Security Directory

I

INSOR AG

editionmaulhelden.com

41

Edition Maulhelden is a small Swiss cultural publishing platform specializing in literary works, performances, and autobiographical writing workshops. The website is professionally designed using TYPO3 CMS and integrates multimedia content such as videos and podcasts. The business targets German-speaking literature enthusiasts and operates with a niche cultural focus. Technically, the site uses modern web technologies including jQuery, Webflow CSS, and Google Analytics with IP anonymization, but lacks some advanced security headers and cookie consent mechanisms. The domain registration is consistent with the business timeline, and no suspicious patterns were detected. Overall, the website demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

Lenos Verlag AG is an independent Swiss book publisher specializing in literature from Switzerland and international works, with a particular focus on Arabic literature, thriller novels, and topical non-fiction. The company operates a professional website that showcases its book catalog, author information, upcoming events, and ordering options. The business targets readers interested in diverse literary genres and cultural topics, maintaining a niche market position within the Swiss and international publishing landscape. The website supports user engagement through newsletter subscriptions and social media channels, enhancing its community reach. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Typekit fonts, managed via the Kirby CMS platform. It integrates privacy-respecting analytics (Plausible) and offers a responsive design optimized for mobile devices. While performance is moderate, the site provides clear navigation and good SEO practices. However, some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Yet, it lacks several recommended security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the security posture is solid but could benefit from improvements in headers and transparency. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No blocking or WAF mechanisms interfere with content access, allowing full analysis. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing accessibility to further strengthen trust and compliance.

Notifier Italia Srl is a medium-sized Italian company specializing in fire detection, security, and evacuation systems. As a subsidiary of Honeywell, it holds a significant position in the Italian market, offering a broad portfolio of products and professional training services targeted at installers and security professionals. The website reflects a professional business model focused on B2B distribution and technical support. Technically, the site uses modern JavaScript libraries such as jQuery and bxSlider, integrates Google Analytics for tracking, and employs OneTrust for cookie consent management. The hosting appears to be via Akamai CDN, contributing to moderate performance and availability. Security-wise, the website enforces HTTPS, uses Google reCAPTCHA for form protection, and manages cookie consent properly. However, it lacks some advanced security headers and a public security policy or vulnerability disclosure page. Overall, the site is trustworthy, well-branded, and compliant with GDPR through linked Honeywell privacy policies. The absence of exposed sensitive data and the consistency of WHOIS data with company information further support its legitimacy.

Die Nacht der 1000 Lichter is a well-established non-profit religious event organized primarily by the Katholische Jugend der Diözese Innsbruck and other Austrian dioceses. The website serves as an informational and engagement platform for a liturgical event held annually on October 31st, attracting tens of thousands of visitors across Austria and South Tyrol. It provides event details, multimedia content, and contact information for organizers across multiple dioceses. The target audience includes youth groups, church communities, and the general public interested in religious and cultural events. The business model is community and event-driven without commercial intent, focusing on spiritual and social engagement.

C

Culture et Rencontre

culture-rencontre.ch

51

Culture et Rencontre is a small non-profit cultural and educational organization based in Lancy, Switzerland, offering a variety of adult group courses in languages, arts, culture, body wellness, and internet skills, alongside conferences and cinema programming for children. The organization is subsidized by local communes and the canton, positioning itself as a community-focused provider of cultural enrichment and lifelong learning. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Contact information is clearly presented, enhancing trust and credibility. Overall, the site is professional, trustworthy, and well-aligned with its mission.

W

WELLMADE

wellmade.studio

49

WELLMADE is a London-based digital design and development studio specializing primarily in the music and arts industries. Their website showcases a strong portfolio of clients including notable music labels and creative agencies, positioning them as a niche player in the creative digital services market. The business model focuses on bespoke digital solutions for creative clients, leveraging collaborations and a curated client base to maintain market relevance. Technically, the website employs standard web technologies such as jQuery and Google Analytics, with a modern responsive design that supports good user experience across devices. However, there is room for improvement in accessibility and performance optimization. Security posture is moderate; while no critical vulnerabilities are evident, the absence of security headers and privacy policies indicates gaps in best practices and compliance. The WHOIS data is limited due to privacy protection and unsupported TLD, but no suspicious indicators were found. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

M

Mute Song

mutesong.com

43

Mute Song is a niche media website focused on music licensing, news, and related content. The site targets music industry professionals and artists, offering services such as licensing and music scoring. The website is built on WordPress and uses several JavaScript libraries including jQuery and Isotope, with hosting likely provided by Krystal Hosting. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is average; HTTPS is enabled but no DNSSEC or security headers are present, and the WordPress version is outdated, posing potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is accessible and moderately trustworthy but would benefit from security and compliance improvements.

U

Universitätsmedizin Bayern (UMB) e.V.

unimedizin-bayern.de

45

Universitätsmedizin Bayern (UMB) e.V. is a non-profit association representing the collaboration of Bavarian university medical faculties and university hospitals. Founded in 2017, it aims to promote cooperation in teaching, research, and patient care across six locations in Bavaria. The website serves as an informational and representative platform targeting academic, clinical, and political stakeholders within the Bavarian healthcare ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries, offering a professional and responsive user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are absent. Overall, the site reflects a trustworthy and credible organization with a clear mission and professional presentation.

M

Musikkultur Rheinsberg gGmbH

osterfestspiele-schloss-rheinsberg.de

46

Osterfestspiele Schloss Rheinsberg is a well-established cultural festival and music education organization based in Germany, operating under the parent company Musikkultur Rheinsberg gGmbH. The website showcases a professional and consistent brand presence, offering detailed information about festival programs, visitor info, and related cultural divisions. The technical infrastructure is modern, leveraging WordPress CMS with popular JavaScript libraries and plugins, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a trustworthy and credible cultural institution with clear contact information and active social media engagement.

M

Musikkultur Rheinsberg gGmbH

musikkultur-rheinsberg.de

52

Musikkultur Rheinsberg gGmbH is a well-established cultural non-profit organization based in Germany, offering a broad range of music and cultural events, including concerts, operas, festivals, and educational courses. It operates through three main divisions: the Musikakademie Rheinsberg, the Kammeroper Schloss Rheinsberg, and the Schlosstheater Rheinsberg, serving both professional and amateur musicians as well as cultural audiences. The organization holds a strong market position as a cultural beacon in northern Brandenburg, with a clear focus on music and performing arts. The website is built on a modern WordPress platform utilizing popular plugins such as Yoast SEO, Borlabs Cookie for privacy compliance, and various JavaScript libraries for enhanced user experience. The site demonstrates good technical maturity with responsive design, SEO optimization, and moderate performance. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS and uses privacy and cookie management plugins, but lacks explicit published security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, supporting the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and serves its cultural mission effectively. However, improvements in privacy documentation, security transparency, and accessibility could enhance compliance and user trust.

Ს

საქართველოს ენერგეტიკისა და წყალმომარაგების მარეგულირებელი ეროვნული კომისია

gnerc.org

63

The Georgian National Energy and Water Supply Regulatory Commission (GNERC) operates as a government regulatory authority overseeing the electricity, natural gas, water supply, and irrigation sectors in Georgia. Established in 2001, it maintains a significant national presence with a focus on balancing consumer and enterprise interests, setting tariffs, monitoring markets, and ensuring compliance with regulatory frameworks. The website reflects an active organization with frequent news updates, public communications, and certifications such as ISO 9001:2015, reinforcing its credibility and operational maturity. Technically, the website employs a modern yet standard technology stack including Bootstrap, jQuery, FontAwesome, Owl Carousel, and integrates analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured navigation. However, it lacks explicit privacy and cookie policies, which is a notable gap in compliance and user transparency. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but it does not implement advanced security headers or provide a vulnerability disclosure policy. The domain registration data is consistent with the organization's profile, showing a long-standing and legitimate presence without privacy protection, appropriate for a government entity. Overall, the website is professional, trustworthy, and serves its regulatory function effectively, but improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

Gewerkschaft Bau-Holz operates as a trade union representing workers in the construction and wood industries in Austria. The website serves as a media platform providing news, interviews, thematic videos, and archival content targeted primarily at union members and stakeholders. The organization maintains a consistent brand presence with official logos and social media channels, reinforcing its position as a recognized non-profit entity within Austria. Technically, the website employs standard web technologies including jQuery and Google Fonts, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data limits domain trust assessment, but the website content and external links support legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

E

E.BI.N.VI.P., Ente Bilaterale Nazionale della Vigilanza Privata

ebinvip.it

62

E.BI.N.VI.P. is an Italian bilateral national entity dedicated to the private security sector, established by trade unions and employer associations. The website serves as an institutional portal providing information about the organization's activities, services, and partner network. The site targets companies and workers within the private security industry in Italy, offering services such as certification issuance and social contributions. The business model is non-profit and focused on sector support and labor relations. Technically, the website uses a combination of jQuery, Bootstrap, Fancybox, Owl Carousel, and Cookiebot for cookie consent management, running on OxCMS by LOstudio.it. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security policies or incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

B

Bundesjugendorchester

bundesjugendorchester.de

47

The Bundesjugendorchester website represents a well-established German national youth orchestra focused on cultural and educational activities for young musicians aged 14 to 19. The organization operates under the Deutscher Musikrat umbrella and maintains strong partnerships with prestigious institutions such as the Berliner Philharmoniker. The website provides comprehensive information about the orchestra, concerts, media, and partners, targeting young musicians, cultural supporters, and the general public interested in classical music education. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries including jQuery and a slideshow plugin. Hosting is provided by SchlundTech, and the site uses HTTPS with a cookie consent mechanism compliant with GDPR. The site performance is moderate with good mobile optimization and SEO practices. Analytics are handled via Matomo, ensuring privacy-conscious tracking. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in and revocation options. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent and trustworthy, indicating a legitimate domain registration aligned with the organization's profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its educational and cultural mission effectively. Strategic improvements could include adding explicit security headers, publishing vulnerability disclosure policies, and enhancing accessibility features to further strengthen security and compliance posture.

The website silgeneve.ch serves as the official legislative and legal information portal for the canton of Geneva, Switzerland. It provides access to current laws, federal jurisprudence, and other legal documents relevant to the region. The site is operated by the Service de la législation under the Chancellerie d'Etat of the République et canton de Genève, positioning it as a trusted government resource for legal professionals and the public. Technically, the site employs a standard ASP.NET web forms architecture with jQuery and Bootstrap for frontend functionality and styling. The design is professional and mobile-optimized, though some accessibility and SEO features are basic. Performance is moderate, with no evident use of advanced CMS or modern frameworks. The site does not appear to use third-party analytics or advertising technologies, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS and standard ASP.NET security mechanisms but lacks visible security headers such as CSP or HSTS, which could enhance protection against common web attacks. No privacy or cookie policies are present on the login page, which is a compliance gap. Contact information is clearly provided with official government email and phone numbers, supporting business credibility. Overall, silgeneve.ch is a legitimate, government-operated website with good content quality and business credibility but could improve its privacy compliance and security posture by adding explicit policies and security headers. The risk level is low given the official nature and content safety, but enhancements in security best practices are recommended.

C

Cooperative Cinematographe-Royal

cinematographe.ch

45

The website cinematographe.ch represents Cooperative Cinematographe-Royal, a local cinema cooperative operating in Tramelan and Tavannes, Switzerland. It provides cinema screenings, event hosting, ticket booking, and venue rental services targeting local community members and cinema enthusiasts. The site is professionally designed with consistent branding and rich content focused on upcoming films and events. Technically, it is built on WordPress with modern plugins such as Slider Revolution and Ticketack, ensuring a functional and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS and security headers, though formal security and privacy policies are missing, indicating room for compliance improvements. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the site is trustworthy and well-positioned in its local market but should enhance privacy and security transparency to improve compliance and user trust.

E

EBNT - Ente Bilaterale Nazionale del Turismo

ebnt.it

53

EBNT - Ente Bilaterale Nazionale del Turismo is a national bilateral entity operating in Italy's tourism sector, providing support services such as income support funds, competence systems, labor market initiatives, and research. The organization targets tourism companies and employees, positioning itself as a key non-profit player in the Italian tourism labor ecosystem. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. Technically, the site uses established libraries like jQuery, Bootstrap, and Owl Carousel, with Google Analytics for tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. WHOIS data aligns with the business claims, indicating legitimacy. Overall, the site is trustworthy and serves its audience effectively.

N

NKA Hangfoglaló Könnyűzenei Támogató Program

hangfoglalo.hu

45

The Hangfoglaló website represents a Hungarian non-profit cultural program dedicated to supporting the local easy music scene through funding, events, and artist development. It is affiliated with the National Cultural Fund of Hungary (NKA) and provides various support programs including for emerging artists, concert venues, and international market entry. The site is well-structured, content-rich, and targets musicians, venues, and cultural stakeholders in Hungary. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and OwlCarousel, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and CSRF protections but lacks some security headers and a vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security headers and privacy transparency are recommended.

R

Rat auf Draht

rataufdraht.at

68

Rat auf Draht is a prominent Austrian non-profit emergency helpline and counseling service dedicated to children, youth, and young adults. It offers multiple communication channels including phone, chat, and peer counseling, operating under the well-known emergency number 147. The website reflects a strong national presence with consistent branding and a focus on mental health and social support. Technically, the site uses modern web technologies such as jQuery, Font Awesome, Google Analytics, and Usercentrics for consent management, built on an ASP.NET WebForms CMS platform. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy or terms of service found. Overall, the site is trustworthy, professional, and well-positioned in its sector.

M

Maison Natale Charles de Gaulle

maisondegaulle.fr

54

Maison Natale Charles de Gaulle is a French cultural heritage institution dedicated to the birthplace of Charles de Gaulle. The website serves as an informational and ticketing portal for visitors, offering guided tours, exhibitions, and educational programs. It is operated under the auspices of the Département du Nord, reflecting a strong regional cultural focus. The site targets tourists, local visitors, and educational groups, providing clear contact information and partner affiliations that enhance its credibility. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and GSAP, with Cloudflare DNS and HTTPS ensuring secure access. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. Security posture is good but could be improved by adding security headers and a vulnerability disclosure mechanism. Overall, the site is professional, accessible, and trustworthy, with no signs of malicious content or blocking mechanisms.

PanoramaDanych.pl, operated by WeNet Sp. z o.o., is a well-established Polish company specializing in providing comprehensive databases of firms and entrepreneurs across Poland. With over 25 years of experience, the company offers a variety of data-driven marketing services including telemarketing, market analysis, mailing, geomarketing, and database enrichment. Their extensive and frequently updated database of over 3 million companies positions them as a trusted data provider in the Polish market. The website reflects a professional business model targeting marketers and businesses seeking effective lead generation and market insights. Technically, the website is built on WordPress and leverages modern frontend technologies such as Bootstrap 4, jQuery, and Popper.js. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, indicating a mature digital marketing infrastructure. The site is mobile optimized with good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit security or incident response policies. The WHOIS data is consistent with the business claims, showing a legitimate domain registration with no privacy protection masking. The site complies with GDPR requirements, providing privacy and cookie policies, though it lacks a cookie consent mechanism. Overall, PanoramaDanych.pl presents a credible and professional online presence with strong business credibility and moderate security posture. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

T

TiAM Advisor Services GmbH

advisor-services.de

41

TiAM Advisor Services GmbH operates as a specialized media and service provider in the finance sector, focusing on Private-Wealth-Managers, asset managers, financial advisors, and institutional investors. Their offerings include integrated media content across print, online, and social media, industry events, marketing services, and investment software solutions. The company holds a niche market position with recognized products such as €uro FundResearch and €uro FondsNote, supported by partnerships with established financial publishers and service providers. The website content is professionally presented, targeting finance professionals primarily in Germany.

M

mouvement

mouvement.net

54

Mouvement.net is a French cultural magazine established since 1993, focusing on interdisciplinary arts including dance, theater, visual arts, cinema, music, and literature. The website serves a French-speaking audience interested in cultural content and offers subscription services alongside editorial articles and event coverage. Technically, the site employs modern JavaScript libraries such as jQuery and ScrollReveal, uses Google Tag Manager for analytics, and appears mobile-optimized with a good user experience. However, the absence of WHOIS data raises questions about domain registration legitimacy, although the active and professional nature of the site suggests a legitimate operation. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

Campus Nantes Terre Atlantique is a public educational institution specializing in agricultural education and training, serving the Nantes region and surrounding areas including Saint-Herblain, Guérande, and Nozay. The institution offers a variety of educational pathways including general and technological schooling, professional training, apprenticeships, and adult continuing education. The website reflects a well-structured and regionally focused educational campus with a clear mission to support agricultural career development.

P

PSA Payment Services Austria GmbH

psa.at

64

PSA Payment Services Austria GmbH is a specialized financial services company operating primarily in Austria, focusing on debit card issuing support and ATM acquiring services. Established in 2012 as a successor to PayLife Bank GmbH's relevant operations, PSA positions itself as a key player in the Austrian payment ecosystem, facilitating smart transactions between people and devices. The website reflects a professional and consistent brand image, targeting financial institutions, businesses, and consumers within Austria. The multilingual support indicates a readiness to serve diverse audiences. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. The lack of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, PSA demonstrates a mature digital presence aligned with its business objectives.

A

APECITA

apecita.com

51

APECITA is a specialized employment platform focused on agriculture, agro-food, and environmental sectors in France. It offers thousands of job listings annually and serves as a bridge between candidates and employers, providing tailored services and training resources. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, it employs modern JavaScript libraries and integrates cookie consent and tracking tools responsibly. Security posture is good with HTTPS enforced, though improvements in security headers and formal security policies are recommended. WHOIS data is not publicly available, likely due to privacy protection, which is common for such business domains. Overall, the site presents a trustworthy and credible business front with moderate risk due to limited WHOIS transparency.

L

La Cave aux Poètes

caveauxpoetes.com

57

La Cave aux Poètes is a well-established cultural concert venue located in Roubaix, France, with a history spanning approximately 30 years. The website serves as a digital presence to promote concerts and cultural events, targeting a general audience interested in music and local cultural activities. The business model revolves around event hosting and community engagement, positioning itself as a key player in the local hospitality and entertainment sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, and several plugins for SEO, GDPR compliance, and interactive content. The site demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security posture is moderate with HTTPS enabled and domain status protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

G

Good Type Foundry AS

goodtypefoundry.com

58

Good Type Foundry AS is a small, award-winning Norwegian type foundry specializing in retail and custom typefaces for digital and print use. The company operates an e-commerce platform built on WordPress and WooCommerce, offering a wide range of font products and custom design services. Their market position is niche but reputable, supported by a client list including notable organizations and a consistent brand presence. The website is professionally designed with good content quality and clear navigation, targeting designers and creative professionals. Technically, the website leverages a modern WordPress stack with WooCommerce for e-commerce functionality, enhanced by plugins such as CleanTalk Anti-Spam and Mailchimp integration. Performance and mobile optimization are good, though some accessibility features could be improved. The site uses HTTPS but lacks DNSSEC and certain security headers, indicating room for security enhancements. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and anti-spam measures but lacks visible security policies, incident response information, and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, supporting legitimacy. Overall, the website presents a low risk profile with moderate security posture and good business credibility. Strategic improvements in security headers, privacy compliance, and published policies would enhance trust and compliance.

I

Institut Technologique FCBA

fcba.fr

9

Institut Technologique FCBA is a French industrial technical center specializing in forestry, cellulose, wood construction, and furniture sectors. It provides a range of services including innovation support, environmental performance evaluation, training, laboratory testing, certification, and diagnostics. The organization targets professionals in these industries and holds recognized certifications such as Qualiopi, COFRAC, and ASI, positioning itself as a reputable technical institute in France. The website is built on WordPress with Elementor and uses modern web technologies including jQuery, Bootstrap, and various UI libraries. It features a cookie consent mechanism and is mobile-optimized with good navigation and content quality. However, some images have lazy loading errors, and explicit privacy and terms of service pages are not clearly found, indicating room for improvement in compliance and user experience. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security headers and a vulnerability disclosure mechanism. No WHOIS data was retrievable, limiting domain legitimacy verification, but the website content and structure suggest a legitimate and professional organization. Overall, the website is functional, professional, and trustworthy with recommendations to enhance privacy compliance, security headers, and user experience for improved trust and regulatory adherence.

F

FNAB (Fédération Nationale d'Agriculture Biologique)

agribiolien.fr

43

Agribiolien.fr is a French-language online platform dedicated to organic farmers, providing a specialized marketplace for posting and searching bio-certified agricultural announcements such as sales of forage, land, animals, and agricultural equipment. The platform is supported by the FNAB (Fédération Nationale d'Agriculture Biologique) and partners with Agence Bio, positioning itself as a niche service within the organic agriculture sector in France. The website offers a user-friendly interface with search filters by region, department, and product categories, and includes a video presentation to assist users. Technically, the site employs standard web technologies including jQuery and Bootstrap, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data suggests privacy protection, which is reasonable for this non-profit affiliated site. Overall, Agribiolien.fr demonstrates a solid business and technical foundation with room for security enhancements.

G

Grand Poitiers Communauté urbaine

grandpoitiers.fr

63

Grand Poitiers Communauté urbaine operates as the official urban community government portal for the Grand Poitiers area in France. The website provides comprehensive information and services related to administrative procedures, waste management, transport, culture, sports, urban planning, employment, and environmental initiatives. It targets residents, local businesses, and visitors, positioning itself as a key public service provider in the region. The business model is focused on public service delivery and community engagement rather than commercial revenue generation. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including jQuery, Parsley.js for form validation, and tarteaucitron.js for cookie consent management. The site uses Matomo analytics configured to respect Do Not Track settings, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration trust analysis, but the domain is managed by AFNIC, the French registry, supporting legitimacy. Overall, the website demonstrates a strong commitment to privacy and user experience, with room for improvement in security policy transparency and contact information availability. The risk profile is low, with no indications of malicious activity or content safety concerns.

O

Tout savoir sur le metier d'oculiste

oculiste.fr

34

The website www.oculiste.fr is an informational platform focused on educating visitors about the profession of oculists (ophthalmologists) in France. It provides detailed content on the role, training, income, and distinctions between oculists and opticians. The site targets a general audience interested in eye care professions and related health topics. Technically, the site uses a standard Bootstrap 4 framework with common JavaScript libraries, delivering a moderate performance and good mobile responsiveness. However, it lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies, which also impacts GDPR compliance. The WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site serves as a niche educational resource but requires significant improvements in security, privacy, and business transparency to enhance credibility and compliance.

L

Conseils pour aménager et entretenir le grenier

le-grenier.fr

32

Le-Grenier.fr is a small French informational website dedicated to providing detailed advice and guidance on attic (grenier) renovation, insulation, ventilation, structural assessment, pest prevention, and storage optimization. The site targets homeowners and individuals interested in improving or converting their attic spaces. The business model appears to be content-driven with external links to related health and domain services, likely for SEO or partnership purposes. Technically, the website uses a modern front-end stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization and clear navigation. However, there is no evidence of a CMS or advanced backend platform, suggesting a static or custom-built site. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie policies, which also impacts privacy compliance. The WHOIS data is unavailable, limiting trust and legitimacy verification. Overall, the site is functional and content-rich but requires improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

R

Réseau GAB - FRAB

agrobio-bretagne.org

53

Réseau GAB - FRAB is a well-established regional network dedicated to promoting and supporting organic agriculture in Brittany, France. With nearly 40 years of experience, it serves as a key reference for organic farmers, offering technical advice, training, advocacy, and development of organic farming sectors. The website reflects a professional and consistent brand presence, targeting organic farmers, local communities, and stakeholders in the organic agriculture sector. Technically, the site is built on WordPress with modern libraries and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and no obvious vulnerabilities, though some security headers could be improved. WHOIS data is unavailable, which slightly reduces trust but the overall site content and structure support legitimacy.

N

Nous voulons des coquelicots

nousvoulonsdescoquelicots.org

45

Nous voulons des coquelicots is a French non-profit organization dedicated to environmental advocacy, specifically campaigning for the ban of all synthetic pesticides. The website serves as a platform for raising awareness, mobilizing citizens, and collecting petition signatures. It maintains an active presence through news updates, social media, and community engagement. Technically, the site is built on WordPress, uses modern JavaScript libraries like jQuery, and integrates cookie consent via tarteaucitron.js. Hosting is provided by OVH, a reputable provider. Security posture is solid with HTTPS and cookie consent, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its mission.

V

Ville de Laval

laval.fr

64

The website www.laval.fr is the official digital presence of the city of Laval, France, serving as a comprehensive portal for municipal information, public services, cultural activities, and citizen engagement. It targets residents, visitors, and local businesses, providing a broad range of services and information relevant to the community. The site is well-structured with clear navigation and professional design, reflecting the city's commitment to accessibility and transparency. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Google Fonts, and a robust cookie consent management system (Tarteaucitron.js). Analytics are handled via Matomo, respecting user privacy and Do Not Track settings. The site demonstrates good mobile optimization and accessibility features, although some security headers are not explicitly detected in the provided data. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, indicating a mature approach to privacy compliance. However, the absence of WHOIS data limits domain registration transparency, though this is likely due to AFNIC policies rather than malicious intent. No critical vulnerabilities or suspicious content were identified. Overall, the site presents a low-risk profile with strong business credibility as a government entity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information for privacy and security concerns to further strengthen trust and compliance.

L

Laval Agglomération

agglo-laval.fr

63

Laval Agglomération operates as the official regional government body for the Laval area in the Mayenne department of France. The website serves as a comprehensive portal offering information and services related to economic development, urban planning, public services, tourism, and community engagement for approximately 100,000 residents and over 6,000 businesses. The site is well-structured with clear navigation and targets local residents, businesses, and visitors. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Google Fonts, and employs Matomo for analytics with privacy-conscious configurations such as Do Not Track support and explicit cookie consent management via tarteaucitron.js. Security posture is moderate with room for improvement in HTTP security headers and SSL configuration transparency. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given its official nature and content quality. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting user privacy rights. Overall, the site demonstrates a solid digital presence for a government entity with good content quality and user experience.

P

Pricemania Academy

ecommerce-katalog.sk

42

Pricemania Academy operates the ecommerce-katalog.sk website, a Slovak-language online catalog of verified e-commerce suppliers and service providers. The site targets e-commerce businesses seeking trusted partners and offers detailed service descriptions, references, and benefits. The business model is a niche directory with a focus on quality and trust, leveraging over a decade of experience in online business. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google reCAPTCHA for form security, indicating moderate digital maturity. However, there is no visible privacy or cookie policy, and security headers are not detected, which are areas for improvement. Overall, the security posture is moderate with basic protections in place but lacking advanced security policies. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Strategic recommendations include adding comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve compliance and trust.

S

Střední odborná škola a Střední odborné učiliště, Kaplice

geukaplice.cz

48

The website represents Střední odborná škola a Střední odborné učiliště, Kaplice, a Czech secondary vocational school providing a variety of educational programs including maturitní obory and učební obory. It targets prospective and current students, offering detailed information about courses, events, and school services. The site is well-structured with clear navigation and a professional design, supporting its educational mission effectively. Technically, the site uses modern JavaScript libraries such as jQuery, Flatpickr, and Tippy.js, and is built on the Nette PHP framework. It employs HTTPS and Google reCAPTCHA for security, though some security headers are not visibly set in the HTML source. Privacy and cookie policies are present but lack an explicit consent mechanism. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support its legitimacy as an educational institution.

D

DAGBA.COM

dagba.com

52

DAGBA.COM is a minimalistic business landing page primarily serving as a contact portal for business inquiries. The site offers a simple contact form protected by Google reCAPTCHA to mitigate spam. The website uses modern frontend technologies such as Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, the site lacks detailed business information, privacy policies, or terms of service, which limits its professional and compliance posture. The absence of WHOIS registration data for the domain is a significant concern, suggesting either a recent registration, privacy protection, or a misconfiguration. This discrepancy reduces trust in the domain's legitimacy. Security measures are basic, with no detected security headers, but HTTPS is implied by the use of secure URLs. Overall, the site is functional but lacks depth in business, security, and compliance aspects.

G

Galerie Bijoux Nemesis

bijoux-nemesis.cz

48

Galerie Bijoux Nemesis is a small Czech artisan jewelry business specializing in handmade and original jewelry pieces, including tin jewelry, Swarovski elements, and polymer clay creations. The company also offers jewelry making courses and gift vouchers. Their physical store in Prague is permanently closed, with an emphasis on online sales through their e-shop and social media channels. The website is built on a WebCzech e-shop platform using common JavaScript libraries and Bootstrap for responsive design. While the site is content-rich and user-friendly, it lacks advanced security headers and comprehensive privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the business presence and contact information suggest a legitimate small enterprise.

L

LABE TRI CLUB Hradec Králové z.s.

skolnitriatlon.cz

41

The website skolnitriatlon.cz represents the LABE TRI CLUB Hradec Králové z.s., a small Czech sports organization focused on organizing school and public triathlon events. The site provides event schedules, contact information, and photo galleries to engage its target audience of athletes ranging from school children to general sports enthusiasts. The business model centers on event organization in collaboration with a sports equipment rental partner, Topsports Centrum. The website is modest but functional, with a clear focus on local sports community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, supplemented by Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the business location. The site is mobile-optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and modern tracking tools but lacks visible security headers and formal privacy or cookie policies, which impacts its privacy compliance score. No active forms or incident response contacts are present, and no vulnerability disclosure mechanisms are found. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small local sports event organizer with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

한

한국과학기술원 (KAIST)

kaist.ac.kr

56

KAIST is a prestigious national science and technology university in South Korea, established to foster scientific talent and conduct advanced research aligned with national policies. The website reflects its institutional stature, providing comprehensive academic, research, and campus life information targeted at students, researchers, and stakeholders. The domain is longstanding and registered transparently under the institution's name, reinforcing its legitimacy. Technically, the website employs common web technologies such as jQuery and Bootstrap, with moderate performance and good mobile responsiveness. However, it lacks modern security headers and DNSSEC, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly found, indicating a gap in compliance with modern privacy standards. Security-wise, the site uses HTTPS and does not expose sensitive data, but could benefit from publishing incident response contacts and vulnerability disclosure policies. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to strengthen its digital maturity. The risk assessment is low given the institutional nature and absence of suspicious elements, but strategic improvements in privacy and security policies are recommended to maintain trust and compliance.

České modelky s.r.o. is a Czech Republic based modeling and promotional services agency operating since 2006. The company specializes in providing hostesses, models, plus size models, live mannequins, and promotional staff for events and advertising campaigns. Their website reflects a well-established local business with a strong database of over 22,000 women and girls aged 16-40. The business targets companies and event organizers in the Czech Republic and Slovakia seeking professional promotional personnel. Technically, the website uses modern frontend technologies including Bootstrap and jQuery, with a responsive design and basic SEO optimizations. Security posture is moderate with HTTPS implied and a cookie consent mechanism implemented, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are directly provided on the main page, which slightly impacts user trust and contactability. Overall, the website is professional and trustworthy with room for improvement in security and privacy transparency.

W

World Media Partners, s.r.o.

unesco-czech.cz

60

The website 'Sedmnáct českých divů světa - České dědictví UNESCO' serves as the official portal for the Czech UNESCO heritage association, providing comprehensive information about UNESCO-listed cultural sites in the Czech Republic. It targets a general audience interested in cultural heritage and tourism, offering multimedia content, event calendars, virtual tours, and an e-shop. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages to reach an international audience. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Leaflet for maps, and Matomo for analytics. It is mobile-optimized and demonstrates good SEO practices. However, some accessibility features could be improved. The site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. From a security perspective, the site shows a moderate posture with secure login forms and no exposed sensitive data. The absence of WHOIS data for the domain reduces trust slightly, though the official branding and government funding mention support legitimacy. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security transparency. Overall, the website is a credible, well-maintained informational portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving accessibility to strengthen trust and compliance.

E

Efty B.V.

efty.com

69

Efty B.V. operates a leading global domain name marketplace and portfolio management platform, offering services that simplify buying, selling, and managing domain names. Their product suite includes Efty Investor for portfolio management, Efty Pay for payment processing, and Efty Market as a marketplace platform. The company targets domain investors, businesses, and individuals seeking premium domain names, positioning itself as a trusted and efficient intermediary in the domain industry. The website is professionally designed with clear navigation and comprehensive content, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and Cloudflare services for DNS and security. Analytics are implemented via Google Analytics and Simple Analytics, with user tracking at a moderate level. The site is mobile-optimized and performs well, with fast loading times and good accessibility features. Security is robust with HTTPS enforced, Cloudflare protection, and use of Turnstile captcha on forms, though some security headers and DNSSEC are not enabled. From a security perspective, the site demonstrates good practices with secure transactions and client transfer protection on the domain. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security policy or incident response contacts are areas for improvement. The WHOIS data aligns well with the business claims, showing a long domain age and consistent registration details, supporting legitimacy. Overall, Efty.com presents a trustworthy, professional, and secure platform for domain marketplace services. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing security policies, and enhancing security headers to further strengthen compliance and trust.

P

Pausch.com domain name may be for sale

pausch.com

55

The website www.pausch.com is a parked domain landing page indicating the domain is for sale. It provides a contact form for inquiries with data collection consent and Google reCAPTCHA protection. The site uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, the WHOIS data is unavailable, suggesting the domain may be unregistered or recently expired, which reduces trust and legitimacy. There is no business identity, contact emails, phone numbers, or physical addresses provided, limiting business credibility. The privacy policy is present but basic, and no cookie policy or terms of service pages are found. Security posture is moderate with HTTPS implied and reCAPTCHA in place, but lacks security headers and incident response information.

S

Somfy

somfy.rs

55

Somfy Serbia operates as a regional branch of the global Somfy Group, specializing in home automation products including motors, controls, and smart home solutions for shutters, blinds, gates, alarms, cameras, heating, and lighting. The website targets both consumers and professionals in Serbia, offering a comprehensive product catalog and support services. The brand is well-established with a mature domain and consistent business presence since 2009. Technically, the site uses modern JavaScript libraries, structured data, and performance monitoring tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in DNSSEC and explicit security policies. Privacy compliance is mostly addressed with clear privacy and cookie policies, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and business credible.

S

Somfy

somfy.ro

61

Somfy Romania operates as a regional branch of the global Somfy Group, specializing in smart home automation solutions including motorized blinds, security systems, and energy-efficient products. The website demonstrates a professional and consistent brand presence with a clear focus on residential customers and certified professional installers. The technical infrastructure leverages modern JavaScript libraries, structured data, and is hosted on a reputable CDN provider, ensuring moderate to good performance and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially met with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting Somfy's market position as a leading smart home solutions provider in Romania.