Security Directory

P

PKS servis spol. s r. o.

pks-hydraulika.cz

48

PKS servis spol. s r. o. is a Czech Republic-based company specializing in the development, manufacturing, sales, and servicing of hydraulic machines, central lubrication systems, and pneumatics. The company operates multiple divisions and partner sites, indicating a diversified business model focused on industrial B2B clients. Their website reflects a professional and consistent brand presence with clear service offerings and certifications such as ISO 9001, positioning them as a reputable regional player in manufacturing and hydraulic services. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, and cookie consent management tools, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies on the site. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. However, the website content, contact information, and business certifications support the legitimacy of the company. No signs of WAF or content blocking were detected, allowing full content analysis. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security best practices and domain transparency. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

Kristy z Ostravy is a small freelance marketing specialist business based in Ostrava, Czech Republic, founded in 2024. The website presents professional marketing services including strategy, online marketing, and event support targeted at local firms and entrepreneurs. The business positions itself as a local expert with a passion for Ostrava and marketing. Technically, the website is built on WordPress using the Astra theme, integrating modern marketing and analytics tools such as Google Tag Manager and Hotjar. Cookie consent is implemented, indicating awareness of privacy compliance, though no explicit privacy policy or terms of service pages were found. Security posture is good with HTTPS enabled and no exposed sensitive data, but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, well-branded, and trustworthy with moderate SEO and mobile optimization.

H

Holka z Ostravy

holkazostravy.cz

47

Holka z Ostravy is a small Czech-based personal brand and business operated by Miluše Koštialiková, focusing on content creation, video marketing, social media training, event management, and custom painting services. The website presents a professional image with good content quality and consistent branding, targeting small businesses and marketers seeking marketing and video production services. Technically, the site is built on WordPress using the Nicepage plugin, with integration of Google Analytics and Tag Manager for tracking. The site is mobile optimized and has moderate performance. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the domain registration data aligns well with the website content, supporting legitimacy.

Grill & Golf events z.s. is a small non-profit organization based in the Czech Republic focused on organizing recreational events related to grilling and golf, including operating the Minigolf Poruba facility. The website is minimalistic, providing basic company identification and social media links but lacks detailed business or compliance information. Technically, the site uses Google Analytics for visitor tracking but does not implement advanced security headers or privacy policies, indicating a low level of digital maturity. The absence of WHOIS registration data for the domain is a significant concern, reducing trustworthiness and raising questions about domain legitimacy. Overall, the security posture is weak with no evident incident response or data protection measures. Strategic improvements in security, privacy compliance, and transparency are recommended to enhance trust and operational resilience.

R

RFM

rfm.fr

44

RFM is a well-established French radio station with a strong digital presence offering live streaming, music news, podcasts, contests, and video content. The website targets French-speaking audiences interested in music and entertainment. Technically, the site uses modern web technologies including JavaScript frameworks and CDNs under the lanmedia.fr domain, indicating corporate hosting and infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses privacy and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which reduces transparency but the site’s professional appearance and active content suggest legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security posture and transparency.

L

Le Blog Bio LifeStyle

leblogbio.fr

47

Le Blog Bio LifeStyle operates as an independent French lifestyle media platform focusing on healthy, eco-friendly living, zero waste, and Made in France products. Founded in 2017, it targets French-speaking audiences interested in sustainable lifestyle choices. The website offers articles, product reviews, affiliate marketing partnerships, and a newsletter subscription service. It maintains a consistent brand image and leverages social media channels for audience engagement. Technically, the site is built on WordPress using Elementor and Astra theme, with performance optimizations via WP Rocket and SEO enhancements through Yoast. The hosting and domain registration are consistent with the French market, enhancing trustworthiness. Security posture is good with HTTPS and some security headers, but could be improved with stricter CSP and additional headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, aligning with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience with moderate tracking and advertising typical for media sites.

A

Alterrenat Presse

alterrenat.com

41

Alterrenat Presse operates as a niche French e-commerce platform specializing in the sale of alternative and organic lifestyle books and magazines. The website presents a professional and consistent brand image, targeting French-speaking consumers interested in organic agriculture, well-being, and alternative education. The business model centers on online retail and subscriptions, with additional services including event participation and advertising. Technically, the site is built on PrestaShop CMS, leveraging common JavaScript libraries and responsive design for good user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and vulnerability disclosure mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly reduces trustworthiness. Overall, the site is functional, compliant with GDPR, and safe for general audiences.

Biocontact.fr is the online presence of Biocontact, a French independent monthly magazine focused on organic products, health, and wellness since 1991. The website serves as a content hub offering articles, event calendars for organic salons, product information, and subscription services. It targets French-speaking consumers interested in organic lifestyle and wellness. The business model relies on free distribution in organic stores supported by advertising and event promotions. Technically, the site uses modern JavaScript libraries and the Foundation CSS framework, hosted by OVH, a reputable provider. The site is mobile-optimized and SEO-friendly but could improve accessibility and security headers. Security posture is good with HTTPS and secure forms, though no explicit security or incident response policies are published. Privacy and cookie policies are present and GDPR compliant. WHOIS data confirms domain legitimacy with consistent registration details and long domain age. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

S

Socialter

socialter.fr

44

Socialter is a French bimestrial magazine focusing on radical social critique and ecological alternatives. It operates primarily through print magazine sales, subscriptions, and donations, targeting a general audience interested in social justice and ecological issues. The website is professionally designed with excellent content quality and clear navigation, supporting a strong brand presence in the French media niche. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and Bootstrap, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the active and updated website with social media presence supports legitimacy. Overall, the site is safe, compliant with GDPR, and trustworthy for its audience.

A

Annuaire Vert

annuairevert.com

64

Annuaire Vert is a French online directory and media platform specializing in organic (bio) products, services, and stores. It provides a comprehensive listing of bio-related businesses, news, events, and video content targeted at consumers and professionals interested in organic products in France. The website is well-structured with clear navigation and a professional design, supporting a medium-sized business model focused on retail and media sectors. Technically, the site employs modern JavaScript libraries and frameworks, including jQuery, Swiper, Leaflet, and Google reCAPTCHA, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and CAPTCHA protection on forms, but lacks explicit security headers and a vulnerability disclosure policy. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in French, indicating GDPR awareness. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy.

W

Washington University in St. Louis

washubears.com

64

Washington University in St. Louis operates an official athletics website providing comprehensive information about its NCAA Division III sports teams, schedules, rosters, news, and athletics department resources. The site targets students, athletes, alumni, and sports fans, serving as a central hub for university sports engagement. The business model is focused on supporting university athletics and community involvement, positioning itself as a trusted source for sports information within the education sector. Technically, the website leverages a modern JavaScript stack including jQuery, RequireJS, Knockout.js, and integrates with Google Tag Manager and Google Analytics for tracking. It is hosted on Cloudfront CDN with DNS managed by Rackspace. The site is mobile optimized, accessible, and uses the Sidearm Sports CMS platform, reflecting a mature digital infrastructure suitable for its audience and purpose. From a security perspective, the site enforces HTTPS and employs standard domain protections but lacks DNSSEC and some advanced security headers like Content Security Policy. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is partial, with a privacy policy present but no explicit cookie consent mechanism despite active tracking scripts. Overall, the website demonstrates a solid security posture and business credibility with room for improvement in privacy compliance and DNS security. Strategic recommendations include enabling DNSSEC, implementing a cookie consent banner, adding security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

R

Ruby Tree Software, Inc.

advancementform.com

64

Advancement Form, operated by Ruby Tree Software, Inc., is a specialized SaaS provider offering an online giving and event registration platform tailored for non-profit organizations. The website positions itself as a solution to maximize participation and fundraising success for non-profits, featuring a professional design, clear messaging, and client testimonials that reinforce its market niche. The platform emphasizes ease of use and customization to empower advancement professionals in their fundraising efforts. Technically, the website employs modern frontend technologies including Tailwind CSS, DaisyUI, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS and maintains privacy and security policy pages, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. The absence of WHOIS data is a notable anomaly that impacts trust, though the website content and business presentation remain professional and credible. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

M

Musée du Luxembourg

museeduluxembourg.fr

59

Musée du Luxembourg is a well-established cultural institution in Paris, offering art exhibitions, events, and educational programs. The website reflects a professional and user-friendly digital presence, built on Drupal 10 with modern analytics and consent management tools. The museum is affiliated with the French Senate and Grand Palais RMN, reinforcing its legitimacy and trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, the site provides a safe, accessible, and informative experience for a broad audience including tourists, students, and art enthusiasts.

P

Public Sénat

publicsenat.fr

56

Public Sénat is the official French parliamentary and political television channel, providing live broadcasts, news, documentaries, and podcasts focused on political and parliamentary affairs. It targets French-speaking audiences interested in government and politics, operating as a public media entity with a strong government affiliation. The website demonstrates a mature digital presence with modern technologies such as Google Tag Manager, Didomi consent management, and Dailymotion video integration. The site is well-structured, mobile-optimized, and SEO-friendly, offering rich content and a professional user experience. Security posture is strong with HTTPS, consent mechanisms, and security headers, though some improvements in security headers and vulnerability disclosure could be made. WHOIS data is unavailable, which slightly reduces trust but the official branding and content quality support legitimacy. Overall, Public Sénat maintains a high level of professionalism and compliance suitable for a public service media organization.

C

CEREMA

expertises-territoires.fr

62

Expertises Territoires is a professional network platform affiliated with CEREMA, a French public organization focused on territorial expertise. The website serves elected officials, community and state agents, experts, companies, and civil society members by facilitating collaboration, knowledge sharing, and co-construction of territorial solutions. It features communities, partners, and domains of action such as territorial engineering, building, mobility, transport infrastructure, environment, and coastline management. The platform is bilingual (French and English) and emphasizes community engagement and professional networking. Technically, the website is built on the Jalios CMS platform, utilizing modern web technologies including jQuery, Bootstrap 3.4.1, Slick Carousel, and LightGallery. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent is implemented with a clear banner, and privacy and legal notices are present, indicating compliance with GDPR requirements. However, no explicit security headers or incident response policies are visible in the provided content. Security posture is moderate with HTTPS implied but not explicitly confirmed in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, reducing trustworthiness from a domain registration perspective. Despite this, the website's branding and partner affiliations suggest legitimacy. Overall, the site is professional, secure, and compliant but would benefit from enhanced transparency in security policies and domain registration information.

R

RTP GmbH

rtp.ch

57

RTP GmbH is a Swiss-based web agency specializing in custom website development, e-commerce solutions, and web application hosting, primarily using TYPO3, Neos CMS, and Shopware. Positioned as a strategic software partner, RTP serves businesses, agencies, and organizations with tailored digital solutions that enhance operational efficiency and market competitiveness. Their portfolio and client testimonials reflect a strong reputation and a focus on long-term partnerships. Technically, the website leverages modern PHP frameworks and open-source CMS platforms, ensuring scalability and flexibility. The site is well-optimized for performance and mobile responsiveness, with structured data enhancing SEO. Analytics are implemented via Matomo, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security or incident response policy. No vulnerabilities or suspicious domains were detected. The WHOIS data is transparent and consistent with the business claims, reinforcing legitimacy. Overall, RTP GmbH demonstrates a mature digital presence with strong business credibility and technical competence. Strategic improvements in security policy transparency and header implementation could further enhance their security posture and trustworthiness.

S

Soudons, fermes !

soudons-fermes.org

58

Soudons, fermes ! is a French network of structures committed to peasant agroecology, collaborating closely with the Atelier Paysan to disseminate technical projects and tools that promote farm autonomy and sustainable agriculture. The website serves as an informational and networking platform, showcasing members and activities through interactive maps and content. The business operates as a small, focused non-profit entity founded recently in 2023, targeting agricultural communities and stakeholders interested in agroecology. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no cookie consent mechanism or detailed privacy policies visible, which could be improved to meet GDPR standards. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy features.

The website at communspaysans.org currently serves as a simple directory listing with no substantive business content or branding. The domain is very recently registered (April 2024) via OVH sas without privacy protection, but the lack of detailed registrant information and minimal website content raises questions about the site's maturity and legitimacy. Technically, the site lacks HTTPS, security headers, and exposes sensitive files through directory listing, indicating poor security posture. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which further diminishes trust and compliance standing. Overall, the site appears to be in an early or placeholder state with significant improvements needed to meet basic security, privacy, and business credibility standards.

O

One Army

onearmy.earth

60

One Army is a global non-profit movement focused on tackling environmental and social challenges through community-driven projects such as Precious Plastic, Project Kamp, Fixing Fashion, and Phonebloks. The organization engages a broad audience interested in sustainability and social impact, leveraging platforms like Patreon, YouTube, and Discord to build and maintain an active supporter community. The website serves as a hub for project updates, news, and multimedia content, emphasizing inclusivity and open participation. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including jQuery and Google Analytics for tracking. The site is hosted on a reliable CDN infrastructure (Amazon CloudFront) and is optimized for mobile devices with good SEO practices. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with strong SSL configuration and anonymizes IP addresses in analytics. Nonetheless, it lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No vulnerability disclosure or incident response information is provided, limiting transparency in security matters. Overall, the website is trustworthy and professional, with strong community engagement and relevant content. The absence of WHOIS data due to privacy protection is typical for non-profit organizations but limits domain trust analysis. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and user confidence.

F

fairkom

fairkom.eu

65

fairkom is a small Austrian technology company specializing in open source based IT solutions, including consulting, cloud hosting, videoconferencing, chat platforms, and identity management. The company emphasizes GDPR compliance, ecological hosting, and fair digital communication. Their market position is solid with over 20 years of experience and trusted partnerships with public institutions and NGOs. The website is professionally designed, content-rich, and well-structured, targeting private users, organizations, and public sector clients. Technically, the site uses Drupal 10 CMS, modern open source tools, and privacy-respecting Matomo analytics without cookies. Security posture is good with HTTPS and privacy best practices, though explicit security policies and incident response information are missing. Overall, the website is trustworthy, compliant, and technically sound.

S

Schweisfurth Stiftung

schweisfurth-stiftung.de

55

Schweisfurth Stiftung is a well-established non-profit organization focused on promoting ecological agriculture, animal welfare, and sustainable farming practices primarily in Germany. The foundation operates by granting awards, supporting development projects, and fostering networks within the ecological agriculture sector. Their website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates privacy-compliant analytics and cookie consent mechanisms. Security posture is strong with HTTPS, secure cookies, and captcha protections, although some advanced security headers could be added. Overall, the domain registration and hosting align well with the organization's profile, indicating legitimacy and trustworthiness.

M

Mach deine Region zukunftsfähiger

mitmach-region.org

62

The website 'Mach deine Region zukunftsfähiger' is a German-language non-profit initiative established in 2021, focused on fostering social and ecological sustainability at the regional level through community engagement, events, and educational programs. It targets individuals and teams in German-speaking countries interested in regional transformation. The site is built on WordPress, utilizing modern plugins and structured data to enhance SEO and user experience. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by transparent domain registration and reputable funding partners. Overall, the website is professional, trustworthy, and well-positioned to serve its community-focused mission.

D

Digiforma

catalogueformpro.com

59

Digiforma is a French-based SaaS company specializing in comprehensive training management software for training organizations, centers, and enterprises. Founded in 2016, it serves over 5,500 clients and supports more than 2 million trainees with a robust platform that includes administrative management, e-learning, digital signature, quality certification compliance (Qualiopi), CRM, and online training catalogues. The company positions itself as a leader in the French training software market with a strong brand presence and extensive client testimonials. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-focused tracking. The site is well-optimized for SEO, mobile-friendly, and uses structured data for enhanced search engine understanding. Security best practices are observed with HTTPS, security headers, and cookie consent mechanisms. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. No public vulnerability disclosure or incident response contacts are found, which could be improved to enhance trust and security readiness. Overall, Digiforma presents a professional, trustworthy, and technically sound online presence with minor gaps in domain transparency and security disclosure. Strategic recommendations include verifying domain registration details, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to strengthen security posture and stakeholder confidence.

WilldooIT Pty Ltd is a well-established Australian company specializing in Odoo ERP software solutions tailored for diverse industries including timber, food distribution, manufacturing, and renewables. With over 15 years of experience and multiple industry awards such as the Odoo APAC Partner of the Year, WilldooIT holds a strong market position as a trusted ERP partner in Australia and New Zealand. Their business model focuses on B2B consulting, implementation, custom development, and ongoing support services, targeting medium-sized enterprises seeking to streamline operations and improve productivity through ERP technology. Technically, the website is built on the Odoo CMS platform, hosted on Amazon Web Services, and incorporates modern web technologies including JavaScript, FontAwesome, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site demonstrates good performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. However, there is room for improvement in security headers and DNSSEC implementation. From a security perspective, the website enforces HTTPS and includes CSRF tokens, indicating attention to secure session management. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present with consent mechanisms, though explicit GDPR compliance indicators are limited. The absence of a published security policy or incident response contact is noted as an area for enhancement. Overall, WilldooIT presents a professional, trustworthy online presence with strong business credibility and a solid technical foundation. The security posture is good but could benefit from additional hardening measures. The website content is safe for general audiences, and the company provides clear contact information and transparent policies. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and enhancing GDPR compliance to further strengthen trust and security.

Shen Yun Performing Arts is a globally recognized performing arts company specializing in classical Chinese dance and music, established in New York in 2006. The company focuses on reviving and presenting traditional Chinese culture through breathtaking performances that include classical dance, ethnic and folk dance, and orchestral music. Their market position is strong as a premier classical Chinese dance company with a broad international audience. The website reflects a professional and consistent brand image with multilingual support, targeting a general audience interested in cultural and performing arts experiences. Technically, the website employs modern JavaScript libraries, analytics tools, and accessibility features, indicating a mature digital infrastructure. However, some areas such as explicit privacy and cookie policies and WHOIS transparency could be improved. Security posture is good with HTTPS and no visible vulnerabilities, but security headers and incident response information are lacking. Overall, the site is trustworthy and well-maintained but would benefit from enhanced privacy compliance and domain registration transparency.

L

LuxDev

luxdev.lu

60

LuxDev is the Luxembourg agency for development cooperation, operating for over 45 years across Africa, Asia, Latin America, and Europe. The agency focuses on sustainable development, capacity building, climate action, digitalisation, and finance impact projects. Their market position is strong as a government agency with a medium-sized operational footprint and a clear mission to eradicate poverty and promote inclusive development. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 10 with modern JavaScript frameworks like Alpine.js and uses Matomo for privacy-respecting analytics. Hosting is managed via EuroDNS nameservers, and the site is well-optimized for performance and mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly disclosed. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie and privacy policies. The absence of direct contact information in the provided content is noted but may exist elsewhere. The domain WHOIS data aligns well with the agency's legitimacy and history. Strategically, LuxDev should consider publishing explicit security policies and incident response contacts to enhance trust further. Continuous monitoring of security headers and vulnerability disclosures will maintain a strong security posture.

The website mestafrica.com/lander is currently a minimal placeholder or parking page with very limited content. It primarily serves advertising via Google Adsense and does not provide any business-related information, contact details, or policies. The domain is newly registered in November 2023 through GoDaddy, with no privacy protection on WHOIS data. The technical infrastructure is basic, using JavaScript and a proprietary 'PW' lander system, hosted on GoDaddy's DNS servers without DNSSEC enabled. Security posture is weak due to lack of HTTPS enforcement details, missing security headers, and absence of privacy or cookie policies. Overall, the site lacks professionalism and trust indicators, making it unsuitable for business or customer engagement in its current state.

M

MSA

msa.fr

63

The website www.msa.fr/lfp represents the official online portal of the MSA (Mutualité Sociale Agricole), the French agricultural social security organization. It provides comprehensive social protection services including health insurance, family benefits, retirement pensions, and work accident coverage for agricultural workers and employers in France. The portal targets individuals, exploitants, employers, partners, and elected representatives within the agricultural sector. The business model is that of a government social security entity, serving a large user base with essential social services. The website is professionally designed with clear navigation and multiple service sections tailored to different user groups. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as YUI, jQuery, Bootstrap, and Clay components. It incorporates a secure login mechanism via OpenID Connect and includes a cookie consent banner, indicating attention to privacy compliance. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure authentication flows. While explicit security headers and policies are not visible in the HTML, the overall posture appears strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security communication. Overall, the website is a trustworthy and authoritative source for agricultural social security services in France. The lack of WHOIS data limits domain registration trust analysis but does not detract from the site's legitimacy given its government affiliation and professional presentation. Strategic recommendations include publishing privacy and security policies, adding security.txt for vulnerability reporting, and enhancing contact information for security incidents to strengthen trust and compliance.

S

Systek AS

systek.no

64

Systek AS is a Norwegian employee-owned consultancy specializing in digital solutions and software development, serving both public sector and private clients. Founded in 2022, the company offers a broad range of services including platform and cloud services, Java and Kotlin development, project management, frontend development, testing and automation, data analytics, .NET, architecture, and design. Their market position is solid within Norway, supported by reputable clients such as Skatteetaten and Digitaliseringsdirektoratet. The website is professionally designed, mobile-optimized, and content-rich, targeting businesses and government organizations seeking digital transformation expertise. Technically, the site uses modern frameworks like Astro and JavaScript libraries such as Konva.js, with fast performance and good SEO and accessibility practices. Security posture is good with HTTPS enforced and no cookies used, though explicit security headers and incident response policies are absent. Privacy compliance is adequate with a privacy policy present but no cookie consent mechanism. Overall, the domain registration aligns with the business information, indicating legitimacy and transparency.

B

Bouvet ASA

bouvet.no

54

Bouvet ASA is a leading Norwegian-owned consulting company specializing in IT, advisory, design, and digital communication services. The company serves a broad range of private and public sector clients, positioning itself as a key digital transformation partner in the Nordic region. Their service portfolio includes designing, developing, managing, and advising on IT solutions and digital communication strategies. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their target audience of businesses and societal actors across industries. Technically, the website leverages modern web technologies including Enonic XP CMS, Google Fonts, Matomo analytics for privacy-conscious tracking, and Cloudflare for performance and security enhancements. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security best practices are observed with HTTPS enforcement, cookie consent mechanisms, and published information security policies. However, explicit security headers and vulnerability disclosure mechanisms could be improved. From a security posture perspective, Bouvet demonstrates a strong commitment to information security, evidenced by ISO 27001 certification and published security guidelines. The presence of a security incident reporting page indicates readiness for incident response. No critical vulnerabilities or security issues were detected in the website content or configuration. Privacy compliance is robust with clear cookie policies and GDPR-aligned disclosures. Overall, Bouvet ASA's website and digital infrastructure reflect a reputable, secure, and professionally managed business entity with a strong market position in IT consulting. The lack of publicly available WHOIS data is consistent with Norwegian domain privacy norms and does not detract from the company's legitimacy. Strategic recommendations include enhancing transparency on security headers, adding a public vulnerability disclosure policy, and providing direct security contact information to further strengthen trust and compliance.

T

Terre et Humanisme

terre-humanisme.org

49

Terre et Humanisme is a well-established French non-profit association dedicated to promoting agroecology and permaculture through education, solidarity projects, and expertise. With over 30 years of activity, it serves both individuals and professionals, leveraging a strong network of partners and animators. The website is professionally designed, content-rich, and provides multiple engagement channels including training, immersion stays, and an online store. Technically, the site is built on WordPress with modern plugins and integrations such as Google reCAPTCHA and Sendinblue for newsletters, hosted by Nuxit. Security posture is good with HTTPS and consent mechanisms, though improvements like DNSSEC and CSP headers are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

F

Fondation pour la Nature et l’Homme

fondation-nature-homme.org

69

Fondation pour la Nature et l’Homme is a well-established French non-profit organization dedicated to environmental awareness and ecological solutions. The foundation operates multiple programs focused on biodiversity preservation, sustainable agriculture, responsible food consumption, and decarbonized mobility. It engages a broad audience including volunteers, donors, and citizens, leveraging digital platforms and partnerships to amplify its impact. The website reflects a mature digital presence with modern technologies and comprehensive content supporting its mission. Technically, the website is built on WordPress with advanced JavaScript frameworks like Alpine.js and HTMX, and integrates analytics tools such as Microsoft Clarity, Google Tag Manager, and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security posture is good with HTTPS enforced and consent management implemented, though some security headers could be explicitly added for enhanced protection. The absence of WHOIS data limits domain registration trust verification, but the website's branding, certifications, and external references strongly support its legitimacy. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the foundation demonstrates a strong commitment to transparency, privacy compliance, and user engagement. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response information, and maintaining vigilance on third-party scripts. These steps will further strengthen trust and security posture.

Q

QNAP Systems, Inc.

qnap.com

79

QNAP Systems, Inc. is a recognized enterprise in the technology sector specializing in network-attached storage (NAS), direct-attached storage (DAS), networking hardware, and intelligent video surveillance solutions. Their offerings also include cloud storage services such as myQNAPcloud Storage and Cloud NAS, targeting both individual consumers and business customers. The company positions itself as an expert in storage, performance, security, and scalability solutions. The website reflects a professional and consistent brand image with a focus on technology products and services. From a technical perspective, the website employs modern web technologies including Google Tag Manager, Google Analytics, Bootstrap Icons, Font Awesome, SweetAlert, and Swiper.js for UI components. The site is mobile-optimized with good SEO practices such as canonical and hreflang tags. Performance is moderate with room for improvement in accessibility features. The SSL configuration is excellent, ensuring secure HTTPS connections. Security posture is generally strong with HTTPS enforced and no visible exposed sensitive data or vulnerable libraries. However, the absence of explicit security headers and lack of published privacy, cookie, and terms of service policies indicate areas for compliance and security enhancement. No incident response or vulnerability disclosure information is provided, which could be improved to increase trust and readiness. Overall, the website is trustworthy and professional but suffers from missing WHOIS data, which reduces domain registration transparency. The lack of privacy and cookie policies and explicit contact information also impacts privacy compliance scores. Strategic improvements in these areas would enhance the security posture and business credibility of the site.

E

ESET

eset.cz

74

ESET is a globally recognized cybersecurity company providing advanced antivirus and internet security solutions for both personal and business use. The website targets Czech-speaking customers, offering localized content and support. The company positions itself as a trusted leader with over 30 years of experience, emphasizing reliable protection and local customer service. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google Tag Manager and Bing tracking for analytics and marketing. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit incident response contacts and security.txt are not found. Overall, the site is professional, secure, and compliant with GDPR, reflecting a mature digital presence.

C

Creatim d.o.o.

creatim.com

70

Creatim d.o.o. is a well-established Slovenian digital solutions company with over 25 years of experience, specializing in web applications, portals, e-commerce, AI, and user experience design. The company targets businesses seeking digital transformation and offers comprehensive services from strategy to long-term support. Their market position is strong, supported by multiple industry awards and certifications including ISO 27001. Technically, the website is built on a modern stack with advanced accessibility features and good SEO practices, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security certifications, and regular audits, though explicit security headers and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

K

Kolektor

kolektorgradbenistvo.si

46

Kolektor Gradbeništvo is a construction-focused branch of the Kolektor group, operating primarily in Slovenia with a strong emphasis on infrastructure, high-rise buildings, and reinforced concrete structures. The company leverages its subsidiaries Kolektor Koling and Kolektor CPG to deliver comprehensive construction engineering services. The website reflects a mature business with a clear market position in the regional construction sector, targeting industry clients and potential employees. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and documented security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

K

Kolektor Etra d.o.o.

kolektor-etra.si

48

Kolektor Etra d.o.o. is a well-established Slovenian company specializing in the production of power and generator transformers with capacities up to 500 MVA and voltages up to 420 kV. With over 90 years of tradition and a presence in more than 40 countries, the company holds a strong market position within the energy manufacturing sector. It operates as part of the KOLEKTOR group, offering specialized transformer solutions including off-shore applications. The website reflects a professional corporate presence with clear business information and relevant content tailored to industrial clients and energy sector stakeholders. Technically, the site is built on WordPress with modern plugins and frameworks, providing good mobile optimization and moderate performance. Security posture is solid with HTTPS and basic best practices, though there is room for improvement in security headers and explicit policies. Privacy compliance is basic with privacy and cookie policies present but lacking advanced consent mechanisms. Overall, the website is trustworthy and professionally maintained, supporting the company's credibility and business objectives.

The website at yfdnzfa.com presents minimal accessible content, primarily consisting of an invisible tracking pixel and an embedded iframe sourced from unrelated external domains. There is no visible business information, contact details, or user-facing content. The domain WHOIS data is suspicious, showing a creation date in the future (July 2025) and listing the registrar as PDR Ltd., a domain registrar service, without any registrant organization details. This raises concerns about the legitimacy and purpose of the domain. Technically, the site uses basic HTML and JavaScript but lacks modern security headers, DNSSEC, and privacy compliance mechanisms. The embedded third-party content suggests potential user tracking and profiling. Overall, the site appears to be a placeholder or a tracking intermediary rather than a legitimate business website.

The website esc.best currently presents no accessible content or metadata, rendering any business or technical analysis infeasible. The absence of visible information, forms, or scripts suggests the site is either inactive or a placeholder. The WHOIS data indicates privacy protection, which is common for small or new entities but limits transparency. Without content, no assessment of business model, services, or market position can be made. Technically, the site lacks detectable technologies or security configurations, indicating minimal digital maturity. Security posture cannot be evaluated due to lack of data, and no compliance or privacy policies are present. Overall, the site poses minimal risk but also offers no trust signals or business credibility.

G

GambleAware

gambleaware.org

11

GambleAware is a UK-based non-profit organization dedicated to providing free, confidential advice and support for individuals affected by gambling harms, including their family and friends. The website offers a comprehensive range of services such as a gambling harms assessment, support tools including a dedicated app, live chat, and a helpline. It also provides research publications and a service finder to locate local support. The organization partners with GamCare to deliver live support services, reinforcing its position as a leading entity in gambling harm prevention in Great Britain. Technically, the website employs modern JavaScript libraries and frameworks, including jQuery, Google Tag Manager, Cookiebot for consent management, and Gleap for user feedback. The site is well-optimized for mobile devices, features fast loading times, and includes accessibility considerations. The use of HTTPS and secure third-party integrations indicates a strong digital maturity. From a security perspective, the site enforces HTTPS and integrates consent management to comply with privacy regulations. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerable libraries detected. However, the absence of publicly available incident response or vulnerability disclosure policies suggests room for improvement. Overall, GambleAware presents a trustworthy, professional, and user-centric platform with a high level of content quality and security. The lack of WHOIS data due to privacy protection is justified given the sensitive nature of the services offered. Strategic recommendations include enhancing transparency around security policies and publishing a security.txt file to facilitate vulnerability reporting.

S

Spribe OÜ

spribe.io

10

Spribe OÜ is a technology company specializing in the development of innovative, next-generation casino games for the iGaming industry. Their product portfolio includes popular games such as Aviator, which features provably fair cryptography technology to ensure transparency and trust. The company targets online casino operators and players, positioning itself as a pioneer in smart gaming solutions with a focus on engagement tools and promotional mechanics. The website reflects a professional and modern digital presence, hosted on Amazon Web Services and built using Angular framework, with integrated analytics and marketing tools. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. Overall, Spribe demonstrates a credible and trustworthy business with active partnerships and regulatory licenses, suitable for the regulated online gambling market.

P

Plinko

safetysleeve.cz

9

The website safetysleeve.cz (content points to plinkohra.cz) is an informational and promotional platform focused on the Plinko gambling game targeted at Czech players. It provides detailed guides, game mechanics, casino recommendations, and demo access to Plinko games. The site leverages Cloudflare for DNS and CDN services and uses modern web technologies including JSON-LD structured data for SEO and rich snippets. The content is well-structured, mobile-optimized, and professionally presented, though it lacks explicit cookie consent and some security headers. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and raises questions about legitimacy. Contact information is limited to an email address, with no phone or physical address provided. Social media presence is established across multiple platforms, enhancing credibility. Overall, the site is functional and informative but requires improvements in privacy compliance and security transparency.