Security Directory

T

The CentOS Project

centos.org

68

The CentOS Project is a well-established, community-driven open source initiative focused on delivering robust Linux distributions, primarily CentOS Stream and CentOS Hyperscale. It serves a broad audience including developers, enterprises, and open source enthusiasts, positioning itself as a key player in the Linux ecosystem closely aligned with Red Hat Enterprise Linux. The project offers extensive community engagement through forums, mailing lists, chat, events, and documentation, supported by a wide range of sponsors and partners. Technically, the website employs modern frontend technologies such as Bootstrap 5, Font Awesome, and Highlight.js, ensuring a responsive, accessible, and performant user experience. The site is well-structured with clear navigation and optimized for mobile devices. Hosting details are not explicitly disclosed, but the site uses HTTPS with strong SSL configuration, though DNSSEC is not enabled. From a security perspective, the site demonstrates good practices including HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers, a published security policy, incident response contacts, and a vulnerability disclosure mechanism. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present, which is a minor compliance gap. Overall, the CentOS website is professional, trustworthy, and technically sound, with a strong community focus. Strategic improvements in security transparency and privacy mechanisms would further enhance its posture and compliance.

C

Conservation International

conservation.org

77

Conservation International is a well-established non-profit organization founded in 1987, dedicated to protecting oceans, forests, and other vital ecosystems globally. The organization targets a broad audience including donors, environmental advocates, and the general public. Their business model focuses on conservation efforts, scientific research, community partnerships, and advocacy. The website reflects a mature digital presence with integrated donation capabilities and active social media engagement. Technically, the website is built on the Sitefinity CMS platform, utilizing modern technologies such as Bootstrap, jQuery, and various third-party widgets for fundraising and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by comprehensive privacy and cookie policies with user consent mechanisms. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response details, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website is professional, trustworthy, and secure, with minor areas for improvement in security communication and incident handling. The absence of WHOIS data is due to privacy protection, which is justified for this type of organization. The domain and website content align well, supporting a high legitimacy score.

The website www.teatro-zandonai.it serves as the official online presence for Teatro Riccardo Zandonai, a cultural theater institution managed by the Comune di Rovereto in Italy. It provides comprehensive information about theater programming, historical context, and visitor information, targeting local residents and cultural event attendees. The site reflects a public cultural service model with a focus on community engagement and cultural promotion. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, and specialized JavaScript libraries for UI enhancements. It is hosted under the municipal domain infrastructure, indicating stable and official hosting. The site is mobile optimized with a clear navigation structure and basic accessibility features, though there is room for improvement in SEO and accessibility compliance. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms, demonstrating awareness of privacy regulations such as GDPR. However, no explicit security headers were detected, and no formal security or incident response policies are publicly available. Analytics tools like Google Tag Manager and Matomo (Piwik) are used for user tracking at a moderate level, with privacy policies linked and accessible. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy standards. It lacks some advanced security practices and formalized policies but poses no immediate security risks. Strategic improvements in security headers, incident response transparency, and enhanced accessibility would strengthen its posture.

I

International Music Score Library Project (IMSLP) / Petrucci Music Library

imslp.org

53

The International Music Score Library Project (IMSLP) is a well-established non-profit digital library founded in 2006, specializing in providing free access to public domain sheet music and recordings. It serves musicians, educators, and classical music enthusiasts worldwide, positioning itself as a leading repository in its niche. The website is powered by MediaWiki with a customized Bootstrap skin, hosted with Cloudflare DNS services, and integrates modern web technologies such as jQuery and Font Awesome. While the site offers a rich content experience with good navigation and mobile optimization, it lacks some privacy compliance features such as cookie consent mechanisms. Security posture is solid with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Overall, IMSLP demonstrates high business credibility and content quality, with moderate technical and privacy compliance scores.

H

HebergementWP.fr

hebergementwordpress.fr

49

HebergementWP.fr is a French-based web hosting provider specializing in WordPress hosting services. The company offers managed WordPress hosting with premium features such as free domain registration, SSD storage, professional email accounts, and inclusion of Elegant Themes premium themes. Their market position is focused on providing a high-performance, easy-to-use hosting solution tailored for WordPress users in France, supported by a professional website with strong branding and customer testimonials. Technically, the website is built on WordPress CMS with modern technologies including PHP 8, Nginx caching, Memcached, and OPcache. It uses popular frameworks like Bootstrap and UIkit for responsive design and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is well optimized for SEO and mobile devices, providing a fast and accessible user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and mentions active security measures like DDoS protection and automatic WordPress updates. However, explicit security headers and a published security policy or incident response contacts are missing, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy front for its business, though the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Strategic recommendations include improving security header implementation, publishing a security policy, and verifying domain registration details to strengthen legitimacy and trust.

A

A-A-Hébergement

a-a-hebergement.com

61

A-A-Hébergement is a French web hosting and domain registration company offering a wide range of hosting solutions including shared hosting, VPS with cPanel/WHM, WordPress optimized hosting, and ASP.NET hosting with Plesk. The company emphasizes quality, reliability, and ease of use, targeting individuals and businesses seeking professional web hosting services. Their market position is supported by over 20 years of experience and a large customer base exceeding 680,000 hosted sites worldwide. The website features customer testimonials, a money-back guarantee, and a comprehensive service portfolio, reinforcing their credibility in the hosting market. Technically, the website is built on WordPress using popular plugins and frameworks such as Visual Composer, Slider Revolution, and Bootstrap. It employs modern web technologies including HTTPS with Let's Encrypt SSL certificates, Google Tag Manager, and Microsoft Clarity for analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some security best practices like HTTP security headers are not visibly implemented, representing an area for improvement. From a security perspective, the site benefits from HTTPS encryption, regular backups with RAID 10 SSD, and a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contacts is noted. The WHOIS data for the domain is missing, which reduces trustworthiness from a domain registration perspective, although the website content and customer reviews suggest a legitimate business. Overall, the website presents a professional and trustworthy front for a mid-sized hosting provider with solid technical infrastructure and compliance posture. Strategic recommendations include enhancing security headers, publishing explicit security policies, and resolving the WHOIS data gap to improve domain trust and transparency.

M

mister-hosting.com

mister-hosting.com

66

Mister-Hosting.com is a French web hosting provider offering affordable hosting solutions including shared hosting, VPS servers, domain registration, and website creation tools. The company targets individuals and small to medium businesses seeking reliable and cost-effective web hosting services. With over 280,000 hosted sites and a market presence since 2005, it positions itself as a competitive player in the French hosting market. The website is built on WordPress with modern technologies and provides a good user experience with clear navigation and responsive design. Security posture is adequate with HTTPS and free SSL certificates, but lacks published security policies and visible security headers. The absence of WHOIS data raises some concerns about domain transparency, although the business content and customer testimonials support legitimacy. Cookie consent and terms of service are present, but privacy policy details are minimal. Overall, the site is professional and trustworthy but could improve transparency and security disclosures.

T

Top10hebergeursweb

top10hebergeursweb.com

61

Top10hebergeursweb is a French independent web hosting comparison and review website established around 2017. It provides detailed evaluations and rankings of web hosting providers based on security, performance, and pricing, targeting individuals and businesses seeking reliable hosting solutions. The site operates primarily on an affiliate marketing business model, earning commissions from hosting providers through referral links. Technically, the website is built on WordPress with Bootstrap framework, uses modern JavaScript libraries like jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and advertising. The site is mobile-optimized with good SEO practices and a professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and detailed security or incident response policies. WHOIS data for the domain is unavailable, which reduces transparency and trustworthiness, though the website content and structure indicate a legitimate business. Overall, the site scores well on content quality and business credibility but could improve privacy compliance and security posture.

The BGHM Magazin website serves as an informational platform for the Berufsgenossenschaft Holz und Metall, a German statutory accident insurance institution focused on occupational safety and health in the wood and metal sectors. The site provides news, research, and educational content aimed at employees, employers, and safety professionals. The organization is well-established with a history dating back to 1925, positioning itself as a trusted authority in workplace safety within Germany. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and jQuery. It integrates Matomo for analytics and includes accessibility features like ReadSpeaker. The site is mobile-optimized and demonstrates good SEO practices. Hosting appears stable with domain control via GoDaddy DNS services. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While no advanced security headers were detected in the provided data, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its target audience with relevant content and maintains a solid security posture. Strategic enhancements in security transparency and legal documentation could further strengthen its position.

V

Accueil

vivreva.fr

48

Vivreva.fr is a French travel and leisure website focused on providing vacation and travel services tailored for retirees. The business appears to be well-established, with a domain age dating back to 2006, and offers services such as trips, circuits, cruises, hiking, and Nordic walking. The website is built on Joomla! CMS using the Helix Ultimate framework and hosted by OVH, indicating a moderate level of technical maturity. The site is mobile optimized and presents a professional design with relevant content for its target audience. However, there are gaps in privacy compliance and security posture, including the absence of explicit privacy and terms of service pages, lack of security headers, and no visible contact information or incident response details. Cookie consent mechanisms are present, showing some GDPR awareness. Overall, the site is functional and credible but would benefit from enhanced security and compliance measures.

S

SISTEC

sistec.fr

48

SISTEC is a French software company specializing in providing seven distinct online management solutions tailored for local government entities and public sector organizations. Their offerings cover critical administrative areas such as childhood services, tax collection, cemetery management, cadastre data, urban planning, and technical services. The company has positioned itself as a niche provider with a focus on web-based platforms and maintains a network of partners across France to ensure local presence and support. Recently, SISTEC joined the JVS group, indicating strategic growth and collaboration. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, leveraging Bootstrap for responsive design and Google Fonts for typography. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR principles. Analytics are implemented via Google Analytics, providing moderate user tracking. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, but lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear professional and credible. Overall, SISTEC presents a solid digital presence with room for improvement in privacy transparency and security hardening. The risk level is moderate, with recommendations to enhance compliance documentation and security headers to strengthen trust and resilience.

B

Bus de l'Entrepreneuriat - Bienvenue sur le site des Bus de l'Entrepreneuriat pour Tous

bus-tousentrepreneurs.fr

57

The website 'Bus de l'Entrepreneuriat' serves as a public service platform aimed at supporting entrepreneurs in France by providing advice, orientation to partners, financing solutions, workshops, testimonials, events, training, and sponsorships. It positions itself as a regional and national initiative to facilitate business creation and growth, likely supported by Bpifrance. The site is well-structured with a clear focus on entrepreneurship and public support services. Technically, it employs modern frameworks such as Bootstrap and integrates Google Maps API for location-based services, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no explicit contact information or security policies are present, which impacts its compliance and trustworthiness. Security posture is moderate with no detected advanced security headers or incident response contacts. Overall, the site is safe, professional, and targeted at a general audience interested in entrepreneurship support.

S

Stadt Köln

offenedaten-koeln.de

47

Offene Daten Köln is the official open data portal of the City of Cologne, Germany, providing public access to a wide range of municipal datasets to promote transparency and digital engagement. The portal is built on the Drupal 7 CMS with the DKAN open data platform, offering datasets in formats such as CSV, ZIP, WFS, and WMS. The site targets citizens, developers, researchers, and businesses interested in municipal data. It features search functionality, a blog, and user login capabilities. Technically, the website uses a mature but outdated technology stack including Drupal 7 and jQuery 3.1, hosted likely by NetCologne, with Matomo analytics hosted on a city domain to ensure privacy-conscious tracking. The site is mobile optimized with good navigation and consistent branding. However, the use of Drupal 7, which is end-of-life, presents security risks that should be addressed. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks modern security headers and published security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie policy present but no explicit cookie consent mechanism. No vulnerability disclosure or security.txt files were found. Overall, the website is trustworthy and professional, serving as a valuable government resource. Strategic improvements include upgrading the CMS, enhancing security headers, implementing cookie consent, and publishing security policies to strengthen compliance and security posture.

A

Acquirente Unico S.p.A.

ilportaleofferte.it

63

The website www.ilportaleofferte.it is an official Italian public service portal operated by Acquirente Unico S.p.A., designed to provide consumers with a reliable and simple platform to compare electricity and gas tariffs as mandated by Italian energy law. It offers comprehensive information on energy market options including free market offers, PLACET offers, and protection services. The portal integrates secure user authentication via SPID and CIE, enhancing user data protection and personalized service access. The site is well-branded with official logos and legal references, targeting Italian consumers seeking energy supply information and comparisons.

B

Bundesverband Gebäudemodernisierung e.V.

bvgem.de

51

The Bundesverband Gebäudemodernisierung e.V. operates a professional German-language website focused on promoting affordable and rapid modernization of residential buildings, particularly single and two-family homes built before 1994. The association provides a network of certified modernization consultants, digital tools such as building quick checks and economic calculators, and educational seminars through its BVGeM-Akademie. The website positions itself as a national non-profit entity dedicated to energy efficiency and climate protection through building modernization. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, using modern front-end technologies including Bootstrap, jQuery, and Swiper.js. Hosting appears to be provided by 1&1 IONOS, inferred from the nameservers. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with no critical errors detected. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks visible security headers and a vulnerability disclosure policy. No cookie consent mechanism was detected, which is a GDPR compliance gap. No contact information or incident response channels are explicitly provided, limiting transparency. No suspicious or vulnerable libraries were found in the HTML content. Overall, the website is trustworthy and professional with a solid business focus but could improve privacy compliance and security posture by implementing cookie consent, security headers, and incident response information. The domain WHOIS data aligns with the business profile, showing no suspicious patterns. The site is safe for general audiences with no adult or questionable content.

L

L'Assurance retraite

lassuranceretraite.fr

70

L'Assurance retraite is the official French government portal dedicated to providing comprehensive information and online services related to retirement and social security. It serves both active workers and retirees in France, offering detailed guidance on career, retirement age, payments, and social benefits. The website is well-branded with official logos and maintains a strong presence through social media channels such as YouTube, Twitter, and LinkedIn. The portal emphasizes accessibility and user-friendly navigation, ensuring a positive user experience across devices. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It integrates analytics and performance monitoring tools like ATInternet and AppDynamics, and uses TarteAuCitron for cookie consent management, reflecting a mature digital infrastructure. The website is mobile-optimized and adheres to good SEO and accessibility standards. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit HTTP security headers visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, L'Assurance retraite demonstrates a high level of professionalism, security, and compliance suitable for a government service portal. It provides trustworthy and valuable services to its audience with minimal risk exposure.

G

Green Network S.p.A.

greennetwork.it

46

Green Network S.p.A. is an established Italian company founded in 2003, originally active in the electricity and gas supply market. As of early 2023, it divested its energy supply business and now focuses on energy efficiency and investments in renewable energy companies. The company holds participations in several subsidiaries operating in the renewable energy sector, positioning itself as a holding and investment entity within the energy industry. The website reflects this transition, providing corporate information and legal details but no direct consumer services or energy supply offerings. Technically, the website uses modern frameworks such as Blazor and Bootstrap, indicating a moderate level of digital maturity. The site is mobile optimized and structured with basic accessibility and SEO features. However, it lacks advanced performance optimizations and visible analytics or tracking tools, suggesting a focus on corporate presence rather than marketing or user engagement. From a security perspective, the website is accessible without WAF or blocking mechanisms, but it lacks important security headers and cookie consent mechanisms, which are critical for GDPR compliance and user data protection. No contact emails or phone numbers are provided, limiting direct communication channels. The WHOIS data is consistent and supports the legitimacy of the business, with a domain age appropriate to the company's history. Overall, the website presents a basic but professional corporate presence with room for improvement in security posture, privacy compliance, and user engagement features. Strategic enhancements in these areas would strengthen trust and regulatory compliance while supporting the company’s business objectives.

NeN Energia is an established Italian energy supplier founded in 2001, offering electricity and gas services with a focus on transparency, simplicity, and customer empowerment. The company provides fixed and variable rate plans, emphasizing 100% green energy sourced from renewables. The website reflects a mature digital presence with modern technologies such as Adobe Experience Manager CMS, Bootstrap, and advanced analytics tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website 'Offene Daten Wuppertal' is an official open data portal operated by the city government of Wuppertal, Germany, and hosted by the city of Cologne. It provides public access to a wide range of datasets across multiple categories such as population, geography, infrastructure, health, and environment. The platform is built on Drupal 7 and DKAN, leveraging open source technologies to deliver structured and accessible data to citizens, developers, and researchers. The site features a dataset search, categorized data listings, blog entries, and social media integration, supporting community engagement and transparency. Technically, the site uses a mature but somewhat dated CMS (Drupal 7) with Bootstrap for responsive design and Piwik (Matomo) for analytics. The performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though it lacks some modern security headers and explicit security policies. Privacy compliance is partial, with privacy and terms pages present but no visible cookie consent mechanism. Overall, the website demonstrates a high level of trustworthiness and professionalism consistent with a government entity. It effectively serves its purpose as an open data platform but could improve in areas of privacy compliance, security best practices, and explicit contact information to enhance user trust and regulatory adherence.

T

Talbeteiligung

talbeteiligung.de

63

Talbeteiligung.de is an official government platform dedicated to facilitating citizen participation in the city of Wuppertal, Germany. It offers citizens access to current and past participation projects, news updates, and multiple channels to stay informed and engaged with local governance. The platform is designed to encourage democratic involvement and community collaboration, targeting residents and stakeholders within Wuppertal. The website is professionally maintained with consistent branding and clear contact information, reinforcing its legitimacy as a municipal service.

WSW Netz GmbH operates as the regional electricity and gas network operator in Wuppertal, Germany, providing secure and efficient energy distribution services. The company is a 100% subsidiary of Wuppertaler Stadtwerke (WSW) and serves a broad customer base including private consumers, businesses, and installers. Their digital presence is built on TYPO3 CMS with modern web technologies and includes comprehensive service portals for network connections, meter readings, and customer support. The website demonstrates good GDPR compliance with integrated Usercentrics consent management and privacy-aware analytics via Matomo. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-structured, supporting the company's role as a critical regional utility provider.

C

Clees Unternehmensgruppe

clees.net

21

Clees Unternehmensgruppe is a medium-sized, owner-managed real estate company specializing in the construction, development, rental, and management of residential and commercial properties across Germany. The company has a long-standing market presence of approximately 50 years, offering a portfolio of well-maintained apartments, houses, commercial spaces, and land. Their business model focuses on both new developments and revitalization of existing properties, targeting tenants, property owners, and business partners. The website is professionally designed using TYPO3 CMS and modern frontend libraries, providing good user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy policy and terms of service are present, indicating basic GDPR compliance. Contact information is clearly provided, enhancing business credibility.

F

Fairtrade Deutschland e.V.

fairtrade-kampagnen.de

47

Fairtrade Deutschland e.V. operates as a non-profit organization dedicated to promoting fair trade campaigns across Germany. The website serves as a hub for information and coordination of local initiatives such as Fairtrade-Towns, Fairtrade-Schools, and Fairtrade-Universities, supporting producers in developing countries. The organization maintains a strong market position within the fair trade advocacy sector in Germany, leveraging a network of over 1,800 local groups and providing resources, news, and event information to its audience. Technically, the website is built on TYPO3 CMS with a modern and well-maintained technology stack including jQuery, Bootstrap, and various UI libraries. The site demonstrates good mobile optimization, clear navigation, and a professional design. Hosting is provided by Timme Hosting, inferred from the nameservers. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular user controls. However, it lacks explicit security headers and does not publish a security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is strong, with a clear privacy policy and cookie banner aligned with GDPR requirements. Overall, the website is trustworthy, professionally managed, and compliant with privacy standards. Strategic improvements could include adding security headers, publishing a security policy, and providing a vulnerability disclosure channel to enhance security posture and user trust.

S

Stadtwerke Heiligenhaus GmbH

stadtwerke-heiligenhaus.de

41

Stadtwerke Heiligenhaus GmbH is a regional municipal utility company providing electricity, gas, water, and energy-related services to the Heiligenhaus community in Germany. The company emphasizes regional presence and customer proximity, offering services such as photovoltaics, electric mobility, and an online customer portal. The website is built on TYPO3 CMS and uses modern web technologies including jQuery and Bootstrap, with good mobile optimization and responsive design. Security posture is adequate with HTTPS enforced and secure form handling, though improvements are recommended in security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its target audience effectively.

P

Perinfo

perinfo.eu

56

Perinfo is a French company specializing in software solutions for passenger transport professionals and public transport authorities, with over 36 years of experience. Their offerings include integrated management software for interurban, urban, and technical maintenance activities, complemented by consulting, training, and support services. The company positions itself as a trusted partner in the transportation sector, targeting transport operators and public entities. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, incorporating modern tools such as Slider Revolution and Google Analytics for performance and user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and uses standard analytics scripts but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. The absence of public WHOIS data is consistent with EURid privacy policies for .eu domains and does not raise immediate concerns. Overall, the website reflects a professional and credible business with a solid digital presence, though enhancements in security headers and privacy compliance would strengthen its trustworthiness and regulatory adherence.

A

AutoFrame-FM

kia.md

42

AutoFrame-FM operates as the official distributor of KIA automobiles in Moldova, providing a comprehensive online platform for vehicle sales, service bookings, and customer engagement. The website targets consumers in Moldova interested in KIA vehicles, offering detailed model information, pricing, and promotional offers. The business is positioned as a key player in the Moldovan automotive retail sector with a medium-sized operation founded in 2021. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various JavaScript libraries. It employs SEO best practices and is optimized for mobile devices, delivering a good user experience. Hosting is provided by a Moldovan hosting provider, consistent with the business location. Analytics tools such as Google Analytics and Ahrefs are used for performance and marketing insights. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks visible security headers and formal security policies. There is no evidence of privacy or cookie policies, which impacts compliance with GDPR and related regulations. Contact information is primarily via web forms, with no explicit emails or phone numbers displayed. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is professional and functional with moderate security posture and compliance gaps. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance trust and regulatory adherence.

N

Nugg.Ad

nuggad.net

55

Nugg.Ad is a small marketing solutions provider specializing in casino marketing strategies, offering branding and programmatic premium solutions. The website presents professional content focused on the 5 Ps of marketing tailored for casinos, targeting casino operators and marketing professionals. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS. The site is mobile optimized and has moderate performance but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and compliance.

L

Lucead

lucead.com

59

Lucead is a newly established technology company founded in 2024, operating a 100% cookieless advertising marketplace aimed at privacy-conscious advertisers and publishers. The website presents a professional and consistent brand image focused on privacy-friendly digital advertising solutions. The business model centers on providing an innovative ad marketplace that avoids traditional cookie-based tracking, positioning itself as a forward-looking player in the ad tech industry. Technically, the website uses modern web technologies including JavaScript, FontAwesome Pro icons, Bootstrap for responsive design, and Cloudflare for DNS services. The site is mobile-optimized with moderate performance and basic accessibility features. Google Tag Manager and Google Ads tracking are implemented, indicating standard marketing and analytics practices. From a security perspective, the site benefits from HTTPS and domain status protections but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No cookie consent mechanism is present despite the use of tracking scripts, which may pose compliance risks. No explicit security policies or incident response contacts are published, limiting transparency. Overall, the website is functional, professional, and moderately secure but would benefit from enhanced privacy compliance measures, improved security headers, and more comprehensive policy disclosures to strengthen trust and regulatory adherence.

I

Internet Society France

igf-france.fr

35

The website igf-france.fr serves as the official platform for the Forum on Internet Governance France 2025 and its associated digital future workshops. It is organized by Internet Society France and partners such as AFNIC, targeting stakeholders involved in internet governance, digital policy, and multi-stakeholder dialogue. The site provides event information, agendas, partner details, and contact points primarily via email. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted by OVH, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and published privacy or cookie policies, which are compliance gaps under GDPR. No forms collect sensitive data beyond email links, and no incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and consistent with its non-profit, governmental, and technology sector positioning.

N

NETSAMPLE

netsample.com

46

NETSAMPLE is a private web hosting provider with a long-established domain dating back to 1998. The company appears to focus on delivering private hosting services primarily to individuals and businesses seeking privacy in their web hosting solutions. The website is minimalistic, primarily serving as a portal with navigation links to billing, support, and status subdomains. The technical infrastructure leverages common web technologies such as Bootstrap, jQuery, Font Awesome, and Google Fonts, with Piwik (Matomo) analytics implemented for user tracking. The site shows moderate mobile optimization and basic SEO and accessibility features but lacks advanced technical enhancements such as CMS or modern frameworks. Security posture is moderate; domain registration includes transfer and update locks, but DNSSEC is not enabled, and no security headers are detected in the HTML content. There is no visible privacy, cookie, or terms of service policy, which impacts compliance and user trust. Overall, the website is functional but basic in content and security features.

EbizIndia Consulting Pvt. Ltd. is a small-sized technology company based in Kolkata, India, specializing in custom business software development, CRM, workflow automation, and SEO services primarily targeting SMEs, manufacturers, and traders. The company emphasizes personalized service, long-term client relationships, and pilot projects to demonstrate value. Their market position is supported by 19+ years of experience and a high client retention rate, with a global client base including industry leaders. Technically, the website is modern, responsive, and SEO-optimized, leveraging Bootstrap and Cloudflare Insights for performance and analytics. Security posture is good with HTTPS implied, but lacks explicit security headers and published security policies. The absence of WHOIS domain registration data raises legitimacy concerns, though the website content and client testimonials support business credibility. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

BGHM is a German statutory accident insurance institution specializing in occupational safety, insurance protection, and health protection for employees in the wood and metal sectors. The website provides comprehensive information on membership, insurance benefits, occupational safety, and qualification seminars, targeting employers and employees in these industries. The organization maintains a strong market position as a statutory body with a professional online presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

L

Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI)

lasi-info.com

51

The Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI) is a German government-related committee focused on occupational safety and security technology. The website serves as an authoritative platform providing publications, resources, and coordination information for stakeholders involved in workplace safety across Germany. The organization is well-established with a domain age of over 10 years, reflecting stability and legitimacy. The site targets government agencies, businesses, and safety professionals, offering key services such as safety publications, event information, and strategic cooperation details. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including Bootstrap, Font Awesome, and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the organization's profile, with no signs of suspicious activity. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no advanced security headers or published security policies were detected. There is no visible incident response or vulnerability disclosure information, which could be areas for improvement. Overall, the security posture is solid but could benefit from enhancements to DNS security and transparency. The website content is safe for general audiences, with no adult or questionable material. The site maintains a professional and trustworthy appearance, supporting its role as a government advisory body. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture and user trust.

S

SAS Ligne Web Services - LWS

sitebuilderpro.fr

43

SiteBuilder Pro is a French SaaS company offering an AI-powered website builder targeting small to medium-sized businesses and entrepreneurs. The platform provides an easy drag-and-drop interface, professional templates, and integrated hosting and domain services via its parent company SAS Ligne Web Services - LWS. The website is well designed, mobile optimized, and provides clear pricing and customer testimonials, positioning it as a trustworthy and accessible solution in the website creation market. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosted by LWS in France. Security posture is good with HTTPS and SSL certificates, but lacks visible security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and credible but could improve privacy compliance and security transparency.

The Bundeskriminalamt website serves as the official online presence of Austria's Federal Criminal Police Office, a key government agency under the Federal Ministry of the Interior. It provides comprehensive information on crime prevention, investigations, international cooperation, and public awareness initiatives. The site targets the general public, law enforcement professionals, and victims of crime, positioning itself as a trusted national authority in law enforcement. Technically, the website employs a mature technology stack including ASP.NET Web Forms, jQuery, Bootstrap, and various UI libraries, delivering a responsive and well-structured user experience. Security-wise, the site uses HTTPS and implements privacy-conscious social media embeds, but lacks visible security headers and explicit cookie consent mechanisms. The absence of WHOIS data is due to NIC.AT restrictions rather than suspicious activity, and the site exhibits strong trust indicators consistent with a government entity. Overall, the site is professional, secure, and compliant with GDPR, though improvements in security headers and cookie consent would enhance its posture.

Connex Marketing GmbH operates a well-established online platform specializing in gift vouchers and hotel bookings across Europe. With over 35 years of experience, the company targets consumers seeking convenient holiday voucher solutions. The website demonstrates a professional design with good content quality and strong accessibility features, including a comprehensive accessibility tool supporting various user needs. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though the absence of security headers and a published security policy suggests room for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the business appears credible and professional, with clear contact information and privacy compliance mechanisms in place.

I

Institut F2I

institut-f2i.fr

59

Institut F2I is a private educational institution based in France specializing in post-baccalaureate education in information technology, digital technologies, and commerce. Founded in 2012, it offers courses from BAC to BAC+5 levels, including initial and alternating (work-study) programs. The institution targets students and professionals seeking specialized education in these sectors. The website reflects a focused educational business model with consistent branding and relevant content tailored to its audience. Technically, the website is built on WordPress CMS using modern libraries such as Bootstrap, jQuery, and Swiper, hosted by OVH. It employs Google Tag Manager and Google Analytics for tracking and marketing purposes, alongside reCAPTCHA for bot protection. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security-wise, the website uses HTTPS with a good SSL configuration and some best practices like reCAPTCHA; however, it lacks security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies despite the presence of cookie consent SDK. Overall, the website is professional and credible but requires improvements in privacy disclosures and security hardening to enhance trust and compliance.

A

Arcus Foundation

stateoftheapes.com

58

State of the Apes is a non-profit publication initiative under the Arcus Foundation, focusing on the conservation of great apes and gibbons by examining the impact of human development activities. The website serves as a resource hub offering downloadable chapters, video interviews, and research reports targeting policymakers, academics, NGOs, and conservation experts. The platform is well-branded, professionally designed, and provides clear navigation and content relevant to its mission. Technically, the website is built on WordPress with Bootstrap and jQuery, enhanced by SEO plugins and integrated with marketing and analytics tools such as HubSpot Forms, Google Tag Manager, and LinkedIn Insight. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the reputable association with the Arcus Foundation. Overall, the website presents a low-risk profile with strong content and business credibility but would benefit from enhanced transparency in domain registration and security practices to improve trust and compliance.

N

NetSalesMedia

netsalesmedia.pl

65

NetSalesMedia is a professional affiliate marketing network operating primarily in Poland, formed by the merger of NetSales and SalesMedia. The company offers an innovative platform with advanced tracking technologies such as customer journey tracking, cross-device tracking, and fingerprint tracking to ensure fair and accurate commission settlements for publishers. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Tag Manager for analytics, and employs a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The WHOIS data is not publicly available, which is typical for .pl domains, but the business legitimacy is supported by clear contact information, social media presence, and association with Cube Group, a recognized digital marketing leader in Poland.

C

CENTRALNIC CANADA INC

roulette-en-ligne.ca

47

The website roulette-en-ligne.ca is a French-language Canadian online casino review platform specializing in roulette games. It provides detailed casino reviews, bonus offers, and game listings targeted at Canadian players interested in online gambling. The business operates primarily as an affiliate marketing site, promoting various reputable online casinos. The domain is registered in Canada with a consistent registrant and appropriate domain age, supporting its legitimacy. Technically, the site is built on WordPress and uses common web technologies such as jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. Hosting is behind Cloudflare DNS, ensuring reliable delivery, though no active WAF challenge is detected. The site is moderately optimized for mobile and SEO, with good navigation and content quality. From a security perspective, the site uses HTTPS and includes tracking via Google Analytics and Yandex Metrika but lacks visible security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, which reduces trust and compliance posture. There are no detected vulnerabilities or exposed sensitive data, but improvements in security headers and privacy compliance are recommended. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures, security hardening, and transparent contact information to improve trust and compliance with data protection regulations.

TAKT Fest is a cultural festival and traditional singer-songwriter competition based in Novi Sad, Serbia. The website provides detailed information about the event's program segments including music, theater, standup, circus, movies, and creative workshops. The festival targets artists and cultural enthusiasts, positioning itself as a niche event with international participation. The domain is registered since 2020 and is consistent with the festival's recent editions. Technically, the site uses Joomla CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has a good design and user experience. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via a form and social media links. Overall, the site is trustworthy and professional but could improve compliance and security practices.

В

Вокс Попули ООД

selectra.bg

41

Selectra Bulgaria, operating under the legal entity Вокс Попули ООД, is a prominent Bulgarian branch of the European Selectra group, specializing in providing comparison portals for utilities, telecommunications, and financial services. Since its establishment in 2013, it has positioned itself as a market leader in Bulgaria by offering free, user-friendly platforms that empower consumers to make informed decisions. The company operates multiple niche websites covering internet, mobile, electricity, loans, forex brokers, security services, and legal assistance, reflecting a diversified portfolio tailored to Bulgarian consumers. Technically, the website is built on WordPress CMS with a Bootstrap framework and integrates common web technologies such as jQuery and Google Analytics. Hosting is provided by a reputable Bulgarian hosting provider, SuperHosting.BG, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, although accessibility and SEO could be improved. The presence of Google Analytics and Tag Manager indicates moderate user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. No vulnerability disclosures or incident response information are provided, indicating potential gaps in security transparency. The WHOIS data is redacted due to GDPR, which is standard and justified for this business type. Overall, the domain appears legitimate and consistent with the business claims. The overall risk assessment suggests a stable and credible business with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and maintaining up-to-date software to mitigate vulnerabilities.

D

Datackathon

datackathon.com

56

Datackathon is a French digital magazine specializing in data, digital technology, cybersecurity, AI, cloud computing, SaaS, marketing, and e-commerce. It targets professionals and enthusiasts interested in these domains by providing regularly updated articles and news. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. Advertising is primarily managed through Google Adsense and affiliate marketing via ThirstyAffiliates. The website enforces HTTPS, ensuring secure communication, but lacks some advanced security headers and explicit cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data for the domain is missing or unavailable, which raises questions about domain registration transparency, though the website content and structure appear legitimate and professional.

E

ECOLEX

ecolex.org

67

ECOLEX is a joint initiative by FAO, IUCN, and UNEP providing a comprehensive global environmental law information service. It offers searchable access to treaties, legislation, judicial decisions, and literature in multiple languages, targeting governments, NGOs, academia, and the public. The website is professionally designed with consistent branding and a strong trust foundation based on its reputable partners. Technically, the site uses a classic web stack including jQuery and Bootstrap, with Google Analytics for user tracking. While the site is mobile-optimized and performs moderately well, it uses an outdated jQuery version and lacks some security headers, which could pose risks. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance could be improved. WHOIS data is incomplete, limiting domain trust verification, but the website's content and affiliations strongly support legitimacy.

S

Stadtwerke Bochum

stadtwerke-bochum.de

69

Stadtwerke Bochum is a well-established regional energy provider based in Bochum, Germany, with a history spanning approximately 170 years. The company offers a broad range of energy-related services including electricity (with green energy options), natural gas, district heating, water supply, solar energy solutions, heat pumps, and e-mobility services. Their target audience includes both private and business customers within the Bochum region. The website reflects a mature digital presence with comprehensive service information, customer support channels, and active social media engagement. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Bootstrap, and various UI libraries. It employs a consent management platform (Usercentrics) and integrates Google Tag Manager for analytics, indicating a focus on privacy compliance and user experience. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with good SSL configuration and incorporates consent-based script loading. It holds ISO 27001 certification and displays multiple trust badges, reinforcing its commitment to security and sustainability. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be more visible, and an incident response contact or security.txt file is absent. Overall, Stadtwerke Bochum's website demonstrates a strong security posture, excellent content quality, and robust privacy compliance. It serves as a trustworthy digital front for a major regional utility provider. Strategic recommendations include enhancing security header implementation, publishing incident response information, and maintaining regular audits of third-party scripts.

G

GERMAX Gerli GmbH

germax.net

50

GERMAX media is a well-established marketing and advertising agency based in Aachen, Germany, founded in 2000. The company offers a broad range of services including web design, corporate design, consulting, and campaign management, targeting businesses and public institutions. Their website reflects a professional and consistent brand image with a comprehensive portfolio and client testimonials, indicating a strong market position in the regional media sector. Technically, the site uses a variety of JavaScript libraries and plugins to deliver a responsive and visually appealing experience, though it appears to be custom-built rather than relying on a popular CMS. Security-wise, the site lacks DNSSEC and explicit security headers, and no cookie consent mechanism is implemented despite a detailed privacy policy. The domain registration is consistent with the business claims, showing a mature and legitimate online presence.

D

Deutsche Gesellschaft für Herpetologie und Terrarienkunde

dght.de

47

The Deutsche Gesellschaft für Herpetologie und Terrarienkunde (DGHT) is a German non-profit organization dedicated to the conservation and study of amphibians and reptiles. The website serves as an information hub for conservation projects, terraristic expertise, environmental education, and scientific research. It targets conservationists, herpetologists, hobbyists, and educators. The organization maintains a reputable position within its niche, supported by partnerships and a membership model. Technically, the website is built on WordPress with Bootstrap and jQuery, hosted on Strato servers, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, with room for security and privacy improvements.

C

Clickonometrics

clickonometrics.pl

50

Clickonometrics operates as an advertising technology platform specializing in ad server solutions and campaign management tools for publishers, advertisers, and ad networks. Founded in 2016 and based in Poland, the company offers services including RTB, SSP, DSP, and various advertising pricing models such as CPC, CPA, CPS, and CPM. The website presents a professional and consistent brand image targeting a niche market within the online advertising ecosystem. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized and structured with clear navigation, though accessibility features are basic. Hosting and domain registration are managed through OVH sas, a reputable provider, with domain status flags enhancing domain security. However, no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and has domain-level protections but lacks visible security headers and explicit incident response or security policies. Privacy compliance is minimal, with a basic privacy policy located on a separate opt-out page and no cookie consent mechanism despite the use of tracking scripts. Contact information is not provided on the landing page, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and more transparent business contact information to strengthen trust and regulatory adherence.

B

BNI Osmose & Co

meetsuo.com

61

Meetsuo is a French technology company founded in 2023 that offers a SaaS platform designed to enhance the efficiency and quality of professional business meetings. Their solution targets professional networking groups and meeting organizers, providing tools such as attendance tracking, badge generation, QR code stands, photo directories, PowerPoint generation, satisfaction surveys, guest tracking, and payment management. The company positions itself as a niche provider with clear subscription pricing and positive customer testimonials, indicating a growing presence in its market segment. Technically, the website is built on a modern stack including Bootstrap, jQuery, and various UI libraries, hosted by OVH with DNS managed via Cloudflare. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and Google reCAPTCHA is used on the contact form, but DNSSEC is not enabled and no explicit security headers are detected, representing areas for improvement. Privacy compliance is basic with a privacy policy present but lacking explicit GDPR details. Overall, the website is trustworthy and functional but could benefit from enhanced security and privacy practices.

D

David Chelly

davidchelly.fr

36

David Chelly is a seasoned digital entrepreneur specializing in domain names and website monetization with over 25 years of experience. The website positions itself as a trusted expert in domain name consulting, web marketing, and digital strategy, targeting domain investors and digital entrepreneurs primarily in France and French-speaking markets. The business model revolves around consulting, coaching, publishing, and providing digital services related to domain names and web presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be improved. Analytics are implemented via Statcounter with minimal user tracking. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this type of personal business. Overall, the security posture is moderate but could benefit from enhancements in policy transparency and technical safeguards. The overall risk is low to moderate given the professional content and absence of suspicious elements, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.