Security Directory

G

Gamesys

gamesys.com

61

Gamesys is a large international online gaming operator positioned as a subsidiary of Bally’s Corporation. The website presents a professional corporate image with clear branding and links to investor relations, legal, privacy, and cookie policies. The technical infrastructure includes common analytics tools such as Google Analytics and Google Tag Manager, with a cookie consent mechanism implemented to comply with privacy regulations. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with no explicit security headers detected and no visible incident response or vulnerability disclosure policies. Overall, the site is accessible, well-structured, and targets a general audience interested in online gaming services.

I

IT-NUM

001.africa

52

001.africa is a cloud services and domain registration provider focused on the African market, particularly offering Africanized domain names and hosting solutions. The company positions itself as a leader with 10 years of experience, targeting developers, startups, SMEs, NGOs, and larger organizations across Africa. Their key offerings include domain registration, web hosting with Plesk and Cpanel, SSL certificates, VPS servers with geolocation, e-commerce solutions, and professional email services. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in French. Technical infrastructure leverages modern frontend technologies such as Vue.js and Bootstrap, with integrations for analytics and live chat support. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and published security policies. Privacy compliance is basic with cookie consent and privacy policies present but no explicit GDPR statements. Overall, the domain registration data aligns well with the business focus and geographic targeting, supporting legitimacy. The website is accessible without WAF or blocking mechanisms, and no suspicious content or vulnerabilities were detected.

S

SolarAid

solar-aid.org

65

SolarAid is a well-established UK-based international charity founded in 2006, focused on combating poverty and climate change through the distribution of solar lights and supporting local solar enterprises in sub-Saharan Africa. The organization operates a social enterprise model, SunnyMoney, and targets donors, supporters, and communities in Africa. The website reflects a professional and consistent brand with excellent content quality and clear navigation, emphasizing impact and sustainability. Technically, the website is built on WordPress with modern integrations including Gravity Forms, Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user engagement. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS, uses domain locking statuses, and implements CAPTCHA on forms. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Privacy compliance is strong with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. No vulnerabilities or exposed sensitive data were detected. Overall, SolarAid's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements include enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure mechanism to enhance trust and security posture.

M

MagicSpace Entertainment

live-at-the-eccles.com

59

Live at the Eccles is a professional entertainment venue website operated by MagicSpace Entertainment, focusing on live events such as concerts, comedy shows, and family-friendly performances primarily at the Eccles Theater in Salt Lake City, Utah. The platform offers ticketing services, event information, and community engagement through newsletters and social media. The website is well-branded and targets a general audience interested in cultural and live entertainment events. Technically, the site is built on OctoberCMS with modern front-end technologies including HTML5, CSS3, JavaScript, and popular libraries like Slick Slider. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and AdRoll, indicating a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses Cloudflare protections, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is basic with a privacy policy present but no dedicated cookie policy page. The site collects user data via newsletter signup forms and tracking pixels, with moderate to extensive user tracking. Overall, the website is professional, secure, and credible with minor gaps in privacy and security policy transparency. Strategic improvements in cookie consent, DNS security, and published security policies would enhance trust and compliance.

K

Kidrive

kidrive.fr

46

Kidrive is a French website offering a free platform for managing sports clubs and associations, focusing on collective sports such as basketball, volleyball, football, and handball. It targets club leaders, team managers, coaches, players, and parents, providing tools for member administration, legal guardians management, match scheduling, messaging, and collective task organization. The business operates as a small entity founded in 2017, with a niche market position in amateur sports club management in France. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 4, Google Analytics, and Font Awesome, hosted by Scaleway. The site is mobile-optimized with good SEO practices but has moderate performance. Security-wise, HTTPS is enforced, and login forms use POST methods; however, the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. The security posture is moderate with no critical vulnerabilities detected but lacks advanced protections such as CSP and anti-CSRF tokens. Privacy compliance is weak due to missing policies and consent mechanisms. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the site is professional and trustworthy but should enhance privacy and security practices. Recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, improving form security, and publishing incident response and vulnerability disclosure information to strengthen trust and compliance.

L

Little Bride Book Ltd.

littlebridebookltd.com

63

Little Bride Book Ltd. operates a niche online wedding planning and lifestyle resource focused on Trinidad and Tobago. The website offers free vendor listings and event planning resources targeting DIY brides, wedding planners, and destination wedding seekers. The company is small, founded in 2019, and maintains an active social media presence. Technically, the website is built on Squarespace with modern fonts and tracking technologies such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and HSTS headers. Privacy compliance is limited due to absence of privacy and terms of service pages, though a cookie consent banner is present. Overall, the website is professional and trustworthy but could improve in privacy and security best practices.

T

Telesoft Project

telesoft.bg

50

Telesoft Project is a Bulgaria-based software development company specializing in bespoke software and web applications tailored to client needs globally. Their offerings include custom software development, business software integration, software testing, quality assurance, and web design services. The company targets businesses requiring tailored IT solutions and positions itself as a niche regional provider with international reach. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with good design and navigation but lacks advanced accessibility features. Security posture is moderate; while no critical vulnerabilities are evident, the absence of HTTPS confirmation and security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the business location, though WHOIS data is limited by GDPR privacy restrictions. Strategic recommendations include enhancing security headers, implementing HTTPS, publishing privacy policies, and improving accessibility to strengthen trust and compliance.

Organic Formula Shop is a small e-commerce business specializing in selling organic European baby formulas to customers primarily in the United States. The website is built on the Shopify platform, leveraging a modern tech stack including jQuery, Fancybox, Slick Carousel, and various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Bing UET, Klaviyo, and Okendo Reviews. The site offers free express shipping and dedicated customer support, positioning itself as a reliable source for organic baby formula products. The content is professionally presented with clear navigation and product categorization, targeting parents and caregivers seeking organic baby nutrition products. However, the site lacks visible privacy, cookie, and terms of service policies, which impacts its privacy compliance score.

L

Life Changing Energy

lifechangingenergy.com

71

Life Changing Energy operates as a niche e-commerce retailer specializing in holistic health and metaphysical products such as crystal healing tools, sound therapy instruments, and chakra balancing accessories. The company also offers educational courses and books, targeting individuals interested in energy healing and wellness. The website is built on the Shopify platform, leveraging a variety of modern marketing and analytics tools to support its digital presence. The business appears to be a small-sized entity with a focused market position in the wellness and metaphysical retail sector. Technically, the website demonstrates a moderate level of digital maturity with a solid tech stack including Shopify, jQuery, and various third-party integrations for marketing, analytics, and customer engagement. Performance and mobile optimization are adequate, though accessibility features could be enhanced. The site uses HTTPS with strong SSL configuration and security headers, indicating a good security posture. However, there is no explicit security policy or incident response information available, which could be improved to enhance trust. From a security and compliance perspective, the site maintains privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the overall website content and security practices suggest a legitimate business. No critical vulnerabilities or exposed sensitive data were detected. The site employs multiple tracking and advertising pixels, reflecting a moderate level of user tracking consistent with e-commerce operations. Overall, Life Changing Energy presents as a professional and trustworthy online retailer within its niche, with room for improvement in transparency around security policies and domain registration details. Strategic enhancements in accessibility and incident response readiness would further strengthen its security posture and customer trust.

P

ProxyEmpire

proxyempire.io

73

ProxyEmpire is a technology company specializing in providing residential, mobile, and datacenter proxy services aimed at businesses and developers engaged in web scraping and data gathering. Founded in 2022, the company offers access to a large pool of IPs across over 170 countries, positioning itself as an affordable and reliable proxy provider in the market. The website is professionally designed using WordPress with the Divi theme and incorporates SEO best practices via the Rank Math plugin. The technical infrastructure includes modern JavaScript libraries, live chat support, and analytics integration, hosted likely on DigitalOcean with Cloudflare DNS management. Security posture is solid with HTTPS enforced and standard security headers, although DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism powered by Cookiebot. Overall, the website demonstrates a good level of professionalism, technical maturity, and trustworthiness suitable for its business domain.

F

Flock Social

flocksocial.com

67

Flock Social is a technology company specializing in organic Instagram growth services, targeting brands, agencies, and influencers seeking authentic follower engagement. The company operates a subscription-based model and has established a credible market presence since its domain registration in 2017. The website is built on WordPress using Elementor, with good SEO and user experience design. Security posture is solid with HTTPS and clientTransferProhibited domain status, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a professional and trustworthy front with moderate technical sophistication and marketing integration.

S

saas.group Inc.

scraperapi.com

67

ScraperAPI is a specialized technology company providing a scalable web scraping API service designed for developers and enterprises. Their platform automates complex tasks such as proxy rotation, CAPTCHA solving, and JavaScript rendering, enabling clients to collect structured data efficiently from public websites. Positioned as a leading provider in the web scraping space, ScraperAPI targets businesses requiring reliable data extraction at scale. The website reflects a mature digital presence with professional design, comprehensive service descriptions, and integration of advanced marketing and analytics tools. Security posture is solid with HTTPS and consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the company demonstrates strong business credibility and technical maturity, with room for improvement in privacy and security transparency.

S

SocialGrowth LLC FZ

nitreo.com

60

Nitreo is a technology-driven Instagram growth service operated by SocialGrowth LLC FZ, based in Dubai, UAE. The company offers subscription-based plans to help Instagram users, including creators, businesses, and agencies, grow their followers organically through automated engagement such as follows, likes, and story views. The website is professionally designed with clear navigation, multiple calls to action, and strong trust signals including customer testimonials and industry awards. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, hosted with DNS managed by Cloudflare and domain registered via NameCheap. Security posture is good with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not enabled and some security headers are not explicitly visible. Privacy compliance is partial, with a clear privacy policy but no visible cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and targets a broad audience interested in Instagram growth services.

M

Mohammad Younes

alertifyjs.com

54

AlertifyJS is an open source JavaScript framework designed to provide developers with customizable and visually appealing browser dialogs and notifications. Founded in 2014 by Mohammad Younes, the project targets web developers seeking an extensible and themeable dialog solution. The website serves as the primary distribution and documentation portal, featuring examples, tutorials, and GitHub integration. The business model is based on open source licensing under GPLv3, with no direct commercial offerings evident on the site. Technically, the website leverages a modern JavaScript stack including jQuery, Semantic UI, Font Awesome, and Google Fonts, with DocPad as the CMS. The site is moderately optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. External dependencies include Google Analytics for tracking and Carbon Ads for monetization. Hosting is inferred to be via NameCheap based on WHOIS data. From a security perspective, the site uses HTTPS (implied by external resource URLs), but lacks explicit security headers and DNSSEC is not enabled, representing moderate security posture. No forms or sensitive data collection mechanisms are present, reducing attack surface. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact and incident response information are not provided, limiting transparency. Overall, the website is a well-maintained open source project site with good content quality and technical implementation but has room for improvement in security hardening and privacy compliance. The domain registration is consistent and transparent, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact and incident response channels to enhance trust and compliance.

M

Mead Johnson Nutrition Company

meadjohnson.com

60

Mead Johnson Nutrition Company operates as a healthcare-focused business specializing in pediatric nutrition products. The company is a subsidiary of Reckitt Benckiser Group plc since 2017, positioning it strongly within the consumer health market. The website serves as a corporate portal providing brand information, supplier resources, and links to related brands such as Enfamil. The target audience includes healthcare professionals, parents, and suppliers. The business model centers on manufacturing and distributing specialized nutrition products with a large enterprise scale and a history dating back to 1996. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, AddThis social sharing, and Google Maps API. The CMS appears to be Drupal, inferred from URL and theme structure. The site demonstrates moderate performance and good mobile optimization but has basic accessibility features. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard analytics and marketing scripts. However, no explicit security policy or incident response contacts are publicly available. Security headers are not explicitly detected in the provided data, and there is room for improvement in security best practices such as adding CSP and X-Frame-Options headers. No vulnerabilities or exposed sensitive data were observed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR, supported by a comprehensive privacy policy and cookie consent mechanism. The domain WHOIS data aligns well with the business claims, confirming legitimacy. No adult or questionable content is present, making the site safe for general audiences. The AI score reflects a strong overall quality with minor areas for improvement in security transparency and accessibility.

D

Décideurs Magazine - Accédez à toute l’actualité de la vie des affaires : politique, stratégie, finance, RH, innovation - DECIDEURS MAGAZINE - Accédez à toute l’actualité de la vie des affaires : stratégie, finance, RH, innovation

decideurs-magazine.com

60

Décideurs Magazine is a French business media publication providing comprehensive news and analysis across multiple sectors including politics, strategy, finance, human resources, and innovation. The website serves a professional French-speaking audience with a broad range of content including articles, rankings, events, and e-commerce for magazine sales. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, and integrates multiple analytics and advertising platforms such as Matomo, Google Tag Manager, Quantcast, and Smart AdServer. Security posture is moderate with HTTPS enforced and CSRF protections in forms, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which slightly reduces trustworthiness but the site content and branding indicate a legitimate media entity. Overall, the site is professional and content-rich but would benefit from improved transparency and security practices.

C

CESP

cesp.org

51

CESP is a French non-profit organization serving as the industry body for advertising and media players focused on audience measurement and media campaign effectiveness. It holds a recognized market position by auditing currency measurement systems across multiple media types including internet, TV, press, out-of-home, radio, and cinema. The website reflects a mature digital infrastructure built on WordPress with modern plugins and analytics tools, demonstrating good technical and SEO practices. Security posture is solid with HTTPS and consent management, though some security headers could be improved. The absence of WHOIS registrant data is mitigated by consistent branding and professional content, indicating legitimacy. Overall, CESP presents a trustworthy and professional online presence aligned with its industry role.

Samsung Medison Co., Ltd. is a South Korean healthcare technology company specializing in medical ultrasound systems and related imaging products. The company operates as a subsidiary of Samsung and targets healthcare professionals and medical institutions with a B2B business model. Their website reflects a professional and consistent brand image aligned with Samsung's corporate identity, offering product information, career opportunities, and contact channels. The company is positioned as a leading innovator in the healthcare imaging sector with a focus on efficiency and advanced technology.

W

Wilk Elektronik S.A.

goodram.com

51

Wilk Elektronik S.A., operating under the GOODRAM brand, is a Polish manufacturer specializing in computer memory products including DRAM modules, SSDs, USB drives, and flash cards. The company targets consumer, industrial, and server markets with a diversified product portfolio and maintains a strong brand presence supported by ISO 14001 environmental certification. The website is professionally designed, multilingual, and provides comprehensive product information and corporate content. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Owl Carousel, with Google reCAPTCHA v3 implemented for form security. Privacy and cookie policies are detailed and GDPR compliant, reflecting a mature approach to data protection. Security posture is generally strong with HTTPS enforced and secure form handling, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data for the domain reduces transparency but does not detract significantly from the site's legitimacy given the consistent branding and external social media presence. Overall, the website demonstrates a solid digital maturity with good user experience and compliance practices.

P

PoiData

poidata.xyz

58

PoiData is a Canadian-based technology company specializing in providing comprehensive global Point of Interest (POI) data. Their service includes continuously updated, high-density datasets with geocoded addresses, categories, and contact information, offered under flexible perpetual licenses and subscription models. The company positions itself as a leader in fresh and customizable POI data, targeting businesses and organizations requiring accurate geospatial data worldwide. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, hosted via Cloudflare, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, though improvements in security and privacy transparency are recommended.

VisitGreenvilleSC is a destination marketing website focused on promoting tourism in Greenville, South Carolina. The site offers comprehensive information on local attractions, restaurants, hotels, shopping, and events, positioning itself as a key resource for visitors planning trips to the area. The business model centers on destination marketing and visitor engagement, targeting tourists and travelers interested in Greenville's offerings. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience.

O

OSBA – Open Source Business Alliance

osb-alliance.de

54

The OSBA – Open Source Business Alliance is a German non-profit organization dedicated to promoting digital sovereignty through open source software. The website serves as a hub for advocacy, member engagement, and dissemination of news and events related to open source and digital sovereignty in Germany and Europe. The organization targets public sector entities, enterprises, and open source communities, positioning itself as a leading voice in the open source ecosystem. The site is professionally designed, well-structured, and regularly updated with relevant content. Technically, the website is built on WordPress using the Enfold theme and several plugins to support event management and user interaction. It employs modern web technologies and is optimized for mobile devices with good SEO practices. Security-wise, the site uses HTTPS and follows basic best practices but lacks explicit security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional image consistent with its mission and audience.

O

Open Source Business Alliance (OSBA)

open-source-wettbewerb.de

46

The Open Source Wettbewerb website represents a professional initiative focused on promoting and awarding innovative Open Source software projects within public administrations across Germany. The competition is organized by the Open Source Business Alliance (OSBA) and supported by notable partners such as SUSE, Capgemini, and govdigital eG. The site effectively communicates its mission to foster digital sovereignty and innovation in the public sector through Open Source solutions. Technically, the site is built on a modern WordPress platform using Elementor and Astra theme, with GDPR-compliant cookie and privacy policies implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains a high level of professionalism and trustworthiness.

M

Mystery Themes

mysterythemes.com

62

Mystery Themes is a specialized WordPress theme provider established in 2015, offering a portfolio of free and premium themes tailored for various website niches such as eCommerce, blogging, and business. The company targets individuals, freelancers, agencies, and website owners seeking customizable, SEO-optimized themes compatible with popular page builders like Elementor and Gutenberg. Their market position is supported by a sizable user base exceeding 100,000 active websites and positive customer testimonials. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Yoast SEO. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is inferred to be with NameCheap based on WHOIS data. The site integrates various marketing and analytics tools, including MonsterInsights and WPfomify, and uses Freemius for payment processing. From a security perspective, the site enforces HTTPS and employs domain transfer protection but lacks DNSSEC and explicit security headers like Content Security Policy. No public security policy or incident response contacts are provided, which represents an area for improvement. Forms are secured with nonce tokens, and no sensitive data exposure was detected. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance such as the absence of a cookie consent mechanism. Strategic recommendations include enabling DNSSEC, implementing CSP headers, adding a security.txt file, and enhancing privacy compliance disclosures.

T

TechFinders

techfinders.io

66

TechFinders is a small, recently founded technology platform focused on providing manufacturing companies with access to cutting-edge technologies and connections to key European developers and researchers. The website offers a technology catalogue and free consultation services to help manufacturers improve their operations. The platform positions itself as a bridge between manufacturing experts and technology innovators, primarily targeting the European manufacturing sector. Technically, the website is built on WordPress using the Divi theme and builder, integrating modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and HubSpot. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers and explicit security policies are missing. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the domain registration is privacy-protected but consistent with the business profile and age. The website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

B

Blowfish

blowfish.page

57

Blowfish is an open source, lightweight theme designed for the Hugo static site generator. It targets developers and users seeking a powerful yet simple theme solution for their Hugo-based websites. The website serves as a demo, documentation hub, and community showcase for the theme, supported by social media presence on Twitter and GitHub. The business model revolves around open source distribution with community engagement and merchandising. Technically, the site is built with Hugo 0.142.0, uses modern JavaScript libraries such as jQuery and medium-zoom, and is optimized for mobile and accessibility. Performance is fast with good SEO practices. Security posture is moderate; HTTPS is used, but explicit security headers are missing and no privacy or cookie policies are present. No forms collect sensitive data, reducing risk exposure. The domain uses privacy protection in WHOIS, which is typical for small open source projects. Overall, the site is professional and trustworthy but lacks formal privacy and security documentation.

M

MasterDC

masterdc.com

69

MasterDC is a specialized IT infrastructure company operating primarily in Central Europe, with nearly 30 years of experience managing company IT and running two data centers. Their service portfolio includes dedicated servers, cloud servers, VPS hosting, managed servers, server housing, cluster solutions, and expert IT consulting and training. The company targets businesses requiring robust IT infrastructure and managed services. The website reflects a mature digital presence built on WordPress and Elementor, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the professional website and business references provide mitigating trust signals. Overall, the company appears established and credible in its sector, though domain registration verification is recommended.

V

vpsFree.cz z.s.

vpsfree.cz

48

vpsFree.cz is a Czech non-profit community association providing virtual private servers (VPS) to its members since 2009. The organization offers VPS hosting with defined parameters such as 4 GB RAM, 120 GB disk space, and 8 CPU cores, targeting individuals and organizations seeking affordable and community-driven VPS solutions. The website reflects a small-sized, technology-focused entity with a clear non-commercial business model and a strong community orientation. Technically, the site uses Bootstrap and jQuery frameworks, integrates Google Analytics and Piwik for tracking, and is hosted by MasterDC. The website is mobile-optimized with good navigation and content relevance but lacks some accessibility features. Security posture is moderate with HTTPS usage implied but missing explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy and long-term operation of the business.

C

Commune de Villars-sur-Glâne

villars-sur-glane.ch

55

The website www.villars-sur-glane.ch serves as the official digital presence of the Commune de Villars-sur-Glâne, a local government entity in Switzerland. It provides residents and visitors with access to municipal services, news, event information, and administrative resources. The site targets local community members, including families, seniors, and general residents, offering a comprehensive portal for civic engagement and information dissemination. The business model is public service-oriented, focusing on transparency and community support. Technically, the website is built on a modern WordPress CMS platform using Elementor for page building, integrating privacy-conscious analytics via Matomo and leveraging open-source mapping tools like Leaflet. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search visibility. Performance is moderate, with room for improvement in security headers and accessibility features. From a security standpoint, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, it lacks explicit privacy and security policies, and no advanced security headers were detected in the provided data. There is no visible vulnerability disclosure or incident response information, which are recommended for enhancing trust and compliance. Overall, the website is a trustworthy and professional government portal with solid business credibility and technical implementation. Strategic improvements in security policies, header configurations, and privacy documentation would further strengthen its posture and user trust.

C

Commune de Matran

matran.ch

56

Commune de Matran operates as the official local government website for the municipality of Matran in the canton of Fribourg, Switzerland. It provides a broad range of municipal services including administration, resident control, taxation, education, social and health services, cultural and sports activities, and technical infrastructure management. The website targets residents and visitors, offering relevant community information and service access. The business model is typical of a public sector entity focused on local governance and community support. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, FontAwesome, jQuery, and OwlCarousel for a responsive and user-friendly experience. The site is mobile-optimized with good SEO practices and structured metadata including JSON-LD for organization details. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with granular user controls, reflecting good privacy compliance. However, it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The use of Google Tag Manager is present but configured to deny tracking by default, supporting privacy compliance. Overall, the website is trustworthy, professional, and well-maintained, serving its purpose effectively. Strategic improvements include publishing a security policy, incident response information, and enhancing security headers to further strengthen the security posture.

C

Commune de Marly

marly.ch

53

The Commune de Marly website serves as the official digital presence of the local government of Marly, Switzerland. It provides comprehensive municipal services information including resident control, finance and taxes, social and health services, technical services, and cultural activities. The site targets residents and visitors, offering virtual service counters and detailed event calendars. The business model is that of a public sector entity focused on community administration and service delivery. The website is well-positioned as a trusted local government resource with clear contact points and social media engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured data. Performance is moderate, with room for optimization. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers and policies are missing. From a security perspective, the site demonstrates good baseline security with no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Privacy compliance is strong with GDPR-aligned cookie consent and a detailed cookie policy. Overall, the website is a professional, trustworthy, and well-maintained municipal portal. Strategic improvements in security policy transparency and technical hardening would further strengthen its posture and user trust.

The website www.belfaux.ch serves as the official online presence of the Commune de Belfaux, a small municipal government entity in Switzerland. It provides residents and visitors with information about local administration, community services, events, and public infrastructure. The site is built on TYPO3 CMS and uses standard web technologies including Bootstrap and jQuery. It integrates Google Analytics for visitor tracking but lacks visible privacy and cookie policies, which is a notable compliance gap. Contact information is clearly presented, enhancing trust and accessibility. From a technical perspective, the site demonstrates moderate performance and good mobile optimization. However, the absence of security headers and incident response information indicates room for improvement in security posture. The domain registration data aligns well with the website's claims, supporting its legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but the lack of security headers and formal policies reduces its security maturity. There is no evidence of vulnerability disclosure or data protection officer contact details. The use of Google Analytics without a cookie consent mechanism may pose privacy risks under GDPR. Strategic improvements in these areas would strengthen the site's compliance and security stance. In summary, www.belfaux.ch is a credible municipal website with good content quality and business credibility but requires focused enhancements in privacy compliance and security practices to meet modern standards and regulatory requirements.

R

Runder Tisch Reparatur e.V.

runder-tisch-reparatur.de

40

Runder Tisch Reparatur e.V. is a German non-profit organization dedicated to promoting the right to repair and fostering a culture of repair in Germany. The website serves as a hub for advocacy, networking, event information, and educational resources related to repair initiatives. It targets consumers, repair professionals, and policy makers interested in sustainability and repair rights. The organization positions itself as a key player in the repair advocacy space within Germany, leveraging partnerships and community engagement to advance its mission. Technically, the website is built on WordPress with common plugins for forms, events, and forums, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS enforced, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and aligned with its non-profit mission, with no signs of malicious activity or content blocking.

R

Right to Repair Europe

repair.eu

57

Right to Repair Europe is a non-profit coalition advocating for the right to repair products across Europe, emphasizing sustainability and longer product lifespans. The organization targets consumers, repairers, and policymakers to promote legislative and systemic changes. Their website serves as an information hub and campaign platform, featuring news updates, resources, and a newsletter signup to engage supporters. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted by domainfactory GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google Tag Manager but lacks explicit security headers and public security policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the website is trustworthy, professional, and aligned with its advocacy mission.

R

Repaircafe

repaircafe.org

63

Repair Café is a global community-driven initiative focused on promoting the culture of repair to foster sustainability and reduce waste. The website serves as a platform to connect volunteers and participants worldwide to organize and attend repair events. The organization positions itself as a non-profit with a medium-sized global reach, emphasizing community engagement and environmental responsibility. Technically, the website is built on WordPress using modern plugins such as BuddyPress and Events Manager, with additional technologies like Vue.js and Algolia for enhanced user experience. The site is well-optimized for SEO and mobile devices, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism but lacks some security headers and explicit privacy and terms of service documentation. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and security best practices.

I

Iuridicum Remedium, z. s.

iure.org

45

Iuridicum Remedium (IuRe) is a Czech non-governmental non-profit organization dedicated to protecting human rights, particularly focusing on digital freedoms and legal aid related to debt and executions. With over 20 years of experience, it holds a strong position in the Czech human rights advocacy sector, organizing notable events such as the Big Brother Awards. The organization provides free legal advice and promotes privacy rights, targeting Czech-speaking citizens concerned with civil liberties and digital privacy. Technically, the website employs a moderate technology stack including jQuery and Slick Carousel, likely built on Drupal CMS. The site is mobile responsive with good design and navigation, though some SEO and accessibility features are basic. Hosting details are not explicit but DNS servers indicate Czech hosting providers. No advanced analytics or tracking scripts are detected, reflecting a privacy-conscious approach. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are published, representing compliance gaps. Incident response and vulnerability disclosure mechanisms are not evident. WHOIS data aligns well with the organization's claims, showing a long-established domain registered in the Czech Republic. Overall, the website is professional and trustworthy but would benefit from enhanced security headers, published privacy and cookie policies, and incident response information to improve compliance and security maturity.

I

Italian Linux Society

ils.org

57

Italian Linux Society is a well-established non-profit organization dedicated to promoting Linux and Free/Open Source Software in Italy since 1994. The website serves as a community hub offering information about the association, projects, news, and ways to contribute or join. It targets Linux users, open source enthusiasts, educational institutions, and the broader Italian tech community. The organization maintains a consistent brand presence and active social media engagement, reinforcing its position as a trusted community leader. Technically, the website is built using the Nikola static site generator with Bootstrap and jQuery for frontend styling and interactivity. It employs Matomo analytics, reflecting a privacy-conscious approach to user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal security policies or incident response information. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. WHOIS data is unavailable due to privacy protection, which is justified for this type of non-profit entity. Overall, the security posture is adequate but could be improved with additional headers and transparency. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

e Foundation is a non-profit organization based in France focused on developing privacy-enabled, open source smartphone operating systems and cloud services. Their flagship product, /e/OS, is a deGoogled Android-based OS designed to protect user data and privacy. The organization also offers Murena workspace cloud accounts and sells smartphones preloaded with /e/OS through partner Murena. The website positions e Foundation as a niche leader in privacy-conscious mobile technology with a growing international community of developers and users. Technically, the website is built on WordPress with Elementor and uses Matomo analytics configured for privacy. The site is well-structured, mobile-optimized, and professionally designed, though it lacks some advanced privacy compliance features such as cookie consent banners and explicit security policies. Security posture is strong with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and published incident response information. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

D

Digitale Gesellschaft e.V.

digitalegesellschaft.de

50

Digitale Gesellschaft e.V. is a German non-profit organization founded in 2010 dedicated to advocating for digital fundamental rights and consumer protection in the digital space. The organization engages its target audience of netpolitically interested individuals and activists through monthly events, campaigns, and educational content. Their business model relies on donations, memberships, and grants, positioning them as a recognized entity within the digital rights advocacy sector in Germany. Technically, the website is built on WordPress with a modern theme and plugins, hosted by OVH, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and formal security policies. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

LibreItalia is a small Italian non-profit volunteer association dedicated to supporting and promoting free software. The website serves as a community hub offering news, event information, documentation, and resources for members and supporters of open source software in Italy. The organization positions itself as a niche player within the Italian free software ecosystem, focusing on advocacy and community engagement. Technically, the site is built on WordPress with common plugins such as Jetpack, Contact Form 7, and Cookie Notice, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and formal security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The WHOIS data is unavailable due to a malformed query, which limits domain trust verification, but the website content and contact information support its legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Aspiration

aspirationtech.org

59

Aspiration is a well-established nonprofit technology organization founded in 2001, focused on empowering nonprofits, open source projects, and social justice initiatives through technology capacity building, strategic advising, and community events. The website reflects a mature digital presence with a professional design, clear navigation, and rich content tailored to its target audience. Technically, the site runs on Backdrop CMS with modern libraries and includes Matomo analytics for privacy-conscious tracking. Security posture is good with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the organization's claims, supporting high legitimacy and trustworthiness.

Ecere Corporation is a Canadian-based small technology company specializing in high-performance geospatial visualization software, including the GNOSIS SDK, Cartographer, and Map Server products. Founded in 2005 and incorporated in Gatineau, Québec, the company offers software licensing, training, support, and custom solution development primarily targeting developers and organizations requiring advanced GIS visualization capabilities. Their market position is that of a niche provider with a focus on open-source and cross-platform technologies. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and animation libraries, providing a good user experience with responsive design and clear navigation. However, there is no evidence of advanced CMS or hosting details. Performance is moderate with no major issues detected. SEO and accessibility are basic but adequate for the site’s scope. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled on the domain. The domain is protected with clientTransferProhibited status and privacy protection on WHOIS, which is justified for a small private company. No privacy, cookie, or incident response policies are published, indicating compliance gaps. No WAF or blocking mechanisms were detected, and no analytics or tracking scripts are present, suggesting minimal user tracking. Overall, the website is professional and trustworthy with moderate security posture and compliance. The main risks relate to missing privacy and security policies and lack of advanced security headers. Strategic improvements in these areas would enhance trust and compliance.

C

CLUSTER - Consortium Linking Universities of Science and Technology for Education and Research

cluster.org

66

CLUSTER is a consortium of 12 elite European universities specializing in science and technology education and research. The organization represents a large academic community with thousands of professors, staff, and students. The website serves as an informational hub for students, academic staff, and partners, providing details on programs, initiatives, and consortium activities. The site is built on WordPress with common plugins for SEO and forms, hosted by Gandi SAS, and secured with HTTPS. However, it lacks explicit privacy and cookie policies, and DNSSEC is not enabled, representing minor security gaps. Social media presence is limited to Twitter and LinkedIn, enhancing professional outreach. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy compliance and security hardening.

S

Software Freedom Conservancy, Inc.

inkscape.org

53

Inkscape.org is the official website for Inkscape, a professional and free vector graphics editor supported by the Software Freedom Conservancy, Inc. The site targets illustrators, designers, and web designers seeking powerful vector drawing tools across Linux, macOS, and Windows platforms. The business model is community-driven open source software, sustained by donations, sponsorships, and active contributor engagement. The website reflects a mature project with consistent branding, multilingual support, and a strong community focus. Technically, the site is built on a Django CMS framework with Python backend and uses modern web technologies including jQuery and cookie management scripts. Hosting is provided by OSUOSL with CDN support from Fastly, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and domain transfer protection, but lacks DNSSEC and published security policies or headers. Privacy and cookie policies are absent, indicating room for compliance improvement. No contact emails or phone numbers are directly visible, which may affect user trust and support accessibility. Overall, the website is professional, trustworthy, and well-maintained but could enhance privacy and security transparency.

S

Stratechery

stratechery.com

66

Stratechery is a well-established independent technology analysis and commentary platform founded in 2012 by Ben Thompson. It offers subscription-based access to in-depth articles, daily email updates, and podcasts focused on the business, strategy, and impact of technology. The website targets technology professionals, strategists, and enthusiasts, positioning itself as a trusted source of technology business insights. The business model relies on premium memberships and content subscriptions, supported by a professional and consistent brand presence. Technically, the website is built on WordPress, leveraging modern web technologies including JavaScript, PHP, and various WordPress plugins such as Jetpack and Passport for membership management. Hosting is provided by Pressable CDN, ensuring fast performance and excellent mobile optimization. The site employs HTTPS with good SSL configuration and security headers, contributing to a strong security posture. Analytics usage is minimal and privacy-conscious, with no intrusive tracking detected. Security-wise, the site demonstrates good practices including HTTPS enforcement, secure login forms, and domain transfer protection. However, DNSSEC is not enabled, and there is no explicit security policy or vulnerability disclosure page, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by comprehensive privacy and cookie policies, though a cookie consent mechanism is absent. Overall, Stratechery presents a low-risk profile with a high level of professionalism, content quality, and security maturity. Strategic recommendations include enabling DNSSEC, publishing explicit security and incident response policies, and implementing a cookie consent mechanism to enhance GDPR compliance and user trust.

S

Stichting Belanghebbenden Pietermaai District e.o.

pietermaaidistrict.com

51

Pietermaai District is a hospitality and cultural promotion website focused on the Pietermaai neighborhood in Curaçao. It provides information about local hotels, bars, restaurants, shops, and events, targeting tourists and visitors interested in local culture and nightlife. The website positions itself as a niche promoter of the district's unique offerings, blending history with modern hospitality services. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, Slider Revolution, and membership management tools. It uses Google Analytics and Tag Manager for tracking and is hosted on a provider indicated by its nameservers. Security posture is moderate with HTTPS enabled but lacks explicit security headers and privacy compliance documentation. No WAF or blocking mechanisms were detected, and the domain is well-aged and registered with a reputable registrar. Overall, the site is professional and functional but would benefit from enhanced privacy and security policies.

F

First aid and health and safety training courses

redcrossfirstaidtraining.co.uk

74

The website represents the British Red Cross's first aid training services, offering a wide range of courses including first aid, mental health, and health & safety training across the UK. It targets businesses and individuals seeking professional training with a trusted brand. The site features clear navigation, professional design, and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and OneTrust for cookie consent. The technical infrastructure is solid with HTTPS enforced and moderate performance, though some security headers are missing. The WHOIS data is unavailable and indicates the domain is not properly registered, which is a concern from a domain legitimacy perspective but the website content and branding strongly support authenticity. Overall, the site is professional, trustworthy, and compliant with privacy consent requirements, but would benefit from explicit privacy and terms of service pages and improved security headers.

I

IKOMMERCE S.r.l.

ikom.it

50

IKOMMERCE S.r.l. is an Italian digital and e-commerce agency specializing in Magento-based e-commerce platforms, web marketing, multilingual customer service, and systems integration. With over 20 years of experience, the company targets businesses seeking comprehensive digital commerce solutions. Their website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress with modern libraries and frameworks, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and consent mechanisms, though lacking explicit security policies and incident response details. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

M

Metodo S.r.l.

metodogroup.it

52

Metodo S.r.l. is a small Italian IT company based in La Spezia, specializing in IT assistance, maintenance, and custom software and website development. The company targets local businesses and organizations, offering a broad range of IT services including cybersecurity, GDPR compliance, cloud business solutions, and networking. Their market position is that of a regional IT service provider with a focus on tailored solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking, with a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers and DNSSEC are missing. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website reflects a credible and professional IT service provider with room for improvement in security policies and incident response transparency.

X

XtendSenses S.r.l.s.

xtendsenses.com

61

XtendSenses S.r.l.s. is a small Italian technology company specializing in IoT solutions, offering hardware, software, cloud services, and consulting primarily targeting small and medium enterprises. Their website presents a professional image with clear business information, contact details, and social media presence. The company emphasizes end-to-end product delivery from idea to final customer solution. Technically, the website is built on WordPress with modern plugins and SEO optimization, including Google Analytics and Cloudflare Turnstile captcha for form security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership verification. Security posture is moderate with HTTPS enabled but lacks security headers and explicit cookie consent mechanisms. Privacy policy is present and GDPR compliant, but terms of service and incident response policies are missing. Overall, the website is functional, professional, and safe for general audiences, but domain registration verification and enhanced security practices are recommended.