Security Directory

D

D2C Life Science

d2c-lifescience.com

61

D2C Life Science is a specialized consultancy focused on pharmaceutical GMP quality management, offering auditing, consulting, training, and project management services. The company targets pharmaceutical manufacturers, contract manufacturers, and hospitals implementing GMP for advanced therapies. Their website demonstrates a modern technical infrastructure using the Astro framework, with excellent design, mobile optimization, and clear content structure. Security posture is moderate with no detected security headers or incident response information, and the WHOIS data is missing, which raises some trust concerns. Privacy compliance is strong with a comprehensive privacy policy, but cookie consent mechanisms are absent. Overall, the website is professional and trustworthy, but improvements in security transparency and domain registration clarity are recommended.

O

Ornis Birding Expeditions | Global Bird Tours

ornis-birding.com

58

The website www.ornis-birding.com appears to be a Wix-hosted site focused on birding or birdwatching, as suggested by the domain name and typical Wix platform assets. However, the site lacks substantive business content, contact information, and privacy or cookie policies, which limits its credibility and compliance posture. The technical infrastructure is based on Wix's standard JavaScript libraries and polyfills, indicating a modern but basic setup. Security posture is minimal with no detected security headers or explicit SSL configuration details. The absence of WHOIS registration data raises concerns about the domain's legitimacy and longevity. Overall, the site is accessible without WAF or blocking mechanisms but lacks critical business and compliance information.

R

Rockjumper Birding Tours

rockjumperbirding.com

63

Rockjumper Birding Tours operates a specialized bird-watching adventure tour business targeting nature enthusiasts and bird watchers worldwide. The company positions itself as a niche leader offering global bird safaris and adventure travel experiences. The website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Trustpilot integration, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and relevant content for its audience. Security posture is adequate with HTTPS and DigiCert SSL certification, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and trust signals suggest a legitimate business presence. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance documentation.

C

Cley Spy

cleyspy.co.uk

58

Cley Spy is a small UK-based retailer specializing in the sale of premium binoculars, telescopes, and outdoor equipment. The company targets outdoor enthusiasts and nature observers, offering both new and used products from well-known brands such as Swarovski, Leica, and Zeiss. The website serves as both an online store and a point of information for customers interested in quality optical gear. Technically, the site is built on WordPress with WooCommerce, integrating Google Analytics and Google Tag Manager for tracking, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some advanced security headers and a published security policy or vulnerability disclosure mechanism. The domain WHOIS data is unavailable due to a registration error indicating the domain name violates Nominet UK naming rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but would benefit from improved transparency and domain registration clarity.

S

Swarovski Optik

swarovskioptik.com

69

Swarovski Optik is a premium Austrian manufacturer specializing in high-quality rifle scopes, binoculars, spotting scopes, and tripods, targeting hunting, birding, and outdoor enthusiasts globally. The company maintains a strong market position as a premium optics brand with a comprehensive product portfolio and a well-established dealer network. The website reflects a mature digital presence with modern technologies such as React, Commercetools e-commerce platform, and integrated payment solutions like Adyen. Privacy and cookie compliance are well implemented with Usercentrics consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by other trust signals and brand recognition.

The website marchconservationfund.org is currently inaccessible, returning a 403 Forbidden error page which blocks access to any substantive content. The domain is registered with GoDaddy.com, LLC since 2014 and appears legitimate from a registration standpoint. However, the lack of accessible content, absence of privacy, cookie, or terms of service policies, and no visible contact information severely limit the ability to assess the business or security posture. The technical infrastructure shows basic hosting with no DNSSEC and no advanced security headers, indicating room for improvement. Overall, the site’s security posture is minimal, and the blocked content status results in a low AI score and poor trustworthiness.

B

Birding Ecotours

birdingecotours.com

63

Birding Ecotours is a specialized tour operator offering small group and custom birding adventures worldwide. The company targets birding enthusiasts and eco-tourists with a comprehensive portfolio of tours categorized by destination, date, and style. The website is professionally designed using WordPress with modern plugins and SEO optimizations, providing an excellent user experience and clear navigation. Technical infrastructure includes Google Analytics, Google Tag Manager, and Smart Slider 3 for rich media presentation. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though no explicit security policy or incident response information is published. The absence of WHOIS data raises some concerns about domain legitimacy, but the professional web presence and content quality suggest a legitimate business. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site is secure, privacy-conscious, and well-structured, but domain registration verification is recommended.

X

XABA SAS

xaba.fr

58

XABA SAS operates as a French B2B digital marketing and web services provider specializing in website editing, lead generation, and growth hacking strategies. The company targets businesses seeking to enhance their online presence and customer acquisition through tailored marketing solutions. The website reflects a professional and consistent brand image, supported by a domain registered since 2012, indicating established market presence. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted with Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO optimizations in place. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though additional security headers and policies could enhance the security posture. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contacts suggests room for improvement in transparency and preparedness. Privacy compliance is well addressed with a GDPR-compliant cookie consent mechanism and a privacy policy in French. Overall, the website presents a moderate risk profile with a solid foundation in business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen trust and compliance.

D

DYEZ

dyez.com

54

DYEZ is a French-based digital media company specializing in SEO and web content management with a decade of experience. The company offers services including article publication, SEO article writing, personalized consulting, and collaboration opportunities targeting advertisers, web agencies, SEO consultants, and businesses of various sizes. The website is professionally designed using WordPress with Elementor and SEO optimization plugins, reflecting a mature digital presence. Technically, the site is well-optimized for performance and mobile responsiveness, leveraging modern web technologies and best practices. Security posture is solid with HTTPS and Content Security Policy headers, though additional security headers and explicit privacy policies are lacking. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the site presents a credible business front with room for improvement in privacy compliance and security transparency.

D

DNForum.com

dnforum.com

67

DNForum.com operates as an online community forum and marketplace dedicated to domain name trading, discussions, appraisals, and related services. The platform targets domain investors, buyers, sellers, and industry professionals, offering a structured environment with active user engagement and verified members. The website leverages XenForo forum software and modern web technologies, providing a good user experience with mobile optimization and clear navigation. Security practices include HTTPS enforcement, CSRF protection, and secure cookies, though explicit security headers and policies are not evident. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the active content and community suggest operational legitimacy. Privacy and cookie policies are not found, indicating compliance gaps.

I

Internet Society (ISOC) France

isoc.fr

43

Internet Society France is the French chapter of the global Internet Society, dedicated to protecting internet users and promoting an open, accessible, and neutral internet. The organization operates as a non-profit, engaging in advocacy, education, and community building within France and internationally. Their website reflects a professional presence with clear mission statements, event information, and membership opportunities. The organization is well-established with a domain age consistent with its founding date and maintains active social media channels for outreach. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Smart Slider 3, with integration of SEO tools like Yoast. Hosting appears to be through OVH with DNS managed via AWS, indicating a robust infrastructure. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO practices are good, with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. There is no visible cookie consent mechanism, which is a GDPR compliance gap. No vulnerability disclosure or security.txt files are present. Overall, the security posture is adequate but could be improved with additional best practices. The risk assessment is low given the organization's non-profit nature, clear contact information, and consistent domain registration. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and establishing a vulnerability disclosure process to enhance trust and compliance.

O

OrdiPat

ordipat.fr

55

OrdiPat is a specialized French company providing domain name management, secure hosting, and IT solutions with a focus on intellectual property systems. The company leverages over 40 years of experience and offers a range of services including premium domain management, software products like Lola, and domain monitoring tools such as Typochecker. Their market position is that of a niche, trusted provider with multiple industry accreditations and partnerships. Technically, the website is built on WordPress with modern plugins and SEO optimizations, offering a good user experience and mobile responsiveness. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. The absence of WHOIS data slightly impacts trust but the overall business credibility remains high due to professional presentation and accreditations.

I

Institut F2I

institut-f2i.fr

59

Institut F2I is a private educational institution based in France specializing in post-baccalaureate education in information technology, digital technologies, and commerce. Founded in 2012, it offers courses from BAC to BAC+5 levels, including initial and alternating (work-study) programs. The institution targets students and professionals seeking specialized education in these sectors. The website reflects a focused educational business model with consistent branding and relevant content tailored to its audience. Technically, the website is built on WordPress CMS using modern libraries such as Bootstrap, jQuery, and Swiper, hosted by OVH. It employs Google Tag Manager and Google Analytics for tracking and marketing purposes, alongside reCAPTCHA for bot protection. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security-wise, the website uses HTTPS with a good SSL configuration and some best practices like reCAPTCHA; however, it lacks security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies despite the presence of cookie consent SDK. Overall, the website is professional and credible but requires improvements in privacy disclosures and security hardening to enhance trust and compliance.

I

ILGA World

ilga.org

73

ILGA World is a well-established global non-profit organization advocating for the human rights of lesbian, gay, bisexual, trans, and intersex people worldwide. Founded in 1978, it operates as a federation of over 2,000 member organizations across 170 countries, providing advocacy, research, and grassroots support. The website reflects a mature digital presence with comprehensive content, strong branding, and clear navigation targeting activists, civil society, and human rights stakeholders. Technically, the site is built on WordPress with modern plugins for SEO, accessibility, and user engagement. It uses Cloudflare DNS and integrates Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and cookie consent mechanisms in place. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled and security headers are not explicitly detected, indicating areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, ILGA World’s website is trustworthy, professional, and secure, supporting its mission effectively. Strategic recommendations include enhancing DNS security, publishing explicit security policies, and implementing security.txt or vulnerability disclosure channels to further strengthen trust and compliance.

A

Arcus Foundation

stateoftheapes.com

58

State of the Apes is a non-profit publication initiative under the Arcus Foundation, focusing on the conservation of great apes and gibbons by examining the impact of human development activities. The website serves as a resource hub offering downloadable chapters, video interviews, and research reports targeting policymakers, academics, NGOs, and conservation experts. The platform is well-branded, professionally designed, and provides clear navigation and content relevant to its mission. Technically, the website is built on WordPress with Bootstrap and jQuery, enhanced by SEO plugins and integrated with marketing and analytics tools such as HubSpot Forms, Google Tag Manager, and LinkedIn Insight. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the reputable association with the Arcus Foundation. Overall, the website presents a low-risk profile with strong content and business credibility but would benefit from enhanced transparency in domain registration and security practices to improve trust and compliance.

M

Minor Hotels

minorhotels.com

66

Minor Hotels operates a professional and comprehensive hospitality website offering online hotel bookings across multiple global destinations and brands. The site targets travelers seeking luxury and diverse accommodations, including resorts, villas, and wellness services. The website demonstrates strong digital maturity with multi-language support, secure booking forms, and integration of major analytics and marketing pixels. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and consent mechanisms, but lacks explicit privacy and terms of service documentation. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and compliance documentation.

M

Mairie de Saint-Andiol

saint-andiol.fr

56

The website www.saint-andiol.fr serves as the official municipal portal for the commune of Saint-Andiol in France. It provides residents and visitors with access to local government services, public information, urban planning resources, and community event details. The site positions itself as a trusted local authority with clear contact information and links to regional partner organizations. Technically, the site is built on the WebSee CMS platform and utilizes common JavaScript libraries such as jQuery and Jssor Slider for interactive elements. While the site is accessible and mobile-optimized, some technical improvements could enhance performance and security. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and uses an older jQuery version that may pose vulnerabilities. Privacy compliance is partial, with no explicit privacy policy found but a cookie management page present. Overall, the site is trustworthy and professionally maintained, suitable for its governmental role.

C

Commune de Châlo-Saint-Mars

chalosaintmars.fr

58

The website www.chalosaintmars.fr serves as the official digital presence for the commune of Châlo-Saint-Mars, a small municipality in the Essonne department of France. It provides residents and visitors with comprehensive information about municipal services, local news, cultural activities, urban planning, and community events. The site is well-structured, user-friendly, and targets local citizens and tourists interested in the commune's heritage and services. Technically, the site leverages a combination of jQuery, jQuery UI, Jssor Slider, and Fancybox libraries, managed through the WebSee CMS platform. It is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with basic GDPR requirements. The site is moderately optimized for performance and mobile devices, with good navigation clarity and accessibility features, though some improvements could be made. From a security perspective, the site enforces HTTPS but lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain reduces the overall trust score, though the official nature of the site and consistent branding support its legitimacy. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy policy transparency, and domain registration verification would enhance trust and compliance.

N

NetSalesMedia

netsalesmedia.pl

65

NetSalesMedia is a professional affiliate marketing network operating primarily in Poland, formed by the merger of NetSales and SalesMedia. The company offers an innovative platform with advanced tracking technologies such as customer journey tracking, cross-device tracking, and fingerprint tracking to ensure fair and accurate commission settlements for publishers. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Tag Manager for analytics, and employs a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The WHOIS data is not publicly available, which is typical for .pl domains, but the business legitimacy is supported by clear contact information, social media presence, and association with Cube Group, a recognized digital marketing leader in Poland.

A

Api Restauration

apirecrute.com

71

Api Restauration is a well-established French family-owned company specializing in collective catering services with a large workforce and extensive operations. The website serves as a recruitment portal highlighting company values, history, and employee testimonials. The technical infrastructure is modern, leveraging the Teamtailor platform, with good mobile optimization and video content integration. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is missing, which slightly impacts trust but the website content and branding are professional and consistent.

C

CENTRALNIC CANADA INC

roulette-en-ligne.ca

47

The website roulette-en-ligne.ca is a French-language Canadian online casino review platform specializing in roulette games. It provides detailed casino reviews, bonus offers, and game listings targeted at Canadian players interested in online gambling. The business operates primarily as an affiliate marketing site, promoting various reputable online casinos. The domain is registered in Canada with a consistent registrant and appropriate domain age, supporting its legitimacy. Technically, the site is built on WordPress and uses common web technologies such as jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. Hosting is behind Cloudflare DNS, ensuring reliable delivery, though no active WAF challenge is detected. The site is moderately optimized for mobile and SEO, with good navigation and content quality. From a security perspective, the site uses HTTPS and includes tracking via Google Analytics and Yandex Metrika but lacks visible security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, which reduces trust and compliance posture. There are no detected vulnerabilities or exposed sensitive data, but improvements in security headers and privacy compliance are recommended. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures, security hardening, and transparent contact information to improve trust and compliance with data protection regulations.

P

Prognos AG

prognos.com

75

Prognos AG is a professional consulting and research firm specializing in economic and policy analyses, serving government, public sector, and business clients primarily in Germany and Europe. Their services encompass studies, forecasts, evaluations, and strategic consulting across sectors such as economy, innovation, climate, energy, and infrastructure. The company maintains a strong market position with over 200 experts and multiple European offices. Technically, the website is built on Drupal 10 with modern JavaScript libraries, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract significantly given the professional site presentation. Overall, the site is well-designed, content-rich, and trustworthy, with moderate user tracking via Matomo analytics and compliance with GDPR indicated by comprehensive privacy and cookie policies.

TAKT Fest is a cultural festival and traditional singer-songwriter competition based in Novi Sad, Serbia. The website provides detailed information about the event's program segments including music, theater, standup, circus, movies, and creative workshops. The festival targets artists and cultural enthusiasts, positioning itself as a niche event with international participation. The domain is registered since 2020 and is consistent with the festival's recent editions. Technically, the site uses Joomla CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has a good design and user experience. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via a form and social media links. Overall, the site is trustworthy and professional but could improve compliance and security practices.

N

Nová síť z.s.

artinres.cz

53

ART-IN-RES is a Czech-based online portal dedicated to connecting artists with providers of artistic residencies, facilitating creative stays essential for artistic project development. The platform targets artists primarily in the Czech Republic but also internationally, offering listings of residencies, open calls, and news updates. The business operates under Nová síť z.s., a Czech non-profit organization, and maintains a professional web presence with clear branding and consistent content quality. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, integrating plugins for event management, GDPR compliance, and analytics. The site is mobile-optimized, SEO-friendly, and employs HTTPS with a cookie consent mechanism, reflecting a mature digital infrastructure suitable for its niche audience. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and detailed security policies. No vulnerabilities or WAF blocks were detected, indicating a secure baseline posture. Privacy compliance is evident through GDPR-aligned cookie and privacy policies. However, contact information is limited to a newsletter subscription form, with no direct emails or phone numbers provided. Overall, ART-IN-RES presents a trustworthy, well-maintained platform with a clear focus on artistic residencies. Strategic improvements in security headers, incident response transparency, and expanded contact options could enhance trust and compliance further.

D

Debono Interactive

debono.cz

59

Debono Interactive is a creative digital agency based in Prague, Czech Republic, specializing in branding, design, web development, UI/UX, video production, and content marketing. The company targets businesses seeking innovative and effective digital marketing solutions to build and enhance their brand presence online. Their portfolio and client testimonials indicate a strong market position as a trusted creative partner. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, and Typed.js, ensuring fast performance and excellent mobile optimization. Security posture is good with HTTPS enabled and cookie consent implemented, though the absence of security headers and published security policies suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the professional presentation and comprehensive privacy compliance indicate a legitimate and responsible business. Overall, the website demonstrates high quality, professionalism, and user experience, making it a reliable digital agency presence online.

Ukraine Fringe is a small-scale cultural theatre festival based in Ukraine, focusing on bringing international fringe theatre culture to Ukrainian audiences and raising global awareness about Ukraine. The festival operates both live in Kyiv and online via the SceneSaver platform, featuring diverse international performances and workshops. The website is built on WordPress with Elementor and related plugins, presenting a professional and well-structured event site with good design and navigation. However, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its compliance and security posture. The domain uses privacy protection, which is common for small cultural organizations, and no suspicious indicators were found. Overall, the site is functional and credible but requires improvements in privacy, security, and transparency to enhance trust and compliance.

В

Вокс Попули ООД

selectra.bg

41

Selectra Bulgaria, operating under the legal entity Вокс Попули ООД, is a prominent Bulgarian branch of the European Selectra group, specializing in providing comparison portals for utilities, telecommunications, and financial services. Since its establishment in 2013, it has positioned itself as a market leader in Bulgaria by offering free, user-friendly platforms that empower consumers to make informed decisions. The company operates multiple niche websites covering internet, mobile, electricity, loans, forex brokers, security services, and legal assistance, reflecting a diversified portfolio tailored to Bulgarian consumers. Technically, the website is built on WordPress CMS with a Bootstrap framework and integrates common web technologies such as jQuery and Google Analytics. Hosting is provided by a reputable Bulgarian hosting provider, SuperHosting.BG, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, although accessibility and SEO could be improved. The presence of Google Analytics and Tag Manager indicates moderate user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. No vulnerability disclosures or incident response information are provided, indicating potential gaps in security transparency. The WHOIS data is redacted due to GDPR, which is standard and justified for this business type. Overall, the domain appears legitimate and consistent with the business claims. The overall risk assessment suggests a stable and credible business with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and maintaining up-to-date software to mitigate vulnerabilities.

S

Selectra

selectra.co.uk

69

Selectra is a UK-based comparison and advisory platform specializing in helping consumers and businesses save money on energy, broadband, and mobile services. Established in 2004, it holds a strong market position with comprehensive guides, comparison tools, and a solid reputation evidenced by a high Trustpilot rating. The website is built on Drupal 10, leveraging modern web technologies and Google services for analytics and advertising. The site is well-optimized for mobile and accessibility, providing a professional user experience. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

K

Kolowratovy sady s.r.o.

kolowratovysady.cz

47

Kolowratovy sady s.r.o. is a Czech-based medium-sized company specializing in the cultivation and sale of fruit such as apples, pears, cherries, and potatoes, along with the production of apple juice, cider, lemonade, honey, and mead. The company operates a retail store located in Velké Dvorce near Přimda and holds certifications including SISPO and GLOBALG.A.P, indicating adherence to quality and safety standards. The website reflects a well-established regional producer with a strong local presence and a clear business model focused on both wholesale and retail markets. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, featuring responsive design and moderate performance. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site implements GDPR-compliant cookie consent with an opt-out mechanism and obfuscates email addresses to reduce spam risks. However, there is room for improvement in security headers and explicit security policies. From a security perspective, the site uses HTTPS with good SSL configuration and follows basic best practices such as cookie consent and email obfuscation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance the security posture and user trust.

V

Connexion Visimodif

visimodif.fr

37

The website visimodif.fr serves primarily as an administration login portal for Visimodif, likely related to Visicod.com. The site is minimalistic, focusing on user authentication for internal or administrative users, with no public-facing business descriptions or contact information. The domain is well-established, registered since 2010 with OVH, a reputable French registrar, indicating a stable presence. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript with jQuery and validation plugins, hosted on OVH infrastructure. Mobile optimization is adequate, but accessibility and SEO features are basic. Security posture is moderate; while client-side validation is implemented, there is no visible HTTPS enforcement or security headers in the provided HTML content, and no advanced security policies or incident response information is available. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is functional but lacks comprehensive security and privacy measures, and public business information is minimal.

T

Tanec Praha z.ú.

tanecpraha.org

49

Tanec Praha z.ú. is a well-established non-profit organization based in the Czech Republic, dedicated to promoting dance and movement theater through festivals, events, and educational programs. The organization operates multiple related entities including the TANEC PRAHA festival, Czech Dance Platform, and Ponec theater, targeting both professional artists and the general public interested in dance culture. The website reflects a consistent brand and provides relevant content and contact information to its audience. Technically, the website is built on Drupal 7 with a variety of modern front-end libraries and frameworks such as Bootstrap and jQuery. It uses HTTPS with a good SSL configuration and implements cookie consent via Cookiebot, indicating awareness of privacy compliance. The site performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site has HTTPS enabled and secure forms with GDPR consent checkboxes, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website is professional, secure, and compliant with basic privacy standards, serving its cultural mission effectively. Strategic improvements in security headers and privacy policy publication would further enhance its posture.

IN SITU is a well-established European cultural platform focused on artistic creation in public spaces, led by Lieux publics in Marseille, France. The platform supports emerging artists and fosters collaboration across more than 20 countries, with a history dating back to 2003. The website reflects a professional and content-rich presence, targeting artists, programmers, and cultural professionals interested in public space art. Technically, the site uses modern JavaScript libraries, integrates accessibility tools, and employs Google Analytics and Tag Manager for tracking. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy compliance mechanisms. WHOIS data is unavailable due to a malformed request, which slightly reduces domain trustworthiness. Overall, the platform demonstrates a strong cultural mission with moderate technical maturity and room for improvement in privacy and security transparency.

F

FAQMob

faqmob.fr

55

FAQMob is a French-language online platform focused on delivering news, tutorials, buying guides, and deals related to high-tech, geek culture, computing, and video games. The website targets technology enthusiasts and general consumers interested in smartphones, digital products, and gaming. It operates as a content publishing site with a niche market position in the French tech media space. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Fonts, Font Awesome, and optimization plugins like WP Rocket. It also integrates OneSignal for push notifications, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies such as privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and technical setup appear professional and legitimate. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security best practices.

D

Datackathon

datackathon.com

56

Datackathon is a French digital magazine specializing in data, digital technology, cybersecurity, AI, cloud computing, SaaS, marketing, and e-commerce. It targets professionals and enthusiasts interested in these domains by providing regularly updated articles and news. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. Advertising is primarily managed through Google Adsense and affiliate marketing via ThirstyAffiliates. The website enforces HTTPS, ensuring secure communication, but lacks some advanced security headers and explicit cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data for the domain is missing or unavailable, which raises questions about domain registration transparency, though the website content and structure appear legitimate and professional.

A

Advertising Media s.r.o.

advertising-media.cz

51

Advertising Media s.r.o. is a Czech-based digital marketing and web development company specializing in creating functional websites, e-shops, and tailored marketing campaigns. They serve a diverse clientele including small businesses, schools, and public institutions, offering scalable solutions from simple websites to complex e-commerce platforms. Their market position is that of a trusted local provider with a strong emphasis on measurable and profitable marketing services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent management for tracking scripts but lacks explicit security headers and published privacy or incident response policies, indicating room for improvement in compliance and transparency. The absence of WHOIS data reduces domain trustworthiness, though the professional presentation and clear contact information mitigate some concerns. Overall, the website is well-designed, user-friendly, and business-focused, with moderate risk due to missing WHOIS transparency and privacy documentation.

The website ingreen.sk is currently inaccessible due to a critical PHP syntax error, resulting in no visible content or metadata. The domain is registered since 2010 under SK-NIC with DNSSEC enabled, indicating a legitimate registration consistent with the Slovakian domain extension. However, the lack of accessible content prevents a full assessment of the business or its services. The technical infrastructure appears to be hosted by websupport.sk, but the site suffers from poor technical implementation and no visible security or privacy policies. The security posture is weak due to the site being down, though the domain registration data is stable and trustworthy. Overall, the website is non-functional, which severely impacts its credibility and user trust.

The website workspace-solution.com represents a small French technology company named Addona Editions offering customizable web management solutions including CRM, invoicing, email marketing, websites, and mobile/web applications. The business targets organizations seeking modular ERP and management tools tailored to their specific needs. The site is professionally designed with consistent branding and clear navigation, providing good user experience and relevant content for its audience. Technically, the site uses a variety of modern front-end libraries such as Bootstrap, jQuery, Font Awesome, and Ionicons, but lacks evidence of a CMS or backend framework. Performance is moderate with good mobile optimization but basic accessibility and SEO features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the site is functional and business-focused but requires improvements in security, compliance, and domain registration transparency.

A

APECITA

apecita.com

51

APECITA is a specialized employment platform focused on agriculture, agro-food, and environmental sectors in France. It offers thousands of job listings annually and serves as a bridge between candidates and employers, providing tailored services and training resources. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, it employs modern JavaScript libraries and integrates cookie consent and tracking tools responsibly. Security posture is good with HTTPS enforced, though improvements in security headers and formal security policies are recommended. WHOIS data is not publicly available, likely due to privacy protection, which is common for such business domains. Overall, the site presents a trustworthy and credible business front with moderate risk due to limited WHOIS transparency.

Z

Zupimages

zupimages.net

60

Zupimages is a French-based free image hosting service established since 2009, offering users a simple and fast platform to upload and share images securely via HTTPS. The service supports multi-image uploads and provides instant links for sharing. It is supported primarily through advertising networks and targets a general audience seeking free image hosting solutions. The website demonstrates moderate digital maturity with a mix of legacy and modern technologies, including jQuery 1.10.2 and various ad and tracking services. While the site implements GDPR consent mechanisms and provides transparency on incident handling, it lacks a formal privacy policy page and security headers, which are important for compliance and security posture. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness, although the website content and service appear legitimate and professional. Overall, the security posture is moderate with room for improvement in updating libraries, enhancing security headers, and publishing comprehensive privacy and security policies.

I

IPcost

ipcost.com

61

IPcost.com is a specialized online service providing users with detailed information about their public IP addresses, including IPv4 and IPv6 detection, geolocation on a world map, and additional network details such as ISP, ASN, and VPN/proxy detection. The website targets general internet users who need quick and free access to IP-related data, positioning itself as a niche informational tool in the technology sector. The business model is primarily ad-supported, with Google Adsense integrated for monetization. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Leaflet.js library for interactive map rendering. It uses Google Tag Manager and Google Adsense for analytics and advertising. The site is hosted on infrastructure likely provided by Hetzner Online GmbH, inferred from IP geolocation data. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. From a security perspective, the site benefits from HTTPS encryption and domain transfer lock status, enhancing trustworthiness. However, it lacks DNSSEC, explicit security policies, incident response contacts, and a cookie consent mechanism, which are important for compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and privacy compliance are recommended. Overall, IPcost.com is a legitimate, moderately mature service with a solid technical foundation and clear business purpose. Strategic enhancements in privacy compliance, security transparency, and DNS security would improve its risk posture and user trust.

The website serveur-prive.net is currently inaccessible due to a Cloudflare anti-bot challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, business information, or user interaction elements. The domain is registered with Infomaniak Network SA since 2018 and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no privacy, cookie, or terms of service policies are visible, nor is there any contact or business information available on the landing page. The technical infrastructure relies on Cloudflare's security platform, but the lack of accessible content limits the ability to assess the website's full technical maturity or business model. Security posture is partially supported by Cloudflare's WAF, but no additional security headers or policies are observable. Overall, the site presents a low trust profile due to inaccessibility and lack of transparency.

N

noTube

notube.lol

59

noTube is a small technology-focused business providing a free, fast, and ad-free online video conversion service primarily targeting general users who want to convert videos from platforms like YouTube, TikTok, and Twitter into various audio and video formats. The service offers multi-language support and an optional subscription for enhanced features, positioning itself as a leading free converter in its niche. Technically, the website uses a custom-built platform with modern JavaScript libraries such as jQuery and analytics tools like Matomo and RealTimely. Hosting and DNS are managed via 1API GmbH and Cloudflare respectively, but DNSSEC is not enabled. Security posture is moderate with HTTPS enforced but lacks advanced security headers and published incident response policies. Privacy compliance is basic but includes cookie consent and privacy policies aligned with GDPR. Overall, the website is professional, user-friendly, and trustworthy with room for security and compliance improvements.

C

CPS Test - Check your clicks per second

cpstest.click

64

The website cpstest.click offers a free online service focused on measuring and training users' mouse click speed, primarily targeting gamers and casual users interested in improving their click rate. The site provides multiple click speed tests, reaction time tests, and related gaming tools, supported by advertising revenue through Google Adsense and related ad services. The content is well structured, multilingual, and optimized for mobile devices, providing a good user experience with clear navigation and relevant gaming-related content. From a technical perspective, the site uses modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and DoubleClick for analytics and advertising. The domain is registered with a reputable registrar and uses Cloudflare DNS, but lacks DNSSEC and explicit security headers, which are areas for improvement. The site is served over HTTPS, ensuring encrypted communication. Security posture is moderate; while HTTPS is enforced and domain transfer protection is enabled, the absence of DNSSEC and security headers reduces the overall security maturity. Privacy compliance is basic, with a privacy policy and terms of service present, but no visible cookie consent mechanism despite use of tracking scripts. Contact information is limited to a contact form with no direct emails or phone numbers, which may affect user trust. Overall, the website is a legitimate, small-scale online gaming utility with a moderate security and privacy posture. Strategic improvements in security headers, DNSSEC implementation, and privacy compliance would enhance trust and security. The site is safe for general audiences with no adult or questionable content detected.

C

Convertall

convertall.com

55

Convertall is a well-established online file conversion service founded in 1999, offering free conversion of various file types including audio, video, images, documents, ebooks, and more. The service emphasizes user privacy by encrypting data with AES-256 and deleting files after conversion, alongside a commitment to eco-friendly operations. The website is professionally designed with excellent content quality and clear navigation, targeting general internet users needing secure and versatile file conversion tools. Technically, the site uses modern JavaScript, is hosted by OVH sas, and employs Cloudflare DNS, with good SSL configuration and fast performance. Security practices include encrypted file transfer and data deletion, but lack DNSSEC and security headers. Privacy compliance is supported by a comprehensive privacy policy and terms of service, though no cookie consent mechanism is present despite use of Google Tag Manager for analytics. Overall, the site is trustworthy and professional with strong business credibility and user trust signals.

V

VDA-online

vda-online.de

41

VDA-online.de represents the Verband Deutscher Vereine für Aquarien- und Terrarienkunden, a well-established non-profit association founded in 1911, serving aquarium and terrarium enthusiasts in Germany with approximately 250 clubs and 9,000 members. The website is professionally built on WordPress using Elementor and related plugins, featuring good SEO and structured data implementations. The technical infrastructure is moderate in performance and well-optimized for mobile devices. Security posture is adequate with HTTPS usage but lacks explicit security headers and incident response disclosures. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is trustworthy and serves its niche audience effectively but would benefit from enhanced security and privacy transparency.

The VDA-DGHT Sachkunde GbR website provides specialized educational and certification services for private and commercial animal keepers in the fields of aquaristics and terraristics. It serves a niche market focused on compliance with German animal protection laws, offering recognized certifications and training courses. The business is positioned as a trusted provider with ISO 9001:2015 certification and partnerships with reputable organizations such as VDA and DGHT. Technically, the website is built on a modern CMS platform with standard web technologies including jQuery and service workers, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though contact information is not prominently displayed. No blocking or WAF interference was detected, allowing full content access.

L

LWS

lws-hosting.com

48

LWS operates a professional and content-rich blog focused on web hosting, domain registration, VPS, dedicated servers, and WordPress hosting services. The company has a strong market presence in France with over 20 years of experience, offering accessible and quality hosting solutions. The blog serves as an educational and marketing platform targeting website creators, small to medium businesses, and e-commerce users. Technically, the website is built on WordPress with modern technologies including Google Analytics, Google Tag Manager, and caching plugins. The site is mobile-optimized and provides a good user experience with clear navigation and multimedia content such as videos. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is not available, which is expected, and the main domain is presumed legitimate based on branding and business presence. Overall, the website is trustworthy and professional, but could enhance compliance and security transparency by publishing privacy policies, terms of service, and security incident response information.

Protected Planet is a globally recognized platform managed by UNEP-WCMC and IUCN, providing comprehensive and up-to-date data on protected areas and other effective area-based conservation measures. The website serves governments, NGOs, landowners, and communities by aggregating and disseminating critical conservation data, supported by an API and regular updates. Its market position is strong as a leading global resource in environmental conservation data. Technically, the website employs modern web technologies including Ruby on Rails, Mapbox GL JS for mapping, and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance tuning. From a security perspective, the site enforces HTTPS, uses Content Security Policy, and includes CSRF tokens, reflecting a solid security posture. However, it lacks some recommended security headers and does not publicly disclose security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and content-rich with a high level of business credibility. The main risks relate to privacy compliance gaps and limited contact information. Strategic recommendations include publishing comprehensive privacy and security policies, expanding contact options, and enhancing security headers to further strengthen the security posture.

E

ECOLEX

ecolex.org

67

ECOLEX is a joint initiative by FAO, IUCN, and UNEP providing a comprehensive global environmental law information service. It offers searchable access to treaties, legislation, judicial decisions, and literature in multiple languages, targeting governments, NGOs, academia, and the public. The website is professionally designed with consistent branding and a strong trust foundation based on its reputable partners. Technically, the site uses a classic web stack including jQuery and Bootstrap, with Google Analytics for user tracking. While the site is mobile-optimized and performs moderately well, it uses an outdated jQuery version and lacks some security headers, which could pose risks. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance could be improved. WHOIS data is incomplete, limiting domain trust verification, but the website's content and affiliations strongly support legitimacy.

I

IUCN

iucnleadersforum.org

71

The IUCN Leaders Forum website serves as a professional platform for promoting the 2024 edition of the IUCN Leaders Forum event, focusing on innovation and conservation. It is backed by the International Union for Conservation of Nature (IUCN), a well-established global environmental organization. The site provides comprehensive event details, speaker profiles, and multimedia content, targeting environmental leaders, policymakers, and sustainability professionals worldwide. The business model is non-profit, centered on convening stakeholders to advance nature-positive solutions. Technically, the website is built on Drupal 9 with Bootstrap 4, leveraging modern web technologies and performance optimizations such as lazy loading and responsive design. It integrates multiple marketing and analytics tools, including Google Tag Manager, LinkedIn Insights, and Twitter tracking, all managed with a clear cookie consent mechanism ensuring GDPR compliance. The site is hosted with Cloudflare DNS and secured with HTTPS, although DNSSEC is not enabled. From a security perspective, the website demonstrates good practices with HTTPS enforcement, domain locking, and cookie consent. However, there is room for improvement by enabling DNSSEC and publishing explicit security policies and vulnerability disclosure information. No critical vulnerabilities or security issues were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the IUCN's mission to foster collaboration and innovation in environmental conservation through its Leaders Forum event.