Security Directory

P

Piaille

piaille.fr

65

Piaille.fr operates as an independent public Mastodon server primarily serving the francophone community. It provides a federated social networking platform allowing users to participate in the fediverse without centralized control. The service is relatively new, established in late 2022, and positions itself as an accessible and open social media alternative. The website content and branding are consistent with its mission, targeting general users interested in decentralized social media. Technically, the site runs Mastodon version 4.4.7, leveraging modern JavaScript modules and React-based components. Hosting is provided by ScaleWay, a reputable cloud provider, ensuring reliable infrastructure. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be enhanced. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, no explicit security headers were detected, and there is no visible incident response or security policy information. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and GDPR compliance indicators. No contact information or vulnerability disclosure policies are provided, which could be improved to enhance trust. Overall, Piaille.fr presents a trustworthy and functional platform with room for improvement in security and privacy compliance. Strategic enhancements in security headers, privacy notices, and contact transparency would strengthen its posture and user confidence.

H

Herohero s.r.o.

herohero.co

71

Herohero s.r.o. operates a technology platform focused on providing a personalized internet experience for creators and users. The website emphasizes a user-centric approach with a clean, professional design and multi-platform availability including iOS and Android apps. The business targets creators and internet users seeking streamlined content discovery and personalization. Technically, the site uses modern JavaScript frameworks such as Vue.js, ES modules, and integrates third-party services like Stripe and Google Tag Manager. Performance and mobile optimization are good, though some accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and headers. Privacy compliance is strong with GDPR indicators and clear cookie consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

F

Flirc Inc.

flirc.tv

61

Flirc Inc. is a small technology company specializing in media center accessories and Raspberry Pi cases, operating primarily through an e-commerce platform powered by Shopify. The company has a mature domain registered since 2008 and offers a range of hardware products including universal remote controls, USB receivers, and custom Raspberry Pi cases. Their market position is niche but well-established, supported by positive media mentions and customer testimonials. Technically, the website leverages modern web technologies and Shopify's robust infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and use of hCaptcha for form protection, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with moderate user tracking for analytics and marketing purposes.

M

Maison Godillot

maisongodillot.com

63

Maison Godillot operates as a niche e-commerce retailer specializing in tasteful and quality home objects and accessories. The website is professionally designed on the Shopify platform, targeting a general audience interested in home decoration, office supplies, kitchenware, and children's products. The company positions itself as a purveyor of craftsmanship and quality, with a clear focus on curated product collections and brands. Technically, the site leverages modern web technologies and Shopify's robust infrastructure, including integrations with marketing and analytics tools such as Klaviyo and Google Analytics. The site is mobile optimized and provides a good user experience with clear navigation and structured content. Security posture is generally good with HTTPS enforced and secure payment processing via Shopify Payments. However, explicit security headers are not visible in the HTML, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration inconsistencies. Overall, the site is functional, professional, and trustworthy from a user perspective but would benefit from enhanced transparency and security disclosures.

L

La Quadrature du Net

mamot.fr

57

Mamot.fr is a French-language Mastodon social networking server operated by La Quadrature du Net, a recognized non-profit organization advocating for digital rights. The platform serves a niche community interested in privacy-focused federated social media, with approximately 2.7K active users. The website is built on the Mastodon 4.4.7 platform, leveraging modern web technologies including React and ES modules, hosted by ScaleWay. The technical infrastructure is solid, with good SSL configuration and secure resource loading practices. However, the site lacks explicit cookie consent mechanisms and terms of service pages, which slightly impacts privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a vulnerability disclosure policy would enhance trust. Overall, Mamot.fr presents a professional, trustworthy, and privacy-conscious social platform with room for improvement in compliance documentation and user contact transparency.

E

Enercoop

enercoop.fr

54

Enercoop is a French cooperative network providing 100% renewable electricity sourced from a broad network of citizen and local authority-owned production sites. The company positions itself as a key player in the energy transition with a cooperative and citizen-focused business model. Their services include electricity supply, energy efficiency consulting, and support for renewable energy producers. The website is professionally designed, mobile-optimized, and uses modern technologies including Prismic CMS, Matomo analytics, and Google Tag Manager. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit privacy and terms of service pages are not detected in the provided content. Overall, Enercoop demonstrates a mature digital presence aligned with its cooperative values and market positioning.

RealityDudes.com is an adult entertainment website specializing in streaming high-quality amateur gay pornographic videos featuring nude male models. The platform operates under Aylo Premium Ltd., a company known for managing adult content brands. The site targets an adults-only audience and offers subscription-based access to a wide variety of categorized video content. It maintains a professional market position within the niche of amateur gay adult entertainment. Technically, the website leverages modern web technologies including React, JavaScript ES modules, and integrates with multiple Project1content.com services for navigation, media delivery, and user management. It uses Google Fonts and Flickity for UI components and carousels. Payment processing is handled via trusted third-party services such as Probiller and Vend-o, ensuring secure transactions. The site is mobile optimized and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and implements several security best practices such as hiding the X-Powered-By header and enabling HTTP Parameter Pollution protection. However, the Content-Security-Policy header is disabled, representing a potential security gap. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and prominently linked, supporting compliance and user trust. Overall, the website presents a moderate to good security posture and technical maturity. The absence of publicly available WHOIS data for the domain is a notable transparency concern but does not necessarily indicate illegitimacy given the professional presentation and trusted payment integrations. Strategic recommendations include enabling CSP headers, improving accessibility features, and publishing a security.txt file for vulnerability disclosures.

shop.fotokino.com is a niche e-commerce platform specializing in artist books, prints, and limited editions, collaborating closely with artists and designers. The website is professionally designed using the Shopify platform, offering a curated selection of art publications and related products. It targets art collectors, enthusiasts, and the general public interested in artist projects on paper. The business operates primarily in France with distribution partnerships extending internationally. Technically, the site leverages modern web technologies, including Shopify's Dawn theme, JavaScript ES modules, and secure payment integrations such as Apple Pay and PayPal. The site is mobile-optimized, accessible, and performs well with fast loading times. Security posture is solid with HTTPS enforced and form protection via hCaptcha, though explicit security headers and privacy policies are missing. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Overall, the site is a credible, well-maintained e-commerce platform with room for improvement in privacy and security transparency.

Y

Yelp

yelp.com

11

Yelp is a well-established online platform providing user-generated reviews and recommendations for local businesses, including restaurants, healthcare providers, and various services in Helsinki, Finland. The website is a localized Finnish version of the global Yelp platform, offering comprehensive business categories and search capabilities tailored to the Helsinki market. Yelp maintains a strong market position as a leading local business review platform with a large user base and extensive business listings. The business model revolves around user engagement, advertising, and business services such as Yelp Guest Manager and data products.

S

Sovereign Tech Agency

sovereigntechfund.de

66

Sovereign Tech Agency is a German-based organization focused on securing and investing in open digital infrastructure critical for the 21st century economy and society. Their market position is that of a strategic investor and ecosystem supporter, targeting startups, SMEs, and open source maintainers to enhance digital sovereignty and innovation capacity in Germany and Europe. The website presents a professional and consistent brand image with clear descriptions of their key programs including investment funds, resilience initiatives, fellowships, and challenges. Technically, the site uses modern web technologies such as JavaScript ES modules, Vite, and privacy-respecting analytics (Fathom). It is well optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

F

Flamme Verte - C/O Syndicat des énergies renouvelables (SER)

flammeverte.org

53

Flamme Verte is a French organization operating under the Syndicat des énergies renouvelables (SER) that provides a certification label for ecological, economical, and high-performance domestic wood heating appliances. The website serves as an authoritative resource offering detailed information on the benefits of wood heating, financial aids, types of appliances, installation guidance, and maintenance advice. It targets both consumers and professionals in the energy sector, positioning itself as a trusted label and information hub in France. Technically, the website is built on the SPIP CMS platform with modern web technologies including Bootstrap for responsive design, JavaScript modules, and image galleries. The site is well-optimized for mobile devices, accessible, and SEO-friendly. It uses HTTPS with good SSL configuration and defers script loading to improve performance. Analytics are implemented via a Matomo/Piwik instance, respecting user privacy with a cookie consent mechanism. From a security perspective, the site enforces HTTPS but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Contact information is available via postal address and contact form, but no direct phone numbers or emails were found. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Flamme Verte label. The lack of WHOIS data due to privacy protection is typical for organizations and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing incident response contacts to improve security posture and transparency.

P

plus B GmbH

plusb.de

56

plus B GmbH is a Berlin-based digital service provider specializing in TYPO3 CMS development, app creation, consulting, and e-commerce solutions. With over 20 years of experience, the company serves agencies, medium-sized businesses, NGOs, and public institutions, emphasizing accessibility, 3D visualization, and AI integration. The website reflects a professional and consistent brand image, targeting a broad digital services market in Germany. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript modules and Matomo for analytics with a cookie consent mechanism ensuring GDPR compliance. The hosting uses domaincontrol.com name servers, indicating professional domain management. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security policies or incident response information. No vulnerabilities or suspicious patterns were detected. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website and business present a low-risk profile with a high degree of professionalism and trustworthiness. Strategic improvements in security headers and vulnerability disclosure would further enhance their security maturity.

The Universität der Künste Berlin (UdK Berlin) is a large, well-established public university in Germany specializing in artistic education, research, and cultural activities. It offers over 70 study programs to approximately 4,000 students, covering all artistic disciplines and related sciences. The university has a strong market position with a history spanning over 50 years in its current form and roots extending over three centuries. The website reflects a professional and comprehensive digital presence, targeting students, staff, alumni, and partners. It provides extensive information about faculties, events, news, and services.

S

studierendenWERK BERLIN

studierendenbefragung.berlin

54

The website applicants.nqap.de hosts a student survey platform for studierendenWERK BERLIN, a public service organization focused on student welfare in Berlin. The platform collects anonymous feedback from students to improve services and offerings. The site is built with modern Angular technology and hosted on sysEleven infrastructure, indicating a mature technical setup. The content is well-structured, professional, and targeted specifically at students in Berlin, with clear instructions and contact points for data protection and press inquiries. Security posture is adequate with HTTPS implied, but lacks visible security headers and explicit incident response policies. Privacy compliance is supported by a clear privacy policy and data protection officer contact, though cookie consent mechanisms are absent. Overall, the site is trustworthy and professionally maintained, serving its educational and survey purpose effectively.

B

Trending - berlin.social

berlin.social

64

berlin.social is an independent Mastodon social networking instance focused on the Berlin community, providing a platform for local discussions and trending posts. It operates on the open-source Mastodon platform version 4.4.7, leveraging modern web technologies including React and ES modules. The site is accessible without WAF or security challenges and presents a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliance appears basic but adequate for the platform type. WHOIS data is unavailable due to TLD restrictions, but the site shows legitimacy through visible admin accounts and active user statistics.

P

Political Watch

parlamento2030.es

55

Parlamento2030 is a specialized platform developed and supported by Political Watch and the Spanish Ministry of Foreign Affairs to provide transparent, accessible information on parliamentary activities related to the Sustainable Development Goals (SDGs) in Spain. The platform leverages advanced automatic tagging technology to classify and present parliamentary data, enabling researchers, policymakers, journalists, and the public to monitor progress on the Agenda 2030. The website is well-structured, professionally designed, and offers multilingual support, enhancing accessibility and user engagement. Technically, the site is built using modern frontend technologies such as Vue.js and Vite, ensuring a responsive and performant user experience. While no explicit CMS or hosting provider information is available, the site demonstrates good SEO practices and mobile optimization. Security-wise, HTTPS is enforced, but the absence of visible security headers and vulnerability disclosure mechanisms suggests room for improvement in hardening the platform against potential threats. The security posture is moderate with no evident vulnerabilities or exposed sensitive data, but the lack of detailed WHOIS information due to registrar restrictions limits full trust verification. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Business credibility is supported by government affiliation, open source transparency, and clear contact information. Overall, Parlamento2030 presents a trustworthy, well-maintained platform with a clear mission and target audience. Strategic recommendations include enhancing security headers, adding a security.txt file, improving accessibility features, and maintaining regular audits of third-party components to sustain and improve the security and compliance posture.

R

Raiola Networks

raiolanetworks.es

80

Raiola Networks is a well-established Spanish web hosting and domain registration company founded in 2014. It offers high-quality hosting solutions including SSD hosting, VPS, dedicated servers, and specialized WordPress hosting, targeting Spanish-speaking customers seeking reliable and fast web hosting services. The company maintains a strong market position in Spain with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs modern web technologies such as ES modules, Google Fonts, FontAwesome, and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Mautic. The hosting infrastructure leverages AWS DNS services, ensuring robust performance and scalability. Security posture is strong with HTTPS enforced, proper security headers, CSRF protection, and a comprehensive cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional, secure, and compliant, reflecting a mature digital presence.

A

Aylo Premium Ltd.

spicevids.com

67

Spicevids is a large-scale adult entertainment platform operated by Aylo Premium Ltd., offering a comprehensive library of HD pornographic videos from multiple popular studios. The website targets adult audiences exclusively and operates on a subscription-based business model, providing premium content in various resolutions including 720p, 1080p, and 4K. The platform integrates trusted payment processors such as Probiller and employs Google reCAPTCHA Enterprise for bot protection, indicating a mature technical infrastructure. The site demonstrates good security posture with HTTPS enforcement and several security headers, although some enhancements like Content-Security-Policy could improve protection. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. However, the absence of WHOIS registrant data introduces some uncertainty regarding domain legitimacy. Overall, the platform is professionally designed, technically sound, and legally compliant for adult content distribution.

The website www.yourcareer.gov.au appears to be a government-related portal focused on career services in Australia. However, the provided HTML content is minimal and primarily consists of a loading spinner with no substantive content accessible, indicating that the site is likely protected by a Web Application Firewall or similar security mechanism that blocks full content retrieval. The technical infrastructure includes modern JavaScript modules and tracking via Google Analytics and Google Tag Manager, but lacks visible security headers or privacy policies in the accessible content. The WHOIS data is unavailable due to registrar and auDA restrictions, which is typical for Australian government domains, supporting the legitimacy of the site. Overall, the site’s security posture is weak based on the accessible data, with critical gaps in privacy compliance and contact information. Strategic recommendations include improving content accessibility, implementing comprehensive privacy and cookie policies, and enhancing security headers and HTTPS enforcement.

A

AREON s.r.o.

areon-development.cz

66

AREON s.r.o. is a Czech real estate development company specializing in residential property sales and development, operating since 1993 and part of the ALUMONT HOLDING a.s. group since 2017. The company focuses on leveraging synergies within the group to deliver residential projects primarily in Ostrava and surrounding areas. The website reflects a professional and modern digital presence with clear branding and comprehensive project information. Technically, the site uses modern web technologies including Svelte framework, ES modules, and optimized image formats, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information could enhance trust. Overall, the domain WHOIS data is not publicly available, which is typical for Czech domains, but the website content and business information support legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure mechanisms, and providing direct contact details for improved transparency.

O

ohai.social team

ohai.social

62

ohai.social is an independent Mastodon server providing a decentralized social networking platform within the fediverse. It offers a cozy, fast, and secure environment for users to participate in social media activities, emphasizing openness and community. The platform is powered by Mastodon 4.5.0-nightly and uses modern web technologies including JavaScript modules and WebSockets for real-time streaming. The website demonstrates good technical maturity with responsive design, accessibility features, and solid security practices such as HTTPS and Content Security Policy with nonce. However, privacy compliance is basic, lacking cookie consent mechanisms and terms of service, which could be improved to meet broader regulatory requirements. Overall, the site is trustworthy and well-positioned within the decentralized social media niche.

C

Cyberplace

cyberplace.social

67

Cyberplace.social is an independent Mastodon social media server focused on cybersecurity, fandom, video games, and technology communities. It operates within the fediverse, providing a decentralized platform for users interested in these topics. The site is administered by a known individual, Kevin Beaumont (@GossiTheDog), and maintains an active user base of approximately 937 monthly active users. The platform leverages Mastodon version 4.4.7 and modern web technologies such as React and ES modules, ensuring a contemporary user experience with mobile optimization and good navigation clarity. From a technical perspective, the site demonstrates moderate performance and basic SEO and accessibility features. It uses HTTPS, but no explicit security headers were detected in the provided data, suggesting room for improvement in security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service pages. No contact emails or phone numbers are publicly listed, which is common for federated social platforms prioritizing user privacy. The security posture is adequate but could be enhanced by implementing recommended security headers, publishing security policies, and improving privacy compliance. The WHOIS data is privacy protected, which is typical for social media platforms, and does not raise immediate legitimacy concerns given the known administrator and active community. Overall, Cyberplace.social presents as a legitimate, niche social media platform with a focus on cybersecurity and related interests, but with opportunities to strengthen its security and privacy posture.

E

eupolicy.social

eupolicy.social

61

eupolicy.social is a niche Mastodon server dedicated to professionals and enthusiasts involved in EU policy. It operates as a community-driven platform providing a respectful and friendly environment for discussion related to EU policy matters. The server is administered by a small team of volunteers and funded through voluntary contributions, emphasizing its non-commercial and community-oriented nature. The website clearly communicates its purpose, rules, and administrative contacts, fostering trust and transparency within its user base. Technically, the site leverages the Mastodon open-source social networking platform (version 4.4.5) and modern web technologies including React and JavaScript ES modules. The platform supports federated social media participation via the ActivityPub protocol. The website demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers such as Content Security Policy and HSTS, and does not provide a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data due to privacy protection is justified given the community nature of the service, though it slightly reduces trustworthiness from a domain registration perspective. Overall, eupolicy.social presents a trustworthy, well-maintained community platform with a clear focus and good technical foundation. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing a security policy, and improving accessibility to further strengthen its security posture and user trust.

A

AREON s.r.o.

kamenynaburni.cz

66

The website www.kamenynaburni.cz represents a professional real estate development project named 'Kameny Na Burni' located in Slezská Ostrava, Czech Republic. The business behind the project is AREON s.r.o., a small-sized real estate developer under the parent company ALUMONT HOLDING a.s. The site offers detailed information about new apartments for sale, including visualizations, construction updates, and contact options. The target audience is potential home buyers seeking premium residential properties in a quiet urban setting. Technically, the website employs modern web technologies such as Svelte, JavaScript ES modules, and integrates Google Analytics and CookieScript for tracking and consent management. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms and contact forms with explicit consent checkboxes. However, explicit security headers and detailed security policies are absent, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced transparency in domain registration and security disclosures.

Philly Bike Ride operates an official e-commerce store for American Bike Ride events in Washington DC, Philadelphia, and Dallas, offering branded cycling apparel and merchandise. The website is built on the Shopify platform using the Dawn theme, leveraging modern JavaScript and Shopify's integrated payment and analytics services. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content for cycling enthusiasts. Security posture is solid with HTTPS and form protection via hCaptcha, though improvements can be made by enabling DNSSEC and publishing explicit privacy and cookie policies. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy small business e-commerce operation.

S

About - social.lol

social.lol

64

social.lol is an independent Mastodon server providing a decentralized social media platform primarily for the omg.lol community. It leverages the open-source Mastodon software (version 4.4.7) and is hosted on DigitalOcean. The platform offers a lighthearted social hangout with a modest active user base and is administered by an identified individual with contact information provided. The website content is well-structured, mobile-optimized, and designed with a consistent branding approach, targeting general audiences interested in federated social networking. Technically, social.lol employs modern web technologies including React and ES modules, ensuring a contemporary user experience. The site benefits from HTTPS encryption and domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is partial, with a basic privacy policy present but no cookie consent or terms of service, indicating room for improvement in regulatory adherence. From a security perspective, the site shows a moderate posture with no critical vulnerabilities detected. However, the absence of security headers and formal incident response policies suggests potential gaps in defense-in-depth strategies. The domain registration is consistent and appropriate for the platform's age and purpose, enhancing trustworthiness. Overall, social.lol is a credible, community-focused social platform with a solid technical foundation but would benefit from enhanced privacy and security policies to improve compliance and user trust.

W

Trending - Writing Exchange

writing.exchange

67

Writing Exchange is an independent Mastodon social networking platform tailored for poets, authors, and writers, fostering a small, intentional creative community. The platform leverages the open-source Mastodon software (version 4.4.7) and modern web technologies such as React and WebSockets to deliver a responsive and engaging user experience. The site is well-structured with clear navigation and mobile optimization, supporting active community interaction through posts and trending content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers are missing. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Business credibility is moderate due to the absence of public WHOIS data and contact information, typical for community-run platforms. Overall, the site is trustworthy and safe for general audiences.

I

IMOS Brno, a.s.

imosbrno.eu

61

IMOS Brno, a.s. is a well-established Czech construction company specializing in general contracting for civil, water management, and transport infrastructure projects. The company has a strong market presence with over 27 years of experience, a large workforce, and multiple subsidiaries. Their website reflects a professional and modern digital presence with clear service descriptions and project references. Technically, the site uses modern web technologies including Google Tag Manager and reCAPTCHA for security, and it is mobile optimized with good SEO practices. Security posture is solid with HTTPS and form protections, though additional security headers could enhance protection. Privacy compliance is well addressed with cookie consent and a privacy policy. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains and does not detract from the site's legitimacy. Overall, the website and business demonstrate a mature and credible online presence suitable for their industry.

C

CCI France International

ccifi-connect.com

56

CCIFI Connect is a mobile application and web platform designed exclusively for members of the French Chambers of Commerce and Industry International (CCI Françaises à l'International). It facilitates global business networking, event agenda access, and exclusive offers across multiple countries. The platform is supported by CCI France International and partners such as BlueSoft, positioning itself as the premier private network of French companies worldwide with over 35,000 member enterprises. The business model centers on membership and providing value-added networking and business development services to its users. Technically, the website employs modern web technologies including React and JavaScript ES modules, with hosting and DNS managed by reputable providers. The site is mobile-optimized and promotes its iOS and Android applications prominently. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. The cookie consent mechanism is comprehensive, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and common security headers are not explicitly detected, suggesting room for improvement. No explicit security or incident response policies are published, and no vulnerability disclosure program is evident. The domain registration data is consistent and trustworthy, with no privacy protection masking ownership. Overall, CCIFI Connect presents a professional and trustworthy business networking platform with solid technical foundations and good privacy practices. Strategic enhancements in security headers, incident response transparency, and DNS security would further strengthen its posture.

D

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH

giz.de

70

The Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH is a German government-owned enterprise specializing in international development cooperation. The organization operates globally to promote sustainable development, offering solutions and partnerships to improve living conditions worldwide. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting governments, international partners, businesses, and professionals in the development sector. Technically, the site is built on Drupal CMS, uses Matomo for privacy-respecting analytics, and employs a consent management system (Klaro) to comply with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and compliance policies are transparent and comprehensive, supporting GDPR compliance. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission and market position.

foundation-laserie.fr is a domain owned by a user of Kifdom, a domain marketplace platform operated by KifCorp. The website serves as a placeholder indicating the domain is not for sale and promotes Kifdom's domain sales services. The technical infrastructure uses modern frontend technologies such as Livewire and Alpine.js, with good mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and privacy policies. No forms or contact information are provided, limiting user engagement and compliance. WHOIS data is transparent and consistent with the website's purpose, showing a legitimate domain registration with a valid expiry date. Overall, the website is functional but minimal, with room for improvement in privacy, security, and business transparency.

N

Nordhealth Oy

nordhealth.design

60

Nordhealth Oy operates the Nord Design System website, providing a comprehensive design system tailored for healthcare and veterinary software development. The company, founded in 2021 and based in Finland, offers a suite of design tokens, web components, CSS frameworks, themes, iconography, and Figma toolkits to enable coherent and efficient software design and development. The website reflects a professional and modern digital presence, targeting software developers and designers in the healthcare sector. The market position is niche but well-defined, focusing on specialized design solutions for healthcare and veterinary applications. Technically, the website is built using the Eleventy static site generator, hosted likely on AWS infrastructure, and employs modern web technologies including JavaScript ES modules and service workers. The site is optimized for performance, mobile responsiveness, and accessibility, with good SEO practices. Analytics are implemented via Fathom Analytics, emphasizing minimal user tracking and privacy. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as client update, delete, and transfer prohibitions. However, DNSSEC is not enabled, and no explicit security headers were detected. Privacy compliance is lacking, with no visible privacy or cookie policies, which is a notable gap. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website demonstrates a strong professional and trustworthy presence with a solid technical foundation. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance trust and regulatory adherence.

C

CVVZ

cvvz.cz

51

CVVZ is a non-profit organization that hosts an annual event focused on youth resilience, wellbeing, and experience exchange in Kolín, Czech Republic. The event features lectures, workshops, and volunteer opportunities, supported by regional authorities and national partners. The website demonstrates a good level of professionalism with consistent branding and clear navigation, targeting youth, volunteers, and educators. Technically, the website uses modern web technologies including ES modules, Bootstrap, and Google Fonts, with a moderate performance profile and good mobile optimization. However, there is no explicit CMS or hosting provider information. Security headers are not detected, and privacy and cookie policies are missing, indicating areas for improvement in compliance and security posture. The security posture is moderate with HTTPS usage implied but lacking visible security headers and vulnerability disclosures. The absence of WHOIS data is a concern for domain legitimacy, though the website content and partner endorsements suggest a legitimate and trusted organization. Overall, the site is safe for general audiences and does not contain any adult or explicit content. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

C

Confédération Française de Jiu-Jitsu Brésilien

cfjjb.com

63

The Confédération Française de Jiu-Jitsu Brésilien (CFJJB) is a well-established French sports federation dedicated to Brazilian Jiu-Jitsu. Founded in 2005, it serves a large community with over 500 affiliated clubs and more than 31,000 licensed members. The website provides comprehensive information on club affiliations, licensing, competitions, national team selection, and training programs. It targets practitioners, clubs, and enthusiasts across France and its overseas territories. Technically, the site uses modern web technologies including Vue.js, Tailwind CSS, and Cloudflare CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain protections, though improvements are recommended in security headers and explicit privacy/security policies. Overall, the site is professional, trustworthy, and serves as a central hub for the Brazilian Jiu-Jitsu community in France.

The website zrsr.sk is the official portal of the Ministry of Interior of the Slovak Republic, providing public access to the Trade Licensing Register. It serves as a government service platform enabling users to search for business entities by various criteria such as company ID, trade name, personal names, and addresses. The site targets Slovak citizens, entrepreneurs, and the general public seeking official business registry information. The business model is a public service with no commercial intent, positioned as a trusted government resource. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript ES modules. It uses the GOV.UK frontend framework and a custom design system (idsk-frontend) tailored for Slovak government services. The site is mobile-optimized and accessible, with moderate performance. Security measures include HTTPS enforcement and a custom CAPTCHA widget to prevent automated abuse. However, some security best practices such as security headers and vulnerability disclosure mechanisms are not implemented. From a security perspective, the site demonstrates a solid baseline with encrypted communications and input validation. The absence of security headers and vulnerability disclosure policies represents areas for improvement. No exposed sensitive data or vulnerabilities were detected in the analyzed content. Privacy compliance is partial, with cookie policy present but lacking explicit consent mechanisms and a dedicated privacy policy page. Overall, the website is a credible, professional government service with high trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, implementing explicit cookie consent, and adding vulnerability disclosure information to improve transparency and security posture.

U

uvex safety

uvex-safety.de

71

uvex safety is a well-established manufacturer and provider of personal protective equipment (PPE) and occupational safety products, primarily targeting business customers and safety professionals. The company offers a broad portfolio including safety helmets, protective eyewear, hearing protection, respiratory masks, gloves, footwear, and workwear. The website reflects a mature digital presence with comprehensive product information, dealer locator tools, and digital PSA solutions, positioning uvex safety as a key player in the manufacturing sector focused on workplace safety in Germany and beyond. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks and leverages Amazon Cloudfront CDN for fast content delivery. It employs Google Tag Manager for analytics and tracking, and implements cookie consent management compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent and privacy policies are comprehensive and transparent. However, the absence of publicly available WHOIS data for the domain www.uvex-safety.com introduces some uncertainty regarding domain registration transparency. No security policy or incident response information is explicitly published, and no vulnerability disclosure mechanism is evident. Overall, the website presents a professional, trustworthy, and secure digital front for uvex safety’s business operations. The main risk lies in the lack of WHOIS transparency, which should be addressed to enhance trust. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure program, and providing direct security contact channels.

U

UVEX ARBEITSSCHUTZ GMBH

uvex-sportstyle-rx.com

68

The website www.uvex-sportstyle-rx.com represents UVEX ARBEITSSCHUTZ GMBH's specialized product line for prescription sports eyewear. It targets sports enthusiasts requiring high-quality, safe, and stylish prescription glasses for various sporting activities. The site is professionally designed, mobile-optimized, and uses modern technologies including TYPO3 CMS and Amazon Cloudfront CDN. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is missing, which slightly reduces trust but the overall professional presentation and consistent branding support legitimacy. Recommendations include publishing explicit security and incident response policies and improving accessibility features.

Mobile Industrial Robots (MiR) is a Denmark-based company specializing in autonomous mobile robots designed to automate internal transportation for businesses. Founded in 2012 and now part of Teradyne Robotics, MiR offers versatile robotic solutions complemented by service portals, training academies, and community engagement platforms. The company targets industrial and manufacturing sectors seeking automation to improve operational efficiency. The website reflects a mature digital presence with professional design and clear navigation, supporting a global B2B audience. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Storyblok CMS for content management. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is adequate with privacy and cookie policies present, though no active consent mechanism is detected. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

H

Heckel

heckel-securite.fr

57

Heckel is a French manufacturer specializing in safety footwear, offering a broad range of products from lightweight safety sneakers to shoes designed for extreme environments. The company is part of the uvex group, a well-established entity in the safety and sports equipment sectors. The website demonstrates a professional digital presence with a modern TYPO3 CMS infrastructure, CDN hosting, and integration of analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the overall website professionalism and branding consistency support legitimacy.

F

Filtral

filtral.com

64

Filtral is a specialized eyewear brand offering high-quality sunglasses and reading glasses, positioned within the retail sector and associated with the established uvex group. The website demonstrates a strong commitment to sustainability and quality, supported by certifications such as the EcoVadis Sustainability Rating. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and CDN hosting for fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with GDPR-aligned policies and consent management. However, the lack of WHOIS registration data and absence of direct contact emails or phone numbers slightly reduce business credibility. Overall, the site is professional, trustworthy, and well-maintained, suitable for its target audience.

T

Tourisme Lot

tourisme-lot.com

58

Tourisme Lot operates as a regional tourism promotion website for the Lot area in France, providing visitors with comprehensive information about local attractions, activities, and booking options. The site is well-structured, professionally designed, and targets tourists interested in nature, heritage, and leisure activities in the region. Technically, the website employs a modern JavaScript stack with modular components, integrates third-party analytics and marketing tools, and demonstrates good mobile and accessibility support. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a concern but does not detract significantly from the site's apparent legitimacy. Overall, the site presents a professional and trustworthy front for regional tourism promotion.

V

Vallée de la Dordogne Tourisme : guide officiel

vallee-dordogne.com

60

The website www.vallee-dordogne.com serves as the official tourism guide for the Vallée de la Dordogne region in France, offering comprehensive information about cultural sites, gastronomy, outdoor activities, and local events. It targets tourists and visitors seeking to explore the region's heritage and natural beauty. The site is built on WordPress with a modern tech stack including ES modules, jQuery, and various UI libraries, ensuring a responsive and engaging user experience. Security-wise, the site enforces HTTPS and uses cookie consent frameworks but lacks visible security headers and explicit privacy policies, which are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not directly impact the site's operational legitimacy. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

S

Saint Germain Boucles de Seine

seine-saintgermain.fr

57

Saint Germain Boucles de Seine operates a regional tourism website promoting the Saint-Germain-en-Laye area and surrounding locales in France. The site targets tourists and locals interested in cultural, historical, and recreational activities. It offers event information, reservation links, and multilingual content to serve a broad audience. Technically, the website is built on WordPress with a custom Woody theme and uses modern JavaScript libraries and modules for interactive features and maps. The site is secured with HTTPS and employs a cookie consent framework, demonstrating basic GDPR compliance. However, explicit privacy policies and terms of service are not clearly found, which could be improved. Security headers are not fully verified, and no vulnerability disclosure or incident response information is published. Overall, the website presents a professional and trustworthy front for regional tourism, with moderate technical sophistication and a good security baseline.

C

Comité Régional du Tourisme de la Bretagne

tourismebretagne.com

66

Tourisme Bretagne is the official regional tourism authority website for Brittany, France, providing comprehensive information and services to tourists and visitors. The site offers multilingual support, detailed destination guides, accommodation options, and event information, positioning itself as a key resource for vacation planning in the region. The website demonstrates a mature digital presence with modern technologies and a strong focus on user experience and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the site's legitimacy given its official branding and content. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

A

American Heart Association

heart-veterans.jobs

71

The American Heart Association website dedicated to veterans careers provides a comprehensive platform for employment opportunities, veteran resources, and organizational information. The site targets military veterans seeking to transition into civilian healthcare and non-profit roles, emphasizing support and inclusion. The organization holds a strong market position as a leading non-profit in cardiovascular health advocacy, supported by multiple certifications and awards. Technically, the site employs modern frameworks such as Nuxt.js, integrates Google Tag Manager for analytics, and uses responsive design to ensure accessibility across devices. Security posture is solid with HTTPS enforcement and user privacy respected through clear policies and cookie consent mechanisms, though explicit security headers and incident response details are absent. Overall, the site is professional, trustworthy, and well-aligned with its mission, offering a safe and informative user experience.

P

Political Watch

qhld.es

40

Qué hacen los diputados is a Spanish non-profit transparency platform operated by Political Watch that provides citizens, journalists, and researchers with accessible data and tools to monitor the activities of the Spanish Congress of Deputies. The website offers legislative initiative tracking, political orientation insights, and government control information, supporting democratic participation and accountability. Technically, the site uses modern JavaScript frameworks (Vue.js) and build tools (Vite), delivering a responsive and well-structured user experience with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and formal policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the site is trustworthy, professionally maintained, and aligned with its civic mission.

D

DB SCHENKER

dbschenker.com

67

DB SCHENKER is a global logistics and supply chain solutions provider, recently merged with DSV to form a world-leading transport and logistics entity. The website offers comprehensive information on their services including digital services, transport modes, contract logistics, advanced logistics, industry solutions, and customs services. The site targets businesses requiring international shipping and supply chain optimization. Technically, the website is modern, mobile-optimized, and uses advanced tracking and analytics tools such as Adobe Analytics and Elastic Path. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response information are not found. WHOIS data is missing, which reduces transparency but does not detract from the professional presentation and trustworthiness of the site. Overall, the site is well-designed, secure, and business credible.

A

ai.mobirise.com

mobirise.ws

68

The website chatgpt.com/g/g-yg5WelQdV-ai-website-builder offers a free AI-powered website builder tool developed by ai.mobirise.com. It targets general users interested in creating websites easily by providing a generator that allows inputting site details in any language and downloading the generated site as a zip file for hosting anywhere. The site uses modern web technologies including React and Cloudflare DNS services, indicating a moderate level of digital maturity and performance optimization. Security posture is strong with HTTPS enabled and domain locked with multiple EPP status prohibitions, although DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is safe for general audiences and professionally presented but lacks some compliance and transparency features.

L

Live Arena Sports AB

magnus.tv

50

Magnus.TV is a niche streaming platform dedicated to delivering live and on-demand content for the Synerglace Ligue Magnus ice hockey league. The website is branded under Live Arena Sports AB and targets fans and viewers interested in this specific sports league. The platform leverages modern web technologies such as the Ionic Framework and service workers to provide a progressive web app experience, optimized for mobile devices. However, the content is minimal and primarily focused on branding and streaming service promotion without extensive informational pages or user interaction features. The absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership, which impacts trust assessments. Security posture is moderate with some best practices like service worker usage but lacks critical security headers and privacy policies. Overall, the site is functional but would benefit from enhanced transparency, security, and compliance documentation.

Q

Quintal

quintalatelier.com

67

Quintal is a specialized print and publishing workshop based in Paris, focusing on risography and laser printing. The business operates both a physical bookstore and an online e-commerce platform selling printed editions, offering workshops and print services. The website is built on the Shopify platform, leveraging modern web technologies and payment integrations such as Shopify Payments and Apple Pay. The site is well-structured, mobile-optimized, and includes essential privacy and cookie consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS enforced and domain protections in place, though some security headers and policies could be improved. Overall, the site presents a trustworthy and professional image suitable for its niche artisanal market.