Security Directory

H

HYVOR

hyvor.com

64

HYVOR is a privacy-first technology company founded in 2017, offering user-friendly web tools including commenting platforms, blogging services, and security APIs. Their products serve millions globally, targeting a broad audience from small blogs to large enterprises. The company operates on a bootstrapped business model emphasizing user privacy and data protection, with no third-party data sales. Technically, the website is built using modern frameworks like SvelteKit, hosted via Cloudflare, and optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is good with clear policies, though cookie consent mechanisms are lacking. Overall, HYVOR presents a professional, trustworthy, and technically mature online presence.

X

Xcruiter

xcruiter.no

49

Xcruiter is a Norwegian-based technology company founded in 2023 that provides an AI-powered recruitment platform designed to streamline and enhance the hiring process for businesses. Their solution focuses on lead generation, smart advertising, and automation to connect companies with quality candidates efficiently. The company targets businesses looking to improve recruitment outcomes and job seekers interested in new opportunities. The website demonstrates a professional and consistent brand presence with clear messaging and calls to action. Technically, the site is built on WordPress using the Themway theme and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, and Microsoft Clarity, indicating a mature digital marketing strategy. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting awareness of GDPR requirements. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response policies are absent. The domain registration aligns well with the company's founding date and business claims, supporting legitimacy. Overall, the website is well-constructed, secure, and business-focused, suitable for its target audience.

The website www.sicoval.fr currently presents a security challenge page indicating anti-DDoS flood protection and firewall measures are in place. The content is minimal, primarily a bot verification message with a countdown timer, and no accessible business or contact information is provided. The WHOIS lookup failed to return any registrar or registration data, suggesting the domain may be unregistered, privacy protected, or otherwise obscured. This limits the ability to verify the legitimacy or business details of the entity behind the domain. From a technical perspective, the site loads minimal resources, including Google Fonts, and uses JavaScript for the challenge mechanism. There is no evidence of a CMS, analytics, or tracking technologies. The site lacks SEO optimization, accessibility features, and security headers, and no SSL/TLS configuration details are available due to the content being blocked by a WAF or similar security mechanism. Security posture is weak from an external perspective due to the lack of visible HTTPS and security headers, but the presence of an anti-DDoS challenge indicates some level of protection against automated attacks. However, the absence of privacy policies, contact information, and WHOIS data raises concerns about transparency and trustworthiness. Overall, the site is currently inaccessible for meaningful analysis due to the WAF challenge, and the lack of WHOIS data further complicates trust assessment. Strategic recommendations include enabling HTTPS, publishing clear privacy and cookie policies, providing contact and incident response information, and improving website content and SEO to enhance credibility and user trust.

N

Le coin de web de Renaud - Illustrations et dessins divers ...

noche.fr

45

The website noche.fr is a personal portfolio site for an artist named Renaud, showcasing a variety of illustrations, drawings, and animation backgrounds. The site targets art enthusiasts and fans of fantasy and animation art. It operates primarily as a showcase without visible commercial transactions or e-commerce features. The domain is registered since 2005 with OVH, a reputable French registrar, consistent with the site's French language and content. Technically, the site uses classic web technologies including HTML, CSS, JavaScript, and jQuery 1.4.2, with integrations for Google Analytics and social media widgets. The design and navigation are basic but functional, with moderate performance and limited mobile optimization. Security posture is modest, with no visible security headers and use of outdated JavaScript libraries, which may pose risks. Privacy and cookie policies are absent, indicating poor privacy compliance. Overall, the site is moderately trustworthy but would benefit from security and compliance improvements.

M

Microsoft Corporation

microsoft.fr

73

Microsoft Corporation operates a comprehensive and globally recognized technology website offering a wide range of products and services including Microsoft 365, Azure cloud services, Windows OS, Surface devices, Xbox gaming, and AI-powered tools like Copilot. The website targets both consumer and enterprise audiences, reflecting Microsoft's position as a global technology leader. The site demonstrates a mature digital infrastructure with advanced content management via Adobe Experience Manager and integrates modern analytics and marketing tools while maintaining strong privacy and security standards. Security posture is robust with HTTPS, security headers, and compliance with GDPR, supported by clear privacy and cookie policies. The domain is highly legitimate, consistent with Microsoft's brand, though WHOIS data is privacy protected, which is justified for a corporation of this scale. Overall, the website is professional, secure, and trustworthy, supporting Microsoft's market leadership and customer engagement strategies.

W

WS Interactive

ws-interactive.fr

55

WS Interactive is a well-established French web agency based in Toulouse, offering tailored digital solutions including website creation, mobile app development, SEO, and UX/UI design. With over 25 years of experience, the agency targets businesses seeking high-quality digital presence and marketing strategies. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital infrastructure. Technically, the site runs on WordPress with modern JavaScript libraries and employs analytics tools like Matomo and Google Tag Manager, alongside privacy-compliant cookie consent mechanisms. Security posture is solid with HTTPS and CAPTCHA protections, though explicit security headers and policies could be enhanced. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and compliance. Overall, WS Interactive demonstrates a strong market position in the technology sector with a focus on quality and client engagement.

EDF Obligation d’Achat is a public service entity under EDF responsible for managing the obligation to purchase energy produced by installations at regulated tariffs in France. The website serves multiple audiences including individual producers, professionals, mandataires, and buyers, providing resources, contract simulations, and support. The site is well-branded, consistent with EDF corporate identity, and offers comprehensive information aligned with its mission to support sustainable energy production. Technically, the site is built on Drupal 10, uses modern web technologies, and is hosted via Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, likely due to AFNIC policies or privacy protection, which slightly reduces trust but is not uncommon for French domains. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

L

Lendosphere

lendosphere.com

64

Lendosphere is a French crowdfunding platform specializing in financing projects related to the energy and ecological transition. Established in 2014, it positions itself as a leader in responsible investment opportunities within the renewable energy sector. The platform offers investors the ability to directly fund green projects managed by recognized companies, emphasizing transparency and regulatory compliance. The website is professionally designed, mobile-optimized, and provides comprehensive information including risk disclosures, terms of service, and privacy policies in French. Technically, the site employs modern JavaScript libraries, Cloudflare DNS, and monitoring tools like New Relic, ensuring a stable and performant user experience. Security practices include HTTPS enforcement, domain transfer lock, and CAPTCHA protections, although DNSSEC is not enabled and no explicit security policy or incident response page is found. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

T

Tietoevry

tietoevry.com

81

Tietoevry is a leading global software and digital engineering services company specializing in digital transformation, IT, ICT, data, and AI solutions. The company targets enterprise clients seeking to leverage technology for business advantage. Their website reflects a mature digital presence with comprehensive service offerings and a strong market position in the technology sector. The site is professionally designed, mobile-optimized, and well-structured for user experience. Technically, the website employs modern technologies including Azure Application Insights for monitoring, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a high level of digital maturity. Hosting appears to be on Microsoft Azure, supporting scalability and performance. The site demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses multiple security headers, and integrates consent mechanisms for privacy compliance. No obvious vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises questions about domain registration transparency, though the website content and certifications strongly support legitimacy. Overall, Tietoevry's website presents a low-risk profile with strong business credibility and security posture. Strategic recommendations include enhancing transparency around domain registration, publishing incident response procedures, and maintaining vigilant third-party script audits to sustain security and trust.

The website 'Náš Jih' serves as a digital platform for the Ostrava-Jih municipal district in the Czech Republic, facilitating participatory budgeting where residents can influence the allocation of local government funds. The site provides information about ongoing projects, community engagement opportunities, and a project submission portal. It targets local residents and community members interested in civic participation. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Analytics, and Facebook Pixel for analytics and marketing. The hosting is provided by a Czech hosting provider, aligning with the local focus. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. No security headers were detected in the provided data, suggesting room for improvement in security hardening. Overall, the site is professionally designed with good user experience and mobile optimization, but could enhance privacy and security transparency.

C

CareJam

carejam.cz

60

CareJam is a Czech-based educational platform specializing in training and professional development for the nonprofit sector, with a focus on mental health, digitalization, leadership, and organizational professionalization. The website offers accredited courses, workshops, and webinars tailored to nonprofit organizations and professionals working with mental health issues. Supported by notable partners such as the Nadacni fond Hyundai, CareJam positions itself as a trusted resource within its regional market in Moravskoslezský kraj, Ostrava. The business model revolves around providing specialized educational content to enhance skills and knowledge in the nonprofit sector.

D

Domains By Proxy, LLC (registrant proxy)

claspo.io

69

Claspo.io is a SaaS platform specializing in popup builders designed to boost sales, generate leads, and increase subscriber counts for e-commerce and marketing-focused websites. The platform offers a wide range of popup templates, integrations with popular marketing and e-commerce tools such as Shopify, WordPress, Mailchimp, and HubSpot, and features like A/B testing, analytics, and campaign scheduling. The website is professionally designed with good navigation and mobile optimization, targeting businesses seeking conversion optimization solutions. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, hosted on AWS infrastructure. Security posture is adequate with HTTPS and CSRF tokens but lacks visible security headers and published security policies. The domain is privacy-protected but registered with a reputable registrar and has a reasonable age consistent with a startup. Overall, the site is trustworthy and professional but could improve transparency by publishing privacy and security policies.

A

Acronis International GmbH

acronis.com

80

Acronis International GmbH is a well-established global provider of cybersecurity and data protection solutions, specializing in backup software and services for consumers, businesses, and managed service providers (MSPs). Founded in 2003, the company has positioned itself as a leader in the technology sector, offering award-winning products that protect sensitive information across various platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website employs modern web technologies including Vue.js, Matomo analytics, and Google Tag Manager, ensuring a responsive and performant user experience. Security best practices are evident with HTTPS enforcement, robust security headers, and no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, supporting the company's commitment to data protection. The security posture is strong, though the absence of a public vulnerability disclosure policy and explicit incident response contacts suggests areas for improvement. The WHOIS data is incomplete, likely due to privacy protection, but the overall trust indicators and structured data confirm the legitimacy of the domain and business. The website is free from adult or questionable content, targeting a general professional audience. Overall, Acronis demonstrates a high level of digital maturity and security awareness, making it a trustworthy and professional platform for its users.

S

Salon des maires et des Collectivités locales

salondesmaires.com

54

Salon des Maires et des Collectivités locales operates a professional event website targeting French local government officials and public sector stakeholders. The site promotes a major event with over 62,000 visitors and 1,450 exhibitors, positioning itself as a leading platform for local authorities in France. The business model centers on event organization, exhibitions, and networking services for the public sector. Technically, the website is built on WordPress using the Divi theme and incorporates modern SEO and analytics tools such as Yoast SEO and Google Analytics. The site demonstrates good design quality, mobile optimization, and user experience, although accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain registration transparency, though the website content and branding suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security practices.

U

Union Regionale des SCOP Languedoc Roussillon

alterincub.coop

51

Alter'Incub is a well-established French network of incubators specializing in social and environmental innovation. Founded in 2007 and operated by the Union Regionale des SCOP Languedoc Roussillon, it supports entrepreneurs across multiple French regions with incubation services, webinars, and community resources. The website reflects a professional and consistent brand presence with clear regional offices and contact points. Technically, the site is built on Drupal 10, employs modern web standards, and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enabled, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence aligned with its cooperative and non-profit mission.

F

Fédération SCOP Communication

fdcom.coop

53

The Fédération SCOP Communication is a French cooperative federation representing 270 cooperative enterprises in the communication and culture sectors. Established in 2004, it serves as a network and support organization providing services such as RSE engagement, visibility enhancement, thematic meetings, personalized support, and representation in paritary bodies. The website reflects a professional and consistent brand image targeting cooperative communication businesses and stakeholders. Technically, the site is built on Drupal 10, employs modern analytics tools like Matomo and Google Tag Manager, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and cookie management, though some improvements like DNSSEC and security headers are recommended. The domain registration data aligns well with the business identity, indicating high legitimacy. Overall, the site is well-structured, content-rich, and trustworthy.

F

Fédération des Coopératives d'Activité et d'Emploi

les-cae.coop

51

The Fédération des Coopératives d'Activité et d'Emploi is a French federation supporting the creation and development of cooperative business models known as CAE. The organization promotes the entrepreneur salarié and associé status, providing resources, networking, training, and advocacy for cooperative enterprises. The website is well-structured, professionally designed, and targets entrepreneurs and cooperatives in France. Technically, the site is built on Drupal 10, uses Matomo for analytics, and includes modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The domain registration is consistent with the business claims and shows no suspicious patterns. Overall, the website demonstrates a mature digital presence with good business credibility and compliance with GDPR.

U

UR SCOP OUEST

les-scop-ouest.coop

53

UR SCOP OUEST is a regional cooperative union based in Western France, dedicated to supporting and promoting the Scop and Scic cooperative models. The organization provides a range of services including business creation, transmission, transformation, acceleration, training, and cooperative revision. It serves cooperative entrepreneurs and members within the Ouest region, positioning itself as a key regional player in the cooperative ecosystem. The website reflects a professional and consistent brand image with comprehensive content tailored to its audience. Technically, the website is built on Drupal 10, leveraging modern web technologies and providing good mobile optimization and accessibility. The site uses Matomo and Google Tag Manager for analytics, with a clear cookie consent mechanism in place, demonstrating a mature approach to privacy compliance. Hosting appears to be managed by insite.coop, with DNS and SSL configurations generally good, though DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and employs consent management for cookies. However, it lacks DNSSEC and explicit Content-Security-Policy headers, which are recommended for enhanced security. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business identity, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in DNS security and security headers would further strengthen its posture.

U

UR SCOP MIDI PYRENEES

scopoccitanie.coop

51

The website represents UR SCOP MIDI PYRENEES, a regional cooperative union serving the Occitanie region in France. It provides support, training, and networking services to cooperative businesses such as Scop and Scic. The site is well-structured, professionally designed, and targets cooperative entrepreneurs and members in the region. It leverages Drupal 10 CMS and integrates modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. The domain registration aligns well with the business identity, enhancing trustworthiness. Overall, the site is a credible and professional resource for cooperative businesses in Occitanie.

U

Union Regionale des SCOP Aquitaine

les-scop-nouvelle-aquitaine.coop

55

Union Régionale Nouvelle Aquitaine is a regional cooperative support organization dedicated to promoting and assisting SCOP and related cooperative enterprises in the Nouvelle-Aquitaine region of France. The organization provides a comprehensive range of services including business creation support, business transmission to employees, business takeover assistance, association transformation, training, and network animation. It targets cooperative entrepreneurs, associations, and regional stakeholders, positioning itself as a key regional leader in the cooperative sector. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website is built on Drupal 10, leveraging modern web technologies and providing a responsive, accessible, and SEO-optimized user experience. The site integrates multiple analytics and marketing tools with a strong emphasis on privacy compliance, including a cookie consent mechanism and GDPR-aligned privacy policy. Hosting details are not explicitly disclosed but DNS and domain registration indicate a cooperative-focused infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent management. However, there is room for improvement in security headers and explicit security policies or incident response disclosures. No vulnerabilities or suspicious activities were detected. The WHOIS data is consistent with the organization's identity and domain age is appropriate for its business history. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing DNS security with DNSSEC, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

U

URSCOP Grand Est

les-scop-grandest.coop

49

The website www.les-scop-grandest.coop represents URSCOP Grand Est, a regional cooperative union in France supporting SCOP, SCIC, and CAE cooperative enterprises. It provides accompaniment, training, networking, and resources to cooperative businesses in the Grand Est region. The site is well-structured, professionally designed, and targets cooperative entrepreneurs and stakeholders. Technically, it is built on Drupal 10, hosted on insite.coop, and optimized for mobile with good SEO and accessibility. Security posture is solid with HTTPS and secure forms, though improvements like DNSSEC and additional security headers are recommended. Privacy and cookie policies are present and GDPR compliant. Contact information is clearly provided, enhancing trust. No adult or questionable content is present, making it safe for general audiences.

U

URSCOP Bourgogne France-Comte

les-scop-bfc.coop

55

The website www.les-scop-bfc.coop represents the Union Régionale Bourgogne Franche Comté, a regional cooperative organization supporting the creation, takeover, transformation, and transmission of businesses under the Scop and Scic cooperative models. Established in 2010, it serves the Bourgogne-Franche-Comté region in France, providing services such as business accompaniment, training, and network facilitation. The site targets entrepreneurs, cooperative members, associations, and employees interested in cooperative business structures. The business model is focused on regional cooperative development and support, positioning itself as a key player in the cooperative ecosystem within its region. Technically, the website is built on Drupal 10, indicating a modern and maintainable CMS platform. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and professional design. Hosting appears to be managed by insite.coop, with domain registration consistent with the business entity. Analytics are implemented via Matomo and LinkedIn Insight, with moderate user tracking and basic privacy compliance mechanisms including cookie consent. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms legitimacy and consistency with the business claims. Overall, the site demonstrates a solid security posture but could improve by enabling DNSSEC, adding security headers, and publishing formal security policies. The overall risk is low with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing security policies, improving privacy compliance transparency, and implementing vulnerability disclosure mechanisms to further strengthen trust and security culture.

C

Confédération générale des Scop et des Scic

jetransmetsamessalaries.fr

57

The website 'Je transmet à mes salariés' is a professionally maintained platform operated by the Confédération générale des Scop et des Scic, focusing on facilitating the transmission of businesses to employees in France. It provides comprehensive information, resources, and testimonials to support cooperative business transitions, targeting entrepreneurs, ceding business owners, employees, and accounting experts. The site leverages Drupal 10 CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Matomo, and LinkedIn Insight, ensuring a robust technical infrastructure with good mobile optimization and accessibility. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a good privacy posture. However, it lacks some advanced security headers and explicit incident response contacts, which could be improved. The absence of WHOIS registrant data is likely due to privacy protection policies common with .fr domains and does not detract from the site's legitimacy. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements. Strategically, the platform serves a niche cooperative business market in France, supported by a network of partner cooperative organizations and regional unions. It maintains a consistent brand presence across social media and offers valuable content such as e-books and video testimonials, enhancing user engagement and trust.

S

Starfish Barometer

starfishbarometer.org

67

Starfish Barometer is a newly launched non-profit initiative focused on providing an annual, science-based snapshot of the ocean's health and its critical connection to humanity. The platform aims to raise awareness about ocean sustainability, climate regulation, biodiversity, and societal impacts through accessible reports and resources. The website is professionally designed with a clear focus on environmental education and scientific communication, targeting a broad audience including policymakers, scientists, and the general public. Technically, the site leverages modern web technologies such as React and JSON-LD structured data, hosted on a platform called inwink, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly impacts trust, but the domain age aligns with the recent launch date. Overall, the site presents a credible and trustworthy resource for ocean health information with room for improvement in transparency and security best practices.

L

LeadConnector

leadconnectorhq.com

69

LeadConnector is a technology company offering a SaaS platform focused on software integration and lead management. Their platform enables users to connect their software with thousands of other applications, leveraging Zapier integrations and AI-powered conversation management. The website is built using modern JavaScript frameworks such as Nuxt.js and includes mobile optimization and professional design elements. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with no visible security headers or incident response information, and privacy compliance is basic with a privacy policy but no cookie consent mechanism. Overall, the website presents a professional business offering but requires improvements in security and compliance transparency.

The website at jabmo.app currently presents minimal content, consisting solely of a small JavaScript snippet injected into the page. There is no visible business information, metadata, structured data, or contact details available. This lack of content severely limits the ability to assess the company's market position, services, or audience. Technically, the site uses basic JavaScript but lacks modern frameworks, SEO optimization, or accessibility features. Security posture cannot be fully evaluated due to missing HTTPS confirmation and absence of security headers. The WHOIS data is privacy protected, which restricts trust and legitimacy analysis. Overall, the site appears incomplete or under development, with significant gaps in compliance, security, and business transparency.

O

Sign in - Matomo

openscop.icu

56

The website openscop.icu hosts a Matomo analytics platform instance, primarily serving as a login portal for authorized users to access analytics data. The platform is an open-source, free/libre analytics solution, targeting website administrators and analytics professionals who require privacy-focused visitor tracking. The business model revolves around providing analytics services with a focus on data privacy and user control. The site is relatively new, with domain registration dating back to 2019, and is hosted by Gandi SAS, a reputable registrar and hosting provider. The content is minimal, focusing on authentication, with no public-facing business or contact information.

D

dacia

dacia.ma

71

The website www.dacia.ma serves as the official Moroccan portal for the Dacia automotive brand, part of the Renault Group. It provides comprehensive information on vehicle models, pricing, financing options, after-sales services, and dealer locations. The site targets consumers in Morocco interested in purchasing new or used Dacia vehicles, offering a user-friendly interface with vehicle configurators and test drive booking features. Technically, the site leverages modern web technologies including React, Google Tag Manager, and Google Analytics, ensuring a responsive and well-structured user experience. Security measures such as HTTPS and security headers are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, reducing trust scores despite the professional presentation and strong brand alignment. Overall, the site is well-designed and functional, with room for improvement in transparency and direct contact information to enhance trust and compliance.

M

MaFormation

maformation.fr

58

MaFormation.fr is a large French online platform specializing in aggregating and listing professional training courses across France. It offers a wide range of educational services including CPF-financed training, alternance programs, online courses, and competency assessments. The platform targets individuals seeking to enhance their professional skills and certifications. The website is well-branded, consistent, and provides comprehensive content relevant to its audience. Technically, it employs modern web technologies such as Tailwind CSS, StimulusJS, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Abtasty. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the association with the Hellowork Group parent company and professional presentation mitigate this risk. Overall, the site is professional, trustworthy, and serves a critical role in the French education sector.

C

Confédération générale des Scop

les-scop.coop

55

The website www.les-scop.coop represents the Confédération générale des Scop, a French non-profit organization supporting cooperative enterprises such as Scop and Scic. It serves as a central hub for cooperative members, entrepreneurs, and stakeholders in the social and solidarity economy in France. The site offers resources, news, career information, and a network of regional unions and partners, positioning itself as a national leader in cooperative support. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries and analytics tools including Matomo and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs cookie consent mechanisms compliant with GDPR and provides clear contact information and member extranet access. From a security perspective, the site enforces HTTPS and uses consent-based tracking. However, it lacks visible security headers and a published security policy or incident response contacts. The domain registration is consistent and trustworthy, registered since 2009 with a registrar specialized in .coop domains. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-aligned with its cooperative mission. Strategic improvements in security headers and explicit security policies would enhance its security posture further.

F

Framasoft

framateam.org

56

Framateam is a French non-profit association's service providing a free, privacy-focused, open source team chat platform based on Mattermost. It targets teams and communities seeking ethical and user-controlled communication tools. The website is well designed, content-rich, and consistent with the organization's mission. Technically, it uses modern JavaScript frameworks and enforces HTTPS with a Content-Security-Policy header, though DNSSEC is not enabled and no cookie consent mechanism is present. Security posture is good but could be improved with published incident response policies and vulnerability disclosure mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

C

Competence Centrum Behindertenhilfe (CCB)

versicherungsstelle-ccb.de

53

The Competence Centrum Behindertenhilfe (CCB) operates a specialized insurance information and consulting website focused on people with disabilities, chronic illnesses, and seniors in Germany. The site provides tailored insurance solutions, expert advice, and application support, positioning itself as a niche provider in this sector. The business model centers on delivering accessible, targeted insurance services and educational resources to affected individuals, their caregivers, and institutions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript, Google reCAPTCHA for form security, and accessibility tools such as ReadSpeaker. The site demonstrates good mobile optimization, accessibility features, and SEO practices, hosted on Onix infrastructure with secure HTTPS configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and published incident response policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-targeted, with moderate technical sophistication and a solid security baseline. Improvements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

W

WEXBO s.r.o.

wexbo.com

65

WEXBO s.r.o. operates a SaaS platform enabling users to create websites and e-shops easily and quickly without programming knowledge. The company targets small to medium businesses and individuals seeking affordable, feature-rich CMS and e-commerce solutions. Their platform includes extensive features such as payment gateway integration, shipping services, multilingual support, and a proprietary CMS named CYBORG. The website is well designed, mobile optimized, and SEO friendly, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, AJAX, and integrates popular analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the business appears credible and trustworthy with consistent WHOIS data and active support channels.

S

Storck

dickmanns-gewinnspiel.de

67

The website www.dickmanns-gewinnspiel.de is a promotional campaign platform for Storck's Super Dickmann's confectionery product, offering consumers in Germany a chance to win cashback and free products through a contest mechanism. The site is professionally designed with consistent branding and clear navigation, targeting retail consumers interested in confectionery promotions. Technically, the site is built on a modern Next.js framework with React, ensuring good mobile optimization and moderate performance. Security posture is adequate with cookie consent mechanisms and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent banners. Overall, the domain appears legitimate with brand protection via Brandshelter nameservers, and the site links to multiple official Storck partner domains. No adult or questionable content is present, making it safe for general audiences.

S

Storck Romania

toffifee.ro

67

The website www.toffifee.ro represents the Romanian localized brand presence of Toffifee, a confectionery product under the Storck group. It provides product information, brand storytelling, and consumer engagement primarily targeting Romanian consumers interested in confectionery. The site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, jQuery, and Lodash, indicating a moderate level of technical maturity. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Privacy compliance is well addressed with a visible privacy policy and cookie consent mechanism. However, direct contact emails and phone numbers are not explicitly listed on the homepage, relying instead on a contact form.

C

Centre national du livre

centrenationaldulivre.fr

63

The Centre national du livre (CNL) is a French public institution under the Ministry of Culture dedicated to supporting all actors in the book industry, including authors, translators, editors, booksellers, and libraries. The website serves as a comprehensive portal for information on financial aids, literary events, studies, and resources related to the book sector in France. It maintains a strong market position as a key governmental cultural support entity. Technically, the site is built on Drupal 8, employs Matomo and Google Analytics with privacy-conscious configurations, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, cookie consent mechanisms, and domain protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a broad audience of literary professionals and cultural stakeholders.

K

Kolektor

kolektorwater.com

48

Kolektor is a medium-sized Slovenian company specializing in water technologies, providing comprehensive engineering solutions for water preparation, purification, telemetry, and system optimization. The company is part of the larger Kolektor Group and collaborates with several subsidiaries and partners to deliver advanced water management solutions. The website reflects a professional and consistent brand image targeting B2B clients such as municipalities, industrial water users, and technology partners. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, hosted on a CMS platform with good mobile optimization and SEO practices. Security posture is solid with HTTPS and spam protection, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a notable anomaly, slightly reducing trust but not detracting significantly from the overall legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear consent mechanisms. Overall, the website is well-designed, user-friendly, and trustworthy for its intended audience.

Ž

Življenjska zavarovalnica Vita

zav-vita.si

64

Življenjska zavarovalnica Vita operates as the largest bank-affiliated life insurance provider in Slovenia, offering health and life insurance products with 24/7 customer support. The company positions itself as a trustworthy insurer with transparent terms and no fine print, targeting a broad Slovenian audience. The website reflects a professional and consistent brand image aligned with its banking parent company, NLB. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and Google reCAPTCHA for bot protection, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and bot protection but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security transparency.

The website gemeinwohlprojekte.at operates as a crowdfunding platform dedicated to financing projects that promote the common good, including sustainable development, social initiatives, and ecological projects primarily in Austria. It offers services such as project submission, support, and verification, targeting individuals and organizations interested in social impact investments. The platform is built on TYPO3 CMS and integrates Piwik/Matomo analytics with privacy-conscious settings. The site features secure login and registration forms with password encryption and provides clear privacy and cookie policies compliant with GDPR. Social media presence is established on Facebook, YouTube, and Twitter, enhancing community engagement. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency.

F

fairchat

fairchat.net

67

The website fairchat.net appears to be a technology-focused platform, likely related to chat or messaging services, as indicated by the site title and domain name. The domain was registered in 2017 and is maintained with a reputable registrar, suggesting a stable presence. However, the website content is minimal and lacks detailed business descriptions, contact information, or legal policies, which limits the ability to fully assess the business model or market position. Technically, the site uses the Meteor.js framework and custom JavaScript, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. No signs of WAF or content blocking were detected, allowing full content access for analysis.

B

Bio en Grand Est

biograndest.org

9

Bio en Grand Est is a regional non-profit organization dedicated to supporting and promoting organic agriculture in the Grand Est region of France. The website serves as a network hub for organic producers and provides information, news, events, and resources related to organic farming. The organization targets both professionals in the organic sector and consumers interested in organic products. The site is professionally designed using WordPress and integrates modern web technologies and plugins to deliver a good user experience. Social media integration and structured data enhance its digital presence. Security measures such as HTTPS and reCAPTCHA are implemented, but there is room for improvement in DNS security and HTTP headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and serves its business purpose effectively.

K

Koop Domeinnaam

cookiebanner.eu

8

Koop Domeinnaam operates as a domain reseller specializing in selling domain names such as cookiebanner.eu. The website is a straightforward landing page offering the domain for sale at a fixed price, targeting individuals or businesses interested in acquiring domain names quickly. The business model is simple and focused on domain sales with immediate invoicing and transfer token delivery. The market position is that of a niche domain reseller within the Netherlands, with a small-scale operation and basic online presence. Technically, the website employs standard HTML5, CSS, and JavaScript, with Cloudflare services used for CDN and security purposes. The site is moderately optimized for performance and mobile devices but lacks advanced frameworks or CMS platforms. SEO and accessibility features are basic, and no analytics or tracking services are detected, indicating minimal data collection. From a security perspective, the site benefits from Cloudflare's protection but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. No forms or sensitive data collection points are present, reducing attack surface. The absence of detailed security policies and incident response information suggests limited security maturity. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the limited scope and content of the site, but improvements in privacy compliance, security headers, and transparency would enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing cookie consent, adding security headers, publishing terms of service, and improving mobile and accessibility features.

S

Svazek obcí Dobříšska a Novoknínska

dobrisskonovokninsko.cz

10

Svazek obcí Dobříšska a Novoknínska is a regional governmental association serving municipalities in the Dobříš and Nový Knín areas of the Czech Republic. The website provides official information, documents, event calendars, and contact services aimed at local government officials and residents. The site is well-structured with clear navigation and comprehensive content relevant to its audience. Technically, it uses a CMS platform (Vismo), integrates Google Analytics with GDPR-compliant consent mechanisms, and employs Google reCAPTCHA for form security. The security posture is solid with HTTPS and form protections, though it lacks some advanced HTTP security headers. Overall, the site demonstrates good privacy compliance and business credibility consistent with a small governmental entity.

The domain regiotv.cz is currently expired and parked, showing no active business content or services. The website primarily serves as a placeholder with advertising iframes and links to domain sale contact pages. There is no evidence of an operational company or digital services under this domain. The technical infrastructure is minimal, relying on basic HTML and JavaScript with external ad and tracking scripts. No CMS or modern frameworks are detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and expired domain status. Privacy and compliance policies are missing, indicating non-compliance with GDPR and related regulations. Overall, the site presents a low trust profile and minimal business credibility.

Mailocator is a Czech Republic based technology company operating a premium display marketing platform focused on increasing conversions and collecting valuable marketing data. Founded in 2016, the company offers a SaaS solution with a wide range of campaign types including lead generation, gamification, countdowns, and product recommendations. The platform integrates with over 55 popular email marketing and CRM tools, positioning Mailocator as a versatile marketing technology provider for ecommerce, content websites, agencies, and developers. The website demonstrates a professional design with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript, Google Tag Manager, and asynchronous script loading, ensuring moderate performance and SEO optimization. Security posture is good with HTTPS enforced and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited by the absence of a visible privacy policy page, despite a cookie consent mechanism being implemented. Overall, Mailocator presents a trustworthy and credible business with clear contact information and social media presence, though it should enhance privacy transparency and security policies to strengthen compliance and user trust.

M

ME-METAL

me-metal.cz

47

ME-METAL is a Czech manufacturing company specializing in precision milling and turning of parts primarily from aluminum alloys, steel, and plastics. Founded in 1994 and operating from a large facility near Chomutov, the company focuses on small batch and custom production, serving both domestic and international clients. Their business model includes full production services with in-house transport for delivery. The website reflects a stable and established market position with over 30 years of experience and a consistent brand presence. Technically, the website is built using Nicepage site builder with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. Hosting is likely provided by WEDOS, consistent with the registrar and nameservers. The site is mobile optimized and SEO friendly, though accessibility features are basic. No advanced analytics or advertising tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (inferred though not explicitly confirmed), includes GDPR and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Security posture is moderate with room for improvement in security headers and incident response transparency. The risk level is low, but strategic enhancements in security documentation and technical hardening are recommended.

I

INPROMA, spol. s r.o.

inproma.cz

57

INPROMA, spol. s r.o. is a Czech manufacturing company specializing in precise machining of metal castings and profiles, as well as ventilation products under the RENSON brand. The company targets industrial and business clients requiring high-quality engineering production services. The website reflects a medium-sized enterprise with a professional online presence, including certifications such as TUV and IATF, which enhance its market credibility. The site is well-structured, mobile-optimized, and provides clear contact information, supporting effective client engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Web Fonts. It employs a slider for visual content and has implemented a cookie consent mechanism compliant with GDPR. However, the security headers are minimal, with an empty Content-Security-Policy and absence of other common security headers, indicating room for improvement in security hardening. The site uses HTTPS, ensuring encrypted communications. From a security perspective, the site shows moderate maturity with HTTPS and cookie consent but lacks comprehensive security headers and visible incident response or vulnerability disclosure policies. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and certifications suggest legitimacy. No signs of malware or phishing were detected, and the content is safe for general audiences. Overall, the website presents a professional and trustworthy business front with moderate technical and security maturity. Strategic improvements in security headers, WHOIS transparency, and incident response documentation would enhance its security posture and trustworthiness.

C

Crowdin

crowdin.com

75

Crowdin is a well-established localization and translation management platform founded in 2008 and headquartered in Estonia. It serves teams and businesses by providing a comprehensive SaaS solution that integrates AI-powered translation, automated workflows, and extensive integrations with development and marketing tools. The platform is positioned as a leader in the localization technology market, offering services tailored for engineering, marketing, support, design, and translation teams. Crowdin's website reflects a mature digital infrastructure with fast performance, mobile optimization, and strong SEO practices. The use of modern analytics and monitoring tools such as Google Analytics, PostHog, and Sentry indicates a high level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, CSRF protections, and Cloudflare bot management, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, Crowdin presents a trustworthy and professional online presence with strong business credibility and technical implementation.

Kristy z Ostravy is a small freelance marketing specialist business based in Ostrava, Czech Republic, founded in 2024. The website presents professional marketing services including strategy, online marketing, and event support targeted at local firms and entrepreneurs. The business positions itself as a local expert with a passion for Ostrava and marketing. Technically, the website is built on WordPress using the Astra theme, integrating modern marketing and analytics tools such as Google Tag Manager and Hotjar. Cookie consent is implemented, indicating awareness of privacy compliance, though no explicit privacy policy or terms of service pages were found. Security posture is good with HTTPS enabled and no exposed sensitive data, but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, well-branded, and trustworthy with moderate SEO and mobile optimization.

R

RFM

rfm.fr

44

RFM is a well-established French radio station with a strong digital presence offering live streaming, music news, podcasts, contests, and video content. The website targets French-speaking audiences interested in music and entertainment. Technically, the site uses modern web technologies including JavaScript frameworks and CDNs under the lanmedia.fr domain, indicating corporate hosting and infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses privacy and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which reduces transparency but the site’s professional appearance and active content suggest legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security posture and transparency.