Security Directory

I

Ikanos GmbH

ikanos.de

47

Ikanos GmbH is a German-based small technology company specializing in designing and developing websites and applications with a strong focus on user experience, accessibility, and TYPO3 CMS expertise. The company positions itself as a trusted partner for businesses across various industries, emphasizing comprehensive consulting and technical excellence. The website reflects a professional and consistent brand image with clear contact information and client references. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, jQuery, and the Yii framework, with TYPO3 as the CMS platform. The site is mobile optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS and CSRF tokens but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

L

Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI)

lasi-info.com

51

The Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI) is a German government-related committee focused on occupational safety and security technology. The website serves as an authoritative platform providing publications, resources, and coordination information for stakeholders involved in workplace safety across Germany. The organization is well-established with a domain age of over 10 years, reflecting stability and legitimacy. The site targets government agencies, businesses, and safety professionals, offering key services such as safety publications, event information, and strategic cooperation details. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including Bootstrap, Font Awesome, and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the organization's profile, with no signs of suspicious activity. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no advanced security headers or published security policies were detected. There is no visible incident response or vulnerability disclosure information, which could be areas for improvement. Overall, the security posture is solid but could benefit from enhancements to DNS security and transparency. The website content is safe for general audiences, with no adult or questionable material. The site maintains a professional and trustworthy appearance, supporting its role as a government advisory body. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture and user trust.

S

SAS Ligne Web Services - LWS

sitebuilderpro.fr

43

SiteBuilder Pro is a French SaaS company offering an AI-powered website builder targeting small to medium-sized businesses and entrepreneurs. The platform provides an easy drag-and-drop interface, professional templates, and integrated hosting and domain services via its parent company SAS Ligne Web Services - LWS. The website is well designed, mobile optimized, and provides clear pricing and customer testimonials, positioning it as a trustworthy and accessible solution in the website creation market. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosted by LWS in France. Security posture is good with HTTPS and SSL certificates, but lacks visible security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and credible but could improve privacy compliance and security transparency.

V

Vzemi Credit

vzemicredit.com

44

VzemiCredit.com is a Bulgarian online platform specializing in fast loan comparison and referral services. Established in 2016, it aggregates offers from multiple financial companies to provide users with quick access to credit options. The website targets Bulgarian consumers seeking rapid online loans without the need for guarantors or complex procedures. The business model is primarily affiliate-based, earning commissions from partner loan companies such as Credissimo, Smile Credit, and CrediNet. The platform positions itself as a convenient and time-saving tool for loan seekers in Bulgaria.

U

UNISCA

unisca.it

51

UNISCA is an independent Italian association focused on coordinating and aggregating professionals and organizations in the creativity, arts, and entertainment sectors. Founded in 2021, it serves as a platform for idea exchange, advocacy, and sector synthesis. The website reflects a small-sized non-profit entity with a clear mission to support cultural identity and artistic autonomy within Italy. Technically, the site is built on WordPress using Elementor and related modern web technologies, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, DNSSEC, and security headers, though explicit security policies and incident response information are absent. Privacy and cookie policies are present with consent mechanisms, indicating GDPR awareness. Overall, the site is professional, trustworthy, and safe for general audiences.

The Bundeskriminalamt website serves as the official online presence of Austria's Federal Criminal Police Office, a key government agency under the Federal Ministry of the Interior. It provides comprehensive information on crime prevention, investigations, international cooperation, and public awareness initiatives. The site targets the general public, law enforcement professionals, and victims of crime, positioning itself as a trusted national authority in law enforcement. Technically, the website employs a mature technology stack including ASP.NET Web Forms, jQuery, Bootstrap, and various UI libraries, delivering a responsive and well-structured user experience. Security-wise, the site uses HTTPS and implements privacy-conscious social media embeds, but lacks visible security headers and explicit cookie consent mechanisms. The absence of WHOIS data is due to NIC.AT restrictions rather than suspicious activity, and the site exhibits strong trust indicators consistent with a government entity. Overall, the site is professional, secure, and compliant with GDPR, though improvements in security headers and cookie consent would enhance its posture.

TAKT Fest is a cultural festival and traditional singer-songwriter competition based in Novi Sad, Serbia. The website provides detailed information about the event's program segments including music, theater, standup, circus, movies, and creative workshops. The festival targets artists and cultural enthusiasts, positioning itself as a niche event with international participation. The domain is registered since 2020 and is consistent with the festival's recent editions. Technically, the site uses Joomla CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has a good design and user experience. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via a form and social media links. Overall, the site is trustworthy and professional but could improve compliance and security practices.

K

Kolowratovy sady s.r.o.

kolowratovysady.cz

47

Kolowratovy sady s.r.o. is a Czech-based medium-sized company specializing in the cultivation and sale of fruit such as apples, pears, cherries, and potatoes, along with the production of apple juice, cider, lemonade, honey, and mead. The company operates a retail store located in Velké Dvorce near Přimda and holds certifications including SISPO and GLOBALG.A.P, indicating adherence to quality and safety standards. The website reflects a well-established regional producer with a strong local presence and a clear business model focused on both wholesale and retail markets. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, featuring responsive design and moderate performance. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site implements GDPR-compliant cookie consent with an opt-out mechanism and obfuscates email addresses to reduce spam risks. However, there is room for improvement in security headers and explicit security policies. From a security perspective, the site uses HTTPS with good SSL configuration and follows basic best practices such as cookie consent and email obfuscation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance the security posture and user trust.

G

GERMAX Gerli GmbH

germax.net

50

GERMAX media is a well-established marketing and advertising agency based in Aachen, Germany, founded in 2000. The company offers a broad range of services including web design, corporate design, consulting, and campaign management, targeting businesses and public institutions. Their website reflects a professional and consistent brand image with a comprehensive portfolio and client testimonials, indicating a strong market position in the regional media sector. Technically, the site uses a variety of JavaScript libraries and plugins to deliver a responsive and visually appealing experience, though it appears to be custom-built rather than relying on a popular CMS. Security-wise, the site lacks DNSSEC and explicit security headers, and no cookie consent mechanism is implemented despite a detailed privacy policy. The domain registration is consistent with the business claims, showing a mature and legitimate online presence.

C

Clickonometrics

clickonometrics.pl

50

Clickonometrics operates as an advertising technology platform specializing in ad server solutions and campaign management tools for publishers, advertisers, and ad networks. Founded in 2016 and based in Poland, the company offers services including RTB, SSP, DSP, and various advertising pricing models such as CPC, CPA, CPS, and CPM. The website presents a professional and consistent brand image targeting a niche market within the online advertising ecosystem. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized and structured with clear navigation, though accessibility features are basic. Hosting and domain registration are managed through OVH sas, a reputable provider, with domain status flags enhancing domain security. However, no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and has domain-level protections but lacks visible security headers and explicit incident response or security policies. Privacy compliance is minimal, with a basic privacy policy located on a separate opt-out page and no cookie consent mechanism despite the use of tracking scripts. Contact information is not provided on the landing page, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and more transparent business contact information to strengthen trust and regulatory adherence.

B

BNI Osmose & Co

meetsuo.com

61

Meetsuo is a French technology company founded in 2023 that offers a SaaS platform designed to enhance the efficiency and quality of professional business meetings. Their solution targets professional networking groups and meeting organizers, providing tools such as attendance tracking, badge generation, QR code stands, photo directories, PowerPoint generation, satisfaction surveys, guest tracking, and payment management. The company positions itself as a niche provider with clear subscription pricing and positive customer testimonials, indicating a growing presence in its market segment. Technically, the website is built on a modern stack including Bootstrap, jQuery, and various UI libraries, hosted by OVH with DNS managed via Cloudflare. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and Google reCAPTCHA is used on the contact form, but DNSSEC is not enabled and no explicit security headers are detected, representing areas for improvement. Privacy compliance is basic with a privacy policy present but lacking explicit GDPR details. Overall, the website is trustworthy and functional but could benefit from enhanced security and privacy practices.

U

Penzion Švihák lázeňský - Ubytování v Jeseníkách - Velké Losiny

ubytovani-losiny.cz

47

The website www.ubytovani-losiny.cz represents a family-run pension located in the Jeseníky region of the Czech Republic, offering accommodation services with amenities such as a heated saltwater pool, sauna, and breakfast buffet. The business targets families, couples, individuals, and groups seeking comfortable lodging in a spa town environment. The site is well-structured with clear navigation and detailed service descriptions, supporting a positive user experience. Technically, the site employs modern frontend technologies including Bootstrap 4, jQuery, and Slick Carousel, and integrates Google Analytics and reCaptcha for tracking and security. However, the absence of visible security headers and privacy/cookie policies indicates room for improvement in security and compliance. The WHOIS data is unavailable, which limits domain legitimacy verification and slightly impacts trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

D

David Chelly

davidchelly.fr

36

David Chelly is a seasoned digital entrepreneur specializing in domain names and website monetization with over 25 years of experience. The website positions itself as a trusted expert in domain name consulting, web marketing, and digital strategy, targeting domain investors and digital entrepreneurs primarily in France and French-speaking markets. The business model revolves around consulting, coaching, publishing, and providing digital services related to domain names and web presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be improved. Analytics are implemented via Statcounter with minimal user tracking. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this type of personal business. Overall, the security posture is moderate but could benefit from enhancements in policy transparency and technical safeguards. The overall risk is low to moderate given the professional content and absence of suspicious elements, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Palác Akropolis is a well-established cultural venue and club based in Prague, Czech Republic, with a domain age dating back to 1999. The website serves as a platform to showcase a diverse range of cultural events including music concerts, theater performances, jazz sessions, and other artistic projects. It targets a broad audience interested in cultural and nightlife activities. The business model revolves around event hosting, ticket sales, and cultural programming, positioning itself as a key player in the local cultural scene. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and a cookie consent management tool, ensuring compliance with privacy regulations such as GDPR. The site is mobile optimized and offers a good user experience with clear navigation and professional design. While no major CMS is detected, the site appears to be custom-built or uses a proprietary system. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular categories. However, some security headers like X-Frame-Options and Content Security Policy are not explicitly present, which could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner. Overall, the website is trustworthy, professional, and compliant with relevant privacy laws. It effectively supports the business goals of Palác Akropolis by providing event information, ticketing options, and engaging content. Strategic recommendations include enhancing security headers, continuing to monitor third-party scripts, and possibly adding explicit contact emails and phone numbers for improved user trust and support.

MDDM Brandýs nad Labem - Stará Boleslav is a local educational and cultural institution providing courses, events, camps, and creative workshops primarily targeting children and youth in the Brandýs nad Labem-Stará Boleslav region of the Czech Republic. The organization operates as a non-profit entity with strong community ties and partnerships with local government and cultural organizations. The website reflects a well-maintained digital presence with clear navigation and relevant content for its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various UI libraries, and is mobile optimized with lazy loading for images. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and a formal privacy policy page. WHOIS data is missing, which raises some concerns about domain registration transparency, but the active and professional website presence mitigates this risk to some extent. Overall, the site is trustworthy and serves its community well, but could improve compliance and security practices.

G

Golden Snack s.r.o.

goldensnack.eu

46

Golden Snack s.r.o. is a Czech Republic-based snack manufacturer established in 2000, specializing in pellet snacks, crackers, potato chips, salt sticks, and popcorn. The company is a leading private label producer in the Czech Republic and a significant player in the EU snack market. Their product range includes healthier options under the Vital Snack brand, emphasizing BIO raw materials and reduced fat content. The website is professionally designed using WordPress and Elementor, featuring clear product information and contact details. Technical infrastructure includes modern web technologies and Google services for analytics and reCAPTCHA for form security. Security posture is adequate with HTTPS and CAPTCHA but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies on the site. Overall, the website reflects a legitimate and established business with room for improvement in privacy and security transparency.

Svět kulturistiky is a Czech media website operated by Watch Star Media s.r.o., focusing on bodybuilding, fitness, nutrition, and health content. The site offers articles, training advice, and nutrition tips targeting fitness enthusiasts and bodybuilders primarily in the Czech Republic. The business operates as a niche media outlet with a small company size and a long-established domain since 1998. Technically, the website is built on WordPress with modern libraries such as jQuery and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and presents content professionally with good navigation and SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

D

David Chelly

davidchelly.com

38

David Chelly is a digital entrepreneur specializing in domain names, website monetization, and web strategy with over 25 years of internet experience. The website presents a professional portfolio of services including management of a large network of websites, domain consulting, publishing, and event organization. The business targets internet professionals, domain investors, and web marketing audiences primarily in France and internationally. Technically, the site uses a modern front-end stack with Bootstrap and popular JavaScript libraries, providing a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts compliance and trust. The WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

T

TPF Consultores

tpf.pt

51

TPF Consultores is a well-established Portuguese consulting company specializing in project design and supervision, primarily in the energy and transportation sectors. With over 45 years of experience and a significant workforce, the company positions itself as a leader in infrastructure consulting and project management. Their website reflects a professional and consistent brand image, targeting business and public sector clients internationally. Technically, the website employs modern web technologies and tracking tools, including Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and some recommended security headers, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

I

IM-PACT

im-pact.fr

48

IM-PACT is a specialized consulting firm focused on Building Information Modeling (BIM) services, targeting professionals and companies involved in digital construction modeling. The website presents a professional and consistent brand image, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The technical infrastructure is modern but lacks some advanced security configurations and privacy compliance features. Security posture is moderate with no detected blocking mechanisms or WAF, but absence of security headers and privacy policies lowers the overall security rating. The domain WHOIS data is unavailable, which reduces trustworthiness and raises moderate concerns about domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

iREPORT s.r.o. operates a Czech-language online music and style magazine providing news, concert photo reports, reviews, interviews, video and audio content, exclusive CD/DVD supplements, and contests. The website targets music enthusiasts primarily in the Czech Republic and offers a rich multimedia experience with frequent content updates and an active event calendar. The business model is focused on media publishing with advertising revenue streams and audience engagement through contests and social media. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, and various tracking and advertising scripts such as Google Analytics, Hotjar, and Rubicon Project. The site is mobile optimized and uses HTTPS with a good SSL configuration. Consent management is implemented via Didomi and CPEX CMP, supporting GDPR compliance. However, the site lacks some advanced security headers and explicit contact or security policy information. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but could improve by adding more comprehensive security headers and publishing incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional appearance and operation of the website. Overall, the website is well-designed, content-rich, and compliant with privacy regulations, but the missing domain registration data and limited security policy transparency present moderate risks. Strategic improvements in security posture and transparency would enhance trust and compliance.

C

Cirkuscentrum

manegen.org

9

The website represents Cirkuscentrum, a cultural center focused on circus, variety, and street performance arts in Sweden. It serves a niche audience interested in these art forms and operates likely as a small non-profit or cultural organization. The website is built on WordPress using Elementor and the JupiterX theme, hosted by One.com, and employs modern web technologies such as jQuery and Font Awesome. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled but lacks important security headers and DNSSEC, and no privacy or cookie policies are present. No contact information or incident response details are provided, which limits trust and compliance. Overall, the domain registration is consistent and legitimate, matching the organization's profile and history.

Refdomaine.com is a French independent website dedicated to domain name information, offering news, guides, resources, and consulting services primarily targeting French-speaking domain professionals and enthusiasts. The site positions itself as a niche leader in the French domain name information space, with a consistent brand and good content quality. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted on o2switch.net, with moderate performance and good mobile optimization. Security posture is moderate with no detected HTTPS enforcement or security headers, and no cookie consent mechanism, indicating room for improvement in compliance and security best practices. The domain is registered since 2017 with no privacy protection, consistent with the business profile. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

S

Skeneteau

skeneteau.fr

43

Skeneteau is a French cultural venue located in Monéteau, specializing in live performances including theatre, music, dance, and educational shows for schools. The website presents a well-structured event calendar and ticketing information, targeting local and regional audiences interested in cultural activities. The business operates primarily as a community-focused event venue with a small organizational size and a history dating back to 2015. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by o2switch, and employs modern web technologies such as HTTPS, jQuery, and Font Awesome. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS correctly and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present. The WHOIS data is consistent with the website's identity, showing a legitimate and stable domain registration. Overall, Skeneteau's website is professional and trustworthy but would benefit from enhanced privacy compliance and security header implementation to improve its security posture and regulatory adherence.

Déchets Béziers operates as a public service website providing comprehensive information and support for waste management within the Béziers Méditerranée agglomeration in France. The site offers residents and professionals guidance on waste sorting, collection schedules, recycling centers, and waste prevention initiatives. It serves as an official communication channel for local government waste services, positioning itself as a trusted resource in the region. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Popup Maker, and uses Bootstrap for responsive design. Hosting is provided by OVH, a reputable provider, and the site enforces HTTPS, ensuring secure communications. The site demonstrates moderate performance and good mobile optimization, with structured data implemented for SEO benefits. From a security perspective, the site benefits from HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no evident cookie consent mechanism, which may pose compliance risks under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its public service mission. Strategic improvements in security headers and privacy compliance would enhance its security posture and regulatory adherence.

AW Solutions operates a French public procurement dematerialization platform aggregating over 70,000 annual calls for tenders and related services. The platform targets public sector buyers and suppliers, offering functionalities such as buyer profiles, electronic signature, and AI-powered sourcing. The business is positioned as an important player in the government sector digital services market in France, supported by legal experts and related entities such as awsolutions.fr and aws-france.com. Technically, the website uses a modern but basic tech stack including jQuery, Bootstrap, Google Analytics, and Matomo, with moderate performance and basic mobile optimization. Security posture is adequate but could be improved by adding security headers and cookie consent mechanisms. WHOIS data is not publicly available due to TLD limitations and privacy protection, but the domain is active and appears legitimate based on content and business model. Overall, the website is professional and trustworthy with room for technical and security enhancements.

U

U-B-C

u-b-c.at

58

U-B-C is an Austrian company specializing in cashless payment solutions and customer loyalty programs, partnering with major local providers such as card complete and cards 4 more. The website is built on Joomla CMS with a modern responsive design using Bootstrap 3 and T3 framework, offering a professional user experience targeted at business clients in Austria. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking explicit security policies and incident response contacts. No suspicious or adult content is present, and the domain registration aligns well with the business claims, indicating legitimacy. Overall, the site is well-structured and trustworthy, though improvements in security headers and transparency could enhance compliance and trust.

M

Mad Color | Graphisme & Web

madcolor.fr

48

Mad Color is a small French business specializing in graphic design, artisanal screen printing, and web development services. The company targets local clients seeking creative and digital solutions such as logos, flyers, websites, and print media. The website serves as a portfolio and contact point, showcasing various projects and emphasizing artisanal craftsmanship. Technically, the site is built on WordPress using popular themes and plugins like Bridge, Elementor, and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and ensuring plugin updates. The absence of WHOIS data and privacy/cookie policies indicates compliance and trust gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

R

Rheine. Tourismus. Veranstaltungen. e. V.

rheine-tourismus.de

53

Rheine. Tourismus. Veranstaltungen. e. V. is a local tourism and event promotion organization serving the city of Rheine, Germany. The website provides comprehensive information on sightseeing, events, guided tours, booking options, and local services aimed at tourists and residents. The organization operates as a non-profit association with a focus on enhancing visitor experience and promoting local culture and attractions. The website is well-structured with clear navigation and a professional design consistent with its branding. Social media integration and contact details reinforce its community presence. Technically, the website employs modern web technologies including ExtJS, Swiper.js, Font Awesome, and a consent management system (Klaro). It is hosted with CDN support and uses HTTPS with basic security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Analytics usage is minimal and privacy compliant, with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS and uses secure forms for login. However, it lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the website's local tourism focus, showing no suspicious patterns. Overall, the website presents a low-risk profile with good content quality and technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance. The site is suitable for general audiences and does not contain adult or questionable content.

O

Domain Name News, Publications and Services

onlinestrat.com

51

OnlineStrat.com is a niche website dedicated to providing news, resources, and tools related to the domain name industry. It targets domain investors, industry professionals, and enthusiasts by offering directories of key players, market studies, publications, and event information. The site positions itself as a resource hub within the domain name ecosystem, focusing on education and industry insights. Technically, the website employs a standard modern web stack including Bootstrap for responsive design, jQuery, and various JavaScript libraries for UI enhancements. It integrates third-party services such as Brevo (Sendinblue) for forms and Statcounter for analytics. The site is served over HTTPS, ensuring basic transport security, but lacks advanced security headers and comprehensive privacy or cookie policies. From a security perspective, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS registration data reduce overall trust and compliance posture. The WHOIS data is notably absent, which raises concerns about domain legitimacy and transparency. Overall, the website is functional, professionally designed, and content-rich for its niche. However, it would benefit from improved privacy compliance, enhanced security headers, and clearer business contact information to strengthen trust and regulatory adherence.

Agglo Béziers Méditerranée operates as a French local government entity serving the Béziers metropolitan area, providing a broad range of public services including economic development, urban planning, cultural activities, and public amenities. The website serves as an official information portal targeting residents, businesses, and visitors, with clear navigation and comprehensive content in French. The site leverages WordPress CMS with modern plugins and libraries, ensuring a functional and moderately performant digital presence. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent, though explicit security policies and incident response information are absent. Overall, the domain appears legitimate despite the lack of public WHOIS data, likely due to privacy protection or government registration restrictions.

The website domstocks.asia operates as a specialized platform offering expired domain names primarily for SEO purposes. It targets SEO professionals, website builders, and link sellers, providing a curated selection of domains with good SEO metrics and no spam history. The business model focuses on fixed low pricing without auctions, aiming to serve a broad international clientele, especially in France and Spain. The site content is presented mainly in Chinese with some French, reflecting a multilingual approach to reach diverse markets. Technically, the site uses modern front-end frameworks such as Bootstrap and Material Design Bootstrap, ensuring a responsive and visually appealing user experience. However, the site lacks a CMS indication and detailed hosting information. Security-wise, HTTPS is enabled but lacks advanced security headers and policies, and no incident response or vulnerability disclosure information is provided. The absence of privacy and cookie policies indicates compliance gaps, particularly regarding GDPR. WHOIS data is unavailable due to malformed queries, limiting trust and transparency regarding domain registration details. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and transparency to enhance trust and reduce risk.

D

Domain Name News, Publications and Services

domstocks.com

51

OnlineStrat.com is a niche website dedicated to providing comprehensive resources, news, and tools related to the domain name industry. It targets domain name professionals, enthusiasts, and organizations by offering directories of key players, industry news, publications, and event information. The site positions itself as an information hub within the domain name ecosystem, focusing on education and resource sharing rather than commercial sales or services. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates third-party services such as Google Maps API, Statcounter analytics, and Brevo (Sendinblue) forms. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security hardening. From a security perspective, the site shows a moderate posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of privacy policies, cookie consent mechanisms, and WHOIS registrant data reduces trust and compliance levels. The missing WHOIS data is a notable concern, as it may indicate recent registration or privacy restrictions, which impacts domain legitimacy assessment. Overall, the website is functional, informative, and safe for general audiences, but it would benefit from enhanced transparency, improved security headers, and formalized privacy and contact information to strengthen trust and compliance.

G

Goyer

groupegoyer.ch

58

Groupe Goyer is a well-established Swiss company specializing in the design, manufacturing, and installation of custom façades since 1931. The company operates an industrial process covering conception to installation, ensuring quality, timely delivery, and safety. Their market position is strong within the European construction and manufacturing sectors, supported by certifications such as ISO 45001 and ISO 14001. The website reflects a professional and consistent brand image with multilingual support, targeting construction professionals and industrial clients. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering good performance and accessibility. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are lacking. Privacy compliance is basic with a privacy policy present but no explicit GDPR confirmation. Overall, the site is trustworthy and professionally maintained.

G

GOYER

groupegoyer.com

56

GOYER is a well-established French manufacturing company specializing in panelised façades and bespoke building envelope solutions since 1931. The company serves a European B2B market including architects, construction firms, and developers, offering high-performance aluminium and hybrid timber-aluminium façades. Their website reflects a mature digital presence with multilingual support and detailed business information. Technically, the site is built on WordPress with modern plugins and accessibility features, hosted by OVH sas, a reputable French provider. Security posture is solid with HTTPS, domain locking, and certifications displayed, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and business-focused with no signs of malicious activity or content safety concerns.

S

Sellcodes

sellcodes.com

67

Sellcodes is an online marketplace specializing in the buying and selling of software codes, including themes, plugins, scripts, and software licenses. Founded in 2016, the platform currently operates in a limited capacity, processing payments exclusively for digital products licensed by its partner Inisev. The website targets software developers and digital product creators seeking a marketplace to monetize or acquire code assets. Technically, Sellcodes employs a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, with integrations for payment processing via Paddle and analytics through Google services. The site is hosted with a reputable registrar and uses Cloudflare DNS, ensuring stable domain management and HTTPS security. Security posture is moderate, with HTTPS enforced and CSRF protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is basic, with privacy and terms pages present but no cookie consent mechanism or detailed GDPR indicators. Overall, the website is professionally designed, user-friendly, and safe for general audiences, though improvements in security policies and privacy compliance are recommended.

V

Ville de Balaruc-les-Bains

ville-balaruc-les-bains.com

62

The website ville-balaruc-les-bains.com serves as the official municipal portal for the town of Balaruc-les-Bains in France. It provides comprehensive information about the town's thermal spa services, cultural events, public services, urban planning, and social programs. The site targets residents, tourists, and local citizens, positioning itself as a key information hub for the community. The business model is that of a government entity providing public services and information. The website is well-branded and consistent with municipal identity. Technically, the site is built on Drupal 9 CMS with Bootstrap Barrio theme and uses modern web technologies including Font Awesome and Leaflet.js for maps. Google Tag Manager and reCAPTCHA are integrated for analytics and form security. The site is mobile optimized and accessible with good SEO practices. Hosting appears stable with a domain age since 2003, indicating maturity. From a security perspective, HTTPS is enabled and forms are protected with reCAPTCHA. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy found. Social media presence is strong, enhancing trust. Overall, the website is safe, professional, and trustworthy with moderate security posture and good business credibility. Recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving privacy compliance documentation.

F

Fédération Hiéro Mulhouse

noumatrouff.fr

55

Noumatrouff is a cultural organization and music venue based in Mulhouse, France, operating as Fédération Hiéro Mulhouse. The website serves as a portal for concerts, rehearsal studio bookings, workshops, and membership subscriptions, targeting musicians and local music enthusiasts. The business model relies on event ticketing, studio rentals, and community engagement. The site links to partner platforms for ticket sales and studio reservations, indicating a collaborative ecosystem. Technically, the website is built on WordPress with common plugins for galleries, forms, and cookie management, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy policies. The absence of WHOIS data limits domain trust verification, though the website content and external references suggest legitimacy. Overall, Noumatrouff presents as a professional cultural entity with room for improvement in privacy and security transparency.

L

Les Ateliers Grandis

lesateliersgrandis.fr

43

Les Ateliers Grandis is a French artisan manufacturer specializing in luxury clothing, with a strong heritage dating back to 1993. The company focuses on delivering refined, rare, and precious garments that reflect technical mastery and excellence in craftsmanship. Their market position is solid within the luxury fashion manufacturing sector, serving prestigious couture houses and emphasizing quality and tradition. The website reflects this positioning with professional design, clear navigation, and detailed business descriptions. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and SEO, and includes a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and professionally maintained, with clear contact information and social media presence supporting legitimacy.

Entreprendredanslorne.com is a regional business facilitation platform focused on supporting companies seeking to establish operations in the Orne department of Normandy, France. The website offers services including project accompaniment, real estate and land search, public aid identification, and networking with local actors. It positions itself as a key regional player providing a free and tailored support network for business implantation. The site is linked to regional government entities, enhancing its credibility. Technically, the website employs a modern front-end stack including Bootstrap 3.3.7, jQuery, Font Awesome, Google Fonts, and interactive components like FlexSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and SnapEngage chat for user engagement and analytics. Security measures include HTTPS with reCAPTCHA v3 on forms, but lack explicit security headers and cookie consent mechanisms. The security posture is moderate with good SSL configuration and secure form handling, but improvements are needed in security headers and privacy compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details suggest a legitimate regional business service. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency. Strategically, verifying domain registration and adding explicit privacy and security policies would strengthen trust. Enhancing security headers and cookie consent would improve compliance and user trust. Continued monitoring of third-party scripts and analytics is recommended to mitigate potential vulnerabilities.

S

Species360

species360.org

61

Species360 is a reputable non-profit organization specializing in providing a global database and information system for zoos, aquariums, and wildlife conservation entities. Their platform supports animal data management and conservation efforts worldwide, positioning them as a leader in zoological data services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to their specialized audience. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and maintaining good performance and mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration details align well with the organization's history and legitimacy, supporting a high trust score.

NRW Partner Zoo is a consortium of 12 major zoos and animal parks in North Rhine-Westphalia, Germany, focused on conservation, education, and providing visitor benefits such as discounted entry. The website is well-structured, informative, and targets families, zoo visitors, and conservation enthusiasts. Technically, it uses modern front-end frameworks like Bootstrap and jQuery, with responsive design and conditional Google Analytics tracking respecting user consent. Security posture is moderate with cookie consent implemented and anonymized analytics, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and strong partner representation.

C

Commune de Villefargeau

villefargeau.fr

63

The website www.villefargeau.fr serves as the official online presence for the commune of Villefargeau in the Yonne department of France. It provides municipal information, local news, event calendars, administrative procedures, and contact details aimed primarily at residents and visitors. The site is positioned as a local government portal with a focus on community engagement and public service. Technically, the site uses a variety of JavaScript libraries including jQuery, Leaflet for mapping, and Jssor Slider for image slideshows, all managed via the WebSee CMS platform. The site is mobile-optimized and accessible, with a clear navigation structure and cookie consent mechanisms in place. Security-wise, the site enforces HTTPS but lacks visible HTTP security headers and formal incident response or vulnerability disclosure information. The absence of WHOIS data reduces domain trustworthiness, though the official nature of the site and consistent branding mitigate concerns. Overall, the site is functional and professional but could improve security posture and transparency.

L

Le Tambour

assoletambour.com

52

Le Tambour is a French non-profit cultural association founded in 2001, dedicated to literary diffusion by connecting literature with other art forms. The organization offers writing workshops, public readings, theatrical performances, and text montages aimed at diverse audiences including schools and urban communities. The website reflects a professional and consistent brand presence with clear contact information and regional partnerships. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

H

Horizon Project Management

hpmgroupe.com

43

Horizon Project Management (HPM) is a Moroccan-based engineering and project management company specializing in construction project oversight, technical studies, and consultancy services. Established in 2010 and now part of the Ingérop group, HPM serves both private and public sector clients, focusing on real estate, hospitality, transportation, and industrial sectors. The company offers key services including project management assistance, delegated project management, and technical project execution. Their website reflects a professional presence with clear service offerings and client references, targeting construction developers and project owners primarily in Morocco and Africa. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Maps API, hosted by OVH sas. While the site is mobile-optimized and well-structured, some technical issues like a Google Maps loading error and lack of advanced security headers are noted. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

Zoologická zahrada Ústí nad Labem operates as a regional zoological garden in the Czech Republic, providing animal exhibits, educational programs, and visitor services. The organization is supported by the statutory city of Ústí nad Labem and maintains affiliations with international zoological associations, enhancing its credibility and conservation efforts. The website targets families, schools, and tourists, offering multilingual content and an e-shop for merchandise. Technically, the site is built on ASP.NET WebForms with a custom CMS, integrating modern web technologies such as Google Analytics and social media SDKs. The site is mobile-optimized with good navigation and content quality. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and privacy policy documentation. The absence of WHOIS data limits domain legitimacy verification, though the website content and affiliations suggest a legitimate non-profit entity. Strategic recommendations include adding explicit privacy and terms policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

E

Eezy LLC

brusheezy.com

60

Brusheezy, operated by Eezy LLC, is a well-established online platform offering a vast collection of free and premium Photoshop brushes and related graphic design resources. The website targets graphic designers and digital artists seeking high-quality Photoshop assets. It operates a freemium business model, providing free downloads alongside premium subscription options for unlimited access. The site enjoys a strong market position within the digital media resource niche, supported by a vibrant community and a network of related sites such as Vecteezy and Videezy. Technically, Brusheezy employs a modern technology stack including JavaScript libraries, analytics tools like Google Analytics and Snowplow, and advertising frameworks such as Freestar and Google DoubleClick. The site is mobile-optimized with good SEO practices and uses HTTPS to secure user interactions. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. From a security perspective, the site demonstrates good practices including HTTPS enforcement and CSRF protection in forms. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Brusheezy presents a low-risk profile with a professional online presence and comprehensive content offerings. The main concern is the absence of WHOIS data transparency, which slightly impacts trust but does not detract significantly from the site's legitimacy. Strategic improvements in security policy publication and WHOIS transparency would enhance its credibility and compliance standing.

P

Trouvez un paysagiste qualifié près de chez vous. Devis gratuit

paysagistes.pro

50

The website www.paysagistes.pro appears to be a professional service site related to landscaping, primarily targeting a French-speaking audience. The site is built on WordPress and utilizes common web technologies such as Font Awesome and Google Maps API for icons and location services. However, the content provided is minimal and mostly technical resources, with no visible business descriptions, contact information, or privacy policies. The WHOIS data is unavailable or protected, which limits the ability to fully verify the domain's legitimacy and ownership details. The site is accessible without any WAF or security challenge blocking access.

B

Brain Behind Ltd

brain-behind.com

53

Brain Behind Ltd is a UK-based medium-sized company founded in 2005, specializing in high-volume loyalty and mission-critical loyalty solutions integrated with existing payment terminals. The company serves a diverse B2B audience including financial institutions, retailers, tourism operators, and urban mobility planners. Their product suite includes enterprise vouchers, loyalty programs for banks, tourism solutions, and contract farming administration systems. The website reflects a mature business with a consistent brand and strong partner ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, hosted on UKFast infrastructure. Security posture is moderate with room for improvement in DNSSEC and HTTP security headers. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reliable provider of payment and loyalty solutions.