Security Directory

AmicusAssist.com is a patient support website operated by Amicus Therapeutics, Inc., focusing on providing assistance to patients prescribed medications for Fabry disease and late-onset Pompe disease (LOPD). The site offers services such as insurance verification, prescription coordination, financial assistance identification, and personalized patient support. The target audience is US residents undergoing treatment with Amicus Therapeutics medications. The website is professionally designed with clear navigation, mobile optimization, and accessibility features, reflecting a medium-sized healthcare support operation. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie consent management. Hosting and DNS are managed via reputable providers, with domain registration through Squarespace Domains II LLC. The site demonstrates good performance and SEO practices, with a comprehensive cookie consent mechanism and privacy policy hosted on a related Amicus domain. From a security perspective, the website uses HTTPS and cookie consent mechanisms but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact is noted. The domain registration is consistent and appropriate for the business age and claims, enhancing trustworthiness. Overall, AmicusAssist.com presents a secure, compliant, and professional online presence for patient support in the rare disease healthcare sector. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

M

Mister Mix Dog

mistermixdog.cz

58

Mister Mix Dog is a Czech-based e-commerce business specializing in premium cold-pressed dog food and natural supplements. The company targets dog owners seeking high-quality nutrition products tailored to various dog life stages and health needs. The website demonstrates a professional and consistent brand presence with clear navigation and comprehensive product offerings. Technically, the site leverages modern web technologies and the Shoptet e-commerce platform, providing a responsive and user-friendly experience. Security posture is solid with HTTPS, security headers, and consent mechanisms, though the absence of a published security policy and incident response details suggests room for improvement. The lack of WHOIS data for the domain is a notable concern for domain legitimacy verification but does not detract from the apparent business authenticity. Overall, the site is well-positioned in its niche with good privacy compliance and marketing integration.

K

KBOO

kboo.com

58

KBOO is a well-established community radio station based in Portland, Oregon, operating since 2002. It provides alternative media content and community engagement through live radio streaming, scheduled programs, and volunteer opportunities. The station operates as a non-profit entity funded primarily through donations, memberships, and underwriting. The website reflects a consistent brand and good content quality aimed at local community members interested in alternative and independent media. Technically, the site runs on Drupal 7 with Bootstrap and integrates analytics tools such as Google Analytics and Matomo. While the site is mobile optimized and has good SEO practices, it lacks some modern security headers and cookie consent mechanisms, which are areas for improvement. The domain registration data is consistent with the business claims, indicating a legitimate and trustworthy entity.

K

KBOO

kboo.org

10

KBOO is a well-established community radio station based in Portland, Oregon, providing alternative media content and community engagement since at least 1998, with roots going back to 1968. The station operates as a non-profit entity, funded primarily through donations, memberships, underwriting, and sponsorships. Its market position is that of a trusted local media outlet serving niche audiences interested in diverse and alternative programming. The website reflects this mission with clear navigation, relevant content, and community-focused services such as volunteer opportunities and program proposals. Technically, the website is built on Drupal 7 with Bootstrap and jQuery, integrating modern analytics tools like Google Analytics and Matomo, alongside marketing and engagement tools such as Olark live chat and ShareThis. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting and domain registration are consistent with the organization's profile, with Gandi SAS as registrar and EasyDNS as name servers. From a security perspective, the site uses HTTPS and employs some best practices like DoNotTrack in Matomo. However, DNSSEC is not enabled, and no explicit security headers were detected, which could expose the site to certain risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. No incident response or vulnerability disclosure policies are evident. Overall, KBOO's website is professional, trustworthy, and aligned with its community radio mission. Security and privacy practices could be enhanced to meet modern standards, particularly regarding DNS security and user consent. The site is safe for general audiences, with no adult or explicit content detected.

M

M. G. C. Trade, s. r. o.

mountain-gorilla.cz

53

Mountain Gorilla Coffee is a Czech-based specialty coffee and chocolate e-commerce retailer focused on high-quality products sourced from East Africa, particularly Uganda. The company integrates social responsibility by contributing a portion of sales to mountain gorilla conservation efforts. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and comprehensive product information. The business targets coffee enthusiasts who value quality and social impact. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and integrates multiple analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility compliance.

U-Contact PME is a French business portal designed to facilitate connections between very small and small-to-medium enterprises (TPE/PME) and the Coopérative U, a significant player in the retail cooperative sector. The website serves as an informational and transactional platform, offering access to various commercial activities such as consumer goods, fresh products, textiles, and bazaar items. It targets suppliers and partners seeking to engage with Coopérative U's network. Technically, the site is built on modern frameworks including Nuxt.js and Bootstrap, ensuring a responsive and user-friendly experience. The presence of privacy and cookie policies, along with HTTPS enforcement, reflects a commitment to compliance and security. However, explicit security policies and incident response information are not publicly available, indicating areas for improvement. Overall, the site demonstrates a solid security posture with no detected vulnerabilities or suspicious content, supporting its role as a trusted business portal.

U Location is a French vehicle and festive equipment rental service affiliated with the Super U and Hyper U retail brands. The company operates a large network of over 780 agencies across France, offering car rentals, utility vehicles, and festive materials. The website is professionally designed, mobile-optimized, and provides a comprehensive store locator to facilitate customer access. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and Facebook SDK for analytics and marketing, and is built on the Jahia CMS platform. Security-wise, the site enforces HTTPS and includes CSRF protection scripts but lacks visible security headers and published security or privacy policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

L

Le journal du Grand Paris

lejournaldugrandparis.fr

53

Le journal du Grand Paris is a specialized regional media outlet focused on the economic development, innovation, and urban planning of the Ile-de-France region and the Grand Paris project. It serves business professionals, government officials, and stakeholders interested in regional development. The website offers news articles, analyses, and updates on transport, housing, public markets, and other relevant sectors. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses various plugins for SEO, membership, and GDPR compliance. Analytics are handled primarily via Matomo, ensuring privacy-conscious tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The WHOIS data is unavailable, which slightly impacts trust but the professional presentation and active social media presence support legitimacy. Overall, the site is well-maintained, content-rich, and compliant with privacy regulations, making it a credible source for its target audience.

F

Flexitylife

flexitylife.com

61

Flexitylife is a newly established e-commerce business specializing in yoga, Pilates, Ayurveda, and wellness products. The company positions itself as an official distributor of several reputable yoga brands and targets yoga practitioners, fitness enthusiasts, and wellness consumers primarily in the EU region. Their product range includes yoga mats, apparel, accessories, and health-related items, supported by professional advice and customer service. The website is well-structured, professionally designed, and mobile-optimized, providing a good user experience with clear navigation and relevant content. Technically, the site uses modern web technologies and integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and Smartsupp chat, hosted behind Cloudflare DNS services. Security posture is adequate with HTTPS and CSRF protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic but present, with cookie consent and privacy policies available. WHOIS data confirms the domain is recently registered and consistent with the business claims, indicating legitimacy. Overall, the site is safe, trustworthy, and suitable for general audiences.

D

DigitalState Solutions Inc.

digitalstate.io

55

DigitalState Solutions Inc. operates an open platform designed to facilitate the creation and management of digital public services for governments and public sector organizations. Their platform is modular, leveraging microservices architecture with components for service delivery, forms, workflow orchestration, authentication, identity management, and reporting. The company targets government entities seeking interoperable, accessible, and secure digital services. Their business model includes open source software combined with development support, cloud hosting, and consulting services. The company is positioned as a niche technology provider focused on government digital transformation. Technically, the website employs modern web technologies including Bootstrap, Angular, Symfony, and Camunda BPM. The platform integrates JWT for security and uses Grafana and ElasticSearch for reporting and monitoring. The website is moderately optimized for performance and mobile devices, with a clean and professional design. However, accessibility and SEO optimizations are basic. From a security perspective, the platform shows good architectural practices such as microservices and JWT-based security. However, the website lacks visible security headers, DNSSEC is not enabled, and no privacy or cookie policies are published, indicating compliance gaps. The domain uses privacy protection, which is justified for a small tech company. No critical vulnerabilities or malware indicators were found. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and DNS security enhancements. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response information to strengthen trust and compliance.

A

Amicus Therapeutics, Inc.

amicusassisthcp.com

62

AmicusAssistHCP.com is a dedicated patient support website operated by Amicus Therapeutics, Inc., targeting US healthcare professionals who prescribe Amicus medications. The site provides resources, referral forms, and direct phone support to assist patients with insurance, financial aid, and treatment coordination. The business model focuses on enhancing patient adherence and support through personalized assistance, positioning Amicus Therapeutics as a patient-centric pharmaceutical company. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie consent, hosted via GoDaddy. The site is mobile-optimized and accessible, with a moderate performance profile. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and DNSSEC are not enabled, representing areas for improvement. Privacy compliance is strong, with clear links to comprehensive privacy and terms of use hosted on the parent company domain. Overall, the website is professional, trustworthy, and aligned with healthcare industry standards.

A

Asta Communications Pvt Ltd.

astacommunications.com

48

Asta Communications Pvt Ltd. is a Bangalore-based advertising agency specializing in brand development, advertising, graphic design, photography, printing, and website design and development. Established in 2010, the company positions itself as a creative partner for corporate clients and SMEs seeking comprehensive branding and marketing solutions. Their market presence is supported by an active social media footprint and a portfolio showcasing diverse creative works. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and third-party widgets for social media integration and WhatsApp contact, hosted on HostGator servers. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

F

Formation Animacoop

animacoop.net

50

Formation Animacoop is a French educational organization specializing in cooperative training across multiple cities in France. Established in 2010, it offers comprehensive training programs focused on animating and facilitating cooperative projects, collective intelligence, and collaborative digital tools. The organization targets professionals involved in project management, facilitation, coaching, and collective initiatives, providing blended learning with both in-person and remote sessions. The website reflects a mature digital presence with structured data, social media integration, and clear contact points. Technically, the site is built on WordPress with modern frameworks and includes GDPR-compliant cookie consent and privacy policies. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the site is professional, trustworthy, and well-positioned in its niche.

C

Conseil départemental de la Vendée

vendee.fr

62

The website www.vendee.fr is the official online presence of the Conseil départemental de la Vendée, a government entity serving the Vendée department in France. It provides comprehensive information and services related to social support, infrastructure, culture, and public administration targeted at residents and stakeholders of the region. The site is well-branded, professionally designed, and structured to facilitate user navigation and access to departmental resources. Technically, the site is built on TYPO3 CMS with Bootstrap and FontAwesome for frontend styling, and integrates Matomo analytics for user behavior tracking, including heatmaps and session recordings. The presence of cookie consent mechanisms and structured data indicates a mature digital infrastructure with attention to privacy and SEO best practices. Performance and mobile optimization are good, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes some security headers, though additional headers like Content-Security-Policy could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is unavailable, likely due to privacy protection, which is justified for a government domain. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility as a government portal. Strategic recommendations include enhancing security headers and publishing a clear privacy policy page to improve transparency and compliance.

P

PortlandLabs

concretecms.com

74

Concrete CMS is an established open source content management system designed for teams including content creators, developers, and designers. The platform offers a robust website builder with built-in tools to simplify content editing and management. PortlandLabs, the company behind Concrete CMS, positions itself strongly in the technology sector with a focus on enterprise and government clients, including the U.S. Army. The business model includes open source software distribution, hosting services, and a marketplace for themes, add-ons, and integrations. The website demonstrates excellent content quality, professional design, and clear navigation, targeting professional teams and organizations seeking secure and compliant CMS solutions. Technically, the website employs modern web technologies such as jQuery, Vue.js, Bootstrap, and Moment.js, running on the Concrete CMS platform. It integrates multiple analytics and marketing tools including Google Analytics, Matomo, ZoomInfo, and Pipedrive LeadBooster. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. Hosting appears to be managed by PortlandLabs with offerings ranging from starter plans to custom enterprise SLAs. Security posture is strong with HTTPS enforced and certifications including ISO 27001, SOC 2, and HIPAA compliance prominently featured. The platform supports role-based access control, workflow approvals, and version control to enhance security and collaboration. However, the site lacks explicit HTTP security headers and a published vulnerability disclosure or security.txt file, which are recommended for further strengthening security transparency. Overall, the website is trustworthy and professional with high-quality content and a mature technical infrastructure. The main risk factor is the absence of WHOIS domain registration data, which is unusual for a business of this profile and slightly reduces trust. Strategic recommendations include implementing security headers, publishing incident response contacts, and enhancing transparency on data retention and vulnerability disclosures.

The website 'La viande plaisir D'ANVIAL' appears to be a French meat retail or food service business currently undergoing website maintenance. The site content is minimal, consisting solely of a maintenance placeholder page with no active business information, contact details, or policies. The domain WHOIS data indicates the domain is not registered or has expired, which raises significant concerns about the website's legitimacy and operational status. Technically, the site uses basic front-end libraries such as Bootstrap and Font Awesome but lacks modern security and privacy implementations. There is no HTTPS detected, no security headers, and no privacy or cookie policies, which collectively indicate a low security posture and poor compliance with data protection standards. Overall, the website is not currently functional for business purposes and presents a high risk from a security and trust perspective.

I

Informační centrum Litomyšl

ticlitomysl.cz

41

Informační centrum Litomyšl operates as a local government-affiliated tourism and cultural information center serving visitors to Litomyšl, Czech Republic. The website provides comprehensive information on city tours, accommodation, dining, cultural events, and ticket sales, supported by an e-shop for related products. The site is built on Joomla CMS with modern UI libraries, offering a good user experience and mobile responsiveness. However, the absence of privacy and cookie policies indicates a gap in GDPR compliance. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is unavailable, limiting domain trust verification, but the website content and external partnerships suggest legitimacy. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

G

GLOBDATA a.s.

parksimply.cz

52

ParkSimply is a Czech Republic-based mobile and online parking payment service operated by GLOBDATA a.s. The platform enables users to conveniently pay for parking via smartphone applications, eliminating the need for physical parking meters and tickets. The service is well established with presence in multiple Czech cities and municipalities, supported by official app store listings and a dedicated website. The business targets drivers and vehicle owners seeking a streamlined parking payment experience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly interface. However, some modernization opportunities exist, such as updating jQuery and enhancing accessibility. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy and terms of service present, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and functional with room for security and compliance improvements.

L

La Rochelle Université

univ-larochelle.fr

58

La Rochelle Université is a public higher education institution based in France, offering a broad range of academic programs, research initiatives, and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. The institution emphasizes personalized student support and sustainable development in its strategic vision. Technically, the website is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security measures include HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit incident response policies are absent. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and social media presence. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency of contact information.

G

Groupe Caisse des Dépôts

caissedesdepots.fr

65

The Groupe Caisse des Dépôts is a major French public financial institution dedicated to serving the public interest through investment and management of public funds. The website reflects a well-established entity with a clear mission to support social, territorial, and economic development in France. The site is built on a modern Drupal 10 CMS platform, incorporating accessibility features, GDPR-compliant consent management, and Matomo analytics for user tracking. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional and trustworthy digital presence aligned with its public institution status.

T

travelazio

travelazio.it

60

TraveLazio is a niche travel blog dedicated to exploring the Lazio region of Italy beyond Rome, providing detailed travel guides, destination insights, and professional photography. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-friendly technical infrastructure. The site employs GDPR-compliant cookie consent mechanisms and integrates Google Analytics for visitor tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the site presents a professional and trustworthy digital presence suitable for its target audience of travelers interested in Italian regional tourism.

T

TN Média s.r.o.

vrchlabinky.cz

55

Vrchlabinky.cz is a regional news media website operated by TN Média s.r.o., focused on delivering local news, sports, cultural events, and community information for Vrchlabí and the Královéhradecký kraj region in the Czech Republic. The site targets local residents and visitors, providing timely updates and multimedia content including videos and newsletters. The business model is primarily advertising-supported, with partnerships evident through linked regional sites. Technically, the website is built on WordPress and leverages modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. However, the site lacks visible privacy and terms of service policies, which impacts compliance and user trust. Security posture is moderate with HTTPS usage but missing key security headers and explicit security policies. The absence of WHOIS data limits domain legitimacy verification, though the site appears professionally maintained and active. Overall, the website is a functional and relevant regional news source but would benefit from enhanced privacy, security, and transparency measures.

Trutnovinky.cz is a regional news media website operated by TN Média s.r.o., providing local news, sports, cultural events, and community information primarily for the Trutnov area and the Královéhradecký region in the Czech Republic. The site features a variety of content including articles, videos, and a digital magazine, targeting local residents and visitors interested in regional happenings. The business model appears to be advertising-supported with a focus on digital media content delivery. Technically, the website is built on WordPress and utilizes modern web technologies such as jQuery, Bootstrap, Owl Carousel, and Font Awesome. It is mobile-optimized and includes interactive features like AJAX banners and video tabs. The site uses HTTPS with Google Tag Manager and Google Analytics for tracking, indicating a moderate level of digital maturity. However, some security best practices like security headers are not evident in the provided data. From a security perspective, the site uses secure HTTPS connections and secure form submission methods. There is no evidence of exposed sensitive data or vulnerable libraries, but the absence of security headers and explicit privacy and terms of service pages suggests room for improvement. The WHOIS data is unavailable, which limits domain registration trust verification and slightly reduces the overall trust score. Overall, the website is professionally designed with good content quality and user experience. It is safe for general audiences with no adult or explicit content detected. Strategic recommendations include implementing comprehensive privacy and terms policies, adding security headers, improving contact transparency, and ensuring WHOIS data availability or clarity to enhance trustworthiness.

K

Kulturní zařízení Ostrava-Jih, příspěvková organizace

kulturajih.cz

47

Kulturní zařízení Ostrava-Jih is a public cultural institution based in Ostrava, Czech Republic, focused on organizing cultural events, operating a cinema, and providing educational and creative courses for the local community. The organization targets a broad audience including seniors, families, and schools, positioning itself as a key cultural hub in the Ostrava-Jih region. The website reflects this mission with detailed event listings, partner affiliations, and community engagement features. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Leaflet.js for maps, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile responsive and well-structured, though some accessibility features could be improved. Security measures include HTTPS enforcement and CAPTCHA protection on forms, but lack of security headers and cookie consent mechanisms indicate areas for enhancement. From a security and compliance perspective, the site shows good practices with encrypted connections and privacy policy availability, but lacks visible incident response contacts, security policies, and cookie consent banners, which are important for GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which is common for public organizations but limits domain trust verification. Overall, the website is professional, trustworthy, and serves its community well, but should improve privacy compliance and security headers to strengthen its security posture and regulatory adherence.

D

DK Poklad Ostrava

dkpoklad.cz

49

DK Poklad Ostrava is a well-established cultural and social center located in Ostrava-Poruba, Czech Republic, founded in 2004. The organization offers a diverse range of services including cultural performances, congresses, seminars, workshops, cinema, venue rentals, and restaurant services. It targets a broad audience interested in cultural and social events, positioning itself as a key regional player in the hospitality and media sectors. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is strong, featuring GDPR-compliant policies and cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves its community effectively.

A

Alumni Agro Bordeaux

alumni-agro-bordeaux.org

57

Alumni Agro Bordeaux is a French alumni association dedicated to graduates of Bordeaux Sciences Agro, providing a platform for networking, career development, and community engagement. The website offers access to alumni directories, event information, a career center, and a magazine publication, targeting agronomy professionals and students. Technically, the site uses a mix of modern JavaScript libraries and frameworks, including jQuery, Bootstrap, and hCaptcha for security, with a CMS likely based on NetAssoc. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and spam protection, though improvements in HTTP security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust analysis, but the association with reputable educational institutions and federations supports legitimacy. Overall, the website is professional, secure, and well-suited for its audience.

A

AnaEnsaia

anaensaia.org

58

AnaEnsaia is a French alumni association for graduates of ENSAIA, an agricultural engineering school. The website serves as a community hub offering networking, career services, events, and publications to its members. It is well-branded and professionally maintained, targeting alumni and professionals in the agricultural sector. The technical infrastructure uses modern JavaScript libraries and CMS features, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protection, and GDPR-compliant cookie consent, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but the website's content and social presence strongly indicate legitimacy. Overall, AnaEnsaia presents a trustworthy, professional online presence supporting its community effectively.

I

Institut Agro Alumni

institut-agro-alumni.fr

46

Institut Agro Alumni operates as a dedicated alumni community platform for graduates of Institut Agro schools in France. The website offers a range of services including networking, career support, event organization, and publication of a magazine. It targets alumni and professionals connected to the agricultural and educational sectors, positioning itself as a niche but important community resource. The platform integrates modern web technologies and provides a mobile-friendly experience, including a dedicated mobile app. Security measures such as HTTPS, CSRF tokens, and hCaptcha are implemented, alongside GDPR-compliant cookie consent mechanisms. Contact information and social media presence enhance trust and accessibility.

A

Aptalumni

aptalumni.org

48

Aptalumni is a well-established alumni association serving graduates of AgroParisTech, a prestigious French engineering school. The website provides a comprehensive platform for alumni networking, career services, events, solidarity initiatives, and publications. It targets AgroParisTech alumni and professionals connected to the institution, offering membership benefits and community engagement. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized organization in the education and non-profit sectors based in France. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, SweetAlert, and hCaptcha for security. It uses a specialized CMS likely based on NetAssoc. The site is mobile-optimized and includes accessibility and SEO best practices. Privacy and cookie policies are well implemented with GDPR compliance, including a consent banner managed by tarteaucitron. Analytics and error tracking are handled via Google Analytics and Raygun. Security posture is strong with HTTPS enforced, CSRF protection on forms, and bot mitigation via hCaptcha. However, security headers are not visibly configured, and no explicit security or incident response policies are published. WHOIS data is unavailable due to a malformed response, but the website's professionalism and content quality indicate legitimacy. No suspicious or malicious indicators were found. Overall, the site presents a low-risk profile with good privacy and security hygiene, serving an important educational community. Strategic improvements include adding security headers, publishing a security policy, and enhancing incident response transparency.

B

Breek

breek.fr

51

Breek is a French technology consultancy specializing in web strategy, functional specifications, and development services primarily using Drupal and iOS platforms. Established in 2003, the company serves a professional clientele including major brands such as LVMH, Apple, and BNP Paribas, positioning itself as a niche expert in web development and AMOA services. The website reflects a professional and consistent brand image with a clear focus on technology and consulting services. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and SEO practices. Analytics are implemented via Piwik PRO, indicating moderate user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partial, lacking a cookie consent mechanism and detailed GDPR indicators. Overall, the website is trustworthy and professional, with a strong business credibility score and no signs of malicious or adult content.

S

SIL Global

sil.org

63

SIL Global is a well-established, faith-based nonprofit organization dedicated to language development and community empowerment worldwide. Their website reflects a professional and comprehensive digital presence, offering extensive resources, training, and services in linguistic research, literacy, translation, and language technology. The organization targets diverse global communities and language professionals, emphasizing equal access to education and socio-economic opportunities regardless of language barriers. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses standard web technologies including jQuery and Font Awesome. It is mobile-optimized and accessible, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and secure form handling, though the absence of certain security headers and explicit cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain registration trust verification, but the presence of recognized nonprofit certifications and consistent branding supports legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance.

C

Concrete CMS

concrete5.org

74

Concrete CMS is an open source content management system designed for teams including content creators, designers, and developers. It offers a website builder with built-in tools to simplify content editing and management. The company behind Concrete CMS, PortlandLabs, positions itself as a provider of secure, compliant, and enterprise-ready CMS solutions, serving notable clients such as the U.S. Army, BASF, and Home Depot. Their business model includes offering the open source CMS software alongside hosting, support, and custom development services. The website demonstrates strong branding consistency, professional design, and clear navigation, targeting medium-sized to enterprise organizations in technology and government sectors. Technically, the website leverages modern web technologies including jQuery, Bootstrap, Vue.js, and integrates analytics and marketing tools such as Google Tag Manager, Matomo, ZoomInfo, Leadfeeder, and Pipedrive LeadBooster. The CMS platform itself is Concrete CMS, hosted likely by PortlandLabs. The site is mobile optimized and performs moderately well, with good SEO and accessibility features. From a security perspective, Concrete CMS emphasizes compliance with ISO 27001, SOC 2, and HIPAA standards, offering role-based access control, workflow approvals, and version control. The site uses HTTPS and has cookie consent mechanisms. However, explicit security headers are not detected, and there is no public vulnerability disclosure or incident response contact information, which are areas for improvement. Overall, the website is professional, trustworthy, and content safe for general audiences. The main concern is the lack of WHOIS registration data, which raises questions about domain legitimacy despite the strong business presence. Strategic recommendations include improving security header implementation, publishing vulnerability disclosure policies, and clarifying domain registration details to enhance trust.

P

PortlandLabs

concretecms.org

72

Concrete CMS is an established open source content management system developed and maintained by PortlandLabs since 2008. It targets web developers and content editors seeking an easy-to-use, flexible CMS platform with built-in features and a strong community backing. The website positions Concrete CMS as a trusted solution used by governments and Fortune 500 companies, emphasizing security, extensibility, and user-friendly editing experiences. The business model revolves around open source software distribution complemented by community engagement and commercial support services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Vue.js, FontAwesome, and analytics tools such as Matomo and Google Analytics. The CMS itself is Concrete CMS, which is also the product being promoted. The site is mobile optimized, well-structured, and uses responsive design techniques. Performance is moderate with room for improvement in accessibility features. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes a dedicated security page. Cookie consent mechanisms and a comprehensive privacy policy demonstrate compliance with privacy regulations including GDPR. However, explicit security headers are not detected, and no public vulnerability disclosure or incident response contacts are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and well-maintained with a high level of content quality and business credibility. The lack of WHOIS data limits domain registration trust analysis, but the site’s branding and external trust signals strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, improving accessibility, and maintaining transparency in data protection practices.

T

TN Média s.r.o.

salonkyhk.cz

44

Salonky is a regional news media website operated by TN Média s.r.o., focusing on delivering local news, sports, cultural events, and multimedia content to the Hradec Králové region in the Czech Republic. The site targets local residents and those interested in regional affairs, leveraging a content-rich platform with regular updates and social media integration. The business model appears to be advertising-supported, with visible banners and campaign redirects embedded in the site. Technically, the website is built on WordPress and utilizes modern front-end libraries such as jQuery, Bootstrap, Owl Carousel, and Font Awesome. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a responsive design and includes interactive features like video tabs and newsletter subscription forms. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. The newsletter subscription form uses JavaScript fetch API for secure data submission, but no explicit privacy policy or cookie consent mechanism is present, which may raise compliance concerns. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and design indicate a legitimate media outlet. Overall, Salonky presents a professional and content-rich platform for regional news but would benefit from enhanced privacy disclosures, security headers, and WHOIS transparency to improve trust and compliance. Strategic improvements in these areas will strengthen its security posture and user confidence.

K

KBOO

kboo.fm

51

KBOO is a well-established community radio station based in Portland, Oregon, providing alternative media content and community engagement since at least 2002, with roots dating back to 1968. The station operates as a non-profit entity, funded primarily through donations, memberships, underwriting, and volunteer support. Its website serves as a hub for live streaming, program schedules, community involvement, and donation facilitation, targeting local community members and alternative media audiences. Technically, the site runs on Drupal 7 with Bootstrap and jQuery, integrating analytics tools like Google Analytics and Matomo, and includes social media and donation platform integrations. While the site is functional and well-structured with good content quality and navigation, it uses an outdated CMS version, lacks a cookie consent mechanism, and does not enable DNSSEC, which are areas for improvement. Security posture is moderate with HTTPS enforced and some security best practices observed, but could be enhanced by upgrading the CMS, enabling DNSSEC, and implementing stronger security headers. Overall, the website is trustworthy and professional, with clear business legitimacy and community focus.

O

KIM – KONGRES INTEGROVANÉ MEDICÍNY – Oficiální webové stránky Kongresu integrované medicíny.

openmedicine.cz

58

The website openmedicine.cz serves as the official platform for the 10th annual Congress of Integrated Medicine (KIM) held in Prague, Czech Republic. It targets medical professionals interested in integrated and alternative medicine disciplines such as acupuncture and homeopathy. The site provides event information, registration links, and partner details, positioning itself as a niche event organizer within the healthcare sector. The domain age and WHOIS data support the legitimacy and consistency of the business. Technically, the site is built on WordPress using Elementor and standard web technologies like jQuery and Bootstrap. It is hosted likely in the Czech Republic with HTTPS enabled, ensuring basic security. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS but does not publish security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies and security headers lowers the overall security posture. Overall, the website is functional, professional, and trustworthy for its purpose but would benefit from enhanced privacy compliance, security best practices, and transparency in contact and policy disclosures to improve user trust and regulatory adherence.

Studio Biorezonance is a small healthcare service provider based in the Czech Republic specializing in holistic and alternative medicine therapies, including biorezonance, massage, and anti-aging programs. The website presents a professional and clear overview of their services targeting adults, children, and pets. Technically, the site uses a traditional tech stack with jQuery and Bootstrap, hosted by a Czech hosting provider. While the site is functional and moderately optimized for mobile, it lacks advanced security headers and privacy compliance features such as privacy and cookie policies. The security posture is moderate with room for improvement in headers and script management. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security configurations would enhance trust and compliance.

D

Diochi

diochi.cz

48

Diochi.cz is an established Czech company specializing in the development, manufacturing, and sale of natural bioinformational dietary supplements. The website reflects a mature e-commerce platform with a membership club, targeting health-conscious consumers interested in natural products. The company has a long-standing domain since 2003, indicating stability and market presence. Technically, the site is built on Joomla CMS with modern JavaScript libraries and frameworks, supporting responsive design and accessibility at a basic level. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and advanced login options including WebAuthn, though some security headers could be improved. Advertising and analytics are implemented with user consent, reflecting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in its niche.

D

Divadlo RB s.r.o.

divadlorb.cz

56

Divadlo RB s.r.o. operates the Divadlo Radka Brzobohatého theatre located in the center of Prague, Czech Republic. The company provides live theatrical performances including comedies, musicals, and classic plays, targeting a general audience interested in cultural entertainment. The business model revolves around ticket sales and event hosting, supplemented by a partner cafe service. The website reflects a well-established local cultural venue with a domain age dating back to 2004, indicating a stable presence in the market. Technically, the website is built on WordPress with modern web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for visitor tracking and uses Owl Carousel and FancyBox for UI enhancements. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting and domain registration are consistent with the Czech Republic location. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, but lacks important security headers and does not provide visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is available, and no security.txt file is found. The site does not expose sensitive data or show signs of vulnerabilities in the HTML content. Overall, the website is professional and trustworthy for its intended purpose but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing clear incident response contacts to improve trust and compliance.

H

Hudební divadlo Karlín

hdk.cz

55

Hudební divadlo Karlín is a musical theater company based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as a platform for event information, ticket sales, and e-commerce related to the theater's offerings. It targets a general audience interested in musical theater and cultural activities. The business model revolves around ticket sales, merchandise, and educational programs. The site is well-branded and consistent, reflecting a medium-sized cultural institution with a solid local presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various third-party libraries for UI components and tracking. It uses HTTPS and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event listings. From a security perspective, the site uses HTTPS but lacks explicit security headers and a published security policy or incident response contacts. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk is moderate; the site appears legitimate and functional but would benefit from enhanced privacy disclosures, security headers, and verified domain registration information to increase trust and compliance.

P

Login - pmb.community

pmb.community

63

PMB Community is a niche social network platform dedicated to users of the PMB library management software. It offers thematic spaces, forums, and collaborative tools such as wikis, shared calendars, and file sharing to facilitate knowledge exchange among librarians and documentalists. The platform is powered by the HumHub CMS and built on the Yii PHP framework, leveraging modern web technologies like jQuery and Bootstrap for a responsive and user-friendly experience. The website is secured with HTTPS and employs CSRF tokens to protect user interactions. However, it lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The WHOIS data is unavailable due to TLD restrictions and privacy protections, limiting domain registration transparency. Overall, the site presents a professional and safe environment for its target audience but could improve in privacy compliance and transparency.

F

Fundación Estatal para la Formación en el Empleo - Fundae

fundae.es

64

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

E

ESSENS Restaurant

restaurantessens.cz

9

ESSENS Restaurant is a fine dining establishment located in the culturally significant Chateau de Frontiere in South Moravia, Czech Republic. It offers a high-end gastronomic experience focusing on multi-course tasting menus with locally sourced and seasonal ingredients. The restaurant targets discerning customers seeking Michelin-quality cuisine in a refined setting. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various sliders, with tracking integrations including Google Tag Manager and Facebook Pixel. However, there is a lack of visible privacy and cookie policies, and WHOIS data is unavailable, which impacts trust and compliance. Security headers are not evident, suggesting room for improvement in security posture. Overall, the website is professionally designed and user-friendly but requires enhancements in privacy compliance and security transparency.

Coop Formations is a French cooperative organization specializing in professional training aimed at transforming work, organizations, and society. Founded in 2020, it operates as a small, human-scale entity focused on delivering accessible, high-quality educational sessions and courses. The cooperative emphasizes combining critical thinking with practical action, supported by passionate trainers and personalized learner support. The website reflects a clear mission and strong trust signals such as the Qualiopi certification and a 100% learner recommendation rate. Technically, the website is built on the Odoo CMS platform, hosted via Infomaniak, and employs modern web technologies including Bootstrap, FontAwesome, and Chart.js. It demonstrates good mobile optimization, accessibility, and SEO practices. Analytics are implemented with privacy-conscious tools like Plausible alongside Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled and no explicit security policies or incident response contacts are published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen trust and resilience.

S

Sénat

senat.fr

62

The website www.senat.fr is the official portal of the French Senate, providing authoritative information on parliamentary work, senators, legislative texts, and public consultations. It serves a broad audience including citizens, government officials, researchers, and media professionals. The site offers extensive content in French with multilingual support and integrates various services such as video archives, petitions, and legislative databases. Technically, the site is built on TYPO3 CMS, uses Bootstrap for responsive design, and employs Matomo for analytics with a GDPR-compliant cookie consent mechanism. The website demonstrates a mature digital infrastructure with good performance and accessibility standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers and explicit incident response policies could be improved. The absence of WHOIS data is noted but likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained, reflecting its role as a key government information source.

T

TotalEnergies

totalenergies.be

60

TotalEnergies Belgium operates a professional and comprehensive website offering electricity and natural gas supply services to individuals, SMEs, and large enterprises. The company positions itself as a major energy supplier with a focus on competitive pricing, renewable energy options, and customer-centric services including mobile app management and expert support. The website is well-structured, multilingual, and integrates modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed policies and cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected, indicating a trustworthy and reliable online presence.

K

KOSTKA footbike

kostkatretroller.de

59

KOSTKA footbike is a well-established Czech manufacturer and retailer of scooters for adults, children, seniors, and specialized uses such as mushing. The company has a strong market presence in the Czech Republic with over 25 years of tradition, offering a wide range of products and services including a Try & Buy program and customization options. The website is professionally designed, mobile-optimized, and provides comprehensive product information and customer support resources. Technically, the site runs on the PrestaShop e-commerce platform with modern JavaScript libraries and tracking tools integrated. Security posture is strong with HTTPS, security headers, and consent management in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

C

Colibris Outils Libres

colibris-outilslibres.org

43

Colibris Outils Libres is a small-scale organization focused on providing free and open tools for project organization and collaboration. The website presents itself as a platform to help users organize and execute projects freely, targeting a general audience interested in open-source and collaborative tools. The domain has been registered since 2017 with a reputable registrar, indicating a stable presence. Technically, the website is built using modern frontend technologies including React and Gatsby, styled with Bootstrap. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, the technical implementation lacks advanced security headers and privacy compliance features, which are areas for improvement. From a security perspective, the site uses HTTPS but does not enable DNSSEC or implement common security headers, which reduces its security posture. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting transparency and compliance with regulations such as GDPR. Overall, the website is functional and trustworthy but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact information to improve user trust and regulatory adherence.

L

L'Institut Agro

institut-agro.fr

56

L'Institut Agro is a prominent French national higher education institution specializing in agriculture, food, and environmental sciences. It operates multiple campuses and is supervised by French government ministries, positioning itself as a leader in agroecological and environmental education and research. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and academic partners. The institution emphasizes innovation, sustainability, and international collaboration. Technically, the website is built on Drupal 9 with modern frameworks such as Bootstrap and Font Awesome, and integrates Matomo for analytics with privacy-conscious configurations. The site is mobile-optimized, accessible, and features a robust cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO and accessibility practices. From a security perspective, HTTPS is enforced, and privacy controls are well implemented. However, the absence of visible security headers and lack of published security policies or incident response contacts indicate areas for improvement. The WHOIS data is unavailable, which limits domain trust verification, but the website's content and external affiliations strongly support its legitimacy. Overall, the website presents a secure, professional, and user-friendly platform for its educational mission, with recommendations to enhance security posture and transparency to further strengthen trust and compliance.