Security Directory

H

Helexia Group

helexia.group

10

Helexia Group is a professional energy transition company offering comprehensive engineering expertise, business analysis, and financing solutions to accelerate clients' energy transition projects. The company operates internationally with multiple country-specific domains, indicating a broad European and Latin American presence. The website is well-structured, professionally designed, and optimized for SEO, reflecting a mature digital presence. Technically, the site uses WordPress CMS with modern frameworks like Bootstrap and integrates marketing and analytics tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and terms policies are missing. Overall, the domain appears legitimate with privacy-protected WHOIS data, which is reasonable for this business type.

K

Kalmoya.com

kalmoya.com

10

Kalmoya.com is a specialized service provider focused on Concrete5 CMS development and support, targeting entrepreneurs and small to medium businesses. The website presents a professional and consistent brand image, offering retainers, custom development, and support services tailored to business growth and website management. The technical infrastructure leverages modern web technologies including Concrete CMS, JavaScript APIs, and Google Analytics for performance and user insights. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet regulatory standards. The domain's WHOIS data is missing, raising concerns about registration legitimacy, but the website's professional appearance and client testimonials support its credibility. Overall, the site is well-designed and functional but would benefit from enhanced transparency and security practices.

A

association Autour du 1er mai

base-tessa.net

37

The website base-tessa.net represents a small non-profit project launched in 2021 by the association Autour du 1er mai, focused on cataloging and promoting films related to the social and solidarity economy (ESS) and ecological transition. The platform serves a niche audience interested in social innovation and sustainability through cinema. Technically, the site is built on the SPIP CMS, hosted by OVH sas, and uses Matomo for analytics. The site is accessible, with a good content structure and moderate performance, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing security headers and no DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the credibility of the project.

L

Librairie Utopia

librairie-utopia.org

35

Librairie Utopia is a small, Paris-based bookstore specializing in ecological and political literature, including feminism, decolonialism, antiracism, antifascism, and anticapitalism. The business model combines retail sales of new and used books with event hosting such as debates, author presentations, and exhibitions. The website also supports publishing activities under Éditions Utopia and offers podcasts of events. The target audience is French-speaking individuals interested in social and ecological activism. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, hosted by OVH sas. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks some accessibility features. Security posture is adequate with HTTPS and domain protections but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and social media presence.

E

Expertises Climat

expertisesclimat.fr

11

Expertises Climat is a French non-profit association founded in 2022, dedicated to bridging scientific research and media to enhance public debate on ecological urgency. The organization federates over 200 researchers and experts, supporting journalists and promoting scientific expertise in media coverage of climate issues. Their partnerships with reputable institutions such as ADEME and CNRS reinforce their credibility and influence in the environmental sector. Technically, the website is built on WordPress with modern web technologies including Google Fonts, FontAwesome, and the Complianz GDPR plugin for privacy compliance. The site is well-optimized for mobile devices, has good SEO practices, and uses HTTPS with secure cookie consent mechanisms. Google Tag Manager is used for analytics, indicating moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the organization's profile, showing a consistent and legitimate domain registration. Overall, the website presents a professional, trustworthy, and privacy-conscious platform for its niche audience. Strategic improvements could include enhanced security headers and publicly available security policies to further strengthen trust and compliance.

C

Coop-médias SCIC SA

coop-medias.org

10

Coop-médias is a French citizen cooperative established in 2024 that supports, promotes, and defends independent media through citizen investment starting at 100 euros, offering tax benefits. Positioned as the first cooperative of its kind in France, it aims to finance independent media, increase their visibility, and defend media independence in public discourse. The website is professionally designed, mobile-optimized, and rich in relevant content targeting citizens interested in democratic and independent information. Technically, it is built on WordPress with modern plugins for GDPR compliance and tracking, including Facebook Pixel and Google Analytics, all integrated with user consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is incomplete, limiting domain trust verification, but the website's professionalism and transparency support its legitimacy. Overall, Coop-médias presents a credible and well-structured platform for cooperative investment in media independence.

A

Atelier Anamorphose / Agence Anamorphose

anamorpho.se

10

Anamorphose is a French hybrid social enterprise combining an artistic association and a social mission agency focused on inclusion, upcycling, and artistic rehabilitation of objects and spaces. The company targets artists, enterprises, local authorities, and associations, positioning itself as a niche player in the Lyon metropolitan area. The website is built on WordPress with a modern tech stack including Alpine.js and Leaflet.js, hosted by OVH.net. It features GDPR-compliant cookie consent and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS and cookie management, though DNSSEC is not enabled and some security headers are missing. No critical vulnerabilities or exposed sensitive data were found. The domain is newly registered but consistent with the business profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

C

Collectif Green IT

greenit.fr

10

GreenIT.fr is a French non-profit collective known as Collectif Green IT, specializing in digital sobriety, responsible digital practices, and eco-design of digital services. Established since 2004, it offers expert training, resources, and advocacy to professionals and organizations aiming to reduce the environmental impact of digital technologies. The website is professionally designed, content-rich, and targets a specialized audience interested in sustainable IT practices. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools with a strong consent management mechanism. Security posture is good with HTTPS enforced and no exposed sensitive data, though additional security headers could enhance protection. Privacy compliance is moderate due to the absence of a clearly identified privacy policy page, but cookie consent is actively managed. Overall, the site demonstrates high business credibility and trustworthiness consistent with its mission and audience.

Neutral-IT is a French-based company specializing in environmentally conscious web hosting and server services. Positioned as a leader in ecological IT solutions, the company targets businesses and organizations seeking to reduce their environmental impact through green hosting technologies. The website is built on WordPress with WooCommerce and uses the Storefront theme, hosted by OVH sas, a reputable European hosting provider. The digital infrastructure is modern but lacks advanced security configurations such as DNSSEC and security headers. While HTTPS is enabled, the absence of privacy and cookie policies indicates gaps in compliance. No direct contact or incident response information is provided, which may affect user trust and regulatory adherence. Overall, the website presents a professional image with good content quality and user experience but requires improvements in security and privacy documentation to enhance trustworthiness and compliance.

I

Iziflo

iziflo.com

9

Iziflo is a specialized software solution designed for multi brand car dealers, offering an integrated suite of applications to manage sales, processing, logistics, and customer relationship management. The website presents a professional and consistent brand image, targeting automotive dealerships and related business teams. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Analytics, and Google Tag Manager, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are missing. The absence of WHOIS data raises concerns about domain legitimacy, impacting overall trust. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and business-focused but would benefit from enhanced transparency and security documentation.

S

Storck

dickmanns.de

10

Dickmann’s is a well-established German confectionery brand specializing in chocolate-coated marshmallow treats and related products. The website serves as a marketing and informational platform offering product details, recipes, promotions, and links to partner sites. It is part of the larger Storck group, indicating a strong market position in the retail confectionery sector. The site targets general consumers in Germany with family-friendly content and seasonal campaigns. Technically, the website employs modern JavaScript libraries such as RequireJS, jQuery, and Lodash, and integrates Piwik PRO for analytics. The site is mobile-optimized with good design and navigation, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates good business credibility and privacy compliance, though it could improve transparency around security and incident response. The domain appears legitimate and professionally managed, consistent with the brand’s reputation.

S

Storck

mamba.de

65

The website www.mamba.de is a professionally maintained brand site for Mamba, a fruit-flavored chewy candy brand under the Storck company. It targets a general German-speaking audience with product information, brand marketing, and consumer engagement content. The site uses TYPO3 CMS and modern JavaScript libraries, including RequireJS, Lodash, and jQuery, and integrates Piwik PRO for analytics. The technical infrastructure is modern and mobile-optimized, with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is trustworthy and well-positioned in the retail confectionery market.

S

Storck

nimm2.at

74

The website www.nimm2.at represents the Austrian presence of the Storck brand 'nimm2', a well-established confectionery brand specializing in vitamin-enriched sweets and candies. The site serves as a consumer-facing platform providing product information, brand storytelling, and engagement through inspiration and ideas. It targets a general audience including families and consumers interested in vitamin candy products. The website is part of a larger corporate ecosystem under Storck, linking to multiple sister brand domains, indicating a strong market position in the confectionery retail sector in Austria. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as RequireJS, jQuery, and Lodash, and integrates Piwik PRO for analytics and tag management. The site is mobile-optimized with responsive design and good SEO practices. Performance is moderate, with asynchronous loading of scripts and media assets. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data for the domain is unavailable due to NIC.AT restrictions, limiting full verification of domain registration details, but the website's branding and content strongly indicate legitimacy. Overall, the site presents a professional, trustworthy brand presence with good privacy compliance and moderate security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing direct contact information for incident response. These steps would strengthen trust and compliance further.

S

Storck

mamba.com

62

Mamba.com is the official international website for Mamba fruit chews, a confectionery brand under the Storck company umbrella. The site provides product information and directs users to country-specific versions, supporting a global retail presence. The website is professionally designed with good content quality and consistent branding aligned with Storck's portfolio. Technically, the site uses modern JavaScript libraries such as RequireJS, jQuery, and Bootstrap, and employs Piwik PRO for analytics, indicating a moderate level of digital maturity. However, some technical aspects like security headers and explicit CMS identification are not evident from the data provided. Security posture is moderate; the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit incident response contacts. WHOIS data is missing or unavailable, which reduces domain registration transparency and slightly impacts trustworthiness. Overall, the website is functional, user-friendly, and compliant with privacy regulations, but could improve in security and transparency aspects.

S

Storck

werthers-original.com

63

Werther’s Original is a well-established confectionery brand specializing in caramel products, operated under the parent company Storck. The website serves as a global brand portal with localized country versions, offering product information and brand storytelling. The site demonstrates a professional digital presence with modern web technologies including RequireJS, jQuery, and Bootstrap, and integrates Piwik PRO for analytics. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR standards. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding strongly indicate a legitimate commercial operation. Security posture is solid with HTTPS enforced, but could be improved by adding security headers and explicit security policies. Overall, the website is user-friendly, well-branded, and trustworthy from a content perspective, but domain registration transparency should be addressed.

S

Storck

knoppers.com

63

Knoppers.com is the official website for the Knoppers brand, a confectionery product line under the Storck company. The site provides product information about their milk-hazelnut wafers and various bars, targeting general consumers seeking tasty snack options. The website is multilingual and links to country-specific domains, indicating a broad international presence. Technically, the site uses modern JavaScript libraries such as RequireJS, jQuery, and Bootstrap, and employs Piwik PRO for analytics, reflecting moderate digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable anomaly, though the website content and branding align with the reputable Storck company, suggesting legitimacy. Overall, the site is professionally designed, user-friendly, and compliant with privacy regulations, but could improve security posture and transparency.

S

Storck

toffifay.us

66

Storck is a well-established confectionery company with a global presence, offering products such as Toffifay, a unique confection combining caramel, hazelnut, and chocolate. The website reflects a professional brand image with consistent branding and clear product information targeted at a general audience. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response policies are absent. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection.

The website synergie-europe.fr currently returns a 404 error page with no accessible content, indicating it is either inactive or under construction. The domain is registered with OVH since 2020, which aligns with a relatively new business entity. Due to the lack of website content, no business description, services, or contact information can be extracted. The technical infrastructure appears minimal with no detectable technologies, scripts, or security headers. The absence of HTTPS information and security policies suggests a weak security posture. Overall, the website lacks fundamental elements required for trust, compliance, and user engagement.

F

Fédération UniAgro

uniagro.fr

53

Fédération UniAgro is a French federation uniting eight alumni associations of life sciences engineers, providing a centralized platform for networking, career services, community engagement, and professional publications. The website is professionally designed, mobile-optimized, and integrates modern web technologies including jQuery, Bootstrap, and GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and hCaptcha protecting forms, though security headers and explicit security policies are absent. WHOIS data is unavailable, which limits domain legitimacy verification, but the website's content and partner ecosystem support its credibility. Overall, the site serves as a trusted hub for its target audience of alumni and professionals in the agro-life sciences sector.

P

Patriot Program

patriotprogram.cz

54

Patriot Program is a regional media platform focused on providing a comprehensive calendar and search engine for cultural, sports, and social events in the Moravskoslezský kraj region of the Czech Republic. The website offers event listings, articles, and a downloadable magazine, targeting a broad audience including families, seniors, and cultural enthusiasts. The platform supports user-generated event creation and maintains active social media channels on Facebook and YouTube. Technically, the website is built using modern web technologies including Next.js and React, hosted on DigitalOcean infrastructure, and optimized for mobile devices with good performance and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy compliance pages indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the professional presentation and content quality suggest a legitimate business. Overall, the site scores well on content and technical implementation but needs to enhance privacy compliance and transparency to improve trust and security posture.

F

Flexity Joga Shop

flexitylife.cz

58

Flexitylife.cz operates as a specialized e-commerce retailer focused on yoga, pilates, ayurveda, massage, health, and meditation products primarily serving the Czech Republic and neighboring countries. The website offers a broad catalog of wellness-related goods including mats, clothing, accessories, books, and supplements, positioning itself as a niche wellness retail provider with a professional online presence. The platform is built on the Shoptet e-commerce system, leveraging modern web technologies and CDN services to deliver a responsive and user-friendly experience. Privacy and cookie compliance are well implemented with explicit consent mechanisms, and the site uses multiple analytics and marketing tools to optimize business operations. Security posture is generally good with HTTPS enforcement and secure forms, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable concern impacting business credibility and trust, warranting further verification. Overall, the site is safe, professionally designed, and well-structured for its target audience, but would benefit from enhanced transparency and security disclosures.

S

Svíčky Lumio

svickylumio.cz

56

Svíčky Lumio is a Czech family-owned business specializing in the production and sale of harmonizing, chakra, energetic, and spiritual candles. The company operates an e-commerce platform built on the Shoptet CMS, offering a wide range of products including candles, incense, spiritual symbols, and related accessories. Their market position is that of a niche retailer focused on spiritual and energy-related products, targeting customers interested in holistic and spiritual well-being. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses standard web technologies including jQuery and Facebook SDK, with HTTPS enforced and CSRF protections on forms, though it lacks some advanced security headers. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. However, the absence of WHOIS data for the domain reduces the overall trustworthiness from a domain registration perspective. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences.

M

Maharishi College of Perfect Health International

ayurvedatraining.eu

55

Maharishi College of Perfect Health International operates the ayurvedatraining.eu website, offering a one-year, part-time professional training program in Maharishi AyurVeda at an accredited European university in Slovenia. The business targets health professionals and individuals interested in integrative Ayurvedic medicine, providing a hybrid online and in-residence educational experience. The website is well-branded and contains testimonials, structured data, and SEO metadata that support its credibility and market positioning as a niche educational provider in Europe. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating Google reCAPTCHA and Google Tag Manager for security and analytics. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO practices are good, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a security policy or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is limited to a detailed contact form, with no direct emails or phone numbers published. Overall, the website presents a professional and trustworthy front for its educational services, with a solid technical foundation and good business credibility. Improvements in privacy compliance, security headers, and direct contact information would enhance its security posture and user trust.

The International Ayurveda Congress website serves as a professional platform for organizing and documenting international Ayurveda congresses. It is operated by a coalition of Ayurveda-focused organizations, primarily the International Maharishi AyurVeda Foundation. The site offers extensive archives, event details, and educational resources targeting healthcare professionals, researchers, and policymakers interested in Ayurveda. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and privacy compliance. Overall, the website is legitimate, well-established, and trustworthy, though it could enhance user privacy and security transparency.

The domain meru.international currently serves a 403 Forbidden error page, indicating that access to the website content is blocked or restricted. No business-related content, metadata, or structured data is accessible, preventing a detailed understanding of the company's operations or services. The WHOIS data is not publicly available due to TLD restrictions and privacy policies, limiting the ability to verify domain ownership or age. The technical infrastructure appears minimal, with only Google Fonts loaded and no visible CMS or frameworks. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS information. Overall, the site is inaccessible and lacks publicly available information, resulting in a low trust and credibility score.

QS I-GAUGE is a credible Indian education rating platform operated by Quixta, providing comprehensive ratings for universities, colleges, and schools to assist students and parents in making informed educational choices. The platform leverages a robust methodology overseen by the QS Intelligence Unit, ensuring independent and quality assessments. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact/security policies.

F

Foleon

foleon.com

74

Foleon is a technology company offering a SaaS content creation platform that enables businesses to create interactive, on-brand digital documents and marketing assets. Positioned as an enterprise-grade solution, Foleon provides tools for collaboration, templating, analytics, and personalization, targeting marketing teams and enterprises seeking to enhance their digital content engagement. The website is professionally designed, leveraging HubSpot CMS and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, cookie consent, and reputable third-party services, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy and business credible, with no signs of malicious activity or content blocking.

Q

QS Quacquarelli Symonds Limited

qshesummits.com

66

QS Quacquarelli Symonds Limited operates a professional website focused on higher education analytics, events, and publications. The company is positioned as a global leader in providing services and insights to the higher education sector, organizing multiple international summits and conferences. The website content is well-structured, professionally designed, and targets education professionals and stakeholders worldwide. The technical infrastructure is based on WordPress with modern plugins and integrations including HubSpot and Google Analytics, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers and DNSSEC are missing. Privacy compliance is supported by a cookie consent mechanism and a privacy policy linked to the main QS corporate site. Overall, the website reflects a credible and trustworthy business presence with good digital maturity.

Q

Quacquarelli Symonds Limited

reimagine-education.com

57

Reimagine Education is a globally recognized conference and awards platform operated by Quacquarelli Symonds Limited, focusing on innovation in education and employability. The website serves as a hub for event information, award applications, showcases, and partner engagement. It targets educational innovators, academic institutions, and edtech startups worldwide. The platform is well-positioned in the education sector with a strong brand and professional digital presence. Technically, the website is built on WordPress with a modern tech stack including popular plugins and integrations such as Yoast SEO, WPBakery, Slider Revolution, and Google Analytics. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility could be improved. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a publicly stated security policy or incident response information. The WHOIS data is notably absent or unavailable, which introduces some uncertainty regarding domain registration legitimacy. However, the website's content, structured data, and branding strongly associate it with the reputable QS organization. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the website is professional, secure, and trustworthy from a business and technical perspective, with minor gaps in transparency around domain registration and security policies. Strategic improvements in these areas would enhance trust and compliance.

C

CallRail

callrail.com

66

CallRail is a well-established SaaS company specializing in call tracking and marketing analytics solutions designed to help businesses optimize their marketing efforts and customer interactions. The company targets businesses and marketing professionals seeking detailed insights into call attribution and lead generation effectiveness. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about their services. The technical infrastructure leverages modern web technologies including Angular, Google Analytics, Microsoft Clarity, and OneTrust for cookie consent, hosted on Netlify for performance and reliability. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, CallRail presents a trustworthy and professional online presence suitable for its business audience.

A

Ascendoor

ascendoor.com

66

Ascendoor is a small technology business specializing in the development and sale of WordPress themes and plugins, offering both premium and free options. The company provides additional services such as theme customization and dedicated customer support, positioning itself as a one-stop solution for WordPress users seeking quality design and functionality. The website is professionally designed with good SEO practices and mobile optimization, reflecting a mature digital presence for a business founded around 2020. Technically, the site runs on WordPress 6.7.4 with common plugins for SEO, forms, and cookie management, and integrates Google Analytics and reCAPTCHA for tracking and security. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. No critical security or content safety issues were detected.

RAWEN STUDIO is a small design and marketing studio based in Norway, offering services such as visual solutions, branding & identity, advertising, and communication for digital and print media. The website is currently under construction and provides minimal content, primarily a contact email and a brief description of services. The technical infrastructure appears basic with no detected CMS or advanced frameworks, and no evidence of HTTPS or security headers was found. The website lacks privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is weak due to missing HTTPS and absence of security best practices. Overall, the site presents a low risk but also low trustworthiness due to incomplete domain registration data and minimal content.

S

SEJF

sejf.cz

68

SEJF operates a modern mobile application platform focused on cashless payments for public transport tickets, parking, and entry tickets primarily in the Czech Republic. The company positions itself as a leading provider in this niche, offering a wide variety of payment options and a user-friendly experience. The website reflects a mature digital presence with professional design, clear content, and strong branding consistency. Technically, the site leverages modern frameworks such as Next.js and React, integrates with Cookiebot for privacy compliance, and uses Google Analytics and Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is typical for CZ NIC domains and does not detract from the site's legitimacy given the professional presentation and compliance with GDPR. Overall, SEJF demonstrates a solid business and technical foundation with room for enhanced security transparency and incident response readiness.

G

Gab

gab.com

68

Gab is a social networking platform emphasizing free speech and individual liberty. It operates a subscription model with Gab PRO, which grants VPN and proxy access to its site. The website is moderately mature with a domain age dating back to 1998, hosted via Cloudflare, and uses modern web technologies including React and Matomo analytics. The VPN policy page clearly states restrictions on VPN/proxy usage to protect the community from malicious actors. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is limited as no privacy or cookie policies are present on this page. Overall, the site is functional and professional but could improve transparency and security practices.

K

KUTNOHORSKÁ MINCOVNA A.S.

kutnohorskytolar.cz

56

Kutnohorská Mincovna A.S. operates a specialized minting business in Kutná Hora, Czech Republic, focusing on producing collectible and investment-grade silver coins known as Kutnohorský Tolar. The company leverages Czech historical heritage and artistic craftsmanship, collaborating with renowned sculptor Vladimír Oppl to create limited edition coins. Their market position is niche but strong within the numismatic and investment coin sector, targeting collectors and investors interested in Czech cultural artifacts. Technically, the website is built on WordPress with Elementor, employing modern web technologies and delivering a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. Overall, the business presents a credible and professional front, though improvements in privacy and security policies are recommended to enhance trust and compliance.

K

Kutnohorská Mincovna

kutnohorskamincovna.cz

51

Kutnohorská Mincovna is a small Czech Republic-based business dedicated to reviving and celebrating the historical royal mint of Kutná Hora. The company focuses on producing investment-grade gold and silver coins, bullion bars, corporate minting services, and collector's editions that honor Czech traditions and history. The website is professionally designed with good content quality and clear navigation, targeting investors and collectors interested in precious metals and Czech heritage. Technically, the site uses modern front-end libraries including Bootstrap, FontAwesome, and Google Tag Manager for analytics and marketing. The hosting leverages Amazon Cloudfront for widget delivery. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trustworthiness. Overall, the site is safe, compliant with GDPR, and provides a positive user experience with room for security and contact information improvements.

T

theprotocol.it

theprotocol.it

67

theprotocol.it is a specialized online job portal focused on the IT sector in Poland, providing daily updated job offers and resources for both candidates and employers. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and user-friendly experience. It maintains a strong security posture with HTTPS, DNSSEC, and security headers, ensuring safe browsing for users. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance, and does not provide explicit contact information, which may affect user trust and compliance. Overall, the site is professionally designed and well-positioned in its niche market but should enhance its privacy compliance and transparency to improve trust and legal adherence.

G

Gan Jing World - Technology for Humanity | Video & Movie Streaming

ganjingworld.com

65

Gan Jing World is a media streaming and content sharing platform that offers video, movie, and show streaming services across desktop, mobile, and TV apps. The platform emphasizes non-addictive algorithms and promotes values of kindness, respect, and trust. It allows users to create and share videos, posts, and articles without mandatory registration, enhancing user privacy and freedom of speech. The website is positioned as a niche media platform with a focus on meaningful content and social connection. Technically, the website is built on a modern stack using Next.js and React, hosted on CloudOkyo cloud infrastructure. It employs Google Fonts and CookieYes for consent management, indicating a commitment to privacy compliance. The site is mobile-optimized with good SEO and accessibility features, though some security headers are missing. The cookie consent mechanism is comprehensive and GDPR compliant, with granular user controls. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of WHOIS registration data and security headers suggests areas for improvement. No explicit privacy policy or contact information for security incidents is found, which could impact trust. The domain's WHOIS data is missing, possibly indicating recent registration or privacy protection, which lowers the domain trust score. Overall, Gan Jing World presents a professional and privacy-conscious media platform with modern technology and good user experience. Strategic recommendations include publishing a privacy policy, adding security headers, and providing clear contact information to enhance trust and compliance.

(

(주)에포크미디어코리아

epochtimes.co.kr

65

에포크미디어코리아가 운영하는 에포크타임스(www.epochtimes.kr)는 한국어 뉴스 미디어 사이트로, 정치, 경제, 사회, 국제, 문화, 과학 등 다양한 분야의 뉴스를 제공하며, 에포크TV 영상 콘텐츠와 프리미엄 리포트, 인터뷰, 오피니언 등 풍부한 콘텐츠를 갖추고 있습니다. 사이트는 WordPress CMS 기반으로 최신 웹 기술과 광고 및 분석 도구를 활용해 운영되고 있으며, 모바일 최적화와 사용자 경험이 우수합니다. 보안 측면에서는 HTTPS가 적용되어 있고, 쿠키 동의 배너를 통해 개인정보 보호에 대한 기본적인 조치를 취하고 있으나, 보안 정책 및 보안 헤더 적용은 다소 미흡한 편입니다. WHOIS 정보가 조회되지 않아 도메인 등록 정보의 투명성은 낮으나, 사이트 내 회사 정보와 연락처가 명확히 제공되어 신뢰성은 중상위 수준으로 평가됩니다.

EtIndonesia is an Indonesian media website focused on delivering news, inspirational stories, and video content primarily to an Indonesian-speaking audience. The site covers a broad range of topics including national and international news, family, mystery, health, and science. The business model appears to be online media publishing monetized through advertising, notably Google AdSense. The website uses WordPress CMS with several tagDiv plugins and integrates Google Analytics for user tracking. Hosting and DNS are managed via Cloudflare, providing some security and performance benefits. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact or incident response information is published, limiting transparency. Overall, the site is functional, mobile-optimized, and professionally designed but would benefit from enhanced security and privacy compliance measures.

E

Epoch Times

elepoch.com

60

The website www.elepoch.com is a Spanish-language news media platform branded as Epoch Times, providing independent and objective news coverage focused on truth, tradition, and hope. It targets Spanish-speaking audiences interested in US, Latin American, and global news, offering a variety of news categories including politics, health, economy, and entertainment. The site features multimedia content such as videos and newsletters, supported by advertising networks like Google Adsense. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though explicit security headers and incident response information are not publicly visible. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation and content quality. Overall, the site is a credible media outlet with room for improvement in privacy and security disclosures.