Security Directory

A

Abbott Laboratories

abbott.com

76

Abbott Laboratories is a well-established multinational healthcare corporation founded in 1888, specializing in innovative medical devices and health care solutions across multiple sectors including cardiovascular health, diabetes management, diagnostics, nutrition, and medicines. The website reflects a mature digital presence with comprehensive content targeting consumers, healthcare professionals, investors, and job seekers. The company maintains strong branding consistency and trust indicators such as verified social media profiles and structured data markup. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, New Relic monitoring, Adobe Launch tag management, and TrustArc consent management, indicating a high level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance metrics. From a security perspective, the site enforces HTTPS and implements consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance appears robust with clear privacy and cookie policies. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. The absence of WHOIS data is noted but likely due to privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

S

Stanford Health Care

stanfordhealthcare.org

63

Stanford Health Care is a leading academic medical center and healthcare provider based in the United States, delivering comprehensive medical services including cancer treatment, heart disease care, brain disorder treatment, primary and specialty care, and clinical trials. The website reflects a mature digital presence with a focus on patient engagement through services like the MyHealth portal and video visits. The organization maintains a strong market position in the Bay Area healthcare sector with consistent branding and professional content. Technically, the website is built on Adobe Experience Manager and hosted on Amazon AWS infrastructure, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, Adobe Launch, and Qualtrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no visible vulnerability disclosure or security policy page, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security hardening and transparency. The risk profile is low, and the site effectively supports the business objectives of Stanford Health Care.

K

KHSB

khsb-berlin.de

60

KHSB is an educational institution based in Germany, providing higher education services primarily targeting students and the academic community. The website is built on TYPO3 CMS and demonstrates a moderate level of digital maturity with modern technologies and a responsive design. The presence of Cookiebot for cookie consent and Matomo for analytics reflects a commitment to privacy and GDPR compliance, although explicit privacy and terms of service pages are not detected in the provided content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy, serving its educational purpose effectively.

I

Internationale Psychoanalytische Universität Berlin

ipu-berlin.de

51

The Internationale Psychoanalytische Universität Berlin (IPU) is a private, state-recognized university specializing in psychoanalytic psychology and psychotherapy education. Founded in 2009, it offers unique bachelor and master programs with a strong psychoanalytic focus, supported by interdisciplinary research and international partnerships. The website reflects a mature academic institution with comprehensive content, clear navigation, and professional branding. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Analytics and Tag Manager for analytics. Security practices include HTTPS, CSRF protection, and a robust cookie consent mechanism, though some security headers and explicit incident response policies are absent. Overall, the domain and website are consistent with the institution's identity and demonstrate a high level of trustworthiness and compliance with GDPR.

H

Humboldt-Universität zu Berlin

hu-berlin.de

70

Humboldt-Universität zu Berlin is a prominent German university offering a wide range of academic programs and research initiatives. The website reflects its role as a leading educational institution with a strong emphasis on interdisciplinary research and social cohesion. It targets students, researchers, academic staff, and the general public interested in academic content. The university maintains a large-scale presence with consistent branding and professional content quality. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as jQuery and bxSlider for interactive elements. It employs Matomo analytics with user consent mechanisms, indicating a mature approach to privacy. The site is hosted likely within academic networks in Germany, ensuring reliability and performance rated as moderate to good. Mobile optimization and accessibility features are well implemented. From a security perspective, the site enforces HTTPS and uses script integrity attributes, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Business credibility is high, supported by certifications and trust signals. Overall, the website is professional, secure, and compliant, with minor recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen trust and security posture.

H

Hochschule für Technik und Wirtschaft Berlin

htw-berlin.de

63

HTW Berlin is a prominent University of Applied Sciences located in Germany, offering a wide range of Bachelor, Master, and MBA programs across multiple disciplines including engineering, business, design, and health. The institution is well-ranked nationally and provides extensive research and continuing education services. The website reflects a mature digital presence with clear navigation, multilingual support, and active engagement with its target audiences such as prospective students, current students, alumni, and industry partners. Technically, the site uses modern web standards, integrates Matomo analytics with user consent, and maintains good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Hochschule für Musik Hanns Eisler Berlin

hfm-berlin.de

42

Hochschule für Musik Hanns Eisler Berlin is a well-established public music university founded in 1950, recognized as one of Europe's leading music institutions. The website provides comprehensive information about its academic offerings, ensembles, events, and student services, targeting prospective and current students, faculty, and music professionals. Technically, the site is built on TYPO3 CMS and hosted by Hetzner, featuring a well-structured, accessible, and mobile-optimized design. Security posture is solid with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident, which could be improved to enhance trust and compliance. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security transparency.

E

Evangelische Hochschule Berlin

eh-berlin.de

67

The Evangelische Hochschule Berlin (EHB) is a specialized higher education institution based in Germany, focusing on practical degree programs in social work, health, nursing, and education. The website serves as an information portal for prospective and current students, offering detailed navigation through academic programs, research, international opportunities, and continuing education. The institution positions itself as a medium-sized university of applied sciences with a clear focus on social and health sectors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web standards such as HTML5, CSS, and JavaScript. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of advanced analytics or tracking scripts suggests a privacy-conscious approach or limited digital marketing. From a security perspective, the site lacks visible security headers and explicit security or privacy policies, which lowers its security posture. No blocking mechanisms or WAF challenges were detected, indicating open accessibility. The WHOIS data is minimal, with generic DNS servers and no detailed registrant information, which slightly impacts trust but is not uncommon for educational institutions. Overall, the website is professional and functional but would benefit from enhanced transparency in privacy and security policies, improved security headers, and clearer contact information to strengthen trust and compliance.

The website represents a small German software provider specializing in solutions for Studentenwerke, offering products such as inventory management, dormitory management, accounting, and cash register systems. The business positions itself as the leading provider in its niche within Germany. The technical infrastructure is basic, relying on legacy HTML standards and a CMS named 'web to date 8.0'. There is no evidence of modern SEO, accessibility, or mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no visible privacy or cookie consent mechanisms. Contact information and incident response details are absent, limiting trust and compliance. Overall, the site is functional but outdated and lacking in security and privacy best practices.

The website metz.fr serves as the official digital portal for the Ville de Metz, providing residents and visitors with comprehensive information about city services, events, public policies, and cultural activities. It holds a strong market position as the authoritative source for municipal information in Metz, France. The site targets a broad audience including local citizens, tourists, and stakeholders interested in city governance and community engagement. Key services include news updates, event calendars, administrative procedures, and social support information. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, Matomo for privacy-conscious analytics, and Google Custom Search for site search functionality. The cookie consent mechanism is implemented using tarteaucitron.js with high privacy settings, reflecting good compliance with GDPR. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics without setting cookies by default. However, no explicit security headers were detected in the HTML content, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is good but could be improved by adding security headers and formalizing security policies. The overall risk assessment is low, with the site demonstrating strong legitimacy, consistent branding, and compliance with privacy regulations. Strategic recommendations include enhancing security transparency, improving accessibility, and publishing incident response and vulnerability disclosure information to further strengthen trust and security culture.

D

DK

d-k.io

62

DK is a French company specializing in carbon measurement and management solutions tailored for the communication, media, and advertising sectors. Their platform offers harmonized and standardized carbon footprint measurement tools, including an API for automated calculations, targeting advertisers, agencies, publishers, and media companies. The company positions itself as a market reference in France with notable media clients and a strong emphasis on sustainability and environmental impact reduction. Technically, the website is well-built with modern technologies such as Matomo analytics and Google Tag Manager, hosted by OVH SAS. It demonstrates excellent mobile optimization, accessibility, and SEO practices. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, reflecting a credible business with a clear mission. The domain registration data aligns well with the business claims, enhancing legitimacy. Privacy compliance and security transparency could be strengthened to improve user trust and regulatory adherence.

S

Spyne

spyne.ai

65

Spyne is a technology company specializing in AI-powered photography and editing software tailored for automotive dealerships. Their platform offers end-to-end solutions including virtual studios, 360-degree vehicle spins, video tours, and conversational AI to enhance dealership merchandising and customer engagement. The company is positioned as a trusted provider with a global footprint, serving over 3200 dealerships across 40+ countries and processing over 10 million cars. Technically, the website is built on modern frameworks like Next.js and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and published policies are recommended. Overall, Spyne presents a professional and credible business with strong market presence and technological sophistication.

B

BoursoBank (ex-Boursorama Banque)

boursobank.com

70

BoursoBank, formerly known as Boursorama Banque, is a French online bank positioned as the least expensive bank for 17 years, offering a range of financial services including free bank cards, mortgage loans, life insurance, stock market services, and savings products. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Technically, the site uses modern JavaScript frameworks and fonts, ensuring a good user experience and accessibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be further investigated. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response information. Overall, the site presents a trustworthy and professional banking service with room for improvement in transparency and security disclosures.

Y

YOURLS Contributors

yourls.org

67

YOURLS is an established open-source project providing a self-hosted URL shortening solution. It targets developers and organizations seeking full control over their URL shortening services. The website reflects a mature project with a consistent brand and strong community support, including sponsorship transparency. Technically, the site is built using modern static site generation technology (Docusaurus) and leverages Cloudflare for DNS and analytics, ensuring good performance and mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

Kinder Finland is a regional website representing the Kinder brand, a well-known confectionery brand owned by Ferrero. The site targets parents and families with children, offering product information, brand storytelling, sustainability initiatives, and interactive applications such as Applaydu. The website is professionally designed with consistent branding and good content quality, supporting the brand's market position in the retail confectionery sector. Technically, the site is built on Drupal CMS with modern JavaScript libraries and is mobile optimized, though some accessibility and security header improvements are recommended. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but explicit security headers and privacy policy pages are lacking. The WHOIS data for the domain is missing, which reduces trust slightly, but the website content and linked Ferrero domains strongly indicate legitimacy. Overall, the site is a credible and professional digital presence for Kinder in Finland.

I

Instagram

tictac.com

80

Instagram is a globally recognized social media platform owned by Meta Platforms, Inc., providing photo and video sharing services to a broad audience. The website analyzed is the official login page, designed with modern web technologies and optimized for performance and mobile use. The platform maintains a strong security posture with HTTPS enforcement and comprehensive security headers, ensuring user data protection during login. While privacy and cookie policies are not directly visible on the login page, the overall compliance posture is good given Instagram's global presence and regulatory adherence. The domain's WHOIS data is privacy protected, which is typical for large enterprises, and does not detract from the site's legitimacy. Overall, Instagram's website demonstrates high professionalism, security, and trustworthiness.

C

C & K člen skupiny AUTO UH a.s.

ckauto.cz

43

C & K člen skupiny AUTO UH a.s. operates as an authorized automotive dealership and service provider specializing in Toyota, Lexus, Subaru, and CFMOTO brands. The company serves customers primarily in the Czech Republic with physical locations in Brno and Uherské Hradiště. Their business model focuses on new and used vehicle sales, vehicle servicing, and financing solutions, positioning them as a reputable regional player within the automotive retail sector. The website reflects a professional and consistent brand image aligned with their market presence. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Seznam Analytics, indicating a mature digital marketing infrastructure. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be enhanced. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, the absence of explicit security headers and incident response information suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The main limitation is the lack of WHOIS data, which restricts domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

The website www.canalplusbrandsolutions.fr is currently inaccessible due to a security or WAF challenge, presenting an 'Access Denied' message with minimal content. This prevents a full assessment of the business, compliance, and security posture. The visible content is limited to a branded logo and a message indicating request processing, with no privacy, cookie, or contact information available. The technical footprint is minimal, with only a single external domain serving static assets. No analytics, advertising, or tracking scripts are detected, and no forms or user input mechanisms are present. The site appears to be mobile responsive at a basic level but lacks SEO and accessibility features. The domain is privacy protected in WHOIS, consistent with a media brand's typical privacy practices, but detailed registrant information is unavailable. Overall, the site scores low on content quality, security posture, and privacy compliance due to the blocking mechanism.

B

Boursorama

boursorama.com

69

Boursorama is a prominent French online bank and financial information provider, offering a wide range of services including online banking, stock market data, and financial news. The website presents a professional and well-structured interface targeting investors and banking customers primarily in France. Technically, the site uses modern web standards with good mobile optimization and SEO practices, although explicit CMS or hosting details are not evident. Security posture is moderate due to lack of visible security headers and missing WHOIS data, which raises some concerns about domain registration transparency. Privacy compliance appears weak as no privacy or cookie policies were detected in the provided content. Overall, the site is functional and trustworthy from a business perspective but would benefit from enhanced transparency and security measures.

V

Veepee|ad

veepee-ad.com

58

Veepee|ad is a newly established retail media advertising company launched in 2023 as part of the Veepee group, a pioneer in event sales on the internet in Europe. The company offers a comprehensive suite of retail media solutions including display, search, CRM, social retail, programmatic advertising via Veepee|ad Connect, and couponing services. Their platform targets a large member base of 28 million active users, positioning them as a leading retail media actor in Europe. The website is professionally designed using HubSpot CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting trust and compliance. Contact information is primarily via contact forms and a physical address, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the retail media sector.

E

ExLibris - Library software and management systems

exlibrisgroup.com

74

Ex Libris is an established enterprise specializing in library software and management systems, serving libraries and educational institutions globally. The company is positioned as a key player in the technology sector for library solutions, offering products that enhance education, research, collaboration, and productivity. The website reflects a mature digital presence with professional design, structured data, and SEO optimization. The technical infrastructure is based on WordPress CMS with integration of multiple marketing and analytics tools, indicating a modern and data-driven approach. Security posture is adequate with HTTPS enabled and domain registration protections, though improvements can be made in security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service documentation. Overall, the website and domain data indicate a trustworthy and credible business with room for enhanced transparency and security practices.

S

Slovenské múzeum máp

muzeummap.sk

45

Slovenské múzeum máp is a specialized experiential museum in Slovakia dedicated to the history and modern practice of cartography. The museum offers interactive exhibits, educational activities, a flight simulator experience, and a retail shop selling maps, books, and related fashion items. It targets tourists, families, students, and map enthusiasts, positioning itself as a unique cultural attraction in Slovakia. The website is professionally designed using WordPress with modern plugins and themes, providing good user experience and mobile optimization. However, it lacks formal privacy and cookie policies, and no explicit security or incident response policies are published. The site uses HTTPS and Google Analytics for tracking, but security headers are missing, which could be improved to enhance security posture. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

S

STORMWARE s.r.o.

fakturace-zdarma.cz

55

STORMWARE s.r.o. operates the website fakturace-zdarma.cz, offering free invoicing solutions through their POHODA Start accounting software and mPOHODA mobile invoicing app. The company targets small businesses and freelancers primarily in the Czech Republic, providing both offline and online invoicing capabilities with integration between desktop and mobile platforms. The website is professionally designed, with clear navigation and relevant content focused on their software offerings. Technically, the site uses standard web technologies including JavaScript, jQuery, and Google Tag Manager, with a cookie consent mechanism that supports GDPR compliance. Security posture is moderate, with no explicit security headers detected and use of an outdated jQuery version, but no critical vulnerabilities are evident from the content. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but the website content and company information suggest a legitimate business presence.

M

MPOHODA

mpohoda.sk

63

mPohoda is a well-established Slovak company providing comprehensive accounting and economic software solutions tailored for small and medium-sized enterprises. The website reflects a professional and consistent brand image, targeting SMEs primarily in Slovakia. Their key services include accounting, payroll, invoicing, and business analytics, positioning them as a leading software provider in their regional market. The technical infrastructure is modern, leveraging Tailwind CSS and JavaScript, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contact could enhance trust further. Overall, the website is compliant with GDPR and cookie regulations, providing clear privacy and cookie policies. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

ARTIN, spol. s r.o.

artin.cz

74

ARTIN, spol. s r.o. is a well-established software development company based in the Czech Republic with over 25 years of experience. The company specializes in custom software development, team augmentation, consulting, and AI implementation, targeting businesses seeking tailored software solutions and AI integration. Their people-first approach and long-term client relationships position them as a trusted partner in the technology sector. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site uses modern web technologies including Google Tag Manager and Solidpixels CMS, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, ARTIN demonstrates a high level of business credibility and digital maturity, making it a reliable and professional software partner.

Státní fond audiovize is the official Czech government fund dedicated to supporting audiovisual projects including film, television, animation, and video games. The website serves as a portal for funding calls, official meeting minutes, and important documents related to the audiovisual sector in the Czech Republic. It targets audiovisual professionals and stakeholders seeking government support and information. The domain is well-established since 2012 and hosted on Czech servers, reinforcing its legitimacy. Technically, the website uses standard HTML5, CSS3, and JavaScript with a clean and professional design. It is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking technologies, reflecting a minimalistic and privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms collecting personal information. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is trustworthy and professional but could benefit from enhanced privacy compliance and security best practices. There are no signs of malicious content or adult material, making it safe for general audiences.

R

Příční

rezidencepricni.cz

55

The website www.rezidencepricni.cz presents a residential real estate project located in Brno, Czech Republic, offering modern apartments inspired by historical architectural styles. The site targets potential home buyers seeking urban living with quality amenities such as parking, balconies, and shared gardens. The business model focuses on property sales with a local market position emphasizing architectural quality and location convenience. Technically, the website employs modern JavaScript libraries including Three.js and Panolens.js for interactive content, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and formal privacy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces domain trustworthiness. Overall, the site is professional and functional, with moderate risk and room for improvement in compliance and security transparency.

S

Stellar Media & Consulting

stellaliberty.com

58

Stella Liberty operates as a niche adult service provider specializing in dominatrix and fetish services in the Portland, OR and Vancouver, WA areas. The business offers specialized services including rope bondage, corporal punishment, foot fetish, roleplay, and submissive training, targeting an adult-only audience. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence suggests a legitimate business. Overall, the site requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and reduce risk.

SubmissiveCuckolds.com is an adult entertainment website specializing in cuckolding fetish videos with a femdom touch. The site operates on a subscription-based model offering exclusive adult video content targeted at mature audiences interested in niche fetish genres. The website has been active since 2009, indicating a stable presence in its niche market. The content is explicit and designed for adults only, with no visible age verification mechanisms on the main page. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and video.js for media playback. Google Analytics and Google Tag Manager are employed for user tracking, but there is no visible cookie consent mechanism, which may raise privacy compliance concerns. Security posture is basic with no advanced security headers detected and DNSSEC not enabled on the domain. The WHOIS data shows consistent domain registration with a long history and no privacy protection, supporting legitimacy. However, the absence of contact information and security policies reduces business credibility. Overall, the site functions adequately for its purpose but lacks several modern security and privacy best practices.

Orgasmabuse.com is an adult entertainment website specializing in forced orgasm content, offering exclusive videos and daily free content to adult enthusiasts. The site targets a niche adult audience and operates on a subscription or content access business model. The domain is mature, registered since 2013, and hosted by Hosting Concepts B.V., indicating a stable operational history. Technically, the site uses standard web technologies such as JavaScript, CSS, and HTML5, with cookie consent managed by Cookiebot and analytics via Google Tag Manager. However, the site lacks advanced SEO optimization and accessibility features, and the design quality is basic. From a security perspective, the website uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy policy, terms of service, or contact information are published, limiting transparency and compliance with privacy regulations such as GDPR. The site employs external ad networks and tracking services, which may impact user privacy. Overall, the security score is moderate but could be improved significantly by implementing standard security headers and publishing comprehensive policies. The content is explicitly adult and NSFW, with clear age verification and warnings, making it suitable only for adults. There is no evidence of WAF or blocking mechanisms, allowing full content access for analysis. The domain registration data is consistent with the business type, though registrant details are minimal. Strategic recommendations include enhancing security headers, publishing privacy and security policies, improving SEO and accessibility, and adding clear contact and incident response information to build trust and compliance.

HumiliationPOV.com is a niche adult entertainment website specializing in fetish content such as small penis humiliation, femdom POV, financial domination, and related adult themes. The site operates primarily on a subscription and affiliate marketing business model, targeting an adults-only audience interested in specific fetish content. The website content is accessible without any WAF or security challenges, but it uses outdated technologies such as Flash and lacks modern security practices like HTTPS and security headers. Privacy compliance is minimal, with no visible cookie consent mechanisms despite handling user subscriptions. WHOIS data is unavailable, indicating possible privacy protection or recent domain registration, which reduces transparency and trustworthiness. Overall, the site serves a specialized adult market but has significant technical and security shortcomings.

American Mean Girls operates as an adult entertainment website offering adult video clips with an option for users to purchase individual clips using Bitcoin. The site targets an adult-only audience and includes explicit age warnings to restrict underage access. The business model revolves around content sales and an affiliate program facilitated through a third-party payment processor, Verotel. The website's market position is niche within the adult entertainment sector, with a small scale operation dating back to 2013 as per site content. Technically, the website employs basic web technologies including Google Analytics and Google Tag Manager for tracking and analytics. The site lacks modern CMS identification and shows basic design and mobile optimization. There is no evidence of HTTPS or advanced security headers, which raises concerns about secure data transmission and user privacy. The absence of privacy and cookie policies further indicates low compliance with data protection standards. From a security perspective, the site does not demonstrate adherence to best practices such as HTTPS enforcement, security headers, or incident response contact points. The missing WHOIS registration data is a critical red flag, undermining domain legitimacy and trustworthiness. The site’s reliance on Bitcoin payments and lack of transparent business contact information further complicate trust assessments. Overall, the website presents significant risks related to security, privacy compliance, and legitimacy. Strategic improvements in security infrastructure, transparent policies, and domain registration clarity are essential to enhance trust and reduce operational risks.

T

The English Mansion

theenglishmansion.com

7

The English Mansion operates as a niche adult content membership website specializing in femdom BDSM videos and related fetish content. It targets an adults-only audience with explicit content and enforces age verification for UK subscribers. The site claims over 20 years of operation and positions itself as a leader in its niche, offering daily updated HD videos and VR content. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, there is no evidence of a modern CMS or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie policies are present. The absence of WHOIS registration data and contact information reduces business credibility and trust. Overall, the site is functional but requires significant improvements in security, privacy compliance, and transparency to enhance trust and user safety.

B

Bizarre Design

kinkymistresses.com

7

Kinky Mistresses is an adult entertainment website specializing in BDSM and Femdom video content. The site offers membership-based access to explicit adult videos featuring various fetish and domination themes. The business operates in a niche market segment targeting adults interested in BDSM and Femdom genres. The website content is explicit and includes an age verification warning to restrict access to adults only. Technically, the site uses standard web technologies including JavaScript and CSS, with Google Analytics and Google Tag Manager for visitor tracking. The site lacks advanced CMS or frameworks and shows basic mobile optimization and accessibility features. Security posture is moderate but limited by the absence of visible security headers and lack of published privacy or cookie policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site functions as a small-scale adult content membership platform with basic technical and security implementations.

F

Femdom Empire

femdomempire.com

9

Femdom Empire is a niche adult entertainment website specializing in femdom fetish videos. Established in 2011, it operates a subscription-based business model offering weekly updates and access to exclusive video content. The site targets an adult audience interested in hardcore dominatrix and fetish video content. Technically, the website uses a custom CMS with a variety of JavaScript libraries including jQuery, Fancybox, and Flexslider to provide a multimedia-rich user experience. Hosting is provided by MojoHost, and the domain is registered with GoDaddy, reflecting a stable and consistent digital infrastructure. Security posture is moderate with HTTPS usage and age verification mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no explicit cookie policy. Overall, the site is professionally designed with good navigation and content relevance but could improve in security and privacy transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and improving privacy and cookie consent mechanisms.

The website jasmin.com is an adult-oriented social and dating platform, as indicated by its title and content cues. It targets an adult audience seeking to connect with others. The domain is well-established, having been registered since 1998, which supports the legitimacy of the business. However, the website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses modern marketing and analytics tools such as Google Tag Manager and Emarsys, and relies on multiple CDN domains for content delivery, indicating a moderate level of digital maturity. Security posture is basic, with HTTPS enabled but no DNSSEC or security headers detected, suggesting room for improvement in protecting user data and preventing attacks. Overall, the site is functional but requires enhancements in privacy compliance and security best practices to improve trustworthiness and regulatory adherence.

L

LiveJasmin

tpdwm.com

10

LiveJasmin is a leading adult entertainment platform specializing in live sex cams and adult chat services. The website offers a large selection of models with various filtering options, targeting an adults-only audience globally. It operates as an enterprise-level media business with a focus on live webcam shows, private chats, and video calls. The platform is well-branded and maintains consistent trust indicators such as age verification and industry certifications. Technically, the site employs modern JavaScript frameworks, tracking tools like Google Tag Manager and Hotjar, and uses hCaptcha for bot protection. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is strong with HTTPS enforcement and security headers, but lacks explicit published security policies or incident response contacts. Privacy compliance is good with clear cookie and privacy policies and consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which is common for adult sites. Overall, the site is professional and trustworthy within its industry niche.

G

GE-Data

ge-data.com

55

GE-Data is a specialized consulting firm focusing on geospatial technologies applied to agriculture, forestry, and water management. With offices in the United States and France, the company leverages over 30 years of expertise in remote sensing, GIS, and data science to deliver tailored, cost-effective solutions. Their services include land-use mapping, crop monitoring, production estimation, and disease detection, targeting both public and private sector clients. The website reflects a professional and consistent brand image with clear business messaging and client engagement features. Technically, the website is built using One.com Web Editor, incorporating modern JavaScript libraries such as Swiper.js for image sliders and Termly for cookie consent management. The site is hosted by One.com A/S and uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and mobile optimization. Analytics are implemented via SiteWit, with moderate user tracking and basic privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies, incident response information, and vulnerability disclosure details. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, GE-Data presents a trustworthy and professional online presence with a solid foundation in technical and business aspects. Strategic enhancements in security policies, contact transparency, and mobile accessibility would further strengthen their digital maturity and compliance posture.

The website artisanlogiciel.net/yunohost/sso/login appears to be a login portal for a Single Sign-On (SSO) system, likely related to Yunohost services. The content is minimal, primarily consisting of technical assets and scripts with no visible business or contact information. The domain is registered with Gandi SAS since 2009, indicating a mature and legitimate registration. The technical infrastructure uses modern JavaScript frameworks such as Nuxt.js, but lacks visible security headers and privacy compliance documentation. The site does not present any advertising or analytics scripts, suggesting a focus on internal or limited user access rather than public marketing. Overall, the website's security posture is basic, with room for improvement in security headers and privacy policies. The lack of business information and policies limits trust and compliance assessment.

C

Clic & Cetera

clicetcetera.fr

51

Clic & Cetera is a small local business based in France providing IT assistance and mediation services primarily in the Lorient region. The company targets both professionals and private individuals, offering on-site and business IT support. The website is built on WordPress and demonstrates a good level of technical maturity with modern CMS usage and responsive design. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy for its business scope but would benefit from improved compliance and security practices.

N

Numericatous

numericatous.fr

52

Numericatous is a French small business founded in 2019, specializing in education and training on Linux and free software with a strong ethical and sovereign digital focus. The website offers a comprehensive range of resources including tutorials, ebooks, and online courses aimed at individuals and professionals seeking autonomy in digital usage. The business positions itself as a niche player promoting digital sovereignty and ethical computing, supported by partnerships with local and ethical technology providers. Technically, the website is built on WordPress with WooCommerce for e-commerce, hosted by a French provider LRob, and uses Matomo for privacy-respecting analytics. The site is well-optimized for performance, mobile, and accessibility, with clear navigation and professional design. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, Numericatous presents a trustworthy, professional, and ethically aligned digital presence with a clear business model and solid technical foundation.

A

Association Electrocycle

electrocycle.co

55

Association Electrocycle is a French non-profit organization dedicated to promoting the reuse of electronic devices, particularly smartphones, through workshops and advocacy for free software. The website serves as a platform to share news, events, and educational content related to digital empowerment and ecological technology practices. The organization targets individuals and groups interested in sustainable technology and digital rights. Technically, the website is built on WordPress 6.8.3, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, reflecting a small but active community-focused entity.

W

Wikilibriste

wikilibriste.fr

61

Wikilibriste is a French-language educational website focused on digital freedom, privacy, and security. Founded in 2022, it offers tutorials and guides aimed at helping users improve their digital hygiene and regain control over their online lives. The site targets both beginners and experienced users interested in ethical and open-source digital tools. The business model appears to be content publishing with community engagement, without evident monetization through ads or affiliate marketing. Technically, the website is built on Ghost CMS 6.0, hosted by Infomaniak Network SA, and employs modern web technologies with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and modern font loading strategies but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

L

LikeBtn

likebtn.com

62

LikeBtn is a technology company specializing in providing embeddable like button widgets for websites, enabling user interaction through likes and dislikes with real-time statistics and insights. The company has been operating since 2013 and supports a wide range of CMS platforms through dedicated plugins, positioning itself as a versatile solution for website owners seeking to enhance user engagement. Technically, the website employs modern web technologies including asynchronous JavaScript loading, REST APIs, and Cloudflare for DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in DNSSEC adoption and explicit security policies. Privacy compliance is addressed with a comprehensive privacy policy and GDPR readiness, but lacks a cookie consent mechanism. Overall, LikeBtn presents a professional and trustworthy online presence with a mature product offering.

A

Atmo Normandie

atmonormandie.fr

55

Atmo Normandie is a regional environmental monitoring organization dedicated to providing air quality and pollen index data for the Normandy region in France. The website serves as a public information platform targeting residents and local authorities interested in environmental health indicators. The platform uses Drupal 9 CMS and integrates Matomo analytics, reflecting a modern and privacy-conscious technical infrastructure. The website is well-structured, mobile-optimized, and provides detailed environmental data visualization for numerous communes within the region. Security posture is moderate with HTTPS implied, but lacks explicit security headers and formal privacy or cookie policies. No WHOIS data is available, likely due to privacy protection, which is common for such public service domains. Overall, the website is professional, trustworthy, and safe for general audiences.

A

Atmo Hauts-de-France

atmo-hdf.fr

53

Atmo Hauts-de-France operates as a regional air quality observatory dedicated to monitoring atmospheric pollution and raising awareness among local authorities, businesses, and citizens in the Hauts-de-France region of France. The organization provides data, maps, and health advice related to air quality, positioning itself as a key environmental public service entity in the region. The website is professionally designed using Drupal 9 CMS and integrates modern analytics tools such as Matomo and Microsoft Clarity, indicating a moderate level of digital maturity and user engagement tracking. Security posture is adequate with HTTPS implied, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. Overall, the domain appears legitimate and active, though WHOIS data is privacy-protected and unavailable. The site content is safe, relevant, and targeted at a general audience interested in environmental health.

A

AtmoSud

atmosud.org

64

AtmoSud operates as the regional observatory for air quality in the Provence-Alpes-Côte d'Azur region of France, providing comprehensive monitoring, public alerts, research, and educational services. The organization targets a broad audience including citizens, associations, local governments, enterprises, and research institutions. The website reflects a professional and well-structured digital presence, leveraging Drupal 9 CMS and integrating modern analytics and cookie management tools. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security policies and vulnerability disclosures. The WHOIS data is unavailable or malformed, which slightly impacts trust but the active and consistent website content supports legitimacy. Overall, AtmoSud presents a credible and authoritative resource in the environmental monitoring sector.

R

Roman Kunert - Váš Digitální Stratég

romankunert.com

50

Roman Kunert operates a professional digital services business focused on website and e-shop development, SEO, digital marketing, and AI training. The company has a strong presence in the Czech Republic with multiple related projects and brands, positioning itself as a comprehensive digital strategist and service provider. The website is well-structured, visually consistent, and integrates modern web technologies and analytics tools. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, but the overall business presentation and multiple partner domains suggest a legitimate operation. Strategic recommendations include improving security headers, configuring third-party SDKs properly, and publishing clear privacy and security policies.

H

Herpain

herpain-urbis.be

51

Herpain Urbis is a Belgium-based real estate company with a domain registered since 2007, indicating a stable and established presence. The website provides basic information about the company, its projects, and corporate social responsibility initiatives, targeting a general audience interested in real estate services. The digital infrastructure is modest, relying on standard HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The site is accessible and mobile responsive at a basic level but lacks advanced SEO and accessibility features. Security posture is limited, with no visible security headers or incident response policies, and no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data aligns well with the business claims, supporting legitimacy. Social media presence on major platforms adds trust signals. Overall, the website is functional but could benefit from enhanced content, security, and compliance features.

A

ARP-GAN Bruxelles-Propreté

arp-gan.be

68

ARP-GAN Bruxelles-Propreté is a well-established public agency founded in 2004, responsible for waste management and urban cleanliness in the Brussels region. The website serves as an informative and service-oriented platform targeting both citizens and professionals, offering waste sorting guides, collection schedules, recycling park information, and citizen engagement initiatives. The agency holds ISO 9001 and ISO 14001 certifications, reinforcing its commitment to quality and environmental management. Technically, the site is built on Drupal 10, employs modern cookie consent tools, and integrates analytics and tracking services responsibly. Security posture is strong with HTTPS and cookie consent, though explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with its public service mission.