Security Directory

N

Gallery of country coats of arms. Select A COUNTRY

near-place.com

59

Near-place.com is a niche informational website providing a gallery of country coats of arms and related geographic information. The site targets a general audience interested in geography and heraldry. It offers a simple user interface with country selection and visual content. The business model appears to be advertising-supported, primarily through Google Adsense. The website is relatively small and was established in 2016, indicating moderate maturity in its niche. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is hosted and registered via Cloudflare, ensuring reliable DNS and HTTPS support. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, it lacks advanced frameworks or CMS indications. From a security perspective, the website uses HTTPS and has domain transfer protections enabled. However, it lacks important security headers and does not enable DNSSEC, which could improve DNS security. There is no visible privacy policy or terms of service, which impacts compliance and trust. The cookie consent banner indicates some GDPR awareness but may not be fully compliant. No contact or incident response information is provided, limiting user trust and security responsiveness. Overall, the website is functional and safe for general users but would benefit from enhanced privacy, security, and compliance measures. Strategic improvements in policy transparency, security headers, and contact information would strengthen its trustworthiness and regulatory posture.

Fake-Shop Detector is a specialized security tool offered as a browser plugin designed to protect online shoppers from fraudulent e-commerce websites by providing real-time detection and warnings. The website is well-positioned in the Austrian market, supported by reputable partners and government funding, and recognized as a test winner by AV Comparatives in 2024. The business model focuses on consumer protection and security awareness in online shopping environments. Technically, the site is built on TYPO3 CMS with modern web standards, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response policies are not publicly documented. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and focused on delivering a niche security service.

Ö

Österreichisches Institut für angewandte Telekommunikation (ÖIAT)

oiat.at

55

The Österreichisches Institut für angewandte Telekommunikation (ÖIAT) is a well-established Austrian non-profit organization focused on promoting competent, safe, and responsible use of digital media. Founded in 1997, it operates multiple projects and initiatives funded by the EU and Austrian government bodies, targeting diverse audiences including children, youth, educators, seniors, and organizations. Their key services include awareness initiatives, content development, workshops, applied research, consumer advice, dispute resolution, and certification of online shops. The organization enjoys a strong market position with trusted partnerships and certifications.

F

FILMCLUB Bozen

filmclub.it

55

FILMCLUB Bozen operates as a regional cinema and cultural venue in South Tyrol, Italy, offering independent films, blockbusters, and classics in multiple languages. The website serves as a platform for browsing film programs, booking tickets, and accessing information about the cinema and its events. The company maintains a strong regional presence with a focus on cultural engagement and community outreach. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates analytics and user tracking tools such as Google Tag Manager and Hotjar, managed with a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. Overall, the site is professional, user-friendly, and trustworthy, supporting the business's cultural mission effectively.

H

HostAdvice

hostadvice.com

69

HostAdvice is an established online platform founded in 2009 that specializes in providing comprehensive web hosting reviews, comparisons, coupons, and resources to help website owners and online business managers grow and manage their online presence effectively. The platform holds a strong market position as a trusted source for hosting advice and features partnerships with key hosting providers such as Hostinger. Technically, the website is built on WordPress, leveraging modern frameworks like Bootstrap and integrates analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site is served over HTTPS with Cloudflare DNS, ensuring a secure browsing experience. However, there is room for improvement in privacy compliance, as no explicit privacy or cookie policies were detected in the provided content. Security posture is generally good but could benefit from enhanced security headers and a published security policy. Overall, the website is professional, trustworthy, and well-structured, catering to a general audience interested in web hosting services.

The website represents the 39th International A+A Congress 2025 organized by the Bundesarbeitsgemeinschaft für Sicherheit und Gesundheit bei der Arbeit e. V. (Basi), a German non-profit focused on occupational safety and health. The site serves as a portal for conference participants to manage their accounts and access event information. The technical infrastructure is based on the Converia conference management system hosted on Schlundtech servers, with a modern but basic tech stack including JavaScript and CSS. Accessibility and mobile optimization are good, though SEO is basic. Security posture is moderate with CSRF protection on login forms but lacks visible security headers and cookie consent mechanisms. The site is fully accessible with no WAF or blocking detected. Contact information is clearly provided, enhancing business credibility.

Z

Zlatá Firma

zlatafirma.cz

55

Zlatá Firma is a Czech Republic-based business platform that awards and promotes the highest-rated companies based on verified online customer reviews from trusted portals such as Google Maps and Facebook. The platform supports companies by providing recognition and marketing opportunities, including the use of the Zlatá Firma logo and marketing packages. The website is professionally designed with good content quality and clear navigation, targeting both businesses seeking recognition and customers looking for reliable service providers. Technically, the site uses modern web technologies and Google Tag Manager for analytics, with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency and trust slightly, though the site appears legitimate and business-focused. No direct contact emails or phone numbers are provided, only a contact form. Overall, the site maintains a moderate security posture with room for improvement in privacy compliance and security best practices.

C

Creative Europe Desk Ireland

creativeeuropeireland.eu

39

Creative Europe Desk Ireland is a specialized entity supporting Ireland’s culture and audiovisual sectors in accessing EU Creative Europe funding. The website serves as an official information hub providing funding opportunities, application guidance, news, events, and resources. It is positioned as a national desk affiliated with the European Union and the Arts Council, targeting cultural professionals and organizations in Ireland. The business model is non-profit and service-oriented, focusing on facilitating access to EU funds. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework for responsive design. It uses Google Fonts and Fathom Analytics for lightweight, privacy-conscious tracking. The site is well-structured with good SEO and accessibility features, providing a positive user experience across devices. The newsletter subscription form collects personal data with explicit consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers or policies are detected, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence. The WHOIS data is unavailable due to privacy protections or query failure, limiting domain trust analysis, but the site’s content and branding strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, implementing cookie consent mechanisms, and providing vulnerability disclosure information to improve security posture and compliance.

A

Agefiph

agefiph-handinnov.com

65

Agefiph HANDINNOV is a French government-related platform dedicated to organizing calls for innovation projects and consultations, specifically targeting initiatives related to disability. The website serves as a portal for innovators and organizations to participate in Agefiph's innovation funding and consultation processes. The platform is relatively small in scale, consistent with a niche government service, and was established in 2018. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and the Jodit WYSIWYG editor, hosted by OVH sas with Cloudflare DNS services. The site uses HTTPS with a valid SSL certificate, ensuring secure communications.

Zillian S.A. operates the website promoting JACKET™, an innovative advertising technology platform focused on delivering high-impact digital advertising formats with programmatic readiness. The company positions itself as a global adtech innovator, offering fully integrated services from creative development to campaign activation, targeting brands and marketing professionals. The website is multilingual, professionally designed, and provides clear contact channels including a consent-enabled contact form. Technically, the site uses modern web technologies including jQuery and Google Analytics, with good mobile optimization and accessibility features. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a comprehensive privacy policy and legitimate interest assessment documents, though cookie consent is missing. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance transparency.

S

Selectra

stromliste.at

65

Stromliste.at is an Austrian energy comparison platform operated by the Selectra Group, offering free services to compare electricity and gas tariffs and providing expert telephone consultation to help consumers reduce energy costs. The website is professionally designed, mobile-optimized, and rich in relevant content, including guides, tariff comparisons, and customer testimonials. Technically, it is built on Drupal 10 with modern web technologies and integrates Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to NIC.AT quota limits, but the website's business information and trust signals indicate legitimacy. Overall, the site presents a trustworthy and user-friendly service for Austrian energy consumers.

M

mymuesli

mymuesli.de

74

mymuesli is a German-based e-commerce company specializing in personalized organic muesli products. The website offers a high-quality user experience with a focus on organic ingredients and customization, targeting health-conscious consumers. The company leverages Shopify as its e-commerce platform, integrating various third-party services for customer reviews, loyalty programs, and marketing automation. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. The absence of publicly available WHOIS data slightly impacts business credibility but does not detract from the overall legitimacy of the site. Strategic recommendations include publishing security and incident response policies and enhancing transparency around domain registration.

F

Fastweb S.p.A.

fastweb.it

75

Fastweb S.p.A. is a leading Italian telecommunications and energy service provider offering fiber optic and ADSL internet, mobile telephony, and energy solutions for families, businesses, and enterprises. The company positions itself as a major player in Italy's digital transformation, providing bundled services and innovative digital tools such as FastwebAI and a comprehensive customer app. The website reflects a mature digital presence with clear service segmentation and strong branding consistency. Technically, the website employs modern web technologies including responsive design, video backgrounds, SVG icons, and advanced analytics tools like Piwik PRO and Google Tag Manager. The site is optimized for performance and mobile devices, with good accessibility and SEO practices. Security is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms integrated into forms and user interactions. The security posture is strong, with publicly available security policies and responsible disclosure channels, although explicit DPO contact details and a security.txt file are not found. No vulnerabilities or suspicious patterns were detected. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and secure, supporting Fastweb's market position as a reputable telecommunications and energy provider in Italy. Strategic recommendations include enhancing transparency around data protection officer contacts and formalizing vulnerability reporting mechanisms.

C

Citynews S.r.l.

today.it

58

Today.it is a leading Italian online news portal operated by Citynews S.r.l., providing up-to-date news and in-depth articles covering Italy and the world. The website targets a general audience interested in current events, politics, economy, culture, and entertainment. It holds a strong market position within the Italian digital media landscape as part of the Citynews network. Technically, the site employs modern web technologies including JavaScript, CSS Grid, and uses reputable third-party services such as Google Analytics and Iubenda for cookie and privacy compliance. The hosting is provided by OVH, a well-known European hosting provider. Security-wise, the site enforces HTTPS and includes a Content Security Policy header, but lacks some additional security headers and explicit security policies. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and business credibility, though it could enhance its security posture and incident response transparency.

D

DonDominio

dondominio.com

65

DonDominio is a well-established domain registration and web hosting provider founded in 2006 and operated by Soluciones Corporativas IP, SL. The company offers a comprehensive suite of services including domain registration, web hosting, email accounts, and SSL certificates, targeting individuals and businesses seeking to establish an online presence. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content that supports its business model effectively. The company holds reputable certifications such as ICANN accreditation and Sectigo Platinum Partnership, enhancing its market credibility. Technically, the website employs modern web technologies including JavaScript, SVG, and CSS, delivering fast performance and good accessibility. The presence of Matomo analytics indicates a moderate level of user tracking with privacy considerations. Security posture is strong with HTTPS enforced and secure form practices, although visible security headers are lacking. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor gap. From a security perspective, no major vulnerabilities or exposed sensitive data were detected. Incident response contact is available via an abuse policy page, but explicit security policy documentation and data protection officer contacts are missing. The WHOIS data for the domain is unavailable, which is inconsistent with the active and professional website presence, slightly reducing trustworthiness. Overall, the site is safe, professional, and trustworthy with minor areas for improvement in security transparency and privacy mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and clarifying incident response contacts to enhance trust and compliance. The domain WHOIS inconsistency should be investigated to ensure registration transparency and legitimacy.

K

KIA AUTO AS

kia.ee

61

KIA AUTO AS operates as the official importer and distributor of Kia vehicles in the Baltic region, primarily serving Estonia. The company offers a broad range of Kia models including SUVs, electric vehicles, and passenger cars, supported by a network of 12 official dealerships across Estonia. The website reflects a professional automotive business with a focus on customer engagement through vehicle configuration and comparison tools. Technically, the site employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics and marketing. The site is mobile-optimized and presents a good user experience with clear navigation and branding consistency. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and published security policies or incident response contacts. The extensive use of third-party tracking and advertising services indicates a high level of user data collection, balanced by transparent cookie consent dialogs. Overall, the website is legitimate, professionally maintained, and compliant with regional privacy regulations, though it could improve in explicit security policy disclosures and contact information availability.

K

Kia Canarias

kiacanarias.es

47

Kia Canarias is a regional automotive website dedicated to providing information and services related to Kia vehicles in the Canary Islands. The site offers detailed vehicle specifications, financing options, and dealership locations, targeting consumers interested in Kia automobiles within this region. The website demonstrates consistent branding aligned with the Kia corporate identity and uses modern web technologies including Nuxt.js and third-party marketing tools such as SmartSupp Chat and Evergage. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and explicit privacy policies in the provided content. WHOIS data could not be retrieved due to query restrictions, but the website appears legitimate and professionally maintained. Overall, Kia Canarias presents a trustworthy and functional online presence for Kia's regional operations in Spain.

The website kia-albania.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to its content. This prevents extraction of any meaningful business, contact, or policy information. The domain was registered in 2021 and uses Cloudflare for security and hosting. Due to the lack of accessible content, no detailed business description or services can be identified. The technical infrastructure relies on Cloudflare's security platform, indicating a focus on protection against automated threats. However, the absence of visible content and policies limits the ability to assess compliance and security posture fully. Overall, the site appears to be in a protected state, but this restricts external analysis and user access.

K

Kia

kia.fi

69

Kia's Finnish website presents a professional and comprehensive digital presence for the automotive brand, focusing on electric and hybrid vehicles with a strong emphasis on a 7-year warranty. The site is built on Adobe Experience Manager and integrates multiple marketing and analytics tools such as Google Tag Manager, Adobe DTM, and Leadoo chat services, indicating a mature digital infrastructure. The website is well-optimized for mobile and accessibility, providing a good user experience with clear navigation and relevant content for the Finnish market. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit privacy policies are not directly visible in the provided content. The absence of WHOIS data is notable but likely due to registry or privacy protections; the domain is consistent with a major global brand. Overall, the site reflects a trustworthy and professional business with moderate user tracking and good compliance practices.

T

Tempest Film

tempest-film.com

64

Tempest Film is a German-language film and media production company with a professionally designed website built on WordPress using the Elementor page builder. The site targets German-speaking audiences interested in film and media services. The technical infrastructure is modern but basic, with no advanced security headers or privacy policies detected. The security posture is moderate, lacking explicit security best practices and compliance documentation. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures to improve trust and regulatory adherence.

WebForce3 is an educational initiative focused on digital skills training that began in 2014 and has recently ended its operations. The website serves primarily as a closure announcement, thanking stakeholders and directing future learners to partner educational institutions. The site is hosted on the Carrd.co platform and uses standard web technologies such as HTML, CSS, and JavaScript. The technical infrastructure is basic but functional, with moderate performance and good mobile optimization. Security posture is minimal with no advanced headers or policies detected, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is safe and trustworthy but limited in content and security features.

I

Internet Society France

igf-france.fr

35

The website igf-france.fr serves as the official platform for the Forum on Internet Governance France 2025 and its associated digital future workshops. It is organized by Internet Society France and partners such as AFNIC, targeting stakeholders involved in internet governance, digital policy, and multi-stakeholder dialogue. The site provides event information, agendas, partner details, and contact points primarily via email. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted by OVH, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and published privacy or cookie policies, which are compliance gaps under GDPR. No forms collect sensitive data beyond email links, and no incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and consistent with its non-profit, governmental, and technology sector positioning.

O

OP//TECH USA

optechusa.com

69

OP//TECH USA operates a professionally designed e-commerce website specializing in premium camera straps and accessories, proudly manufactured in the USA. The company targets photographers and optics users seeking quality and comfort in camera carrying solutions. The website is built on the Shopify platform, leveraging modern web technologies and optimized for performance and mobile devices. While the site demonstrates strong branding and product focus, it lacks visible privacy and cookie policies, and no explicit contact information is provided. The WHOIS data is unavailable, which may reduce trust but is common with privacy-protected domains. Security posture is strong with HTTPS and standard security headers, but compliance disclosures could be improved.

EbizIndia Consulting Pvt. Ltd. is a small-sized technology company based in Kolkata, India, specializing in custom business software development, CRM, workflow automation, and SEO services primarily targeting SMEs, manufacturers, and traders. The company emphasizes personalized service, long-term client relationships, and pilot projects to demonstrate value. Their market position is supported by 19+ years of experience and a high client retention rate, with a global client base including industry leaders. Technically, the website is modern, responsive, and SEO-optimized, leveraging Bootstrap and Cloudflare Insights for performance and analytics. Security posture is good with HTTPS implied, but lacks explicit security headers and published security policies. The absence of WHOIS domain registration data raises legitimacy concerns, though the website content and client testimonials support business credibility. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

L

L'Agglo Hérault Méditerranée

agglo-heraultmediterranee.net

64

L'Agglo Hérault Méditerranée is a regional French government entity providing a broad range of public services including waste management, water and sanitation, public transportation, housing, cultural activities, and environmental protection. The website serves as an information portal for residents and businesses within the Hérault Méditerranée territory, offering access to services, news, and project updates. The organization positions itself as a key regional authority supporting sustainable development and quality of life. Technically, the website is built on WordPress using a custom WonderWP child theme and Bootstrap framework. It employs modern web technologies and is mobile-optimized with good SEO practices. The site uses Google Analytics for audience measurement with a clear cookie consent mechanism, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent aligned with GDPR. However, it lacks explicit security headers and a published vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete, which raises some concerns, but the website content and external links strongly indicate legitimacy as a public government entity. Overall, the website is professional, trustworthy, and serves its public service mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, improving accessibility, and maintaining regular security audits to strengthen the security posture and compliance.

M

Marlene®

marlene.it

50

Marlene® is a well-established brand specializing in the promotion and marketing of South Tyrolean apples, emphasizing quality, sustainability, and culinary inspiration. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies and a CMS platform (Consisto.CMS), with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies. Analytics usage is moderate with Google Analytics and Tag Manager implemented, but privacy compliance could be improved. Overall, the website is trustworthy and serves its business purpose effectively.

D

DNZ MEDIA

danzaedanza.com

65

Danza&Danza is a specialized Italian media company focused on dance culture, providing a bimonthly magazine and a dynamic website with news, reviews, and multimedia content. The company, DNZ MEDIA, has a long-standing presence since 1985 and targets professionals and enthusiasts in the dance sector. The website supports subscription sales, advertising, and content publishing, positioning itself as a niche leader in Italian dance journalism. Technically, the website uses standard web technologies (HTML, CSS, JavaScript) with a custom or unknown CMS. It is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. The domain is registered with a reputable registrar and protected against unauthorized transfers, though DNSSEC is not enabled. Security-wise, the site uses HTTPS and implements a cookie consent mechanism and secure login forms with CSRF tokens. However, it lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No critical vulnerabilities or suspicious content were detected, and privacy policies are present and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in security headers and DNS security would further strengthen its posture. The site is safe for general audiences and maintains a clear, consistent brand identity.

R

Rai

raiplaysound.it

64

RaiPlay Sound is the digital audio platform of Rai, Italy's public broadcaster, offering live radio streaming, podcasts, and audiobooks. The platform targets a broad audience interested in Italian radio content and digital audio entertainment. It provides user account features for personalized experiences and supports mobile applications on iOS and Android. The website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and integration with major analytics and advertising services. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting the organization's commitment to user data protection. Security posture is strong with HTTPS enforcement and standard best practices, though explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, RaiPlay Sound presents a professional, trustworthy, and user-friendly digital media service.

R

Radiotelevisione Italiana S.p.A.

rai.it

69

Rai.it is the official website of Radiotelevisione Italiana S.p.A., Italy's leading public broadcaster. The site offers a comprehensive range of content including news, entertainment, sports, and cultural programming, supported by streaming platforms RaiPlay and RaiPlay Sound. The website demonstrates a mature digital presence with modern technologies, CDN usage, and a strong focus on user privacy and consent management. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, although explicit security and incident response policies are not prominently published. Overall, Rai.it presents a professional, trustworthy, and user-friendly platform serving a broad general audience in Italy.

CrediNet.bg is a Bulgarian online microcredit service specializing in fast loans up to 5000 Bulgarian leva, targeting local consumers seeking quick credit solutions with minimal documentation (only ID card required). The website presents a professional and consistent brand image with a clear business focus on microcredit lending. The technical infrastructure includes modern web technologies, integration with Cookiebot for cookie consent, and Cloudflare DNS with DNSSEC enabled, indicating a secure domain setup. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, limits full compliance and trust signals. Security posture is generally good with HTTPS and DNSSEC, but could be improved by adding security headers and publishing security policies. Overall, the site is safe, well-structured, and serves its business purpose effectively, though improvements in transparency and compliance documentation are recommended.

The Südtiroler Künstlerbund is a well-established cultural association based in Bolzano, Italy, founded in 1946. It serves as a platform for artists across multiple disciplines including visual arts, literature, music, and architecture. The organization promotes emerging talent through exhibitions, events, and partnerships with galleries and institutions both nationally and internationally. The website reflects a medium-sized non-profit entity with a clear focus on arts and culture, targeting artists and art enthusiasts. Technically, the website employs modern front-end technologies such as HTML5, CSS3, JavaScript, FontAwesome, and Swiper.js for interactive event displays. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, the CMS and hosting details are not discernible from the available data. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements a cookie consent mechanism indicating GDPR compliance awareness. However, it lacks visible security headers and formal security or incident response policies. No vulnerabilities or tracking analytics were detected, suggesting a minimal attack surface but also limited security transparency. Overall, the website is trustworthy and professional in its presentation and content, but the absence of WHOIS data and domain registration details introduces moderate uncertainty regarding domain legitimacy. Strategic improvements in security policies and transparency would enhance trust and compliance.

The website raai.it is currently inaccessible beyond a security challenge page implemented by BitNinja.IO, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and primarily serves as a redirect and security check, preventing direct access to business-related information. The domain is registered since 2021 with DNSSEC enabled, suggesting some level of DNS security, but no registrant details or business claims are visible to verify legitimacy. The site uses very outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities, raising concerns about the underlying platform's security posture. No privacy, cookie, or terms of service policies are found, and no contact information or social media links are available, limiting trust and compliance evaluation.

F

Fort Wayne LightFest

fwlightfest.org

67

Fort Wayne LightFest is a seasonal holiday event in Fort Wayne, Indiana, combining two major light shows: Blue Jacket's Fantasy of Lights and the Fort Wayne Zoo's Wild Lights, along with a Christmas Village featuring vendors and family activities. The website effectively communicates event details, ticketing options, schedules, and FAQs targeting families and local community members. Technically, the site uses modern frontend technologies including Tailwind CSS, Mantine UI, Mapbox GL JS, and FontAwesome, hosted behind Cloudflare with Squarespace as the registrar, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, but would benefit from enhanced privacy and security disclosures.

D

DNForum.com

dnforum.com

67

DNForum.com operates as an online community forum and marketplace dedicated to domain name trading, discussions, appraisals, and related services. The platform targets domain investors, buyers, sellers, and industry professionals, offering a structured environment with active user engagement and verified members. The website leverages XenForo forum software and modern web technologies, providing a good user experience with mobile optimization and clear navigation. Security practices include HTTPS enforcement, CSRF protection, and secure cookies, though explicit security headers and policies are not evident. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the active content and community suggest operational legitimacy. Privacy and cookie policies are not found, indicating compliance gaps.

V

Connexion Visimodif

visimodif.fr

37

The website visimodif.fr serves primarily as an administration login portal for Visimodif, likely related to Visicod.com. The site is minimalistic, focusing on user authentication for internal or administrative users, with no public-facing business descriptions or contact information. The domain is well-established, registered since 2010 with OVH, a reputable French registrar, indicating a stable presence. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript with jQuery and validation plugins, hosted on OVH infrastructure. Mobile optimization is adequate, but accessibility and SEO features are basic. Security posture is moderate; while client-side validation is implemented, there is no visible HTTPS enforcement or security headers in the provided HTML content, and no advanced security policies or incident response information is available. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is functional but lacks comprehensive security and privacy measures, and public business information is minimal.

I

IPcost

ipcost.com

61

IPcost.com is a specialized online service providing users with detailed information about their public IP addresses, including IPv4 and IPv6 detection, geolocation on a world map, and additional network details such as ISP, ASN, and VPN/proxy detection. The website targets general internet users who need quick and free access to IP-related data, positioning itself as a niche informational tool in the technology sector. The business model is primarily ad-supported, with Google Adsense integrated for monetization. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Leaflet.js library for interactive map rendering. It uses Google Tag Manager and Google Adsense for analytics and advertising. The site is hosted on infrastructure likely provided by Hetzner Online GmbH, inferred from IP geolocation data. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. From a security perspective, the site benefits from HTTPS encryption and domain transfer lock status, enhancing trustworthiness. However, it lacks DNSSEC, explicit security policies, incident response contacts, and a cookie consent mechanism, which are important for compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and privacy compliance are recommended. Overall, IPcost.com is a legitimate, moderately mature service with a solid technical foundation and clear business purpose. Strategic enhancements in privacy compliance, security transparency, and DNS security would improve its risk posture and user trust.

C

CPS Test - Check your clicks per second

cpstest.click

64

The website cpstest.click offers a free online service focused on measuring and training users' mouse click speed, primarily targeting gamers and casual users interested in improving their click rate. The site provides multiple click speed tests, reaction time tests, and related gaming tools, supported by advertising revenue through Google Adsense and related ad services. The content is well structured, multilingual, and optimized for mobile devices, providing a good user experience with clear navigation and relevant gaming-related content. From a technical perspective, the site uses modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and DoubleClick for analytics and advertising. The domain is registered with a reputable registrar and uses Cloudflare DNS, but lacks DNSSEC and explicit security headers, which are areas for improvement. The site is served over HTTPS, ensuring encrypted communication. Security posture is moderate; while HTTPS is enforced and domain transfer protection is enabled, the absence of DNSSEC and security headers reduces the overall security maturity. Privacy compliance is basic, with a privacy policy and terms of service present, but no visible cookie consent mechanism despite use of tracking scripts. Contact information is limited to a contact form with no direct emails or phone numbers, which may affect user trust. Overall, the website is a legitimate, small-scale online gaming utility with a moderate security and privacy posture. Strategic improvements in security headers, DNSSEC implementation, and privacy compliance would enhance trust and security. The site is safe for general audiences with no adult or questionable content detected.

I

International Union for Conservation of Nature and Natural Resources

iucnredlist.org

63

The IUCN Red List website represents a globally recognized non-profit organization dedicated to assessing and communicating the conservation status of species worldwide. It serves a diverse audience including researchers, conservationists, policymakers, and the general public. The site offers comprehensive data and resources to support biodiversity conservation efforts and policy development. The organization has a strong market position as the authoritative source for species threat assessments, supported by a broad partnership network and a long history dating back to 1964. Technically, the website employs modern web technologies including HTTPS, JavaScript, and Google Analytics, ensuring good performance, mobile optimization, and accessibility. The infrastructure appears robust with no signs of blocking or WAF interference, and the site uses secure forms with CSRF protection. However, explicit security headers and a cookie consent mechanism could be improved. From a security perspective, the site demonstrates a strong posture with HTTPS enforcement and secure data handling practices. No vulnerabilities or exposed sensitive data were detected. Privacy policies are comprehensive and GDPR compliant, though a visible cookie consent banner is absent. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website is professional, trustworthy, and well-maintained, with high content quality and clear business credibility. Strategic recommendations include enhancing security header implementation, adding a cookie consent mechanism, publishing a vulnerability disclosure policy, and providing incident response contact details to further strengthen trust and compliance.

S

Sparkasse Gelsenkirchen

sparkasse-gelsenkirchen.de

70

Sparkasse Gelsenkirchen operates as a regional financial institution providing a broad range of banking and financial services to private and corporate customers. The website reflects a mature digital presence with comprehensive product offerings including accounts, loans, investments, insurance, and real estate services. The bank holds a strong market position locally, supported by multiple industry awards and a consistent brand image. Technically, the site is built on a modern CMS platform (likely Adobe Experience Manager), with good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Datenportal Münsterland is a regional data portal focused on providing access to data and services related to the Münsterland region in Germany. The platform is associated with Münsterland e.V. and DREIKON GmbH & Co. KG, indicating a collaboration between regional organizations and technology partners. The website offers API documentation and a query builder tool, targeting government entities, businesses, researchers, and citizens interested in regional data. The business model appears to be a service-oriented platform supported by regional stakeholders, aiming to enhance data transparency and accessibility. Technically, the website employs a simple and clean design using custom fonts and basic CSS styling. There is no evidence of advanced JavaScript frameworks or CMS usage. The site is accessible over HTTPS, but lacks visible security headers and modern SEO or accessibility features. Performance is moderate with basic mobile optimization. No analytics or advertising technologies are detected, indicating a privacy-conscious approach or minimal tracking. From a security perspective, the site shows basic good practices such as HTTPS usage and a login portal for managers. However, it lacks explicit security headers, privacy policies, cookie consent mechanisms, and incident response information. No forms are present on the main page, reducing attack surface, but also limiting user interaction. The WHOIS data is minimal but consistent with the regional focus, with no privacy protection or suspicious patterns detected. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security hardening, and richer content to improve user trust and regulatory adherence.

M

Meteored

meteored.com

69

Meteored is a weather forecasting service providing worldwide animated weather maps, satellite imagery, radar data, air quality, pollution, and hurricane tracking. The platform targets meteorology enthusiasts and the general public seeking detailed weather information. It offers multi-language support and mobile applications across major platforms, enhancing accessibility and user engagement. The website demonstrates a good level of professionalism with consistent branding and quality content focused on weather services. Technically, the site employs modern web technologies including JavaScript, WebGL, and integrates Google Tag Manager and advertising services. The site is mobile optimized and provides a moderate performance experience. SEO practices are well implemented with appropriate meta tags and structured navigation. From a security perspective, the website enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the trust score. Overall, Meteored presents a reliable and professional weather information service with good technical and privacy compliance. Strategic improvements in domain registration transparency and security policy disclosures would enhance trust and security posture.

S

Sparkasse Krefeld

sparkasse-krefeld.de

69

Sparkasse Krefeld is a regional financial institution in Germany offering a comprehensive range of banking and financial services including online banking, accounts, loans, investments, insurance, and private banking. The website targets both private and corporate customers with a strong emphasis on secure online services and customer support. The site is well-branded, professionally designed, and provides extensive information and navigation options for its users. Technically, the website is built on a modern CMS platform (likely Adobe Experience Manager), uses HTTPS, and includes accessibility and SEO best practices. Security posture is strong with session management, cookie consent, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

G

Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH)

g-e-h.de

57

The Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH) is a well-established German non-profit organization founded in 1981, dedicated to the conservation of old and endangered livestock breeds. With over 2100 members from diverse backgrounds including agriculture, biology, and veterinary medicine, the organization provides educational resources, workshops, publications, and conservation projects. Their website reflects a professional and consistent brand presence, offering clear navigation and multiple channels for engagement and donations. Technically, the site is built on Joomla CMS with standard web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and an explicit security policy. Overall, the domain and website content align well, indicating a trustworthy and credible online presence.

G

Gemeinschaft der Zooförderer e.V.

zoofoerderer.de

53

Gemeinschaft der Zooförderer e.V. is a German non-profit association dedicated to supporting zoos and zoo friends through organizing events, publishing reports, and promoting animal conservation. The website serves as a community hub for members and interested parties, providing information on meetings, projects, and the 'Zootier des Jahres' initiative. Technically, the site is built on WordPress with a modern theme and uses HTTPS, ensuring a secure browsing experience. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of explicit contact information and terms of service pages slightly reduces business transparency. Overall, the site is well-structured, content-rich, and trustworthy for its target audience.

D

David Chelly

davidchelly.fr

36

David Chelly is a seasoned digital entrepreneur specializing in domain names and website monetization with over 25 years of experience. The website positions itself as a trusted expert in domain name consulting, web marketing, and digital strategy, targeting domain investors and digital entrepreneurs primarily in France and French-speaking markets. The business model revolves around consulting, coaching, publishing, and providing digital services related to domain names and web presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be improved. Analytics are implemented via Statcounter with minimal user tracking. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this type of personal business. Overall, the security posture is moderate but could benefit from enhancements in policy transparency and technical safeguards. The overall risk is low to moderate given the professional content and absence of suspicious elements, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

P

Pulsor Agency

pulsor.agency

58

Pulsor Agency is a specialized digital agency focused on creating world-class, data-driven landing pages tailored for unique projects. The website presents a professional and modern design, emphasizing high perceived value and client testimonials to establish credibility. The agency targets businesses or individuals seeking premium landing page solutions, positioning itself as a premium service provider in the technology sector. Technically, the site leverages Webflow CMS, GSAP animations, and Swiper.js for interactive content, hosted likely on Webflow's infrastructure, delivering fast performance and good mobile optimization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and no privacy or cookie policies are present, which is a compliance gap. The WHOIS data is unavailable or malformed, limiting domain trust analysis and reducing overall legitimacy score. Tracking is implemented via Humblytics, but no consent mechanism is evident. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.

This website is a Cloudflare Access login portal for NerdWallet's staging environment, designed to provide secure authentication for authorized users via Okta SSO. The page itself contains minimal content, primarily focused on user login and identity verification, with no public-facing business information or marketing content. The technical infrastructure leverages Cloudflare's security platform and Okta's identity management, indicating a mature approach to access control and user authentication. However, the lack of publicly accessible content, privacy policies, or contact information limits the ability to fully assess the business or compliance posture from this page alone. Security is strong due to enforced HTTPS and integration with trusted identity providers, but the page is effectively blocked to unauthorized users, restricting content visibility and SEO benefits.

V

Visicod

visicod.com

60

Visicod is a French digital communication agency specializing in bespoke website creation, SEO and SEA services, and personalized client support. Established since 2008, it serves artisans, small and medium enterprises across France with a focus on clear, effective digital solutions. The website demonstrates a professional and modern digital presence with strong client testimonials and transparent service offerings. Technically, the site uses modern web technologies, includes cookie consent mechanisms, and integrates Google Analytics for performance tracking. Security posture is good with HTTPS and privacy compliance, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection or recent registration, but the website content and structure indicate a legitimate and trustworthy business. Overall, Visicod presents a credible and professional digital agency profile with room for minor technical security enhancements.

The website carsat-sudest.fr is a regional portal for CNAV, the French national social security organization responsible for retirement insurance for salaried workers. The domain is legitimately registered to CNAV since 2010, reflecting a well-established government entity. However, the website content is currently inaccessible, presenting only a 400 Bad Request error page citing an 'Unknown locale' issue. This prevents any meaningful user interaction or access to services. The site lacks privacy, cookie, or terms of service policies, and no contact information or external links are present in the provided HTML content. Technically, the site uses basic HTML, CSS, and JavaScript but shows no evidence of modern frameworks, CMS, or security headers. The meta robots tag forbids indexing, further limiting visibility.

W

WEBHOUSE, s.r.o.

brandyszamek.cz

47

Zámek Brandýs nad Labem is a cultural heritage site and tourist attraction located in the Czech Republic, showcasing Renaissance architecture and historical significance related to the Habsburg dynasty. The website serves as an informational and promotional platform offering details on tours, events, weddings, and ticketing. The business operates primarily in the hospitality and government sectors, targeting tourists and visitors interested in history and culture. The domain is well-established since 2008, supporting the site's credibility. Technically, the website uses a CMS platform called Vismo, with standard web technologies including HTML5, CSS, and JavaScript. It incorporates Google Translate for multilingual support but lacks advanced performance optimizations and accessibility features. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and good content quality. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies exist but are basic and lack active consent mechanisms. Contact information is comprehensive, enhancing trustworthiness. No incident response or security policy pages were found. Overall, the website is safe, professional, and trustworthy, with a moderate security posture and good business credibility. Recommendations include enhancing security headers, implementing cookie consent, and improving privacy disclosures to align with best practices and GDPR compliance.