Security Directory

L

Léa Nature

leanatureboutique.com

9

Léa Nature operates a French e-commerce platform specializing in organic products, offering promotions and a variety of organic brands. The website is built on Magento 2 with several extensions enhancing user experience and marketing capabilities. The technical infrastructure includes modern JavaScript libraries and monitoring tools such as New Relic and Google Tag Manager, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and monitoring in place, though explicit security headers and privacy policies are not clearly presented. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the website content and branding suggest a professional and established business. Overall, the site is suitable for general audiences with no adult or questionable content detected.

The website at msgsndr.com presents an extremely minimal online presence, consisting solely of a basic HTML page with the text 'OK!'. There is no metadata, no business description, no contact information, and no visible content that describes the company's services or market position. The domain is registered with GoDaddy since 2018 and uses Cloudflare DNS servers, indicating some level of infrastructure maturity, but the website itself lacks substantive content or digital maturity. Security posture is basic with no DNSSEC enabled and no security headers detected. There are no privacy or cookie policies, no forms, and no tracking or analytics technologies in use. Overall, the site appears to be either under development or abandoned, with very low trust and credibility from a business and security perspective.

L

LeadConnector

leadconnectorhq.com

69

LeadConnector is a technology company offering a SaaS platform focused on software integration and lead management. Their platform enables users to connect their software with thousands of other applications, leveraging Zapier integrations and AI-powered conversation management. The website is built using modern JavaScript frameworks such as Nuxt.js and includes mobile optimization and professional design elements. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with no visible security headers or incident response information, and privacy compliance is basic with a privacy policy but no cookie consent mechanism. Overall, the website presents a professional business offering but requires improvements in security and compliance transparency.

The website at jabmo.app currently presents minimal content, consisting solely of a small JavaScript snippet injected into the page. There is no visible business information, metadata, structured data, or contact details available. This lack of content severely limits the ability to assess the company's market position, services, or audience. Technically, the site uses basic JavaScript but lacks modern frameworks, SEO optimization, or accessibility features. Security posture cannot be fully evaluated due to missing HTTPS confirmation and absence of security headers. The WHOIS data is privacy protected, which restricts trust and legitimacy analysis. Overall, the site appears incomplete or under development, with significant gaps in compliance, security, and business transparency.

F

Fondation Inserm

fondation-inserm.org

58

Fondation Inserm is a French non-profit foundation established in 2023 to support the medical research missions of Inserm by developing private funding from donors including individuals and companies. The foundation focuses on advancing health and biomedical research, promoting scientific knowledge dissemination, and supporting research teams through funding innovative programs, acquiring advanced equipment, and recruiting research talents. The website is professionally designed using WordPress and Elementor, with good mobile optimization and accessibility features. It includes a GDPR-compliant cookie consent mechanism and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and domain registration consistent with the organization's identity, though security headers and explicit privacy policies are not detected in the provided content. No direct contact emails or phone numbers are found, but social media presence is established on Instagram, LinkedIn, and Facebook. Overall, the site presents a trustworthy and professional image aligned with its mission as a healthcare non-profit foundation.

The domain inserm-transfert.fr is registered since 2002 under the registrar GIP RENATER, indicating a legitimate and established presence likely related to the French government or public research sector. However, the website content is currently inaccessible, returning a 404 Not Found error page with no metadata, scripts, or visible content. This lack of accessible content prevents a full assessment of the business operations, services, or compliance posture. Technically, no information about SSL, security headers, or technologies used is available, indicating either a misconfiguration or the site being offline. Security posture cannot be properly evaluated due to missing content and headers. Overall, the website is not currently functional, which poses a risk to user trust and business credibility.

I

Institut français NL

institutfrancais.nl

45

Institut français NL is a medium-sized non-profit organization dedicated to fostering Franco-Dutch cooperation in culture, education, research, and the French language. The organization offers a variety of programs including artist residencies, language courses, scholarships, and professional mobility initiatives. The website reflects a well-established institution with a clear mission and a broad network of partners across the Netherlands. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted by OVH with DNSSEC enabled, indicating a secure and stable infrastructure. Security posture is good with HTTPS enforced and use of hCaptcha for form protection, though additional security headers and policies could enhance the overall security framework. Privacy compliance is strong with clear policies and cookie consent mechanisms in place. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience effectively.

S

Spirála Ostrava, z.ú.

spiralaostrava.cz

60

Spirála Ostrava, z.ú. is a Czech non-profit organization dedicated to supporting and providing opportunities for people with mental illnesses and handicaps. Their services include social rehabilitation, sheltered employment such as catering, sewing workshops, and green maintenance, as well as educational initiatives like the CareJam center. The organization is regionally focused within the Moravskoslezský kraj and collaborates with various governmental and private partners. The website reflects a well-structured, content-rich platform with clear navigation and professional design, targeting clients, partners, and the local community. Technically, the site is built on the Webnode CMS platform, uses HTTPS, and integrates common analytics and marketing tools, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website content and external references support legitimacy. Overall, the site is safe, compliant with GDPR, and professionally maintained.

O

Sign in - Matomo

openscop.icu

56

The website openscop.icu hosts a Matomo analytics platform instance, primarily serving as a login portal for authorized users to access analytics data. The platform is an open-source, free/libre analytics solution, targeting website administrators and analytics professionals who require privacy-focused visitor tracking. The business model revolves around providing analytics services with a focus on data privacy and user control. The site is relatively new, with domain registration dating back to 2019, and is hosted by Gandi SAS, a reputable registrar and hosting provider. The content is minimal, focusing on authentication, with no public-facing business or contact information.

C

Canopée

canopee.ong

59

Canopée is a French non-profit organization dedicated to protecting forests through expert investigations, advocacy, and citizen mobilization. The website positions itself as a credible and active player in environmental protection with a clear mission and multiple ongoing campaigns. Technically, the site is built on WordPress with modern analytics and consent management tools, showing good digital maturity and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. The domain WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, professional, and well-maintained.

E

Emmaüs Epargne Solidaire

emmaus-epargne-solidaire.fr

48

Emmaüs Epargne Solidaire is a French social finance organization that enables individuals to invest in solidarity savings products aimed at funding social and environmental projects, primarily supporting Emmaüs groups. The website presents a clear mission focused on ethical investment and social impact, supported by recognized certifications such as ESUS and Finansol. The platform is positioned as a niche player in the social finance sector, targeting socially conscious investors. Technically, the website leverages modern web technologies including React and Ionic Framework, with a responsive design and good SEO practices. However, some areas such as accessibility and security headers could be improved. The site does not appear to use extensive tracking or advertising, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The WHOIS data is incomplete or protected, which slightly reduces domain trustworthiness, though the website content and certifications support legitimacy. Overall, the website is professional and trustworthy with a strong social mission, but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

W

WebHouse, s.r.o.

mlady-vedec.eu

41

Mladý vedec is a Slovak-based e-commerce retailer specializing in scientific and technical toys, educational kits, and related products aimed at children, students, and educators. The website offers a broad range of categories including physics, biology, astronomy, robotics, and chemistry, positioning itself as a niche educational toy provider in Slovakia. The business model focuses on online sales with a clear target audience interested in educational and science-related products. The site is branded consistently and provides clear contact information, enhancing trustworthiness.

E

Edumania

edumania.sk

58

Edumania is a Slovakian e-commerce retailer specializing in educational toys, kits, and games designed for curious children who enjoy learning through play. The website is professionally designed, leveraging the Shoptet e-commerce platform, and offers a well-structured catalog with clear navigation and product categorization by area, type, and age. The business targets parents and educators seeking quality educational products in Slovakia. Technically, the site uses modern web technologies including jQuery, Google Analytics, Facebook SDK, and slick carousel for UI components, hosted on Shoptet's CDN infrastructure. The site is mobile-optimized and includes accessibility features, though some improvements could be made.

D

dacia

dacia.ma

71

The website www.dacia.ma serves as the official Moroccan portal for the Dacia automotive brand, part of the Renault Group. It provides comprehensive information on vehicle models, pricing, financing options, after-sales services, and dealer locations. The site targets consumers in Morocco interested in purchasing new or used Dacia vehicles, offering a user-friendly interface with vehicle configurators and test drive booking features. Technically, the site leverages modern web technologies including React, Google Tag Manager, and Google Analytics, ensuring a responsive and well-structured user experience. Security measures such as HTTPS and security headers are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, reducing trust scores despite the professional presentation and strong brand alignment. Overall, the site is well-designed and functional, with room for improvement in transparency and direct contact information to enhance trust and compliance.

M

MaFormation

maformation.fr

58

MaFormation.fr is a large French online platform specializing in aggregating and listing professional training courses across France. It offers a wide range of educational services including CPF-financed training, alternance programs, online courses, and competency assessments. The platform targets individuals seeking to enhance their professional skills and certifications. The website is well-branded, consistent, and provides comprehensive content relevant to its audience. Technically, it employs modern web technologies such as Tailwind CSS, StimulusJS, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Abtasty. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the association with the Hellowork Group parent company and professional presentation mitigate this risk. Overall, the site is professional, trustworthy, and serves a critical role in the French education sector.

C

Confédération générale des Scop

les-scop.coop

55

The website www.les-scop.coop represents the Confédération générale des Scop, a French non-profit organization supporting cooperative enterprises such as Scop and Scic. It serves as a central hub for cooperative members, entrepreneurs, and stakeholders in the social and solidarity economy in France. The site offers resources, news, career information, and a network of regional unions and partners, positioning itself as a national leader in cooperative support. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries and analytics tools including Matomo and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs cookie consent mechanisms compliant with GDPR and provides clear contact information and member extranet access. From a security perspective, the site enforces HTTPS and uses consent-based tracking. However, it lacks visible security headers and a published security policy or incident response contacts. The domain registration is consistent and trustworthy, registered since 2009 with a registrar specialized in .coop domains. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-aligned with its cooperative mission. Strategic improvements in security headers and explicit security policies would enhance its security posture further.

A

Ascensio System SIA

onlyoffice.com

70

ONLYOFFICE, owned by Ascensio System SIA, is a well-established technology company founded in 2007, offering a comprehensive and secure online office suite compatible with MS Office formats. The company targets businesses and developers, providing SaaS and self-hosted solutions for document editing, collaboration, and AI-powered virtual assistants. The website demonstrates a strong market position with over 15 million users and numerous reputable customers. Technically, the site is built on modern frameworks like Next.js, hosted on AWS, and integrates various collaboration and communication tools, ensuring a fast and mobile-optimized user experience. Security is a priority, with HTTPS, multiple encryption levels, open-source transparency, and compliance with GDPR and HIPAA standards. However, DNSSEC is not enabled, and no cookie consent mechanism was detected, which are areas for improvement. Overall, the website is professional, trustworthy, and technically mature, reflecting a credible and secure business presence.

C

Collabora Online and Collabora Office

collaboraoffice.com

72

Collabora Online and Collabora Office provide a comprehensive open-source online document editing suite designed for secure, collaborative editing controlled by the user. The company targets businesses and organizations requiring enterprise-grade document collaboration solutions, offering products such as Collabora Online, Collabora Office desktop applications, mobile apps, and large deployment controllers. Their market position is that of an established technology provider in the open-source productivity software space, supported by a strong partner and integration ecosystem. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, and integrates analytics and marketing tools such as Matomo and Mautic. The site is well-optimized for SEO, mobile-friendly, and accessible, reflecting a mature digital infrastructure. However, some security best practices like explicit security headers and published security policies are not evident. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible privacy and cookie policies and incident response information. The absence of WHOIS registration data reduces trust slightly, though the professional presentation and partner ecosystem support legitimacy. No critical vulnerabilities or adult content were detected. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving contact information visibility to strengthen trust and compliance.

F

Framasoft

framateam.org

56

Framateam is a French non-profit association's service providing a free, privacy-focused, open source team chat platform based on Mattermost. It targets teams and communities seeking ethical and user-controlled communication tools. The website is well designed, content-rich, and consistent with the organization's mission. Technically, it uses modern JavaScript frameworks and enforces HTTPS with a Content-Security-Policy header, though DNSSEC is not enabled and no cookie consent mechanism is present. Security posture is good but could be improved with published incident response policies and vulnerability disclosure mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

E

ENGIE

engie.com

72

ENGIE is a major global energy company focused on accelerating the transition to a carbon-neutral economy. The company offers a broad range of services including renewable energy production, energy flexibility solutions, infrastructure management, and energy supply tailored to cities, industries, tertiary sectors, and individual consumers. The website content is professionally presented in French, reflecting ENGIE's strong market position in the energy sector, particularly in France and internationally. Technically, the site is built on Drupal CMS with modern web technologies such as Bootstrap, Google Tag Manager, and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no security.txt file is published. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, ENGIE's website demonstrates a mature digital presence aligned with its business objectives and compliance requirements.

Media Business Insight Limited is a prominent content, insight, and events company serving the creative media industry, particularly in TV, film, and advertising sectors. It operates under the parent company GlobalData Group and offers market-leading brands that provide essential industry information and networking opportunities. The website showcases a professional team and a broad range of services including media databases and event hosting. Technically, the site is built on WordPress with common plugins and libraries, featuring a cookie consent mechanism and HTTPS encryption. However, Google Analytics is present but not configured, and no security headers were detected, indicating room for security improvements. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding suggest legitimacy. Overall, the site is well-designed, mobile-optimized, and targets media professionals globally.

C

Competence Centrum Behindertenhilfe (CCB)

versicherungsstelle-ccb.de

53

The Competence Centrum Behindertenhilfe (CCB) operates a specialized insurance information and consulting website focused on people with disabilities, chronic illnesses, and seniors in Germany. The site provides tailored insurance solutions, expert advice, and application support, positioning itself as a niche provider in this sector. The business model centers on delivering accessible, targeted insurance services and educational resources to affected individuals, their caregivers, and institutions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript, Google reCAPTCHA for form security, and accessibility tools such as ReadSpeaker. The site demonstrates good mobile optimization, accessibility features, and SEO practices, hosted on Onix infrastructure with secure HTTPS configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and published incident response policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-targeted, with moderate technical sophistication and a solid security baseline. Improvements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

E

Ecclesia Holding GmbH

ecclesia.com

43

Ecclesia Holding GmbH operates as Germany's largest insurance broker and risk consultant, offering a broad portfolio of services that extend beyond traditional insurance brokerage. Their website presents a professional, well-structured digital presence powered by TYPO3 CMS, integrating modern analytics and consent management tools to ensure GDPR compliance. The company targets diverse sectors including health, industry, church, social services, transport, and logistics, providing tailored insurance and risk management solutions. Despite the absence of WHOIS data, the website's content quality and comprehensive service offerings indicate a mature and reputable enterprise. Security measures such as HTTPS, security headers, and consent mechanisms are properly implemented, reflecting a strong security posture. Overall, the site is safe, trustworthy, and professionally maintained.

L

Landesamt für Arbeitsbeschaffung

lfa.be

70

The Landesamt für Arbeitsbeschaffung (LfA) is a Belgian government agency responsible for implementing social insurance regulations related to unemployment, including labor market activation measures, career breaks, and time credit schemes. The website targets German-speaking citizens and employers in Belgium, providing information and electronic services such as online applications and electronic control cards. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence for a public sector entity. Technically, the site uses modern frameworks like Bootstrap and integrates privacy-conscious analytics (Matomo) and chatbot services, indicating a moderate to advanced digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies aligned with GDPR. Overall, the domain and website appear legitimate and trustworthy, consistent with a government agency, despite limited WHOIS data due to .be domain privacy restrictions.

E

Erasport, s. r. o.

ronnie.cz

36

Ronnie.cz is the largest Czech online portal dedicated to bodybuilding, fitness, powerlifting, and combat sports. Operated by Erasport, s. r. o., the website offers a comprehensive range of services including a news magazine, e-commerce store for supplements and fitness equipment, a training academy, and an active community forum. The site targets fitness enthusiasts primarily in the Czech Republic and maintains a strong market position as a leading fitness media outlet. Technically, the site uses modern JavaScript libraries such as jQuery and Google Tag Manager for analytics and marketing. It employs HTTPS and basic security best practices, though there is room for improvement in security headers and mobile optimization. Privacy and cookie policies are present and appear GDPR compliant, supporting user data protection. The WHOIS data is unavailable, which slightly reduces trust but the active business presence and company information support legitimacy. Overall, Ronnie.cz is a professional, content-rich, and trustworthy fitness portal with moderate technical sophistication and a solid security posture.

S

Spoluhráči.cz

spoluhraci.cz

52

Spoluhráči.cz is a Czech Republic-based online platform dedicated to sports clubs and players, providing virtual clubhouses, club websites, and player matchmaking services. The platform targets sports enthusiasts and clubs across the Czech Republic, offering free tools for communication, event planning, and club management. The business model relies on advertising and sports-related classifieds. The website has been operational since 2007, though domain registration details are not publicly available, which impacts transparency. Technically, the site uses older JavaScript libraries alongside modern Google services for analytics and advertising. Privacy and cookie policies are implemented with user consent mechanisms, reflecting basic GDPR compliance. Security posture is moderate, with HTTPS enforced but outdated libraries and missing advanced security headers noted as areas for improvement.

W

WEXBO s.r.o.

wexbo.com

65

WEXBO s.r.o. operates a SaaS platform enabling users to create websites and e-shops easily and quickly without programming knowledge. The company targets small to medium businesses and individuals seeking affordable, feature-rich CMS and e-commerce solutions. Their platform includes extensive features such as payment gateway integration, shipping services, multilingual support, and a proprietary CMS named CYBORG. The website is well designed, mobile optimized, and SEO friendly, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, AJAX, and integrates popular analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the business appears credible and trustworthy with consistent WHOIS data and active support channels.

I

Inbound Back Office

inboundbackoffice.com

45

Inbound Back Office is a service provider specializing in white-label virtual assistant and marketing support services tailored for marketing agencies, fractional CMOs, and small businesses. The company positions itself as a scalable and seamless support partner, trusted by hundreds of teams globally to handle marketing execution and administrative tasks without the complexities of hiring. Their website reflects a professional and consistent brand image with clear messaging and client testimonials that reinforce trust. Technically, the website leverages modern front-end technologies including Bootstrap, Tailwind CSS, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. The site is built on Zephyr CMS and demonstrates good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved. Security-wise, HTTPS is properly implemented, but the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and protection. The security posture is moderate with no immediate vulnerabilities detected in the visible content, but the lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. This discrepancy between professional website content and missing domain registration information suggests the need for further verification. Overall, the site is functional and credible from a business perspective but requires improvements in privacy compliance and security best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and resolve WHOIS registration transparency to strengthen trust and compliance. Enhancing accessibility and SEO will also improve user reach and satisfaction.

A

Agency Management Institute

agencymanagementinstitute.com

68

Agency Management Institute (AMI) is a specialized organization serving small to mid-sized advertising and marketing agencies. Their core mission is to help these agencies grow and increase profitability through peer networks, workshops, coaching, consulting, and educational resources such as podcasts and research series. The website reflects a mature and professional business with a clear market niche and a strong focus on agency leadership development. Technically, the site is built on WordPress using the Avada theme and integrates modern marketing and analytics tools including Google Tag Manager, Google Analytics, and Facebook Pixel. The domain is well-established since 2013 and secured with domain lock statuses, though DNSSEC is not enabled. Security posture is good but could be improved with formal security policies and vulnerability disclosure mechanisms. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence with extensive content and good user experience.

A

Agency Mastery

agencymastery360.com

64

Agency Mastery is a private mastermind community targeting 7–8 figure digital marketing agency owners seeking to scale their businesses through expert advice, workshops, and networking. The website is professionally designed using Squarespace, featuring multimedia content such as embedded videos and testimonials that reinforce its market position as a leading agency owner community. The technical infrastructure leverages modern tracking and analytics tools including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Oribi, indicating a mature digital marketing approach. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are absent, representing areas for improvement. The absence of WHOIS registration data raises legitimacy concerns that should be addressed to ensure trust. Overall, the site presents a credible and professional front with good user experience and content relevance.

P

Parakeeto

parakeeto.com

64

Parakeeto is a specialized consultancy focused on improving the profitability of digital and creative marketing agencies. Established in 2015, the company offers profitability measurement and audit services designed to help agencies optimize their financial performance. The website positions Parakeeto as a niche expert with a clear target audience of digital marketing and creative agencies seeking profitability insights. Technically, the website is built on WordPress using the Divi theme, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with a valid SSL certificate and Cloudflare DNS, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could pose regulatory risks. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.

A

Akademie klasické homeopatie, spol. s r.o.

studujtehomeopatii.cz

42

Akademie klasické homeopatie, spol. s r.o. is a Czech Republic-based educational organization specializing in professional homeopathy training for medical professionals and the general public. The website offers detailed information about courses, seminars, congresses, and online lectures led by an experienced homeopath. The company has a clear market position with over 32 years of experience in the field. Technically, the website uses a modern JavaScript and CSS stack with responsive design and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and secure login forms, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and company registration details support legitimacy. Overall, the site is professional, informative, and trustworthy for its target audience.

S

Smartweb s.r.o.

smartweb.eu

71

Smartweb s.r.o. is a Slovakia-based technology company specializing in website creation, internet marketing, and analytics services. The company positions itself as a regional provider offering comprehensive digital marketing solutions including SEO, Google Ads campaigns, Google My Business profile management, social media management, and Google Analytics integration. Their multilingual website targets businesses seeking to enhance their online presence and marketing effectiveness. The company demonstrates consistent branding and provides clear business registration details, supporting its credibility. Technically, the website employs a proprietary CMS platform with a modern JavaScript technology stack including jQuery, Owl Carousel, and Google Tag Manager. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. Performance is moderate with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and explicit security policies could be enhanced. The security evaluation reveals no critical vulnerabilities or exposed sensitive information. Privacy compliance is well addressed with clear privacy and cookie policies and user consent mechanisms. However, the absence of a vulnerability disclosure policy or security.txt file indicates an area for improvement in transparency and incident response readiness. Overall, the website is professional, trustworthy, and secure, suitable for its business purpose. Strategically, Smartweb should focus on enhancing security headers, publishing explicit security policies, and improving accessibility compliance to strengthen its security posture and user trust. Regular audits of third-party scripts and continued adherence to privacy regulations will further mitigate risks and support sustainable growth.

S

Super Streusel

superstreusel.de

69

Super Streusel is a specialized e-commerce retailer based in Germany, focusing on colorful sugar sprinkles and sprinkle mixes for baking decoration. The website is built on the Shopify platform, leveraging various marketing and analytics tools such as Klaviyo, Usercentrics, and Boost Commerce filter and recommendation apps. The business targets consumers interested in baking and cake decoration, positioning itself as a niche market leader in Germany. The site demonstrates good branding consistency and content quality, with a professional design and clear navigation.

S

Storck

dickmanns-gewinnspiel.de

67

The website www.dickmanns-gewinnspiel.de is a promotional campaign platform for Storck's Super Dickmann's confectionery product, offering consumers in Germany a chance to win cashback and free products through a contest mechanism. The site is professionally designed with consistent branding and clear navigation, targeting retail consumers interested in confectionery promotions. Technically, the site is built on a modern Next.js framework with React, ensuring good mobile optimization and moderate performance. Security posture is adequate with cookie consent mechanisms and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent banners. Overall, the domain appears legitimate with brand protection via Brandshelter nameservers, and the site links to multiple official Storck partner domains. No adult or questionable content is present, making it safe for general audiences.

T

terre d'Oc

terredoc.com

67

terre d'Oc operates an e-commerce website powered by PrestaShop, offering products under the terre d'Oc brand. The site targets general consumers interested in retail products, providing a professional and well-branded online shopping experience. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Cookiebot for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and visible security policies. The absence of WHOIS data raises concerns about domain legitimacy, which impacts overall trust. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation.

F

Fondation Léa Nature

fondation-mecenat-leanature.org

59

Fondation Léa Nature is a French non-profit organization dedicated to environmental philanthropy, supporting ecological agriculture, biodiversity, climate action, and health initiatives. The foundation operates under the umbrella of Compagnie Léa Nature and is affiliated with the global 1% for the Planet network, indicating a strong commitment to sustainability and environmental causes. Their website provides comprehensive information about their mission, funding axes, and project submission processes, targeting associations, citizens, and local actors engaged in environmental protection. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and GDPR Cookie Compliance, ensuring good SEO and privacy compliance. The site uses Google Analytics and Google Tag Manager for analytics and tracking, and implements Google reCAPTCHA v3 for form security. The site is mobile-optimized, accessible, and performs moderately well, with consistent branding and clear navigation. From a security perspective, the site enforces HTTPS and uses GDPR-compliant cookie consent mechanisms. While some security headers are not explicitly detected, the overall posture is good with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the foundation's age and business claims, enhancing trustworthiness. Overall, Fondation Léa Nature presents a professional, trustworthy, and well-maintained online presence that aligns with its mission and audience. Strategic improvements in security headers and ongoing maintenance are recommended to sustain and enhance their security posture.

N

Nouvelle Séquence

nouvelle-sequence.fr

52

Nouvelle Séquence is a professional collective of screenwriters dedicated to improving the representation of environmental issues on screen. The website presents a focused mission and offers resources such as toolkits and events to support this cause. The organization appears to target professionals and stakeholders interested in environmental storytelling, positioning itself as a niche collective within the media and environmental advocacy space. Technically, the website is built on the Framer platform, utilizing modern web fonts and SVG graphics, delivering a good user experience with responsive design and clear navigation. However, the site lacks critical privacy and cookie policies, and no WHOIS data is available to verify domain registration details, which limits trust assessment. Security posture is moderate with no advanced headers or policies detected, and minimal tracking is present via Framer's event scripts. Overall, the site is professional and safe but would benefit from enhanced security and compliance measures.

M

Mercator Ocean International

mercator-ocean.eu

58

Mercator Ocean International is an intergovernmental organization dedicated to providing digital ocean systems and information services. It operates as a public service delivering ocean data, supporting international cooperation, and advancing ocean prediction initiatives. The organization is endorsed by multiple European governments and actively participates in global ocean health and climate monitoring efforts. The website reflects a professional and consistent brand presence with comprehensive ocean-related content targeting governments, researchers, and civil society stakeholders. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO, with multilingual support via WPML. It employs Matomo analytics and social sharing tools, indicating a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices, though some improvements in security headers and privacy compliance are recommended. Security posture is solid with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy and cookie policies, security headers, and incident response information suggests areas for enhancement. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and justified for this type of organization. Overall, the website presents a trustworthy and authoritative presence in the ocean data and intergovernmental domain, with recommendations to improve transparency and privacy compliance to further strengthen user trust and security posture.

E

Eleven

eleven-strategy.com

60

Eleven is a medium-sized French strategy consulting firm specializing in data and AI strategy, founded in 2013. The company positions itself as a pioneer in digital and data revolutions consulting, targeting businesses seeking to leverage data and AI for strategic advantage. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with Yoast SEO and Matomo analytics, hosted by OVH sas, a reputable provider. Security posture is good with HTTPS enabled and domain protections in place, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism. However, explicit contact emails and phone numbers are not publicly listed, relying on contact forms instead. Overall, the website is trustworthy and professional, with moderate tracking and good privacy practices.

C

Climat Médias - Pour plus de climat dans les médias

climatmedias.org

63

Climat Médias is a French non-profit association dedicated to increasing and improving climate and biodiversity coverage in the media. They provide media monitoring data, conduct journalist training, advocate through petitions, and engage citizens to raise awareness. The website is built on WordPress with modern SEO and privacy compliance features, including a cookie consent mechanism and a comprehensive privacy policy. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and some security headers could be improved. Contact is primarily via email and contact forms, with active social media channels. Overall, the site is professional, trustworthy, and well-aligned with its mission.

S

Storck Romania

toffifee.ro

67

The website www.toffifee.ro represents the Romanian localized brand presence of Toffifee, a confectionery product under the Storck group. It provides product information, brand storytelling, and consumer engagement primarily targeting Romanian consumers interested in confectionery. The site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, jQuery, and Lodash, indicating a moderate level of technical maturity. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Privacy compliance is well addressed with a visible privacy policy and cookie consent mechanism. However, direct contact emails and phone numbers are not explicitly listed on the homepage, relying instead on a contact form.

E

Escambiar

escambiar.com

56

Escambiar is a small cultural association founded in 1981, focused on artist management, event organization, and cultural exchanges primarily through music. The organization targets a general audience interested in cultural and musical activities, operating mainly in the Arnaud Bernard neighborhood and broader cultural projects. The website is built on WordPress with Elementor and uses common web technologies such as jQuery and Swiper.js. It is accessible, mobile-optimized, and uses HTTPS with Google reCAPTCHA for form security. However, the absence of privacy and cookie policies and missing WHOIS registration data reduce trust and compliance levels. No explicit contact emails or phone numbers are provided, limiting direct communication channels.

C

Centre national du livre

centrenationaldulivre.fr

63

The Centre national du livre (CNL) is a French public institution under the Ministry of Culture dedicated to supporting all actors in the book industry, including authors, translators, editors, booksellers, and libraries. The website serves as a comprehensive portal for information on financial aids, literary events, studies, and resources related to the book sector in France. It maintains a strong market position as a key governmental cultural support entity. Technically, the site is built on Drupal 8, employs Matomo and Google Analytics with privacy-conscious configurations, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, cookie consent mechanisms, and domain protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a broad audience of literary professionals and cultural stakeholders.

Kamael is a French company founded in 2014 specializing in software solutions tailored for bookstores and commerce. The website presents the company as a niche software provider targeting the retail sector, specifically bookstores. The business model revolves around providing software products to enhance commerce operations within this niche. The website content is primarily in French and focuses on describing the company's offerings to its target audience of bookstore owners and operators. Technically, the website employs modern iconography with Font Awesome 6 and uses the AOS library for animations. It also integrates Matomo for analytics, indicating a preference for privacy-conscious tracking. The hosting provider is OVH sas, a reputable French hosting company. The website is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no DNSSEC enabled for the domain, and no explicit security or incident response policies are published. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR regulations. Overall, the website is functional and moderately professional but lacks comprehensive privacy, security, and contact disclosures. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance posture.

F

FVI | Solutions et logiciels pour la gestion de patrimoine

fvi.fr

10

FVI is a French company specializing in providing software solutions for wealth management. The website presents a professional image with a clear focus on asset and wealth management software targeted at professionals and individuals interested in managing their patrimony. The company operates in the technology sector with a niche focus on financial software solutions. The website is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities, enhanced with Elementor for page building. It integrates Google Tag Manager and Google reCAPTCHA, indicating a moderate level of digital maturity and attention to user interaction and security. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could improve protection. The absence of WHOIS data suggests privacy protection, which is common for small technology firms. Overall, the website is well-structured, GDPR compliant, and trustworthy, though it lacks explicit contact emails and phone numbers, relying on contact forms instead.

K

Kolektor

kolektoravtomatizacija.com

44

Kolektor is a well-established company specializing in automation and engineering solutions for industry, energy, and infrastructure sectors. The website highlights their expertise in digitalization of production processes, energy management systems, and electrical equipment. They emphasize over 30 years of experience and a strong partnership network with global manufacturers, positioning themselves as a leading provider in their market segment. The business model focuses on delivering turnkey solutions, consulting, and technical support to industrial and energy clients. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS and CAPTCHA protections, though additional security headers and published policies could enhance trust. The absence of WHOIS data for the domain is a notable concern, potentially impacting domain legitimacy verification. Overall, the site is professional, content-rich, and safe for general audiences, supporting Kolektor's strong market presence.

K

Kolektor

kolektorwater.com

48

Kolektor is a medium-sized Slovenian company specializing in water technologies, providing comprehensive engineering solutions for water preparation, purification, telemetry, and system optimization. The company is part of the larger Kolektor Group and collaborates with several subsidiaries and partners to deliver advanced water management solutions. The website reflects a professional and consistent brand image targeting B2B clients such as municipalities, industrial water users, and technology partners. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, hosted on a CMS platform with good mobile optimization and SEO practices. Security posture is solid with HTTPS and spam protection, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a notable anomaly, slightly reducing trust but not detracting significantly from the overall legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear consent mechanisms. Overall, the website is well-designed, user-friendly, and trustworthy for its intended audience.

A

AT Computers a.s.

atcomp.sk

10

AT Computers a.s. is a leading ICT wholesale distributor operating primarily in Slovakia and the Czech Republic. Established in 1998, the company offers a broad portfolio of hardware, software, and related services to thousands of business partners. Their market position as the largest ICT wholesaler in the region is supported by a comprehensive partner network and a strong online presence, including a dedicated business link platform and e-commerce market site. The website reflects a professional and business-focused approach, targeting ICT resellers and corporate clients. Technically, the website employs a mature technology stack based on ASP.NET MVC with client-side libraries such as jQuery, jQuery UI, and Font Awesome. It integrates Google reCAPTCHA for bot protection and SignalR for real-time communication, indicating a moderate level of digital maturity. The site is mobile-optimized and includes accessibility features, though some improvements are possible. Performance is moderate with room for modernization, especially updating legacy JavaScript libraries. From a security perspective, the site enforces HTTPS and implements multi-factor authentication for partner login, demonstrating a strong security posture. However, the use of outdated jQuery versions and the absence of explicit security headers like CSP and HSTS are areas of concern. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. No incident response or vulnerability disclosure policies are publicly evident. Overall, the website and business exhibit a high level of professionalism and trustworthiness with minor technical and security improvements recommended. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in security headers and library updates would further strengthen the security posture and compliance standing.

A

AT Computers a.s.

atcomp.cz

61

AT Computers a.s. is a leading ICT wholesale distributor operating primarily in the Czech and Slovak Republics. Established in 1998, the company offers a broad portfolio of hardware, software, and services to thousands of partners, positioning itself as the largest distributor in its region. The website reflects a mature business with a professional digital presence, including multifactor authentication for secure partner access and comprehensive privacy and cookie policies aligned with GDPR requirements. The company maintains a network of partner and subsidiary domains, reinforcing its market presence. Technically, the website employs a mix of legacy and modern web technologies such as jQuery, Font Awesome, Owl Carousel, and Google reCAPTCHA, ensuring functional user experience and security. While some libraries are outdated, the site uses HTTPS exclusively and implements multifactor authentication, indicating a strong security posture. However, explicit security headers and a public security policy are absent, representing areas for improvement. The security posture is robust with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data limits domain registration transparency, but the website's professional presentation and linked partner domains support legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy platform for its target audience. Strategic recommendations include updating JavaScript libraries to current versions, adding security headers such as Content-Security-Policy and HSTS, publishing a security policy and incident response contact, and continuing to enhance privacy transparency. These steps will further strengthen the company's digital trust and security posture.