Security Directory

The website ootravaux.fr is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business content or information. The domain is registered since 2019 with a reputable registrar and is actively maintained with an expiry in 2026. However, no visible content, contact information, or business details are accessible to perform a comprehensive analysis. The technical infrastructure includes Cloudflare protection, indicating an intention to secure the site from automated threats. Due to the lack of accessible content, the security posture cannot be fully assessed beyond the presence of Cloudflare's WAF. Privacy and compliance policies are not found, and no business credibility indicators are visible. Overall, the site appears to be protected but currently unavailable for detailed evaluation.

M

MaCarteFid'

macartefid.fr

56

MaCarteFid' by FIDUCIAL is a French-based SaaS provider specializing in customer loyalty solutions tailored for independent merchants. The company offers a 100% web-based platform that requires no hardware or software installation, making it accessible and easy to use. Positioned as an affordable and intuitive solution, it targets small retail businesses seeking to enhance customer retention. The website reflects a professional and consistent brand image, supported by client references and social media presence. Technically, the site is built on WordPress using the Enfold theme, integrating modern analytics tools like Matomo and Google Tag Manager, and employs hCaptcha for form security. The security posture is strong with HTTPS enforced and no critical vulnerabilities detected, although security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website demonstrates a mature digital presence with solid business credibility and security practices.

R

Review Porn

reviewporn.com

68

ReviewPorn.com is an established adult entertainment review platform founded in 2004, specializing in providing comprehensive reviews and comparisons of adult straight porn sites. The site targets an adult-only audience and operates primarily as an affiliate marketing business, offering detailed content and discount offers for various adult sites. Technically, the website uses standard web technologies including JavaScript, CSS, and Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled and an adult content consent banner, but lacks advanced security headers and explicit security policies. Privacy compliance is minimal with a basic privacy policy but no cookie policy or GDPR indicators. The domain WHOIS data is consistent and trustworthy, registered through GoDaddy since 2004, supporting the site's legitimacy. Overall, the site is professional and credible within its niche but could improve security and privacy compliance.

O

OnlyFans

onlyfans.com

68

OnlyFans is a well-established subscription-based social platform founded in 2013, specializing in enabling content creators, particularly in adult entertainment, to monetize their content and engage with fans. The platform holds a leading market position in the creator economy, offering services that facilitate direct fan support and content monetization. Technically, the website employs modern JavaScript frameworks such as Vue.js, is hosted on Amazon AWS infrastructure, and integrates Cloudflare Insights for analytics and performance monitoring. The site demonstrates good mobile optimization and a consistent branding approach. Security-wise, OnlyFans enforces HTTPS, employs domain transfer locks, and provides cookie consent mechanisms, although DNSSEC is not enabled, representing a minor security gap. Privacy policies and terms of service are comprehensive and GDPR compliant, but explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available. Overall, the platform maintains a strong security posture suitable for its business model, with recommendations to enhance DNS security and transparency in security incident handling.

Y

Your Mailing List Provider

ymlp.com

60

Your Mailing List Provider (YMLP) operates a web-based email marketing software platform offering tools for creating, sending, and tracking email newsletters. The company targets businesses and individuals seeking easy-to-use email marketing solutions, with a freemium model and paid subscription plans. The website highlights a long operational history of 23 years and a user base exceeding 500,000 across more than 100 countries, positioning itself as an established player in the email marketing SaaS market. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts integration. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and modern frameworks. No CMS or hosting provider information is discernible from the content. SEO and navigation are basic but functional. From a security perspective, the website mentions GDPR compliance but lacks visible security headers and explicit HTTPS confirmation in the provided data. No incident response or vulnerability disclosure policies are found. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance of the site. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site presents a professional business offering with moderate technical maturity and basic privacy compliance. However, the lack of domain registration data and security best practices reduces trust and security posture. Strategic improvements in domain registration transparency, HTTPS implementation, security headers, and privacy mechanisms are recommended to enhance credibility and compliance.

E

ExpressVPN

expressvpn.com

74

ExpressVPN is a leading VPN service provider offering high-speed, secure, and anonymous internet access with a global network of servers in 105 countries. The company targets general internet users seeking privacy, security, and unrestricted access to content worldwide. Their business model is subscription-based, with additional products such as password management and threat management enhancing their portfolio. The website demonstrates a mature digital infrastructure with modern tracking and analytics tools, strong SEO, and excellent mobile optimization. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The WHOIS data is unavailable, likely due to privacy protection, which is common in the VPN industry but slightly reduces transparency. Overall, ExpressVPN presents a professional, trustworthy, and technically sound online presence.

B

Bluesign, Intec and Akrocean

bluesign.events

77

The Greek Offshore Renewable Energy Conference is a professional event organized by Bluesign, Intec, and Akrocean, focusing on accelerating offshore wind development in the Mediterranean region. The conference attracts over 200 participants from more than 14 countries, featuring over 24 speakers and numerous B2B meetings. The website is well-structured, providing comprehensive information about the event, speakers, sponsors, and practical details. Technically, the site uses modern web technologies including React and Google Analytics, hosted on a platform managed by Identity Digital. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be enhanced. Privacy and cookie policies are present and GDPR compliant, with clear contact information available. WHOIS data is privacy protected, typical for event domains, and does not raise suspicion. Overall, the site presents a credible and professional digital presence for the conference.

W

wegewerk GmbH

wegewerk.com

65

wegewerk GmbH is a specialized communication agency based in Germany, focusing on campaigns and online communication for political and societal topics. Their key services include campaign management, web design, and social media strategies primarily targeting non-profit organizations, NGOs, associations, and political entities. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience. Technically, the site is built on TYPO3 CMS with integrations of modern JavaScript libraries and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are absent. The absence of WHOIS registration data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

The Syndicat ELE website represents a professional association for local energy companies in France, focusing on industry representation and advocacy. The site content is relevant and targeted towards energy sector professionals, with a clear business focus. Technically, the website uses standard web technologies and some modern fonts and libraries, but lacks advanced SEO, accessibility, and security features. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy and trustworthiness. Security posture is basic, with no evident security headers or privacy policies, which could expose the organization to compliance risks. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain transparency to enhance trust and regulatory adherence.

R

RxToolKit

rxtoolkit.com

63

RxToolKit is a specialized healthcare technology company providing virtual pharmacy solutions for clinicians, focusing on reducing medication errors and improving clinical outcomes in infusion and oncology settings. Their offerings include RxWorkFlow, a comprehensive medication library; RxELearning, clinical training courses; and RxAcademy, an e-learning platform for pharmacy technicians. The company operates under the parent company WeInfuse and targets healthcare professionals seeking enhanced medication safety and competency training. The website reflects a mature, professional business with consistent branding and relevant content tailored to its niche audience. Technically, the site is built on WordPress with Elementor, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel. While the site is well-optimized for SEO and mobile use, it lacks a cookie consent mechanism and DNSSEC is not enabled, which are areas for improvement. Security posture is solid with HTTPS enforced and security headers present, but no explicit security or incident response policies are published. WHOIS data confirms a long-established domain consistent with the business claims, enhancing trustworthiness. Overall, RxToolKit presents a credible and professional online presence with room to enhance privacy compliance and security transparency.

J

Journées du Logiciel Libre

jdll.org

55

Journées du Logiciel Libre (JdLL) is a well-established non-profit event focused on free software and open source culture, primarily serving the French-speaking community in Lyon, France. The website provides information about the event, its history, and ways to participate or support the initiative. The organization has a mature online presence with a domain registered since 2005 and a consistent branding approach. Technically, the site is built on GravCMS, a modern flat-file CMS, hosted on Infomaniak servers, and is mobile-optimized with good SEO practices. However, it lacks advanced security headers and DNSSEC, which could enhance its security posture. The site does not currently provide privacy or cookie policies, which is a compliance gap, especially under GDPR regulations. No direct contact emails or phone numbers are provided, but social media presence on Mastodon and Peertube supports community engagement. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

F

Free-Solutions Sàrl

free-solutions.ch

46

Free-Solutions Sàrl is a Swiss technology company specializing in vocal artificial intelligence solutions, notably offering the first Swiss vocal AI assistant accessible via their website. Their market position is that of an innovative niche player focusing on AI voice technology and hosting services. The website is built on the Jive Clearspace platform and uses standard web technologies including JavaScript and TinyMCE. While the site is functional and presents professional content with good design and navigation, it lacks comprehensive privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Google Analytics is used for user tracking without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is safe and suitable for a general audience, with no adult or explicit content detected.

Association GETALL is a French non-profit organization dedicated to promoting and educating about free software and open-source operating systems. Established over twenty years ago, the association targets both organizations such as companies and associations, as well as individuals including students and private persons. Their primary services include guidance, initiation, and educational resources related to free software. The website serves as an informational and contact platform for the association, featuring content about free software philosophy and examples, along with a contact form for inquiries. Technically, the website is built using jQuery and custom JavaScript, hosted under the domain registered with GANDI. The site uses a proprietary or custom CMS named SiteCloud. The design and user experience are basic, with limited mobile optimization and accessibility features. SEO and metadata are minimal, and no advanced analytics or tracking technologies are detected. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. The contact form includes basic validation but no explicit security or data protection disclosures. WHOIS data indicates a consistent and legitimate domain registration aligned with the association's stated history and location. Overall, the website presents a trustworthy but basic digital presence for a small non-profit association. Strategic improvements in privacy compliance, security headers, mobile responsiveness, and content richness would enhance the site's professionalism and user trust.

M

MARK of the BRAND

themolitor.com

45

MARK of the BRAND is a small, Seattle-based independent design studio specializing in brand identity services including monograms, brand marks, and logos primarily serving the Pacific Northwest region. The website presents a professional portfolio showcasing various brand mark designs and related services, targeting businesses and professionals seeking distinctive visual identity solutions. The business appears newly founded in 2024, consistent with the domain registration date. Technically, the website is built on WordPress with modern web technologies including optimized CSS and JavaScript, Google Fonts integration, and caching mechanisms. The site is mobile-optimized and SEO-friendly with appropriate meta tags and structured data. Hosting appears to be through NameCheap, the domain registrar, with HTTPS enabled ensuring secure communications. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. The site uses minimal tracking scripts and has no visible forms collecting sensitive data, reducing attack surface. No incident response or vulnerability disclosure information is provided. Overall, the website is professionally designed and trustworthy with a good security baseline but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

S

Énergies Renouvelables : le savoir-faire français à l'international - Accueil

savoirfairefrancais-enr.fr

45

The website www.savoirfairefrancais-enr.fr serves as an informational and promotional platform highlighting French renewable energy projects worldwide. It is supported by reputable French organizations such as the Syndicat des énergies renouvelables and ADEME, positioning it as a niche but credible resource within the energy sector. The site offers an interactive map and sector-specific project information aimed at a general audience interested in renewable energy. Technically, the site employs modern JavaScript libraries, analytics tools like Matomo and Google Analytics, and cookie consent management via tarteaucitron.js, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, though accessibility features could be improved. Security-wise, the site uses HTTPS and includes bot protection via reCAPTCHA, but lacks visible security headers and explicit privacy or security policies, which are areas for improvement. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency and security practices.

S

Stiftung Genshagen

stiftung-genshagen.de

50

Stiftung Genshagen is a non-profit foundation dedicated to fostering European dialogue, particularly focusing on German-French and German-Polish relations and the Weimarer Dreieck. The foundation aims to strengthen Europe’s cultural diversity, political capacity, social cohesion, and economic dynamism through various projects, events, and educational initiatives. The website serves as a platform for information dissemination, event promotion, and cultural exchange, targeting political stakeholders, academics, and the broader European public. Technically, the website is built on TYPO3 CMS, hosted by SchlundTech, and employs modern web technologies including JavaScript and Matomo analytics for user tracking with consent. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent banner. However, the site lacks explicit terms of service and incident response contact information, which could be enhanced to improve trust and compliance. Overall, Stiftung Genshagen’s website reflects a professional, trustworthy, and well-maintained digital presence suitable for its non-profit mission. Strategic recommendations include enhancing security headers, publishing incident response details, and providing clearer contact information to further strengthen security and user trust.

E

ExpressVPN

linkev.com

74

ExpressVPN is a leading VPN service provider offering privacy, security, and fast internet access worldwide. The company positions itself as a trusted leader with a comprehensive suite of products including VPN, password manager, routers, and identity protection services. Their market presence is strong with servers in 105 countries and support for multiple platforms. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Tag Manager, and various advertising pixels, ensuring robust tracking and marketing capabilities. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced and modern security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. The absence of WHOIS data slightly reduces trust but does not detract significantly from the legitimacy of the business.

M

Midnight Carnival, LLC

midnightcarnival.com

54

Midnight Carnival, LLC operates a niche adult affiliate program specializing in fetish and erotica content. The website serves as a platform to recruit and support affiliate webmasters with a 50/50 payout model, focusing on high-quality adult promotional content. The business has been established since 2004, with a consistent domain registration and a clear market position within adult affiliate marketing. The website content is primarily static with some outdated technologies such as Flash, and it lacks modern web features like mobile optimization and advanced SEO. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or modern frameworks. Hosting is provided by MojoHost, as indicated by the nameservers. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. There is no visible cookie consent mechanism or GDPR compliance indicators, which may expose the business to regulatory risks. From a security perspective, the site shows minimal security best practices, with no DNSSEC enabled and use of deprecated Flash content. The login form uses POST but no further security controls are evident. The WHOIS data is consistent and supports the legitimacy of the business, with no privacy protection masking registrant details. Overall, the security posture is weak and requires significant improvements. The website is clearly adult-oriented with explicit keywords and content targeting adults-only audiences. No social media or modern analytics tools are detected, indicating a low level of digital maturity. Strategic recommendations include enabling HTTPS, implementing security headers, removing Flash content, adding privacy and cookie policies, and improving mobile and accessibility features to enhance user experience and compliance.

C

C & K člen skupiny AUTO UH a.s.

motouh.cz

42

The website www.motouh.cz represents a medium-sized Czech retail and service business specializing in CFMOTO motorcycles and ATVs. It operates under the parent company AUTO UH a.s., offering sales, service, and rental of motor vehicles primarily targeting customers in the Czech Republic. The site is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it employs modern JavaScript libraries and Google Fonts, with HTTPS enforced and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with no evident vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the visible business information and social media presence support legitimacy. Overall, the site is a reliable digital presence for a local transportation retailer.

F

Fun Radio

funradio.fr

72

Funradio.fr is the official website of Fun Radio, a prominent French radio station offering live streaming, music content, radio shows, and podcasts. The site targets French-speaking audiences interested in contemporary music and entertainment. The business operates within the media sector and maintains a strong digital presence with integration of modern analytics and marketing tools. Technically, the website employs Bootstrap 4.6.2 and JavaScript libraries such as Video.js and Piano Analytics, indicating a moderately modern infrastructure with good mobile optimization and SEO practices. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is readily available, which may impact user trust and compliance. Security posture is moderate with no detected security headers or explicit policies, suggesting room for improvement in security best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and terms policies, and providing clear contact information to improve compliance and user trust.

R

RTL2

rtl2.fr

72

RTL2 is a prominent French pop-rock radio station operated under the RTL Group media conglomerate. The website serves as a digital platform for live radio streaming, music content, podcasts, and event information targeting a general French-speaking audience interested in pop-rock music. The brand enjoys a strong market position within the French media landscape, supported by consistent branding and active social media engagement. Technically, the website employs modern web technologies including Bootstrap, Video.js, and analytics tools such as Piano Analytics and Google Tag Manager, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and basic best practices, though explicit security headers and policies are not evident. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks visible privacy and terms of service documentation. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in transparency and security documentation.

R

RTL

rtl.fr

75

RTL.fr is the official website of RTL, a major French media company specializing in news and video content covering politics, international affairs, economy, science, and environment. The website targets a general audience seeking real-time news updates and multimedia content. The site demonstrates a professional design with consistent branding and good content quality, reflecting RTL's strong market position in the French media landscape. Technically, the site uses modern frameworks such as Bootstrap and integrates analytics tools like Piano Analytics and Google Tag Manager, indicating a mature digital infrastructure. However, explicit privacy and cookie policies are not detected in the provided content, which may impact compliance with GDPR and user trust. Security posture shows room for improvement, particularly in implementing security headers and publishing security policies. Overall, the website is trustworthy and professionally maintained but could enhance privacy compliance and security transparency.

G

Dessins animés, séries, films & émissions enfants en streaming gratuit

gulli.fr

66

Gulli.fr is a French media website focused on providing free streaming of cartoons, series, films, and children's shows. It targets a young audience and families, offering video content, games, news, and mobile applications. The site is well-branded and consistent with the Gulli media brand, a known player in French children's entertainment. Technically, the site uses modern web technologies including Next.js and React, with mobile optimization and integration of Google Tag Manager for analytics and a privacy consent SDK for cookie management. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published privacy or terms of service pages. WHOIS data is not publicly available, typical for French domains managed by AFNIC, but the domain appears legitimate and consistent with the business. Overall, the site is professional and safe for its target audience but could improve transparency and security practices.

S

SPOT – Social Psychology of Transformation

spot-psychology.eu

48

The SPOT website represents an academic Erasmus Mundus Joint Master Programme focused on social psychology and social change, delivered by a consortium of European universities. It targets prospective graduate students seeking transformative education across multiple countries. The site is professionally designed using TYPO3 CMS and Bootstrap, with good mobile optimization and accessibility. It employs GDPR-compliant cookie consent and integrates Google Analytics for user behavior insights. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and explicit policies could be improved. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy educational institution.

P

Pierre Boulez Saal

boulezsaal.de

68

Pierre Boulez Saal is a cultural institution focused on classical music concerts, educational programs, and digital content delivery. The website serves as a platform for concert calendars, ticket sales, and online streaming, targeting classical music enthusiasts and cultural audiences primarily in Germany. The business model revolves around event organization and digital engagement with a niche market position in the cultural sector. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates multiple third-party media platforms like Vimeo and Spotify, and uses Cloudflare for hosting and CDN services. Cookie consent and privacy compliance are managed via Cookiebot, indicating a mature approach to GDPR requirements. Security posture is good with HTTPS enforced and bot detection mechanisms in place, although explicit security headers and incident response information are not visible in the provided data. Overall, the website is professional, well-branded, and trustworthy with no signs of malicious content or blocking by WAFs.

I

Internationale Hofer Filmtage

hofer-filmtage.com

60

The Hof International Film Festival is a well-established and important cultural event in Germany, focusing on independent and new cinema. Founded in 1967, it serves as a platform for emerging filmmakers and presents a diverse program of feature films, documentaries, and shorts. The festival is supported by a range of sponsors and partners, including government bodies and media organizations, and maintains a strong presence in the film industry. The website reflects a professional and user-friendly digital presence with comprehensive content and clear navigation. Technically, the site uses modern web technologies and Matomo analytics for user tracking, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements could be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not detract from the overall legitimacy of the organization. Strategic recommendations include enhancing security policies, publishing incident response contacts, and improving privacy compliance transparency.

D

Deutsche Kindermedienstiftung Goldener Spatz

goldenerspatz.de

54

The Deutsche Kindermedienstiftung Goldener Spatz operates the largest children's media festival in Germany, held annually in Gera and Erfurt. The organization targets both the general public and professionals in the children's media sector, offering events such as the Deutsches Kinder Medien Festival Goldener Spatz, KIDS Regio, and the SchulKinoWochen. Their business model is non-profit, focusing on cultural and educational media initiatives for children. The website reflects a medium-sized organization with consistent branding and good content quality. Technically, the website is built on WordPress using the Avada theme and several plugins including WooCommerce for e-commerce capabilities and Real Cookie Banner Pro for GDPR-compliant cookie consent management. Hosting is provided by kasserver.com, and the site demonstrates moderate performance with good mobile optimization and SEO practices. Structured data and meta tags are well implemented, enhancing search engine visibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding more comprehensive security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a documented data protection officer contact. No incident response or vulnerability disclosure policies were found. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a public vulnerability disclosure policy to further strengthen security posture.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. The page contains no business-related content, contact information, or policies. Instead, it hosts embedded scripts and styles for the Chrome Dinosaur offline game, which is a browser Easter egg. Due to the lack of accessible content, no meaningful business or security insights can be derived. The technical infrastructure is limited to client-side JavaScript for the game, with no server-side or hosting information available. Security posture cannot be assessed beyond the absence of HTTPS or security headers. Overall, the site is non-functional as a business website and provides no user or compliance information.

S

ServiceCenter KHS

kunsthochschulen-berlin.de

45

ServiceCenter KHS operates as a centralized support hub for artistic universities in Berlin, providing essential services in financial management, personnel, and IT support. The website clearly targets university staff and students, offering structured navigation to various service areas. The business model focuses on internal administrative support for higher education institutions, positioning itself as a niche service provider within the education sector in Germany. Technically, the website is built on TYPO3 CMS with Bootstrap, indicating a modern and maintainable infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. No advanced analytics or tracking tools are detected, suggesting a privacy-conscious approach. From a security perspective, the site lacks visible security headers and explicit security policies, which lowers its security posture score. The absence of cookie consent mechanisms and limited privacy disclosures on the site itself indicate areas for improvement in privacy compliance. However, the domain registration data aligns well with the website's purpose and location, supporting its legitimacy. Overall, the website is professional and functional with moderate risk. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

B

betterplace.org

betterplace.org

75

betterplace.org is Germany's largest non-profit online donation platform connecting donors with social projects. The platform offers transparent donation management, fundraising campaigns, and project discovery services, targeting individuals, organizations, and corporate partners. The website demonstrates a strong market position in the charitable sector with a professional and consistent brand presence. Technically, the site uses modern web technologies including React and Tailwind CSS, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response details are not publicly available. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust further.

A

Altermedia, s.r.o.

altermedia.cz

59

Altermedia, s.r.o. is a small digital agency based in Prague, Czech Republic, with over 20 years of experience. The company specializes in web design, custom software development, social media management, SEO, PPC, and multimedia content production. Their client base includes individuals and small to medium-sized businesses, positioning them as a trusted service provider in the local digital marketing and web development sector. The website reflects a professional and consistent brand image with clear service offerings and partner references. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Typed.js and Glide.js, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. HTTPS is enforced, ensuring secure communication, but the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data and missing privacy and cookie policies reduce trust and compliance scores. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture and user trust. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and domain registration transparency would elevate the site's security and credibility further.

France 24 is a prominent international news broadcaster providing breaking news, top stories, and video news coverage across multiple global regions including the US, Europe, Asia Pacific, Africa, and the Middle East. The website serves a general audience interested in global current events, business, sports, and culture. It maintains a strong market position as a reputable media outlet with consistent branding and official social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with a consent management platform integrated for privacy compliance. The site is well-optimized for mobile devices, offers excellent SEO, and provides a professional user experience with clear navigation and rich content. From a security perspective, the site enforces HTTPS and uses a consent SDK for cookie management, indicating good privacy practices. However, there is room for improvement by adding security headers and publishing a security.txt file to enhance vulnerability disclosure transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, France 24's website demonstrates a high level of professionalism, security, and compliance suitable for a major international news organization. The absence of WHOIS data is likely due to privacy protection or registry limitations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, improving incident response visibility, and maintaining strong privacy compliance.

ARTE is a well-established European cultural television channel and online media platform, providing high-quality cultural, educational, and documentary content to a broad European audience. The website reflects a mature digital presence with a modern tech stack including React and Next.js, optimized for performance and mobile devices. Security posture is strong with HTTPS enforcement, modern security headers, and no detected vulnerabilities. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, ARTE demonstrates a high level of professionalism and trustworthiness, consistent with its public broadcaster status.

W

WP Rocket

wp-rocket.me

65

WP Rocket is a well-established company specializing in WordPress performance optimization through its flagship caching plugin. The company targets WordPress site owners and developers seeking to improve website speed, SEO, and user experience. The website reflects a mature digital presence with multi-language support, strong SEO, and integration of modern marketing and analytics tools. Technically, the site is built on WordPress with a robust tech stack including Google Tag Manager, VWO, Klaviyo, and Cloudflare DNS, ensuring good performance and scalability. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business demonstrate high professionalism, trustworthiness, and technical maturity.

S

Spiel und Objekt – MA in Experimental Play

spielundobjekt.de

45

Spiel und Objekt is a specialized Master’s program in Experimental Play affiliated with the Hochschule für Schauspielkunst Ernst Busch in Berlin. The program focuses on developing artistic, technological, social, and material skills for new playful formats, primarily in theater and related fields. The website serves as an academic and informational platform targeting prospective students, artists, and researchers interested in experimental play and theater arts. Technically, the site is built on modern frameworks such as SvelteKit and uses Sanity.io as a CMS, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are lacking. The WHOIS data is minimal but does not raise concerns, and the domain appears consistent with the academic nature of the site. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy compliance and security headers are recommended.

E

entado GmbH

campuscore.eu

40

entado GmbH is a specialized software company focused on providing digital solutions for university administration, including campus, doctoral candidate, and applicant management systems. With over a decade of experience in the education sector and extensive expertise in complex administrative software, entado positions itself as a reliable partner for educational institutions seeking digital transformation. The company targets universities, private colleges, and non-university educational institutions primarily in Germany. The website reflects a professional and consistent brand image with detailed product offerings and customer testimonials that enhance trust. Technically, the site uses modern web technologies such as Vue.js and Twind CSS, indicating a contemporary digital infrastructure. However, some areas such as security headers and cookie consent mechanisms are lacking, which could be improved to enhance compliance and security posture. Overall, the website is well-structured, mobile-optimized, and provides relevant content for its target audience.

N

naviti GmbH

naviti.ch

10

naviti GmbH is a Swiss-based small technology company specializing in web design, webshop development, and custom software solutions primarily targeting private clients, SMEs, industries, foundations, and associations within the region of Kanton Aargau. Their business model focuses on affordable, customized digital solutions using their proprietary CMS platform navitiCms, complemented by training, support, and hosting coordination services. The company positions itself as a regional web agency emphasizing transparency, customer involvement, and modern technology.

T

Terumo Blood and Cell Technologies

terumobct.com

66

Terumo Blood and Cell Technologies is a global healthcare company specializing in blood and cell-based therapy solutions. Their offerings include automated blood collection and processing systems, therapeutic apheresis devices, cell therapy manufacturing technologies, and related software and services. The company positions itself as a leader in the healthcare technology sector, serving hospitals, blood centers, and cell therapy manufacturers worldwide. The website reflects a mature digital presence built on Adobe Experience Manager, with modern web technologies and integration of analytics tools like Google Tag Manager. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and incident response details could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. The absence of WHOIS registration data is a concern but is mitigated by the professional nature of the website and its association with Terumo Corporation. Overall, the site is professional, trustworthy, and well-targeted to its healthcare audience.

O

Opper

qiota.com

60

Opper is a specialized software development company founded in 1989, focusing on media and print management solutions tailored for IT, marketing, and sales services. Their flagship offering is a modular web application designed to help publishers and media companies engage audiences and monetize digital content effectively. The company positions itself as a niche provider with a strong emphasis on paywall solutions, user management, and content monetization tools such as e-wallets and data analytics. The website reflects a professional and consistent brand image targeting B2B clients in the media sector primarily in France. Technically, the website is built using the Hugo static site generator, leveraging modern web technologies including SVG graphics and JavaScript for interactivity. The site is well-optimized for performance and mobile responsiveness, with good SEO practices evident in meta tags and structured content. However, there is no evidence of advanced frameworks or CMS beyond Hugo, and no visible analytics or tracking scripts in the provided HTML. From a security perspective, the site enforces HTTPS and uses secure cookie handling mechanisms. However, there is a lack of explicit security headers and no published security or incident response policies, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, although the website content and contact information appear credible and professional. Overall, the website presents a solid business offering with good technical implementation and moderate security posture. The main risk lies in the missing WHOIS data which should be investigated further. Strategic recommendations include enhancing security headers, publishing clear security policies, and verifying domain registration details to improve trustworthiness and compliance.

F

France Télévisions

france.tv

61

France TV is the official public broadcasting platform of France Télévisions, offering a comprehensive range of video content including live TV, replay, documentaries, series, cinema, news, sports, and children's programming. The website targets a general audience in France and serves as a central hub for multiple French public TV channels. Technically, the site uses modern web technologies such as React with Next.js, integrates analytics via Piano Analytics, and employs privacy SDKs, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and asynchronous script loading but lacks visible security headers and explicit security policies, suggesting room for improvement in security posture. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the site is professional, trustworthy, and content-rich, consistent with a major public media entity in France.

N

Nakladatelství Akademie múzických umění v Praze

namu.cz

46

Nakladatelství Akademie múzických umění v Praze (NAMU) is a specialized publishing house affiliated with the Academy of Performing Arts in Prague, focusing on academic and artistic publications in film, music, theatre, dance, and related disciplines. The website serves as an online catalog and sales platform, targeting academics, students, and professionals in the performing arts sector. The business operates with a clear niche focus and maintains a consistent brand presence with professional content and social media engagement. Technically, the website uses standard web technologies (HTML5, CSS, JavaScript) with a moderate performance profile and good mobile optimization. However, it lacks advanced frameworks or CMS indications and does not show evidence of modern security headers or advanced analytics/tracking tools. The cookie consent mechanism is implemented, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and provides basic privacy compliance but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected, but improvements in security headers and formal policies are recommended to enhance trust and compliance. Overall, NAMU presents a trustworthy, professional online presence with room for technical and security enhancements to better align with best practices and regulatory requirements.

D

Divadlo DISK

divadlodisk.cz

63

Divadlo DISK is a well-established theatre institution based in Prague, Czech Republic, with a history dating back to 1945. It offers theatrical performances, cultural events, and collaborates with academic and research institutions. The website reflects a professional cultural organization with clear contact information, active social media presence, and a focus on audience engagement through newsletters and event promotions. Technically, the site uses modern web technologies including JavaScript libraries like jQuery and Fancybox, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place, though it lacks a published privacy policy and terms of service, which are important for compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and formal security policies. Overall, the website is trustworthy and serves its audience effectively, but should address compliance gaps to enhance privacy and security transparency.

PagesJaunes is a leading French online local business directory platform owned by Solocal. It provides consumers access to millions of local professionals with enriched information such as hours, reviews, and services. The platform supports business profile management and advertising services, positioning itself as a key player in the French local search market. Technically, the website is built with modern JavaScript frameworks and integrates advanced analytics and consent management tools, hosted on Google Cloud Platform. Security posture is strong with HTTPS enforced and GDPR compliance mechanisms in place, though explicit security policies and vulnerability disclosure channels are not publicly visible. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

F

France Télévisions

francetv.fr

61

France TV is the official streaming platform for France Télévisions, the French public national television broadcaster. The website offers live TV streaming, replay services, video on demand, podcasts, and articles covering a wide range of programming including documentaries, series, news, and children's content. It serves a broad general audience in France and is a key player in the French media landscape. Technically, the site is built using modern web technologies such as Next.js and React, with good mobile optimization and accessibility features. The platform uses analytics tools like Piano Analytics and integrates privacy management SDKs. Security-wise, the site enforces HTTPS and uses privacy-related scripts but lacks explicit security headers and published security policies. No WHOIS data is available, likely due to privacy protection, but the domain is consistent with a legitimate public media entity. Overall, the site is professional, content-rich, and trustworthy, though it could improve transparency around privacy and security policies.

M

Marie Claire

marieclaire.fr

63

Marie Claire is a well-established French women's fashion and beauty magazine offering a wide range of content including fashion news, beauty tips, lifestyle articles, and subscription services. The website targets a female audience interested in fashion and beauty, maintaining a strong brand presence in the media sector. Technically, the site employs modern JavaScript libraries, consent management tools, and integrates multiple marketing and analytics services, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and implements consent mechanisms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its professional presentation and brand recognition. Overall, the site is secure, privacy-conscious, and professionally maintained, suitable for its audience and business model.

RFI (Radio France Internationale) is an established international news broadcaster providing comprehensive news coverage from France, Europe, Africa, and worldwide. The website offers political, cultural, sporting news, and live streaming services targeting a general audience. The brand is well recognized with consistent branding and multiple official social media presences. Technically, the website employs modern web standards, including responsive design, consent management via Didomi, and robust SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, though WHOIS data is privacy protected, which is typical for media entities. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection roles.

Cdiscount is a major French e-commerce platform offering a wide range of products including furniture, electronics, home improvement, garden, and sports goods. The website targets French consumers looking for affordable prices and convenient online shopping experiences. It provides services such as secure payment options, installment plans, free delivery over certain amounts, and a loyalty program. The platform also offers mobile plans and travel booking services, indicating a diversified e-commerce ecosystem. Technically, the website employs modern web technologies including React and jQuery, with a responsive design optimized for mobile and desktop users. The presence of JSON-LD structured data and comprehensive meta tags supports good SEO practices. Performance is moderate with extensive use of JavaScript and external resources. Accessibility features and SEO optimizations are well implemented. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content Security Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, explicit security policies and incident response contacts are not prominently published, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies with consent mechanisms. The lack of WHOIS data reduces domain registration transparency but does not significantly impact the site's legitimacy given its established market presence. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to further strengthen security posture and user trust.

F

Ferrero Hazelnut Company

ferrerohazelnutcompany.com

69

Ferrero Hazelnut Company is a division of the Ferrero Group focused on the entire hazelnut value chain, from cultivation to processing, emphasizing sustainability and quality. The company operates globally with agribusiness development programs and a commitment to responsible sourcing. The website reflects a professional corporate presence with detailed information about their mission, programs, and sustainability efforts. Technically, the site is built on Drupal CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and privacy compliance could be improved. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the apparent legitimacy given the strong brand association. Overall, the site is trustworthy, professional, and well-maintained, serving as an effective corporate communication platform.

T

Toyota Financial Services Czech s.r.o.

toyotafinance.cz

65

Toyota Financial Services Czech s.r.o. is a specialized financial services provider focused on branded vehicle financing for Toyota and Lexus in the Czech Republic. The company offers a range of financial products including loans for new and used cars, operational leasing, and insurance services tailored for both private individuals and businesses. With over 25 years of market experience and strong partnerships with Toyota and Lexus dealer networks, the company holds a solid position in the automotive finance sector within the region. The website reflects a professional and consistent brand image, providing clear and accessible information to its target audience. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics and marketing, and a proprietary CMS platform (Edee.one). The site is mobile-optimized, accessible, and SEO-friendly with structured data enhancing search engine visibility. Performance is moderate with no critical errors detected. Privacy and cookie policies are implemented with consent mechanisms, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no public security policy or incident response information is provided. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for financial institutions. Overall, the security posture is solid but could be improved by adding explicit security headers and incident response details. The overall risk assessment is low with recommendations to enhance security transparency and header implementation. The website is trustworthy, professionally maintained, and compliant with relevant privacy regulations, making it a reliable platform for its users.

G

GEISTER MEDIZINTECHNIK GMBH

geister.com

54

GEISTER MEDIZINTECHNIK GMBH is a German-based manufacturer specializing in premium reusable surgical instruments, including titanium instruments and various clamps for cardiovascular and thoracic surgery. The company emphasizes German craftsmanship, precision, and sustainability, targeting medical professionals and OEM partners globally. Their website reflects a mature digital presence with multilingual support and detailed product highlights. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is notably missing, which raises some concerns about domain registration transparency but does not directly contradict the professional business presence. Overall, the website is trustworthy and well-maintained but would benefit from enhanced security disclosures and contact transparency.