version 4.4.8 with a React-based frontend, leveraging modern JavaScript modules and polyfills for compatibility. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

I

Informationsdienst Wissenschaft (idw)

wisskomm.social

66

Wissenschaft trötet is a Mastodon-based social networking platform hosted on wisskomm.social, primarily serving the scientific community associated with the Informationsdienst Wissenschaft (idw). The platform facilitates content sharing and social interaction among members of scientific institutions. It positions itself as an independent Mastodon server within the fediverse, focusing on community-driven content without advertising or algorithmic interference. The website demonstrates a consistent and professional branding aligned with its scientific audience. Technically, the site leverages Mastodon version 4.4.7 with React and modern JavaScript modules, providing a responsive and moderately performant user experience. Security posture is adequate with HTTPS implied and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages. Overall, the site is safe, trustworthy, and suitable for general audiences, but could improve in transparency and security documentation.

Ray-Ban's official EU website serves as a comprehensive e-commerce platform for their iconic eyewear products, including sun and prescription glasses. The site reflects the brand's leadership in the eyewear retail market, offering a seamless shopping experience with multi-language support and a strong focus on brand authenticity and premium quality. Technically, the website leverages modern web technologies such as CoreMedia CMS, Algolia search, and integrates advanced fraud prevention and analytics tools, indicating a mature and well-maintained digital infrastructure. Security posture is robust with HTTPS enforcement, multiple security headers, and use of trusted third-party services, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable platform for customers in the EU region.

G

Gewerkschaft BAU-HOLZ (GBH)

gbh.at

73

Gewerkschaft BAU-HOLZ (GBH) is a prominent Austrian trade union representing workers in the construction and wood industries. The website serves as a comprehensive portal for members, offering services such as legal protection, education, collective bargaining information, and support benefits. It is well integrated with its parent organization ÖGB and related media services like GBH-News and GBH-TV. The site targets union members and workers in Austria, providing relevant news, campaigns, and member-exclusive offers. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Usercentrics for consent management, self-hosted Matomo analytics, and hCaptcha for form security. The site is performant, mobile-optimized, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses bot protection on forms, and respects user privacy with a comprehensive GDPR-compliant privacy policy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No critical vulnerabilities or suspicious elements were detected. Overall, the website presents a professional, trustworthy, and secure platform aligned with the organization's mission. It effectively balances user experience, privacy compliance, and technical robustness, making it a reliable resource for its members.

B

Bundeskammer der Ziviltechniker:innen I Arch + Ing

arch-e.eu

46

ARCH-E is a European platform dedicated to promoting architectural design competitions (ADCs) across Europe, focusing on increasing participation especially among small and female-led architectural practices. The platform offers research, practical tools, and advocacy, supported by a consortium reaching over 560,000 architects and co-funded by the European Union. The website provides extensive resources including reports, a network, glossaries, maps, and evaluation tools to support ADCs. Technically, the site uses modern web technologies such as Bootstrap, Masonry.js, and Piwik PRO analytics, with good mobile optimization and a professional design. Security posture is solid with HTTPS and CSRF protections, though some improvements are recommended in cookie consent and security policy disclosures. Overall, the site is trustworthy, well-branded, and serves a specialized professional audience effectively.

W

Wirtschaftskammer Wien - Marketing

meinkaufstadt.wien

10

meinkaufstadt.wien is a marketing and lifestyle platform operated by Wirtschaftskammer Wien - Marketing, focusing on promoting shopping, events, and local businesses in Vienna. The platform serves residents and visitors by providing curated content on retail, gastronomy, and cultural events, positioning itself as a trusted local guide backed by the Vienna Chamber of Commerce. Technically, the website employs modern frontend technologies such as SvelteKit, integrates user consent mechanisms for privacy compliance, and uses multiple marketing and analytics tools with proper consent management. Security posture is solid with HTTPS enforced and captcha protections on forms, though explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience.

C

climatejustice.global

climatejustice.global

70

ClimateJustice.global operates as a specialized Mastodon instance dedicated to climate justice groups and activism. It provides decentralized social media services to a niche community focused on environmental and social justice causes. The platform is administered by a named individual and supported technically by the Fediverse Foundation, emphasizing a non-commercial, donation-supported model. The website content is well-structured, transparent about its principles, moderation policies, and community guidelines, targeting activist groups rather than individuals or political parties. Technically, the site leverages Mastodon and modern web technologies such as React and Webpack, hosted by a reputable foundation, ensuring a stable and community-trusted infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms or terms of service. Overall, the site demonstrates a high level of trustworthiness and professionalism appropriate for a small non-profit community server.

D

Domain Protection Services, Inc.

kultiq.ai

62

KultIQ.ai is a Hungarian language AI-driven platform specializing in intelligent search and analysis of cultural databases, including documents, spreadsheets, and archives. The business targets cultural institutions and researchers requiring advanced AI tools for data integration and contextual text analysis. The company appears to be a small technology startup founded in 2025, leveraging modern web technologies such as JavaScript ES modules and WebP images for a responsive and visually appealing user experience. The website is well-structured and optimized for SEO, though it lacks explicit privacy and cookie policies, as well as contact information, which limits user trust and compliance visibility. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers, indicating room for improvement in domain and web security configurations. Overall, the site is safe with no adult or questionable content detected.

S

Sparkasse

eure-trainer-gesucht.de

66

Eure Trainer Gesucht is a German-language platform dedicated to promoting and honoring volunteer sports trainers across Germany. Supported primarily by the Sparkassen-Finanzgruppe and partners such as Deka and Deutsche Leasing, the initiative encourages public nominations and voting to award financial grants and special prizes to deserving trainers and their clubs. The website is professionally designed with clear navigation, mobile optimization, and a focus on community engagement in amateur sports. Technically, the site leverages modern web technologies including ES modules, Bootstrap 5, and Cloudflare services for DNS and CDN. It employs secure form handling with CSRF tokens and client-side validation, alongside a comprehensive cookie consent mechanism compliant with GDPR. Google Analytics is used for moderate user tracking with transparent privacy controls. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, secure cookies, and input validation. However, it lacks explicit security policy or incident response pages and does not provide a vulnerability disclosure mechanism. No critical vulnerabilities or suspicious content were detected, and the domain registration is consistent with the website's branding and purpose. Overall, Eure Trainer Gesucht presents a trustworthy, well-maintained platform with strong business credibility and a clear mission to support volunteer sports engagement in Germany. Strategic improvements could include enhanced accessibility, formal security policies, and incident response contact information to further strengthen trust and compliance.

B

bildung.social

bildung.social

58

bildung.social is an independent Mastodon social network instance focused on education and digital transformation topics. It provides a federated platform for users interested in these areas to connect and share content. The platform is based on the open-source Mastodon software, version 4.4.8, and is hosted using OVH Cloud infrastructure. The website demonstrates good content quality and user experience with a consistent brand and active user engagement. Technically, the site uses modern web technologies including React and ES modules, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and some security best practices observed, though additional security headers could improve protection. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. WHOIS data is privacy protected, which is typical for such platforms, and does not raise immediate concerns. Overall, bildung.social is a legitimate, well-maintained social platform serving a niche educational community.

A

Apps2me

apps2.me

55

Apps2me is a newly launched technology platform focused on providing a store and hosting environment for Telegram mini apps. The platform targets Telegram users and developers interested in mini apps, positioning itself as a niche player in the Telegram ecosystem. The business model revolves around offering a centralized place to explore and add new Telegram mini apps, leveraging the popularity of Telegram's mini app capabilities. The company is small and recently founded in 2024, with domain registration consistent with a startup phase. Technically, the website uses modern web technologies including jQuery 3.7.0 and ES modules for JavaScript, with a responsive design optimized for mobile devices. Hosting is provided by Spaceship, Inc., and the site uses HTTPS, though lacks advanced security headers and DNSSEC. SEO and accessibility are basic but functional. The site includes a cookie consent banner but lacks comprehensive privacy or terms of service documentation. From a security perspective, the site benefits from HTTPS but is missing important security headers and DNSSEC, which reduces its security posture. No incident response or security policies are published, and no contact information is provided, which limits transparency and trust. The WHOIS data shows privacy protection and a recent domain registration, typical for a small tech startup, with no suspicious indicators. Overall, the site is functional and moderately trustworthy but has gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance.

B

beige.party

beige.party

73

beige.party is an independent Mastodon social media server launched in 2022, serving a niche community described as friendly weirdos within the Fediverse. It operates on the open-source Mastodon platform version 4.4.7, providing decentralized social networking services without ads or algorithms. The website demonstrates a moderate level of digital maturity with modern web technologies, mobile optimization, and a functional user interface. However, it lacks comprehensive privacy and security policies such as cookie consent and terms of service. Security posture is adequate with HTTPS and domain transfer protection but could be improved by enabling DNSSEC and security headers. Overall, the site is legitimate and trustworthy for its community but would benefit from enhanced compliance and security transparency.

W

Wasted Talent

wasted-talent.com

51

Wasted Talent is a boutique music publishing and artist management company based in Berlin, Germany, founded in 2014. The company focuses on a small roster of talented writers and artists, serving a global market. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript frameworks (Vue.js), supports mobile optimization excellently, and integrates Mailchimp for newsletter management. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are missing and DNSSEC is not enabled. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

M

muenster.im

muenster.im

51

muenster.im operates as an independent Mastodon server providing a federated social media platform primarily targeting users in Münster, Germany, and the broader fediverse community. The platform offers microblogging services with a focus on community engagement and decentralized social networking. The website content reflects active user participation with trending posts and a visible admin presence, indicating a small but engaged user base. Technically, the site leverages modern web technologies including React and ES modules, ensuring a responsive and user-friendly experience across devices. However, the hosting provider is not explicitly identified, and media assets are served from third-party object storage, suggesting a cloud-based infrastructure. Security posture is moderate; HTTPS is enforced, but critical security headers are missing, and the domain registration is expired, posing a risk to service continuity. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site is functional and trustworthy for general audiences but requires urgent domain renewal and enhanced security and compliance measures to improve resilience and user trust.

B

Bundesministerium für Digitales und Verkehr

mobilithek.info

65

Mobilithek.info is a German government-operated platform under the Bundesministerium für Digitales und Verkehr, providing open mobility data and serving as a national access point and marketplace for mobility data in Germany. The platform targets businesses, municipalities, data providers, and mobility enthusiasts from various sectors including economy, science, and public administration. It offers services such as data searching, data delivery facilitation, and community networking through a professional and well-maintained website. Technically, the website employs modern web technologies including JavaScript ES modules and Vue.js framework, with a responsive and accessible design optimized for mobile devices. The site demonstrates good SEO practices and fast performance, although no common CMS or hosting provider details are evident. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit incident response or vulnerability disclosure mechanisms. Overall, the security posture is solid but could be improved by implementing additional security headers and publishing a security.txt or vulnerability disclosure policy. The WHOIS data is limited due to TLD restrictions and privacy, but the domain's association with a federal ministry strongly supports legitimacy. No signs of malicious activity or suspicious content were found, and the site maintains high standards of professionalism and trustworthiness.

R

Radiotelevisiun Svizra Rumantscha (RTR)

rtr.ch

70

Radiotelevisiun Svizra Rumantscha (RTR) is a Swiss public media broadcaster specializing in Romansh language audiovisual content including news, videos, and audio podcasts. It serves as the primary media house for the Romansh-speaking population in the canton of Graubünden. The website demonstrates a mature digital infrastructure with modern technologies such as React, Usercentrics for cookie consent, and Akamai CDN for performance. Security posture is strong with HTTPS and security best practices implemented, although explicit security policies and incident response information are not publicly available. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, RTR maintains a professional and trustworthy online presence consistent with its role as a public broadcaster.

D

Debeka-Gruppe

debeka.de

55

Debeka-Gruppe is a large, cooperative insurance group based in Germany, founded in 1905, serving over 7.7 million customers with a broad portfolio of insurance and financial products. The website reflects a mature digital presence built on Adobe Experience Manager, with strong branding consistency and comprehensive service offerings. The company emphasizes customer service and cooperative ownership, which is reinforced by multiple trust seals and awards. Technically, the site uses modern frameworks and consent management tools, ensuring GDPR compliance and good performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security and incident response policies are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business.

Mercedes-Benz AG operates as a leading global premium automotive manufacturer headquartered in Germany, offering a broad portfolio of luxury vehicles including sedans, SUVs, electric vehicles, and commercial vans. The company also provides financial services such as leasing and banking through subsidiaries. The website reflects a mature digital presence with comprehensive product information, configurators, and customer service options targeting both private and business customers. Technically, the site leverages modern frameworks like Vue.js and is built on Adobe Experience Manager, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with corporate branding standards.

A

Login | Akarion GRC Cloud

akarion.app

60

Akarion.app is a technology company offering a Governance, Risk, and Compliance (GRC) cloud platform, as evidenced by the login page branding and title. The website is designed as a SaaS platform login portal targeting businesses and organizations requiring GRC solutions. The site uses modern frontend technologies including Vue.js and Tailwind CSS, indicating a contemporary technical infrastructure with moderate performance and good mobile optimization. However, the site lacks visible privacy, cookie, and terms of service policies, which limits its compliance posture. Security-wise, the site uses HTTPS and secure form inputs but lacks visible security headers and advanced protections such as anti-CSRF tokens. No contact or incident response information is provided, which may impact user trust and compliance readiness. Overall, the website is functional and professional but would benefit from enhanced security and privacy disclosures to improve trust and compliance.

G

Guestnet

guestnet.info

10

Guestnet is a hospitality-focused guest experience platform supporting over 2,500 hotels across multiple countries. The company offers a suite of products including a web app, TV info screens, print templates, and website widgets to digitize and enhance guest communication and services. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Google Tag Manager and Usercentrics for consent management. Security posture is strong with HTTPS and reCAPTCHA protections, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable anomaly that warrants further verification. Overall, Guestnet presents a credible and mature digital presence in the hospitality technology sector.

J

Jochims Transport GmbH

jochims-transporte.de

36

Jochims Transport GmbH is a medium-sized German transport company specializing in the transportation and disposal of construction materials and waste. Established in 2000, it operates a large fleet of over 70 semi-trailers and holds transport permits for hazardous and non-hazardous waste across Germany. The company targets construction firms, industrial clients, and municipalities primarily in the Niederrhein and Ruhrgebiet regions. Technically, the website is built using modern web technologies including Livewire and Alpine.js, hosted on rzone.de infrastructure, and offers a responsive, well-structured user experience. Security posture is solid with HTTPS and CSRF protections, though some security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit incident response and vulnerability disclosure policies.

D

D+H Verwertung Gmbh

dh-verwertung.de

50

D+H Verwertung Gmbh is a German company specializing in waste management, recycling, and container rental services. The company targets businesses and individuals in the Kamp-Lintfort region and offers a range of services including acceptance and delivery catalogs, container ordering, and environmental protection consulting. The website presents a professional and consistent brand image with clear contact information and legal documentation, supporting its credibility in the regional market. Technically, the website employs modern frontend technologies such as Alpine.js and Tailwind CSS, hosted on Strato servers. The site is mobile-optimized and uses HTTPS with appropriate security headers, indicating a good level of digital maturity. However, there is no visible cookie consent mechanism or advanced analytics, suggesting room for improvement in privacy compliance and data transparency. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CSRF token usage, but lacks published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected in the provided content. Overall, the security posture is solid but could be enhanced by formalizing policies and improving user privacy controls. The overall risk assessment is moderate with a recommendation to implement cookie consent, publish security and incident response policies, and consider adding a vulnerability disclosure framework. These steps would improve compliance, user trust, and security readiness, aligning the company with best practices in digital governance.

E

eworx Network & Internet GmbH

mailworx.info

75

eworx Network & Internet GmbH operates a professional marketing suite website offering integrated email marketing, WhatsApp newsletter, and event management solutions. The company targets business customers seeking GDPR-compliant, automated, and personalized marketing tools. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on TYPO3 CMS with modern JavaScript and CSS frameworks, optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security policy and incident response pages are absent. Overall, the site reflects a trustworthy and established business with good compliance and marketing transparency.

O

Online Casino Deals

onlinecasinodeals.gr

54

Online Casino Deals is a specialized affiliate marketing platform focused on providing comprehensive reviews, rankings, and bonus guides for online casinos targeting Greek players. The website positions itself as a trusted resource for safe and licensed online gambling in Greece, emphasizing regulatory compliance and responsible gaming. It promotes partner casinos through affiliate links, offering exclusive bonuses and detailed casino evaluations. Technically, the site employs modern web technologies including React, Google Tag Manager, and responsive design principles, ensuring excellent mobile optimization and user experience. The content is rich, well-structured, and localized in Greek, supporting strong SEO and accessibility standards. From a security perspective, the website uses HTTPS and follows best practices such as avoiding exposed sensitive data and leveraging third-party certifications like eCOGRA and iTech Labs to build trust. However, it lacks visible cookie consent mechanisms and explicit security or incident response policies, which are areas for improvement. Overall, the site demonstrates a high level of professionalism and trustworthiness in the online gambling affiliate niche for Greece, with moderate privacy compliance and a solid security posture. Strategic enhancements in privacy compliance and security transparency would further strengthen its market position.

T

Top Mania de Premios

sortemaniadepremios.com.br

51

Top Mania de Premios is an online lottery platform targeting Brazilian users, offering various lottery games with instant results and payment via PIX. The website is built using modern technologies such as Astro and integrates Google Tag Manager for analytics. The platform emphasizes trustworthiness and legal compliance but lacks publicly available privacy, cookie, or terms of service policies. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Overall, the site is well designed, mobile optimized, and provides clear content relevant to its business model. However, the absence of contact information and privacy compliance details reduces user trust and regulatory compliance.

L

La Dépêche du Midi

ladepeche.fr

63

La Dépêche du Midi operates as a prominent regional news media outlet serving the Occitanie region in France. The website provides real-time news updates, local and regional information, and multimedia content including photos and videos. Its business model is primarily based on advertising revenue and subscription services, offering both free access with personalized advertising and premium content for subscribers without personalized cookies. The site maintains a strong brand presence with consistent and professional design, targeting a general audience interested in regional news, sports, politics, and culture. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Didomi for consent management, and Materialize CSS for responsive design. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with multiple third-party scripts integrated for advertising and user tracking. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Consent management is robust, aligning with GDPR requirements. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and security maturity. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data reduces domain trust verification. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and adding vulnerability disclosure information to enhance security posture and user trust.

D

DB Fernverkehr AG

bahn.de

69

Deutsche Bahn's website www.bahn.de serves as the primary digital portal for train travel in Germany, offering comprehensive services including ticket booking, travel information, and loyalty programs. The site targets a broad audience of travelers within Germany and Europe, positioning itself as the leading national railway operator. The business model focuses on transportation services with integrated digital ticketing and customer engagement through programs like BahnCard and BahnBonus. The website reflects a mature enterprise with consistent branding and a strong market presence.

K

KOMETA

kometatype.com

64

KOMETA is an independent type design studio specializing in progressive retail and custom typefaces. The company operates a professionally designed website showcasing its retail font collections and bespoke typography services. The target audience includes designers, studios, and brands seeking unique and future-facing fonts. The business model is focused on retail font sales and custom typography projects, positioning KOMETA as a niche player in the type foundry market. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted and registered via Cloudflare, ensuring good performance and security basics like HTTPS. However, DNSSEC is not enabled, and security headers are not detected, indicating room for improvement in security hardening. Privacy compliance is weak, with no visible privacy or cookie policies, and no GDPR indicators. Contact information is not explicitly provided, which may affect user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy, security policies, and contact transparency.

H

Hello Lille Site officiel de l'Agence d'attractivité de la MEL

hellolille.eu

59

Hello Lille is the official agency promoting the attractiveness of the Métropole Européenne de Lille, targeting businesses, event organizers, and students. The website serves as a comprehensive portal to discover opportunities for implantation, events, and education in Lille. The technical infrastructure is modern, leveraging WordPress with a custom Woody theme and multiple JavaScript libraries for interactive and responsive user experience. The site supports multiple languages, enhancing its international reach. Security posture is solid with HTTPS and consent management implemented, though improvements are needed in security headers and explicit privacy policies. Overall, the website is professional, trustworthy, and well-positioned to serve its audience effectively.

S

Slovenská produkčná, a.s.

noviny.sk

64

Noviny.sk is a prominent Slovak online news portal operated by Slovenská produkčná, a.s., a media company based in Bratislava, Slovakia. The website offers a wide range of news content including politics, economy, sports, crime, weather, and multimedia such as videos and podcasts. It targets a general audience seeking up-to-date news and information. The business model relies primarily on advertising revenue, supported by multiple ad networks and programmatic bidding technologies integrated into the site. The portal is part of a larger media group including joj.sk and jojgroup.sk, enhancing its market position in the Slovak media landscape. Technically, the website employs modern JavaScript modules, header bidding with Prebid.js, and multiple analytics and advertising platforms such as Google Analytics, Facebook Pixel, Gemius, Smart AdServer, and Teads. Consent management is handled via the Didomi CMP, ensuring GDPR compliance mechanisms are in place. The site is mobile-optimized with good SEO practices and structured data markup to enhance search engine visibility. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and there is no public security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided HTML content. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk assessment is low, with the site appearing legitimate, professionally managed, and compliant with basic privacy regulations. Strategic recommendations include publishing clear privacy and terms of service pages, enhancing security headers, and providing incident response contacts to improve trust and compliance.

M

Montpellier Tourism

montpellier-france.com

53

Montpellier Tourism operates a professional and content-rich website promoting tourism in Montpellier, France. The site offers comprehensive visitor information including accommodation, events, guided tours, and local attractions, targeting international tourists with multi-language support. Technically, the website uses a modern JavaScript stack with modular ES scripts, integrates third-party services for maps, booking, and analytics, and is built on WordPress with a custom theme. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS data is a notable concern, reducing domain registration transparency and trust. Overall, the site is well-designed and functional but would benefit from enhanced privacy disclosures and domain registration clarity.

M

Montpellier Tourisme

montpellier-tourisme.fr

56

Montpellier Tourisme operates as the official tourism promotion website for Montpellier, France, providing comprehensive information on local attractions, events, accommodations, and activities. The site targets tourists and visitors seeking to explore Montpellier and the surrounding region. It offers multi-language support and integrates booking and event management services to enhance user experience. Technically, the website employs a modern stack including WordPress CMS with a custom Woody theme, various JavaScript libraries, and third-party integrations such as Django Travel and touristic maps. The site is well-optimized for mobile devices and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of publicly available WHOIS data and privacy policy reduces transparency slightly but does not detract significantly from the site's legitimacy. Overall, Montpellier Tourisme presents a professional, trustworthy, and user-friendly platform for tourism promotion.

O

Office de Tourisme de Lille

lilletourism.com

66

The website www.lilletourism.com serves as the official online presence of the Office de Tourisme de Lille, providing comprehensive tourism information, cultural insights, and online booking services for visitors to Lille, France. It targets tourists and visitors interested in exploring Lille's heritage, events, gastronomy, and shopping. The site is multilingual, supporting French, English, and Dutch, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a custom Woody theme and leverages modern JavaScript libraries and modules to deliver a rich, responsive user experience. Accessibility and SEO best practices are well implemented, contributing to excellent content quality and navigation clarity. Security-wise, the site enforces HTTPS and uses cookie consent frameworks but lacks explicit security headers and published privacy or incident response policies, which are areas for improvement. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its professional presentation and official branding. Overall, the website demonstrates a mature digital infrastructure suitable for its role in tourism promotion, with recommendations to enhance privacy transparency and security posture.

S

Synesty GmbH

synesty.com

11

Synesty GmbH operates a mature and well-established no-code/low-code integration platform focused on enabling businesses, especially in e-commerce, to automate and connect various digital systems and APIs without programming. The company has a strong market presence in Germany with a medium-sized business profile, founded in 2009, and offers a SaaS middleware solution with extensive add-ons and templates. The website is professionally designed, content-rich, and targets multiple user personas including e-commerce managers, developers, agencies, and CEOs. Technically, the site uses modern frameworks like Astro and privacy-conscious analytics (Matomo with cookies disabled), ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain locks, though DNSSEC is not enabled and some security policies are not publicly disclosed. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the website and business demonstrate high professionalism and trustworthiness with room for improvement in transparency and security documentation.

T

The Kind Kids

thekindkids.be

67

The Kind Kids is a Belgian impact collective comprising five passionate companies collaborating to empower changemakers and drive positive social impact. Their services include strategy, communication, process optimization, and workplace happiness enhancement. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their mission and offerings. Technically, the site uses modern JavaScript modules, Craft CMS, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS and secure form handling, though it lacks some security headers and a published security policy. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the domain WHOIS data is restricted by registry policy, which is common for .be domains, but the website's professional presentation and trust signals such as B Corp certification support its legitimacy.

P

PFANNER, spol. s r.o.

pfanner.cz

69

PFANNER, spol. s r.o. is a family-owned company with over 30 years of tradition in the Czech and Slovak markets, specializing in the distribution and sale of premium food and beverage products. The company operates an e-shop and serves gastro businesses and suppliers, offering a portfolio of 31 brands and nearly 1000 products. The website reflects a professional and modern digital presence with clear navigation, mobile optimization, and rich content describing the company's history and offerings. Technically, the site uses modern web technologies including JavaScript modules, Google reCAPTCHA Enterprise for form security, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is good with HTTPS enforced and secure form handling, though security headers are not explicitly detected and no public security policy or incident response contacts are provided. The WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and contact information support legitimacy. Overall, the site is well-designed, compliant with GDPR, and suitable for its target audience.

Z

zirk.us

zirk.us

65

zirk.us operates as an independent Mastodon social network server focused on the arts and humanities community, providing a platform for readers, writers, and academics to engage in cultural and intellectual discussions. The website leverages the Mastodon open-source platform, utilizing modern web technologies such as React and JavaScript ES modules to deliver a responsive and user-friendly experience. The domain is well-established, registered since 2004, and managed via GoDaddy with protective domain status flags, enhancing trustworthiness. However, the domain predates the Mastodon platform, indicating repurposing of the domain for this service. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the site is functional, trustworthy, and serves a niche community with good content quality and technical implementation.

S

Super Streusel

superstreusel.de

69

Super Streusel is a specialized e-commerce retailer based in Germany, focusing on colorful sugar sprinkles and sprinkle mixes for baking decoration. The website is built on the Shopify platform, leveraging various marketing and analytics tools such as Klaviyo, Usercentrics, and Boost Commerce filter and recommendation apps. The business targets consumers interested in baking and cake decoration, positioning itself as a niche market leader in Germany. The site demonstrates good branding consistency and content quality, with a professional design and clear navigation.

F

fairkom

fairmove.net

70

fairmove.net is a Mastodon instance operated by fairkom, providing a federated social networking platform focused on 'fair moves' and community engagement. The platform is part of the fairapps.net open source cloud portfolio and integrates SingleSignOn capabilities. Hosting is located in the EU, aligning with data protection expectations. The website serves a niche audience interested in decentralized social media and open source technologies. Technically, the site runs Mastodon version 4.4.2 with a modern tech stack including Ruby on Rails and React, delivering a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Business credibility is supported by transparent WHOIS data consistent with the website's claims and a clear administrative contact. Overall, the site is safe, professional, and trustworthy within its niche, but could enhance security and compliance features to improve user trust and regulatory adherence.

T

Toot Café

toot.cafe

60

Toot Café is an independent Mastodon instance primarily serving a community interested in web design and development. It operates as a social networking platform within the fediverse, leveraging the open-source Mastodon software (version 4.4.7). The site provides features such as trending posts, hashtags, and a profiles directory, targeting users who seek decentralized social networking without ads or algorithms. The platform is administered by an individual named Nolan Lawson, indicating a small-scale community-driven operation. Technically, the website employs modern web technologies including React, JavaScript ES modules, and WebSockets for real-time streaming. The presence of a manifest file suggests support for progressive web app features. While the site appears to be mobile-optimized and has a good design quality, accessibility and SEO optimizations are basic. Performance is moderate, with no major issues detected in the HTML structure or resource loading. From a security perspective, HTTPS is implied and WebSocket connections use secure protocols. However, no explicit security headers were detected in the provided data, and there is no visible cookie consent mechanism or published terms of service. WHOIS data is unavailable due to unsupported TLD WHOIS queries, which slightly reduces trustworthiness. No contact information or incident response channels are published, limiting transparency. No advertising or tracking technologies were found, indicating a privacy-conscious approach. Overall, Toot Café presents as a legitimate, community-focused Mastodon instance with good technical foundations but some gaps in security best practices and compliance documentation. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and resilience.

Leexi.ai is a technology company offering an AI-powered meeting assistant designed to automate note-taking, summarize meetings, and extract action items to boost productivity. The website positions itself as a SaaS solution targeting professionals and teams who want to optimize their meeting workflows. The business model revolves around providing AI-driven services to enhance workplace efficiency. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, indicating a contemporary and responsive design approach. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security practices. The WHOIS data is unavailable due to privacy protection, which is common for startups but limits trust verification. Overall, the site is professional and functional but would benefit from enhanced transparency and security measures.

M

Mon espace santé

monespacesante.fr

66

Mon espace santé is a French government-backed digital health platform designed to securely store and share personal and family health data. It serves over 20 million users and is positioned as a leading national health service. The platform offers key services including document storage, secure messaging with health professionals, and management of children's health profiles. Technically, the website uses modern JavaScript frameworks (Vue.js), is mobile optimized, and integrates privacy and cookie consent mechanisms. Security posture is strong with HTTPS, HDS certification for data hosting, and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable service for French residents.

Eadmin Cloud is a small Czech Republic-based technology company founded in 2021, specializing in delivering modular web components and eCommerce solutions such as product recommendation engines, payment gateways, and process automation tools. Their market position is niche, targeting businesses seeking to enhance or build eCommerce platforms with specialized components. The website content is professional and focused, with clear service offerings and pricing models presented in structured JSON-LD data. Technically, the site uses modern JavaScript ES modules and is hosted with Google Cloud DNS, but lacks visible CMS or frameworks. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. Security posture is average; while domain registration practices are sound and domain status flags protect against unauthorized changes, the site lacks DNSSEC, security headers, and published privacy or cookie policies. No forms or analytics scripts are detected, indicating minimal data collection and tracking. Overall, the site is trustworthy but could improve compliance and security transparency.

Boutique Labess is a French e-commerce website dedicated to selling music albums and merchandise related to the musical group Labess, along with promoting upcoming concerts. The website targets fans and customers interested in music-related products, primarily French-speaking audiences. The business operates on the Shopify platform, leveraging its e-commerce capabilities and payment integrations such as Shopify Payments and Apple Pay. The site demonstrates a modern technical infrastructure with good mobile optimization and accessibility features, using the Dawn Shopify theme and various JavaScript modules for enhanced user experience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. It employs hCaptcha for form protection and integrates Facebook Pixel for marketing analytics. However, it lacks explicit privacy and cookie policies, security headers like CSP, and vulnerability disclosure information, which are areas for improvement. DNSSEC is not enabled, which could enhance DNS security. No direct company contact emails or phone numbers are published, relying instead on contact forms and social media channels. Overall, Boutique Labess presents a professional and trustworthy online presence with a solid technical foundation but requires enhancements in privacy compliance and security transparency to meet higher standards. The domain age and registration details support the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to improve trust and compliance.

M

Moshbit GmbH

moshbit.com

11

Moshbit GmbH operates a professional website offering Controlling as a Service, primarily targeting tech-oriented startups and small to medium-sized enterprises (KMUs) in Austria and German-speaking markets. Their key services include financial planning, forecasting, dashboards, KPI tracking, investment calculations, and strategic consulting. The company presents itself as a niche service provider with a focus on efficient and tailored financial controlling solutions, leveraging their proprietary CoreControlling® tool. The website is well-branded, consistent, and provides clear service descriptions and team information, enhancing business credibility. Technically, the website uses modern frontend technologies such as Tailwind CSS and Alpine.js, with assets hosted on Amazon S3, indicating a modern and scalable infrastructure. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, some security best practices like DNSSEC and security headers are not implemented, representing minor improvement areas. From a security perspective, the site enforces HTTPS and has domain transfer protections, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Contact information is primarily via a web form, with no direct emails or phone numbers listed. Social media presence is limited to LinkedIn profiles of key team members. Overall, the website is professional, trustworthy, and well-suited for its target audience, but could enhance security posture and privacy compliance by implementing additional security headers, DNSSEC, cookie consent, and incident response disclosures.

M

Mastodon.green

mastodon.green

62

Mastodon.green is an independent Mastodon server focused on providing a federated social networking platform with an environmental mission to plant trees while users engage. The site targets a general audience interested in decentralized social media, originally aimed at EU users but now open globally. The platform offers trending posts, hashtags, and user profiles, leveraging the open-source Mastodon software version 4.4.7. Technically, the site uses modern web technologies including React, ES modules, and secure HTTPS connections with script integrity checks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and content security policies implied, though explicit security headers and incident response policies are absent. Privacy compliance is moderate with a privacy policy present but lacking cookie consent mechanisms and terms of service. WHOIS data is privacy protected, typical for such community-run servers, and does not detract from the site's legitimacy. Overall, Mastodon.green presents a trustworthy, well-maintained social platform with room for improvement in security transparency and privacy controls.

R

Réseau Canopé

reseau-canope.fr

52

Réseau Canopé is a French public operator under the Ministry of National Education, Higher Education and Research, dedicated to the training of teachers and educational staff. It holds a strong market position as the national network for teacher training, offering a wide range of services including online courses, workshops, and digital educational resources. The website reflects a mature digital infrastructure using TYPO3 CMS and integrates advanced analytics tools such as Matomo and Piwik PRO for user engagement tracking. The site is well-designed, accessible, and optimized for mobile devices, providing a professional user experience. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit security policies and vulnerability disclosure. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility with official government affiliation, certifications, and active social media presence.

Srovnejto.cz is a Czech-based online comparison platform specializing in insurance, energy, and loan products. It serves consumers in the Czech Republic by providing a user-friendly interface to compare financial and utility offerings, helping users make informed decisions. The website demonstrates a professional design and clear service focus, positioning itself as a significant player in the local comparison market. Technically, the site leverages modern frontend technologies such as Nuxt.js and Font Awesome, ensuring a responsive and visually appealing user experience. However, performance is moderate and could benefit from optimization. Security posture is average; while HTTPS is presumably enabled, no explicit security headers or policies are detected, and privacy compliance is weak due to missing privacy and cookie policies. The absence of WHOIS data limits domain legitimacy assessment, but the website's professional appearance and content relevance suggest a legitimate business. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

EcoIndex.fr is a French environmental digital project offering a free online tool to evaluate the environmental impact and performance of websites. It targets web professionals and environmentally conscious users, providing educational content and community engagement opportunities. The website is built using the Hugo static site generator and modern JavaScript technologies, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced, though some security headers are missing and no cookie consent mechanism is implemented. The WHOIS data is unavailable, likely due to privacy protection, but the website's transparency, open source nature, and partnerships with reputable environmental organizations support its legitimacy. Overall, EcoIndex.fr presents a trustworthy and professional platform in the niche of digital environmental responsibility.