Security Directory

A

Agora CE, o.p.s.

participativni-rozpocet.cz

53

Agora CE, o.p.s. operates the website participativni-rozpocet.cz, providing expert assistance and methodological support for participatory budgeting in Czech municipalities. The organization targets local governments, politicians, and active citizens, offering practical tools and consultancy to foster community involvement in budget decisions. The website is well-structured, professionally designed, and supported by the Czech Ministry of Regional Development, indicating a strong market position within the non-profit government sector. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern infrastructure and good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility and user trust.

I

Institut One Health

institut-one-health.fr

50

Institut One Health is a French public health and research institute established in 2023, focused on emerging infectious diseases and integrated within national and European health strategies. It offers training, expertise, and decision support services primarily targeting public health professionals, researchers, and policymakers. The website reflects a professional and consistent brand image aligned with its institutional mission. Technically, the site is built on WordPress with a modern theme and includes standard analytics tools. Security posture is adequate with HTTPS and domain protections, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security disclosures.

L

Les écolohumanistes

lesecolohumanistes.fr

45

Les écolohumanistes is a small French content site dedicated to ecology and humanist values, operated by individuals named Romain and Jeff. The website focuses on educating and simplifying ecological and humanist concepts for a French-speaking audience. The business model centers on content creation and knowledge transmission within a niche market. Technically, the site is built on WordPress 6.8.3, utilizing plugins such as Yoast SEO and WP Dark Mode, hosted by IONOS SE. The site is moderately optimized for performance and mobile devices, with good SEO practices but lacks full accessibility features. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no GDPR indicators. Overall, the site is trustworthy but would benefit from enhanced privacy and security measures.

Héliocat is a small French business led by Pierre-Yves Cavellat, specializing in training, facilitation, and consulting on collaborative practices within organizations and networks, particularly in the social economy sector. The company offers in-person and remote services, including deployment of collaborative digital tools, and is certified by QUALIOPI, indicating recognized quality standards. The website is built on WordPress, hosted by OVH, and integrates Stripe for payments and Matomo for privacy-conscious analytics. The site is professionally designed with good content quality and clear navigation, targeting organizations primarily in Brittany and the broader western France region. From a technical perspective, the website uses modern web technologies and plugins, including jQuery and SKT Blocks, and is mobile-optimized. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and published privacy or cookie policies represents compliance gaps. The WHOIS data is privacy-protected, which is common for small businesses, and no suspicious patterns were detected. Contact information is available via email and phone, with social media presence on LinkedIn. Overall, the website demonstrates a good level of professionalism and security for a small service-oriented business, but improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

T

Timac Agro

timacagro.pt

57

Timac Agro is a medium-sized agricultural company specializing in plant nutrition and animal production products, operating primarily in Portugal. It is a subsidiary of VITAS Portugal and part of the Grupo Roullier, indicating a strong corporate backing and market presence in the agricultural manufacturing sector. The website reflects a professional and consistent brand image, targeting agricultural professionals and businesses. Technically, the site is built on WordPress with Elementor and Yoast SEO, showing a modern and maintainable infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and corporate affiliations.

T

TicketingBox

ticketingbox.com

67

TicketingBox operates a professional, turnkey theater ticketing platform designed to boost ticket sales, simplify audience management, and maximize revenue for theaters and venues. The website demonstrates a solid market position with notable clients such as Shen Yun, showcasing its capability to handle large-scale events across multiple theaters annually. The platform offers comprehensive services including marketing tools, custom branding, reporting, and secure ticketing technology. Technically, the website is built on a modern WordPress CMS with Elementor and integrates Google Analytics and AdSense for tracking and monetization. The site is mobile-optimized and SEO-friendly, providing a good user experience. However, the absence of privacy and cookie policies and missing WHOIS registration data raise concerns about compliance and domain legitimacy. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

S

Synergie

synergie-mauges.fr

41

Synergie is a regional initiative based in the Mauges area of France, focused on fostering innovation, training, and experimentation in the circular economy sector. The website presents a professional and well-structured platform offering coworking spaces, professional training, prototyping support, and a showroom dedicated to circular economy solutions. The project is co-financed by the European Agricultural Fund for Rural Development, indicating strong institutional support and legitimacy. The target audience includes local businesses, innovators, and stakeholders interested in sustainable development and digital transformation within the region. Technically, the website is built on a modern WordPress CMS platform using Elementor for page building and Yoast SEO for optimization. It employs privacy-conscious analytics via Matomo Cloud and includes a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and performs moderately well, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, which is justified given the nature of the project. Overall, the site demonstrates a good security posture with room for improvement in transparency and security header implementation. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a security.txt file for vulnerability disclosures to further strengthen trust and compliance.

T

The Cochrane Collaboration

cochrane.org

72

The Cochrane Collaboration is a globally recognized non-profit organization dedicated to producing trusted health evidence through systematic reviews and evidence synthesis. Their website reflects a mature digital presence with a professional design, multi-language support, and comprehensive content targeting scientists, policymakers, healthcare professionals, and the public. The organization is well-positioned in the healthcare sector, influencing major health guidelines such as those from WHO. Technically, the site is built on Drupal 10 with modern libraries and includes Matomo analytics, demonstrating a commitment to privacy and data-driven improvements. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is trustworthy, accessible, and professionally maintained, supporting the organization's mission to improve health decisions worldwide.

M

Mgr. Marek Nývlt - Tvorba webových stránek Trutnov

webtrutnov.net

62

The website www.webtrutnov.net represents a small, local Czech web development business operated by Mgr. Marek Nývlt, specializing in custom Joomla-based website creation, domain and hosting services, and maintenance including updates and backups. The business targets individuals and small to medium enterprises primarily in the Trutnov region, offering competitively priced, personalized web solutions with a focus on quality and customer satisfaction. The site is professionally designed with clear navigation and mobile responsiveness, leveraging modern web technologies such as Joomla CMS and Bootstrap framework. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking some security headers and formal privacy or terms of service documentation. WHOIS data is missing or inconsistent, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site demonstrates good business credibility and technical implementation but would benefit from improved compliance documentation and enhanced security practices.

U

Universal Media Limited

universalmedia365.com

47

Universal Media Limited is a UK-based media group established in 2009, specializing in business and consumer media across the US, Canada, and Europe. The company operates multiple branded publications such as CEO Today, Finance Monthly, and Lawyer Monthly, targeting professional audiences. Their business model focuses on editorial publishing, marketing partnerships, and brand management within the media sector. The website presents a professional and consistent brand image with clear contact information and a moderate market position as an established media group. Technically, the website is built on WordPress 6.8.3 using the Oxygen builder framework, incorporating modern web fonts from Google Fonts and Adobe Typekit, and leveraging jQuery and AOS for interactivity and animations. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, with no evident critical technical issues. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and trustworthiness.

S

SocialWick

socialwick.com

65

SocialWick is a well-established social media marketing platform operating since 2017, offering a wide range of services including followers, likes, views, and other engagement metrics across major social media platforms such as Instagram, YouTube, TikTok, Facebook, and more. The company positions itself as a market leader with over a million customers and emphasizes fast delivery, premium quality, and affordable pricing. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Cloudflare Insights, hosted behind Cloudflare's infrastructure for performance and security. Security posture is generally good with HTTPS enforced and secure forms, though some security headers are missing and no explicit cookie consent mechanism is present, which may affect privacy compliance. The absence of WHOIS data limits domain trust verification, but the business operations and content appear legitimate and professional. Overall, SocialWick presents a credible and functional platform for social media marketing services.

DonorPerfect is a well-established provider of donor management software solutions tailored for non-profit organizations. The analyzed login portal is a secure and professionally designed entry point for users to access their donor management accounts. The platform leverages modern web technologies including Bootstrap, jQuery, and integrates advanced monitoring and analytics tools such as New Relic and Segment Analytics, indicating a mature digital infrastructure. The website enforces strong password policies and uses HTTPS with CSRF protections, reflecting a solid security posture. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact or incident response information, suggests areas for compliance improvement. Overall, the site is trustworthy, safe, and well-positioned within its niche.

I

Institut informacijskih znanosti (IZUM)

izum.si

10

Institut informacijskih znanosti (IZUM) is a Slovenian public institute established by the government to provide information services supporting science, culture, and education. It operates key national infrastructures such as the COBISS library system and HPC-RIVR supercomputing resources, positioning itself as a critical technology and research enabler in Slovenia. The website reflects this institutional role with professional content, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain's long history and consistent WHOIS data reinforce the site's legitimacy and trustworthiness.

Kévin Dunglas' website serves as a professional technical blog and portfolio highlighting his expertise as a software architect and API expert. The site prominently features his open source projects such as API Platform, FrankenPHP, Mercure.rocks, and Vulcain.rocks, positioning him as a recognized figure in the PHP and API development community. The business model revolves around open source software creation, consulting, training, and sponsorship, targeting developers and technology enthusiasts globally. The site is well-branded, consistent, and content-rich, reflecting a high level of professionalism and technical authority. Technically, the website is built on WordPress with modern plugins for SEO, social integration, and code syntax highlighting. It uses HTTPS with good SSL configuration and loads quickly with mobile optimization and accessibility considered. However, some security best practices such as explicit security headers and privacy/cookie policies are missing, which could be improved to enhance compliance and trust. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and incident response information are notable gaps. Analytics usage is minimal and not fully configured, indicating a low level of user tracking. Overall, the site is trustworthy and safe for general audiences. Strategically, the site would benefit from adding comprehensive privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure and incident response details to strengthen compliance and security posture. These improvements would enhance user trust and align the site with best practices in data protection and security governance.

A

ADMvalue

admvalue.com

68

ADMvalue is a well-established French technology company founded in 2006, specializing in delivering customized customer relationship management and business process solutions that combine human intelligence, emotional intelligence, and artificial intelligence. The company positions itself as a leader in multishore and multilingual services, targeting B2B clients seeking digital transformation and enhanced customer experience. Their key services include front office customer service, technical assistance, sales, marketing consulting, and back office process management. The website reflects a professional and consistent brand image with excellent content quality and user experience.

E

ENSV-FVI

ensv-fvi.fr

55

ENSV-FVI is a specialized educational institution focused on training Veterinary Public Health Inspectors and providing continuing education and degree programs in veterinary public health. Affiliated with VetAgro Sup and hosting the One Health Institute, it serves a national and international audience of veterinary and government professionals. The website is built on a modern WordPress platform using Elementor and includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and GDPR compliance, though some security headers and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-branded, supporting the institution's authoritative position in its niche.

Č

Česká lékařská akupunkturistická společnost (ČLAS ČLS JEP)

akupunktura.cz

44

The website akupunktura.cz represents the Czech Medical Acupuncture Society (ČLAS ČLS JEP), a professional association focused on acupuncture and related techniques in the Czech Republic. The site provides educational resources, event information, bulletins, and membership details targeted at medical professionals and acupuncture practitioners. The domain has been active since 1999, indicating a well-established presence in its niche healthcare sector. Technically, the site is built on WordPress with the Fusion Builder theme, incorporating modern web technologies such as HTTPS and Google reCAPTCHA for security. The cookie consent mechanism is robust, offering granular user control, though a formal privacy policy and terms of service pages are absent. Security posture is good with HTTPS and anti-bot measures, but could be improved with additional security headers and published policies. Overall, the site is professional, trustworthy, and safe for general audiences.

G

Géomatika

geomatika.fr

53

Géomatika is a specialized French company focused on Geographic Information Systems (GIS), offering a suite of software products and services centered around their IsiGéo platform. Their offerings include web-based GIS applications, mobile data collection apps, and tailored solutions for public sector entities such as municipalities and syndicates, as well as private companies. The company positions itself as a niche player providing powerful, customizable GIS tools for management and operational needs. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, Contact Form 7, and Matomo analytics, indicating a mature digital presence. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and offers user privacy options via Matomo opt-out, but lacks explicit security headers and published privacy or cookie policies. The absence of WHOIS registration data limits domain trust assessment, though the professional website and detailed content support legitimacy. Overall, the site demonstrates good content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security transparency.

V

VetAgro Sup

vetagro-sup.fr

55

VetAgro Sup is a French public higher education and research institution specializing in veterinary medicine, agronomy engineering, and public veterinary health inspector training. The institution holds multiple accreditations and offers a range of educational and clinical services, positioning itself as a reputable player in the education and healthcare sectors in France. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to students, researchers, and professionals in related fields. Technically, the site is built on WordPress with modern plugins and frameworks, including Elementor and Bootstrap, and integrates analytics tools such as Google Analytics and Matomo. Security posture is good with HTTPS enforced and use of ReCaptcha, although explicit security headers and published security policies are lacking. Privacy compliance is well addressed with visible cookie consent and privacy policies. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or content blocking.

S

SIL Global

sil.org

63

SIL Global is a well-established, faith-based nonprofit organization dedicated to language development and community empowerment worldwide. Their website reflects a professional and comprehensive digital presence, offering extensive resources, training, and services in linguistic research, literacy, translation, and language technology. The organization targets diverse global communities and language professionals, emphasizing equal access to education and socio-economic opportunities regardless of language barriers. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses standard web technologies including jQuery and Font Awesome. It is mobile-optimized and accessible, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and secure form handling, though the absence of certain security headers and explicit cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain registration trust verification, but the presence of recognized nonprofit certifications and consistent branding supports legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance.

M

miniOrange

xecurify.com

68

The website login.xecurify.com/moas/login serves as a secure login portal for miniOrange, a company specializing in identity and access management solutions such as Single Sign-On and Multi-Factor Authentication. The portal is designed for business and enterprise users requiring secure authentication services. The site uses modern frontend technologies including Bootstrap, jQuery, and Select2, ensuring a responsive and user-friendly experience. However, the page is minimalistic, focusing solely on login functionality without additional content such as privacy or cookie policies. From a security perspective, the site enforces HTTPS and uses cache-control headers to prevent sensitive data caching. The login form includes CSRF tokens, enhancing security. Nonetheless, the absence of key security headers like Content-Security-Policy, HSTS, and Referrer-Policy represents an area for improvement. No signs of WAF or security challenge blocking were detected, allowing full content access. WHOIS data for the subdomain login.xecurify.com is unavailable, which is typical for subdomains. The main domain xecurify.com likely holds the registration. The branding and technical setup align with a legitimate business operation. The lack of privacy and cookie policies on this login page reduces privacy compliance scores. Overall, the site demonstrates a moderate security posture and good business credibility but would benefit from enhanced privacy and security header implementations.

E

Zážitkový vlak KDS – Pronajímáme vlakovou soupravu a motorový vůz, které umožňují klientům prožít večírek originálním způsobem na kolejích. Nabízíme služby eventové agentury, jejímž hlavním cílem je nenechat klienta na holičkách.

event-zazitkovyvlak.cz

55

The website event-zazitkovyvlak.cz represents a small Czech business specializing in the rental of train sets and motor vehicles for unique event experiences, alongside event agency services. The business targets clients looking for original party venues on rails, positioning itself as a niche provider in the transportation and event management sectors. The website is built on WordPress with Elementor, indicating a moderate level of digital maturity and ease of content management. The presence of Cookiebot and Google Tag Manager shows awareness of privacy and analytics needs, although no explicit privacy policy or terms of service pages were found, which is a compliance gap. Security posture is adequate with HTTPS and consent mechanisms, but lacks advanced security headers and incident response information. Overall, the website is functional and professional but could improve in privacy and security transparency.

Z

zonasvobody.cz

zonasvobody.cz

41

Zóna svobody is a small hospitality and event venue based in Říčany, Czech Republic, offering refreshments, cultural activities, and entertainment for a broad audience including families and children. The website presents information about events, food and beverage offerings, and community programs, positioning itself as a local cultural hub. Technically, the site is built on WordPress with common libraries such as jQuery and Font Awesome, and it is moderately optimized for mobile devices with a good user experience. Security posture is basic with HTTPS enabled but lacking important security headers and privacy policies, which are critical for GDPR compliance. The absence of contact emails and phone numbers reduces business credibility and user trust. Overall, the site is functional and informative but would benefit from enhanced security and compliance measures.

U

UnisSoft s.r.o.

hairsoft.cz

38

HairSoft.cz is a professional website offering a comprehensive beauty salon management software solution developed by UnisSoft s.r.o. The software targets beauty salons, hairdressers, cosmeticians, and wellness providers primarily in the Czech and Slovak markets. The company emphasizes efficiency, modularity, and practical features derived from 25 years of industry experience. The website is well-designed, mobile-optimized, and rich in content including testimonials, detailed feature descriptions, and trial offers. Technically, the site uses Joomla CMS with modern frameworks and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS and CSRF protections, though some security headers and privacy compliance mechanisms are missing. WHOIS data is unavailable, which slightly reduces trustworthiness but the business information and website professionalism compensate for this. Overall, the site is a credible and valuable resource for its target audience.

U

UnisSoft s.r.o.

unisbook.cz

47

UnisSoft s.r.o. operates the UnisBook platform, a specialized online reservation system tailored for beauty and salon services. The company targets beauty professionals seeking efficient, automated booking solutions with features such as multi-branch management, client communication automation, and integration with payment gateways. The website demonstrates a mature digital presence with a professional design, clear navigation, and multilingual support, indicating a well-developed technical infrastructure based on Joomla CMS and modern web technologies. Security posture is solid with HTTPS and CSRF protections, though some security headers and cookie consent mechanisms could be improved. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business credibility is supported by detailed policies, partner integrations, and active social media channels. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and improving accessibility features to further strengthen trust and compliance.

V

VELAE LEGAL GROUP

velaelegalgroup.com

10

VELAE LEGAL GROUP is an established international full-service law firm with offices in Spain and Latin America, providing comprehensive legal services to multinational and middle market clients. The firm leverages over 40 years of combined experience from predecessor firms and is recognized by leading legal directories. The website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy policies. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site demonstrates strong business credibility but would benefit from enhanced privacy compliance and security best practices.

The website www.zaragoza.es/sede/ is the official electronic headquarters of the Ayuntamiento de Zaragoza, serving as a comprehensive digital platform for municipal services, citizen information, and electronic administration. It offers a wide range of services including public employment offers, cultural agendas, citizen participation, and access to various municipal resources. The site targets residents and visitors of Zaragoza, providing a government-backed, authoritative source of information and services. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and FontAwesome, with integrations for Google Tag Manager and Google Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and shows good security practices, though explicit security headers and a cookie consent mechanism could be improved. The WHOIS data is unavailable due to access restrictions, but the domain is a recognized official government domain, lending high legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical digital interface for Zaragoza's municipal government.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

A

Agence Bio

agencebio.org

60

Agence Bio is the official French agency dedicated to the development and promotion of organic agriculture. It serves as a governmental and non-profit entity focused on raising awareness, providing data, funding projects, and communicating the benefits of organic farming to various stakeholders including consumers, producers, distributors, and the general public in France. The agency maintains a strong market position as the authoritative source for organic agriculture information and support in France. Technically, the website is built on a modern WordPress CMS platform with Elementor page builder and enhanced SEO via Yoast. It integrates multiple marketing and analytics tools such as Google Tag Manager, Matomo, and Sendinblue, indicating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and a published security.txt file. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits domain trust verification, though the website content and official tone strongly suggest legitimacy. Overall, Agence Bio presents a professional, trustworthy, and content-rich platform supporting organic agriculture in France. Strategic improvements in security headers, privacy policy transparency, and incident response disclosures would enhance its security posture and compliance.

A

AVSF - Agronomes & vétérinaires sans frontières

avsf.org

68

AVSF - Agronomes & vétérinaires sans frontières is a French non-profit organization dedicated to supporting peasant communities through sustainable agricultural development and agroecology. With 45 years of experience, AVSF works closely with farmers to promote food autonomy, economic resilience, and environmental preservation. The organization operates multiple projects focused on agroecology, animal health, fair trade, crisis recovery, and gender equality. Their business model relies on donations and partnerships, supported by a professional website with multilingual content and integrated donation forms. Technically, the website is built on WordPress with Elementor and uses modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy compliance could be improved. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is justified for an NGO. Overall, AVSF presents a credible and professional digital presence aligned with its mission.

T

Team TotalEnergies Pro Cycling

teamtotalenergies.com

56

Team TotalEnergies Pro Cycling operates a professional cycling team website presenting team members, race calendars, news, photos, and videos. The site targets cycling enthusiasts and sponsors, leveraging a WordPress CMS with modern plugins and integrations such as Yoast SEO and social media feeds. The technical infrastructure is solid, hosted on Azure DNS with HTTPS and Google Tag Manager for analytics. Security posture is good with no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present and GDPR compliant with consent mechanisms. No direct contact emails or phone numbers are published, which may limit direct communication. Overall, the site is professional, well-branded, and trustworthy with a strong social media presence.

U

UNIVERSEH

universeh.eu

44

UNIVERSEH is a European Space University dedicated to providing high-level education and research programs focused on space studies. It operates as a consortium of European universities and research institutions, offering courses, mobility programs, and research projects to students, researchers, staff, stakeholders, and citizens interested in space and humanity. The website reflects a well-structured and professionally designed platform with a clear focus on education and research in the space sector. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, and it integrates Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not detected and incident response information is absent. Overall, the domain registration is consistent with the business purpose, registered through BELNET, a reputable academic registrar. The site maintains a strong social media presence, enhancing its trustworthiness and outreach.

Ú

ÚSTAV PRO STÁTNÍ KONTROLU VETERINÁRNÍCH BIOPREPARÁTŮ A LÉČIV

uskvbl.cz

53

Ústav pro státní kontrolu veterinárních biopreparátů a léčiv (ÚSKVBL) is a Czech government institute responsible for the regulation and state control of veterinary biopreparations and medicines. The website serves as an official portal providing access to databases of registered veterinary medicinal products, safety warnings, and professional information targeted primarily at veterinarians and applicants in the veterinary pharmaceutical sector. The site is positioned as a trusted national regulatory authority with a clear government mandate. Technically, the website is built on Joomla CMS and leverages modern web technologies including jQuery, Bootstrap, and Google Fonts. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a secure SSL configuration and implements a cookie consent mechanism compliant with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration trust analysis, but the official nature of the site, consistent branding, and domain-matching contact information support its legitimacy. No advertising or tracking scripts are present, indicating a privacy-conscious approach. Overall, the website is professional, secure, and compliant with privacy regulations, serving its role as a government regulatory platform effectively. Strategic improvements include adding security headers, publishing security policies, and enhancing WHOIS transparency to strengthen trust and security posture.

O

Online-textil.sk

online-textil.sk

55

Online-textil.sk is a medium-sized e-commerce business specializing in promotional textiles such as t-shirts, polo shirts, sweatshirts, jackets, and accessories with options for custom printing and embroidery. The company targets businesses and individual customers primarily in Slovakia, Czech Republic, and the broader EU market. It positions itself as one of the largest e-shops for promotional textiles in Slovakia, offering bulk order capabilities and a wide product range. The website is professionally designed with clear navigation and consistent branding, supporting a positive user experience. Technically, the website uses modern JavaScript libraries including jQuery and Owl Carousel, integrates Google Tag Manager for analytics, and employs Cookie Script for cookie consent management. Hosting and DNS are managed via Cloudflare, providing reliable infrastructure and basic security protections. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. There is no published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional with a solid business presence. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility compliance to strengthen trust and regulatory adherence.

O

Online-textil.com

online-textil.com

60

Online-textil.com is a medium-sized e-commerce business specializing in promotional textiles and related printing and embroidery services. Established in 2017, it serves primarily the Czech Republic and Slovakia markets with EU-wide delivery options. The website offers a broad product catalog including T-shirts, polos, sweatshirts, jackets, and accessories under various collections such as Malfini and Piccolio. The business targets companies and government entities requiring high-volume orders and custom branding solutions. Technically, the website employs modern JavaScript libraries like jQuery and Owl Carousel, integrates Google Tag Manager for analytics, and uses Cloudflare for DNS and hosting. The site is mobile-optimized with good navigation and content relevance, though it lacks a CMS indication and some advanced accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and security headers, and does not publish security or privacy policies, which are compliance gaps. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business. Recommendations include adding privacy and terms of service pages, enabling DNSSEC, and improving security headers to enhance trust and compliance.

M

moulin-de-la-bree

moulin-de-la-bree.fr

37

The Moulin de La Brée is a recently established cultural museum located on the Ile d'Oléron, France, dedicated to preserving and showcasing the island's cereal traditions and historic windmills. The museum offers interactive exhibits, guided visits, workshops, and an on-site restaurant, targeting families, school groups, and tourists including those with disabilities. The website reflects a professional and consistent brand presence, supported by certifications such as 'Tourisme et Handicap' and 'Famille Plus', and positive customer reviews. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by OVH, and incorporates privacy-respecting analytics and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA, though explicit security headers and a formal security policy are absent. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

M

maison-eco-paysanne

maison-eco-paysanne.fr

41

La Maison éco-paysanne is a cultural and educational establishment located on the Île d'Oléron, France, managed by the local community of communes. It focuses on traditional architecture, sustainable habitat, and eco-citizenship, offering guided visits, workshops, events, and eco-construction training to a broad audience including families, schools, and groups. The website reflects a well-maintained digital presence with clear branding and comprehensive content that supports its mission. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is well addressed with visible policies and consent mechanisms. The absence of WHOIS data limits domain trust assessment but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and CMS.

The website represents the Association du Site ostréicole et naturel de Fort-Royer, a small non-profit organization dedicated to preserving and promoting the oyster farming heritage and natural environment of Fort-Royer in Oléron, France. The site offers educational workshops, public animations, and guided visits to a unique oyster farming village located within a national nature reserve. The association has been active for over 30 years, consistent with the domain registration dating back to 2010. Technically, the website is built on WordPress 6.8.3 using the Neve theme and several plugins including MetaSlider and Contact Form 7. It is hosted by a reputable provider (1&1 Internet SARL) and uses HTTPS with a good SSL configuration. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended such as adding security headers and properly configuring analytics. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. No security policies or incident response contacts are published, and no security.txt file is present. The Google Analytics plugin is installed but not configured, indicating minimal user tracking. Privacy and cookie policies are missing, which is a compliance gap under GDPR. Overall, the website is trustworthy and professional, serving a niche eco-tourism and cultural heritage audience. The main risks relate to privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

L

Le Port des Salines

port-des-salines.fr

40

Le Port des Salines is a regional tourism and cultural heritage site located on the Île d'Oléron in France. It offers visitors a rich experience centered around the traditional salt marshes, including an ecomuseum, guided tours, boat rides, educational workshops, and group activities. The website is well-structured and provides clear contact information, social media presence, and detailed descriptions of services, targeting tourists, families, and educational groups. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and user engagement, showing a moderate to good level of digital maturity. Security measures include HTTPS and Google reCAPTCHA, though some security headers are missing and no explicit incident response information is provided. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for visitors interested in the natural and cultural heritage of the region.

Thermomix Mexico operates as a leading retailer of advanced kitchen appliances, specifically promoting the TM7 model with integrated digital recipe services. The company leverages a strong online presence with a WordPress-based website, offering product demos, community engagement, and e-commerce capabilities. The website is well-structured, mobile-optimized, and incorporates modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS and secure forms, though improvements in security headers and vulnerability disclosure are recommended. Overall, the site reflects a reputable and professional brand with high trustworthiness and user experience.

The International Ayurveda Congress website serves as a professional platform for organizing and documenting international Ayurveda congresses. It is operated by a coalition of Ayurveda-focused organizations, primarily the International Maharishi AyurVeda Foundation. The site offers extensive archives, event details, and educational resources targeting healthcare professionals, researchers, and policymakers interested in Ayurveda. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and privacy compliance. Overall, the website is legitimate, well-established, and trustworthy, though it could enhance user privacy and security transparency.

A

Ascendoor

ascendoor.com

66

Ascendoor is a small technology business specializing in the development and sale of WordPress themes and plugins, offering both premium and free options. The company provides additional services such as theme customization and dedicated customer support, positioning itself as a one-stop solution for WordPress users seeking quality design and functionality. The website is professionally designed with good SEO practices and mobile optimization, reflecting a mature digital presence for a business founded around 2020. Technically, the site runs on WordPress 6.7.4 with common plugins for SEO, forms, and cookie management, and integrates Google Analytics and reCAPTCHA for tracking and security. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. No critical security or content safety issues were detected.

EtIndonesia is an Indonesian media website focused on delivering news, inspirational stories, and video content primarily to an Indonesian-speaking audience. The site covers a broad range of topics including national and international news, family, mystery, health, and science. The business model appears to be online media publishing monetized through advertising, notably Google AdSense. The website uses WordPress CMS with several tagDiv plugins and integrates Google Analytics for user tracking. Hosting and DNS are managed via Cloudflare, providing some security and performance benefits. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact or incident response information is published, limiting transparency. Overall, the site is functional, mobile-optimized, and professionally designed but would benefit from enhanced security and privacy compliance measures.

F

Fabrx

fabrx.co

54

Fabrx is a small technology-focused business specializing in providing high-quality design systems, UI kits, and templates for designers, developers, and startups. Their offerings include assets compatible with Figma, Sketch, Adobe XD, and Bootstrap 5, aimed at accelerating design workflows. The website is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Paddle for payment processing. The site demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit incident response contacts. Overall, Fabrx presents a credible and professional online presence with room for enhanced privacy and security practices.

I

Institute of Indic Wisdom

iiwisdom.org

49

Institute of Indic Wisdom (IIW) is a small non-profit organization founded in 2023, focused on translating timeless Indic wisdom into contemporary leadership and personal growth practices. The website presents a professional and consistent brand with clear navigation and relevant content targeting leaders, entrepreneurs, and individuals seeking transformational learning. Technically, the site is built on WordPress with modern libraries like Bootstrap and Swiper, hosted by GoDaddy. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, matching the organization's founding timeline.

T

The EpochTimes Türkiye

epochtimestr.com

49

The Epoch Times TR is a Turkish-language online media company established in 2010, providing news, opinion, and cultural content focused on Turkey and global affairs. The website is well-structured, uses WordPress CMS with popular plugins, and integrates social media channels to engage its audience. It targets Turkish-speaking readers interested in current events and cultural topics. Technically, the site employs modern web technologies, including HTTPS, Google Analytics, and Google AdSense for monetization, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protection statuses, but lacks advanced DNS security and published security policies. Privacy compliance is basic, with privacy and cookie policies present but no explicit GDPR compliance indicators. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in security and privacy transparency.

T

The Epoch Times

epochtimes.sk

58

The Epoch Times Slovensko is an independent Slovak media outlet focused on delivering accurate and independent journalism to the Slovak-speaking public. Founded in 2000, it operates primarily as an online news platform offering articles, videos, and commentary. The website leverages WordPress CMS with modern front-end technologies such as Bootstrap and Font Awesome, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms via OneTrust indicates compliance awareness with GDPR regulations, although explicit privacy and terms policies are not found in the provided content. Security posture is solid with HTTPS enforced and standard tracking and advertising scripts in use, but could benefit from enhanced security headers and published security policies. Overall, the site is accessible without WAF or blocking mechanisms, providing safe content suitable for general audiences. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims.

S

Stellar Media s.r.o.

vltavskykuryr.cz

57

Vltavský Kurýr is a Czech regional news media website operated by Stellar Media s.r.o., focusing on news, culture, travel, and local events around the Vltava river region. The site targets a general audience interested in regional updates and cultural happenings. Technically, the website is built on WordPress with a modern theme and uses common web technologies such as jQuery and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and structure appear legitimate and professional. Overall, the site is a functional regional news portal with moderate technical maturity and some compliance gaps.

N

Nová Večerní Praha

sport19.cz

56

SPORT19 is a Czech-language online sports magazine operated by Nová Večerní Praha, focusing on a variety of sports including motorsport, jachting, cycling, and triathlon. The website provides news articles, event coverage, and features targeting Czech sports enthusiasts. The site is built on WordPress with modern web technologies such as Bootstrap and jQuery, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy and terms policies. WHOIS data is unavailable, which slightly reduces trustworthiness but the site content and structure appear legitimate for a small media outlet.

C

Cesty k sobě

cestyksobe.cz

53

Cesty k sobě is a Czech internet broadcasting platform focused on spiritual growth and self-development. It offers a variety of video content, articles, community listings, and a newsletter to engage its audience. The website operates primarily in Czech and targets individuals interested in personal and spiritual development. The business model relies on content publishing supported by advertising and donations, with transparent payment details provided for supporters. The platform has a niche market position within the Czech Republic's spiritual media sector and has been active since 2008 according to website claims. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO and WP Rocket for optimization. It uses Google Tag Manager for analytics and tracking. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS but lacks several recommended security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. WHOIS data is unavailable, which reduces trustworthiness but the website content and business presence suggest legitimacy. Overall, the site is a well-structured niche media platform with good content quality and moderate technical maturity. Security and privacy practices could be enhanced to improve compliance and trust. The absence of WHOIS data is a concern and should be investigated further to confirm domain legitimacy.