Security Directory

Cargo-Hortim, spol. s r.o. is a Czech-based transportation and logistics company providing both domestic and international freight services. The company operates multiple branches across the Czech Republic and Slovakia and offers additional services such as vehicle washing. The website reflects a professional business presence with clear service offerings and contact information. The company is affiliated with the Total Produce group, indicating a solid market position in the transportation sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response disclosures. Overall, the site is trustworthy and well-maintained, though improvements in security transparency and WHOIS data availability could enhance credibility further.

A

Abasto s.r.o.

abasto.cz

65

Abasto s.r.o. is a Czech Republic-based medium-sized wholesale distributor specializing in fruits, vegetables, herbs, mushrooms, and other food products. The company targets HoReCa businesses, retail chains, catering services, manufacturing companies, and corporate canteens, positioning itself as a reliable supplier with a broad product range and certified quality standards. The website reflects a professional business presence with clear service offerings, customer references, and contact channels. Technically, the site is built on WordPress with common libraries such as jQuery, Bootstrap, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data and meta tags. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are missing. The absence of WHOIS data is a notable concern for domain legitimacy, but the overall business credibility remains high based on content and certifications. Strategic recommendations include improving security headers, adding incident response and vulnerability disclosure information, and verifying domain registration details.

F

Farma Božice

farmabozice.cz

62

Farma Božice is a small Czech agricultural business specializing in the cultivation and distribution of fresh vegetables. Positioned as a local producer near Znojmo, Czech Republic, the company emphasizes quality, freshness, and adherence to health standards. It operates within the retail sector, supplying both wholesale and retail customers, supported by its membership in the Hortim Group and Global GAP certification. The website reflects a professional and consistent brand image with clear business messaging and a focus on regional partnerships with major retailers such as Kaufland, Lidl, and Makro. Technically, the website is built on WordPress using modern web technologies including Bootstrap, jQuery, and various plugins for SEO, image galleries, and user interaction. It employs HTTPS with good SSL configuration and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies with explicit consent mechanisms, indicating a mature approach to privacy compliance. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection but lacks visible security headers which could enhance protection against common web attacks. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further verification of domain registration legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a trustworthy and professional front for a small agricultural business with good privacy practices and moderate technical sophistication. Strategic improvements in security headers and domain registration transparency would further strengthen its security posture and business credibility.

H

Hortim-International, spol. s r.o.

hortim-kariera.cz

62

Hortim-International, spol. s r.o. operates a professional career portal focused on recruitment for transportation and logistics roles primarily in the Czech Republic. The website provides detailed job listings across multiple locations, supporting the recruitment efforts of the Hortim Group and its subsidiaries such as Abasto, s.r.o. The company targets job seekers in the regional transportation and warehousing sectors, offering a clear and user-friendly platform for applications and inquiries. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for UI components. SEO is enhanced through the Yoast SEO plugin, and Google Tag Manager is used for analytics and tracking. The site is mobile optimized and includes accessibility considerations, though some improvements could be made. Cookie consent and GDPR compliance are well implemented, with explicit user consent mechanisms and links to comprehensive privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, no explicit security headers were detected in the provided data, and there is no visible incident response or security policy documentation. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content are consistent with a legitimate business entity. No vulnerabilities or suspicious patterns were identified in the analysis. Overall, the website presents a trustworthy and professional front for Hortim Group's recruitment activities. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party libraries to further strengthen the security posture and compliance.

H

Hortim-International, spol. s.r.o.

hortim.es

62

Hortim-International, spol. s.r.o. is a medium-sized company specializing in the wholesale and logistics of fresh fruits and vegetables. With over 25 years of market presence, the company offers a comprehensive range of services including importation, cultivation, packaging, storage, ripening, and timely delivery. The business operates internationally with multiple subsidiaries and brands, targeting B2B clients in the fresh produce sector. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern libraries such as jQuery, Bootstrap, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for general audiences.

H

Hortim

hortim.de

68

Hortim is a well-established wholesale company specializing in fresh fruits and vegetables, offering a full range of services from import and cultivation to packing, storage, ripening, and logistics. With over 30 years of market presence and multiple subsidiaries, Hortim holds a strong position in the retail and transportation sectors within Germany and neighboring countries. The website reflects a professional and consistent brand image, supported by certifications and sustainability initiatives. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

H

Hortim-International, spol. s.r.o.

hortim.com

68

Hortim-International, spol. s.r.o. is a medium-sized Czech company specializing in the wholesale distribution and comprehensive services related to fresh fruits and vegetables. With over 30 years of market presence, Hortim operates multiple subsidiaries and premium brands, offering services ranging from import and cultivation to packing, storage, ripening, and logistics. The company targets wholesale buyers, retailers, and logistics partners, positioning itself as a reliable regional player in the fresh produce supply chain. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO plugins. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. The site uses HTTPS and includes cookie consent mechanisms, Google Tag Manager, and Facebook SDK for marketing and tracking purposes. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the presence of certifications and consistent branding supports legitimacy. Overall, Hortim's website is professional and trustworthy with good content quality and privacy compliance. The main risk lies in the lack of publicly available WHOIS data and some missing security headers. Strategic improvements in security policies, contact transparency, and technical hardening are recommended to enhance trust and compliance.

H

Hortim

hortim.sk

64

Hortim is a well-established company specializing in wholesale and farming of fresh fruit and vegetables, with over 30 years of market presence. The company operates a group of five companies and two premium brands, providing end-to-end services including importing, farming, packaging, storage, ripening, and logistics. Their target audience primarily consists of business customers in the fresh produce supply chain. Technically, the website is built on WordPress with modern technologies such as jQuery, Bootstrap, and multilingual support via WPML. The site is mobile optimized and SEO friendly, with integration of Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

C

Colruyt

colruyt.be

72

Colruyt is a leading Belgian retail supermarket chain focused on offering the lowest prices for a wide range of products. The website serves as a digital storefront providing product information, promotions, recipes, and store locators primarily targeting Dutch-speaking customers in Belgium and Luxembourg. The site is built on modern web technologies including Vue.js and Adobe Experience Manager, with performance and mobile optimization considered good. Security posture is strong with HTTPS enforced and monitoring via Dynatrace, though explicit security headers and public security policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy. WHOIS data is restricted by the .be registry, which is common but reduces transparency. Overall, the website is professional, trustworthy, and well-positioned in the retail market.

The website etnic.be is currently inaccessible due to a security or access restriction, presenting only a minimal 'Request Rejected' message. This prevents any meaningful extraction of business, technical, or security information from the site content. The domain is registered with BELNET since 2001, indicating a legitimate and established presence likely based in Belgium. However, the lack of accessible content and absence of any metadata, contact information, or policies severely limits the ability to assess the company's business model, services, or compliance posture. The technical infrastructure cannot be evaluated beyond the registrar information. Security posture is unknown due to lack of data, but the presence of a blocking mechanism suggests some level of security control is in place. Overall, the site currently presents a high risk for users due to lack of transparency and accessibility.

S

STIB-MIVB

stib-mivb.be

59

STIB-MIVB is the primary public transportation operator in Brussels, providing metro, tram, and bus services. Their website offers comprehensive travel planning tools, ticket purchasing options, and real-time service updates, targeting residents and visitors in the Brussels region. The site is multilingual and designed with accessibility in mind, reflecting a mature digital presence. Technically, the website uses modern frameworks such as Bootstrap and integrates third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. The WHOIS data is unavailable due to registry restrictions, but the domain and content strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's public service mission.

B

Belfius Bank

belfius.be

69

Belfius Bank is a 100% Belgian bankinsurer providing financial solutions to individuals, entrepreneurs, and public or social profit institutions. The website targets investors and financial analysts with dedicated sections for company profile, press releases, reports, results, ratings, and debt issuance. The site is professionally designed with multi-language support and a clear focus on compliance and user experience. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates OneTrust for cookie consent management, indicating a mature approach to privacy and GDPR compliance. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible advanced security headers or explicit security policies. WHOIS data is restricted due to DNS Belgium policies, which is typical for .be domains, but the domain appears legitimate and consistent with the business claims. Overall, the site is professional, trustworthy, and compliant with privacy regulations, suitable for its financial services audience.

T

Telenet

telenet.be

78

Telenet is a major Belgian telecommunications provider offering a range of residential and business services including high-speed internet, mobile telephony, and digital TV. The website is professionally designed, well-branded, and targets both residential customers and businesses in Belgium. The technical infrastructure leverages modern web technologies such as Adobe Experience Manager CMS, Adobe DTM for tag management, Dynatrace for performance monitoring, and OneTrust for cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and incident response information are not evident. The absence of WHOIS data reduces transparency but is consistent with .be domain privacy policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in explicit security disclosures and contact information availability.

F

Fork CMS

fork-cms.com

50

Fork CMS is an open source content management system designed to provide a user-friendly interface, powerful apps, and customizable themes. It targets developers, marketers, and businesses seeking an open source CMS solution. The website presents a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google Analytics and Facebook SDK for tracking. The CMS itself is Fork CMS, hosted by Hostbots, and the site is mobile optimized with good accessibility and SEO practices. Security-wise, the site enforces HTTPS and shows no exposed sensitive data or vulnerable libraries, but lacks security headers and explicit privacy or cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence.

E

EVENT media s.r.o.

neonrun.cz

44

Neon Run, operated by EVENT media s.r.o., is a well-established Czech event organizer specializing in themed night running events such as the Mizuno Neon Run. The company has been active since 2014 and maintains a professional online presence with clear event information, partner listings, and registration links. Their target audience includes runners and sports enthusiasts primarily in the Czech Republic. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and a cookie consent mechanism, hosted on VAS Hosting. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is implemented, but the absence of explicit security headers and incident response policies suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR, though it lacks a visible terms of service and vulnerability disclosure policy.

E

EVENT media s.r.o.

zombierun.cz

44

ZombieRUN.cz is a Czech event organization website specializing in experiential night running events, notably the Zombie RUN series. The company behind the site, EVENT media s.r.o., has been operating since 2014 and maintains a professional online presence with clear event information, registration links, and partner endorsements. The website targets running enthusiasts and the general public interested in unique night sports events. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and cookie consent tools, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features and explicit security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security policies and incident response contacts. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in Czech. Overall, the site is trustworthy, well-branded, and professionally maintained, with a strong partner ecosystem and transparent business information.

E

EVENT media s.r.o.

christmasrun.cz

44

Christmas NIGHT RUN is a Czech-based event organization company specializing in a series of experiential night running events held annually in multiple cities such as Brno, Olomouc, Prague, Most, and Hradec Králové. The company, EVENT media s.r.o., founded in 2016, has established a solid presence in the regional sports event market with a clear focus on community engagement and sports enthusiasts. Their website provides comprehensive event information, results, galleries, and partner details, targeting runners and sports fans primarily in the Czech Republic. The business model revolves around event management, sponsorships, and participant registrations, leveraging partnerships with reputable brands and media outlets.

E

EVENT media s.r.o.

winter-run.cz

44

WinterRUN is a Czech Republic-based event organizer specializing in winter running races held across multiple cities. The company operates a well-structured website providing race schedules, registration links, results, galleries, and news updates. The business targets runners and sports enthusiasts, leveraging partnerships with notable sponsors and media outlets to strengthen its market position. Founded in 2014, WinterRUN maintains a medium-sized operation with consistent branding and a professional online presence. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is provided by VAS Hosting, with a moderate performance profile and good mobile optimization. The site includes cookie consent mechanisms compliant with GDPR, although some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent with express consent. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests an opportunity to enhance trust and compliance. The WHOIS data aligns well with the business information, supporting legitimacy. Overall, WinterRUN presents a trustworthy and professional digital footprint with good content quality and business credibility. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.

E

EVENT media s.r.o.

night-run.cz

46

NN Night Run is a well-established event organization company based in the Czech Republic, specializing in organizing experiential night running events across multiple cities. The company operates a medium-sized business model focused on community engagement, charity, and sports entertainment, supported by a strong network of partners and sponsors. Their website reflects a professional and consistent brand image with comprehensive event information and user engagement features such as registration and race results.

The website at yfdpco2.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an embedded iframe from an external domain. There is no visible business information, contact details, or user-facing content, which severely limits the ability to assess the business or its offerings. The domain WHOIS data is suspicious due to a future creation date (March 2025), which is inconsistent with the current timeline and raises concerns about the legitimacy or accuracy of the registration data. The site lacks fundamental privacy and cookie policies, security headers, and DNSSEC, indicating a low maturity level in security and compliance. Overall, the site appears to be a placeholder or ad-serving page rather than a fully developed business website.

V

VDAB

vdab.be

68

VDAB is the official public employment service of Flanders, Belgium, providing comprehensive job search, training, and career guidance services. The website is well-branded and targets job seekers, employers, and partners within the Flemish region. It operates under the Flemish government umbrella, offering a trusted platform for employment-related services. Technically, the site uses Drupal 10 CMS with modern JavaScript frameworks and integrates consent management and chat services, reflecting a mature digital infrastructure. Security posture is good with HTTPS and OIDC authentication, though some security headers and explicit incident response contacts are missing. WHOIS data is restricted, but the site’s official nature and consistent branding support its legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving a large government audience effectively.

B

Bruxelles Formation

bruxellesformation.be

63

Bruxelles Formation is the official public francophone service responsible for professional training in the Brussels region. The organization offers free training programs targeted primarily at job seekers and provides services to employers for staff development and recruitment of trained talents. The website reflects a well-established public entity with a clear mission and a strong regional presence. The digital infrastructure is based on WordPress with modern plugins for SEO, GDPR compliance, and analytics, indicating a mature technical setup. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is professional, trustworthy, and serves its public service mandate effectively.

E

European Commission - Employment, Social Affairs and Inclusion

pesnetwork.eu

72

The European Network of Public Employment Services (PES Network) is an official initiative under the European Commission's Employment, Social Affairs and Inclusion domain. It serves as a collaborative platform for public employment services across EU member states and associated countries, aiming to improve labor market efficiency and support EU employment policies. The website is professionally designed using Drupal 10 and the European Commission's design system, ensuring accessibility, mobile optimization, and clear navigation. Security posture is strong with HTTPS, cookie consent, and no exposed vulnerabilities detected. However, WHOIS data is unavailable due to EURid privacy policies, which is typical for EU institutional domains. Overall, the site demonstrates high trustworthiness and professionalism, serving a broad European governmental and public audience.

A

Aviato

aviato.be

49

Aviato is a specialized employment platform focused on providing quality and sustainable job opportunities at Brussels Airport. It serves both job seekers and employers by offering job listings, internships, career advice, and organizing events such as job fairs and info sessions. The website is professionally designed using Drupal 10, with modern web technologies and good mobile optimization. It integrates analytics and marketing tools like Google Analytics and Facebook Pixel, and complies with GDPR through a comprehensive privacy and cookie policy. Security posture is adequate with HTTPS and secure form handling, though security headers could be improved. WHOIS data is restricted, but the website's content and social media presence indicate a legitimate and trusted organization within the transportation sector in Belgium.

B

BOSA

publicprocurement.be

48

The website www.publicprocurement.be appears to be a government-related eProcurement platform operated by BOSA, a Belgian government entity. However, the website content is currently inaccessible, showing only a JavaScript loading spinner and a message indicating that JavaScript is required. No meaningful content, contact information, or policies are available on the landing page. The WHOIS data for the domain is not accessible and returns a 'NOT ALLOWED' status, preventing extraction of registrar, creation, expiry, or registrant details. This lack of WHOIS transparency reduces trust and legitimacy verification. Technically, the site uses modern frontend technologies such as Vue.js and Vuetify, indicating a contemporary tech stack. However, due to the blocked content, performance, accessibility, and SEO aspects cannot be assessed. Security headers and SSL configuration details are not available from the provided data, and no security or privacy policies are detected. The security posture is weak due to the lack of accessible content and missing security headers. Privacy compliance cannot be confirmed as no privacy or cookie policies are found. The domain's WHOIS data inconsistency and blocked content suggest potential access restrictions or security controls limiting public visibility. Overall, the site is likely intended for authenticated or internal users only, limiting public access. Strategic recommendations include improving public-facing transparency, publishing privacy and security policies, ensuring WHOIS data availability for trust, and implementing robust security headers and SSL configurations.

Synerjob is a non-profit organization established in 2007 to foster collaboration between regional employment agencies in Belgium, including ACTIRIS, ADG, Bruxelles Formation, Forem, and VDAB. The website serves as an informational portal providing multilingual content about the association's mission, members, documents, events, and statistics. The business model focuses on regional labor market synergy and information sharing among government entities. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript with jQuery and Bootstrap, and integrates Google Tag Manager for analytics. The site is moderately optimized for mobile and accessibility with basic SEO practices. Security posture is moderate with no explicit security headers detected and no visible HTTPS status in the provided data, though Google Tag Manager scripts load over HTTPS. Privacy compliance is basic, with a cookie consent banner present but no privacy policy or terms of service found. No contact information or forms are present on the homepage HTML. The domain WHOIS data is consistent with the organization's founding date and business purpose, registered with a reputable registrar since 2007, supporting legitimacy. Overall, the website is professional and safe for general audiences but could improve in privacy transparency and security best practices.

A

Arbeitsamt der Deutschsprachigen Gemeinschaft Belgiens

adg.be

66

The Arbeitsamt der Deutschsprachigen Gemeinschaft Belgiens is the official employment agency serving the German-speaking Community of Belgium. It provides a comprehensive range of services including job listings, registration for job seekers, vocational training, employer support, and career guidance. The website reflects a government entity with a clear focus on regional labor market facilitation and support for both job seekers and employers. The target audience includes job seekers, students, parents, and employers within the community. The agency maintains partnerships with other regional employment services, enhancing its market position and service reach. Technically, the website is built on an older ASP.NET Web Forms platform using the contentXXL CMS, with client-side libraries such as jQuery 1.11.0 and Modernizr. While functional and moderately optimized for mobile, the site shows opportunities for modernization, especially in updating libraries and improving accessibility and SEO. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and uses standard ASP.NET security features but lacks modern security headers and uses an outdated jQuery version with known vulnerabilities. Privacy compliance is partially addressed with privacy and cookie policies present, but no active cookie consent mechanism is detected. Contact information is primarily provided via contact forms and dedicated pages rather than direct emails or phone numbers on the homepage. Overall, the site is trustworthy and professional, reflecting its government affiliation. However, improvements in security practices, privacy compliance, and technical modernization would enhance its posture and user trust. The risk level is low, but attention to updating client-side libraries and implementing modern security headers is recommended.

L

Le Forem

leforem.be

63

Le Forem is the official regional public employment and training agency serving the Wallonia region in Belgium. The website provides comprehensive services including job offers, training catalogs, personal account creation, CV publishing, and employment aids targeted at citizens, young people leaving school, job seekers, and workers. The agency holds a strong market position as a government entity dedicated to employment facilitation and workforce development in its region. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and tracking tools such as Hotjar and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR, with a clear focus on serving its public audience effectively.

Actiris is the official public employment service for the Brussels-Capital Region, providing a comprehensive platform for job seekers including job offers, training, coaching, and employment aid. The website is professionally designed, multilingual, and targets citizens seeking employment in Brussels. It serves as a key regional government agency with a strong market position and a broad range of services to support employment and training. The technical infrastructure leverages modern web technologies including Google Analytics, Google Tag Manager, and embedded YouTube videos, with evidence of a CMS likely Umbraco. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security policies or incident response information. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

D

Drips

drips.fr

42

Drips.fr is a French niche media website dedicated to graffiti culture, providing news, reports, photos, and videos. Supported by well-known graffiti brands Montana Colors, Grog, and Allcity.fr, it targets graffiti enthusiasts primarily in France. The site uses WordPress CMS with modern web technologies including Bootstrap, jQuery, and Owl Carousel, and integrates social media feeds and analytics tools. The website is well-structured with good content quality and SEO optimization, though it lacks some privacy compliance features such as cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website's sponsorships and content quality support its credibility. Overall, the site is a valuable resource for its audience but could improve in privacy and security compliance.

M

Montana Colors France

montanacolors.fr

54

Montana Colors France operates as a specialized e-commerce retailer focused on graffiti, street art, and beaux-arts supplies, serving primarily the French market. The company holds exclusive distribution rights for Montana Colors spray paints in France, positioning itself as a niche leader in the art supplies retail sector. The website supports customer account management, promotional offers, and newsletter subscriptions, catering to both professional and amateur artists. Technically, the website is built on the Magento platform, utilizing a combination of Prototype.js, Scriptaculous, jQuery 1.8.2, and Google reCAPTCHA for form security. While the site employs HTTPS and basic privacy compliance mechanisms such as cookie consent and privacy policies, it lacks some modern security headers and uses an outdated jQuery version, which could pose security risks. Security posture is moderate with good use of HTTPS and CAPTCHA protections, but improvements are needed in security headers and library updates. The absence of WHOIS data for the .fr domain raises some concerns about domain registration transparency, though the website content and business presence suggest legitimacy. Overall, the website is professional and trustworthy with room for technical and security enhancements. Strategic recommendations include updating JavaScript libraries, implementing comprehensive security headers, and improving domain registration transparency to enhance trust and compliance.

C

crap.sk

crap.sk

55

crap.sk is a Slovak-based small web design and graphic design studio offering a range of services including website creation, graphic design, e-marketing, and B2B collaboration. The website targets small to medium businesses or individuals seeking professional web and graphic design solutions. The company positions itself as a niche local provider with a portfolio of client references and a clear service offering. Technically, the website is built on WordPress 4.9.2 with several older JavaScript libraries such as jQuery and Scriptaculous, and integrates Google Tag Manager for analytics and marketing purposes. The site demonstrates moderate performance and basic mobile optimization with good SEO practices. Security-wise, the site uses HTTPS but lacks modern security headers and runs outdated software versions, which could expose it to vulnerabilities. Privacy compliance is minimal with no visible cookie consent or comprehensive GDPR policy. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but would benefit from technical and security updates to improve its posture and compliance.

M

Media Business Insight (MBI)

globalproductionawards.com

47

The Global Production Awards website represents a professional event platform dedicated to recognizing excellence in sustainable film and TV production worldwide. Operated by Media Business Insight (MBI), a subsidiary of GlobalData, the site serves industry professionals and stakeholders with event information, award shortlists, winners, and sponsorship opportunities. The business model centers on event organization and media partnerships, positioning itself as a prestigious global awards entity within the media sector. Technically, the website employs a modern tech stack including jQuery, Slick Carousel, and the SHOWOFF CMS by ASP.events. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and performance. However, some improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site uses HTTPS and avoids exposing sensitive data. Tracking via Permutive is present, indicating moderate user tracking. The absence of WHOIS data for the domain is a notable concern, potentially indicating registration issues or privacy protection, which impacts domain legitimacy assessment. Overall, the website is trustworthy and professional, but the lack of WHOIS transparency and cookie consent mechanisms suggest areas for improvement to bolster compliance and trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing cookie consent to align with GDPR and best practices.

U

UNION Versicherungsdienst GmbH

union-paritaet.de

49

UNION Versicherungsdienst GmbH operates as a specialized insurance broker focused on serving organ and committee members within the social economy sector in Germany. The company leverages its affiliation with the Ecclesia Group to provide comprehensive insurance solutions, risk consulting, and claims management tailored to social institutions such as youth welfare, care, and educational organizations. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on TYPO3 CMS and integrates Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security headers and published security policies. Overall, the site is trustworthy and well-positioned within its niche but would benefit from enhanced privacy and security disclosures.

D

Deutscher Paritätischer Wohlfahrtsverband - Gesamtverband e. V.

der-paritaetische.de

62

Der Paritätische Gesamtverband is a large, well-established non-profit umbrella organization in Germany representing over 10,800 independent social welfare organizations. The website serves as an information hub, providing news, publications, events, and services to its members and the public. It is built on TYPO3 CMS with modern web technologies and demonstrates a high level of digital maturity. The site is professionally designed, mobile-optimized, and accessible, with clear navigation and comprehensive content. Security posture is strong with HTTPS, cookie consent, and privacy-conscious analytics (Matomo with disabled cookies). However, explicit security policies and incident response contacts are not published. Overall, the website reflects a trustworthy and credible organization with a strong market position in the non-profit social welfare sector.

M

Media Business Insight Ltd (MBI)

screenfilmsummit.com

58

The Screen Film Summit website represents a professional event platform focused on the UK independent film industry, organized by Media Business Insight Ltd, a subsidiary of GlobalData. The site provides detailed information about the annual summit, including event descriptions, partners, speakers, and galleries, targeting producers, financiers, and distributors within the film sector. The business model centers on industry networking and knowledge sharing through events. Technically, the website is built on the SHOWOFF CMS by ASP.events, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup. The site is mobile-optimized, accessible, and employs HTTPS with good performance. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. Tracking is done via Permutive, indicating moderate user tracking. The absence of WHOIS registration data is a concern, though the association with a reputable parent company supports legitimacy. No critical vulnerabilities or adult content were found, and privacy compliance is basic but present. Overall, the website is a credible and professional platform with room for improvement in security headers, privacy compliance, and transparency of contact information. The lack of WHOIS data should be investigated further to confirm domain legitimacy.

S

Screen Global Production

screenglobalproduction.com

64

Screen Global Production operates as a comprehensive global directory and media platform dedicated to film, television, and commercial production companies and services. It provides industry professionals with a centralized resource for company profiles, latest news, and in-depth features, positioning itself as a key player in the media sector. The website is branded under Media Business Insight, indicating a strong corporate backing and market presence. The platform targets production professionals worldwide, offering advertising and newsletter subscription services to engage its audience. Technically, the website leverages modern web technologies including Nuxt.js for server-side rendering, jQuery, and various analytics and marketing tools such as Google Tag Manager, Permutive, and CreateSend. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism powered by OneTrust, and a detailed privacy policy hosted on a parent domain. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers in the HTML source, which could be improved to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which slightly impacts the overall trust score. Overall, Screen Global Production presents a professional and trustworthy online presence with strong content and privacy compliance. The main risk lies in the domain registration opacity, which should be addressed to improve trustworthiness. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining rigorous third-party script audits to sustain a secure and compliant platform.

B

Vercel Security Checkpoint

bsnsports.com

52

The website bsnsports.com is currently inaccessible beyond a Vercel Security Checkpoint page that verifies the visitor's browser. This indicates the presence of a Web Application Firewall (WAF) or security mechanism blocking direct access to the site's actual content. Due to this, no business-related content, contact information, or policies are available for review. The domain itself is long-established, registered since 1997 with GoDaddy.com, LLC, suggesting legitimacy and maturity. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. Technically, the site is hosted on Vercel, using JavaScript and SVG for the checkpoint interface, but no further technology or CMS details are available. Security posture cannot be fully evaluated, but the presence of a security checkpoint suggests some level of protection is in place. Overall, the site scores very low on content quality and privacy compliance due to the blocked state, and strategic recommendations focus on enabling legitimate access and publishing essential policies.

Q

Queer Communications GmbH

queer.de

53

Queer Communications GmbH operates queer.de, a well-established German online magazine serving the LGBTI community with news, culture, entertainment, and event information. The website targets the queer community and allies, providing diverse content including interviews, TV tips, podcasts, and galleries. The business model relies on advertising, affiliate marketing, and newsletter subscriptions, positioning queer.de as a niche media leader in Germany. Technically, the site employs standard web technologies with a focus on responsive design and GDPR-compliant cookie management. Hosting appears to be with Your-Server.de, and analytics are handled via Piwik (Matomo), reflecting a moderate digital maturity. Security posture is solid with HTTPS and content security policies, though additional headers could enhance protection. No critical vulnerabilities or adult content were detected, and privacy compliance is well addressed. Overall, queer.de presents a professional, trustworthy, and user-friendly platform with room for incremental security and compliance improvements.

K

KONTEXT:Wochenzeitung

kontextwochenzeitung.de

47

KONTEXT:Wochenzeitung is an independent, donation-funded weekly newspaper based in Stuttgart, Germany, providing critical and in-depth journalism without advertising. It publishes online every Wednesday and as a print supplement in the national taz weekend edition. The website is built on TYPO3 CMS with a modern, responsive design and integrates privacy-conscious Matomo analytics. The site demonstrates good security hygiene with HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the site is professional, trustworthy, and well-positioned in its niche media market.

M

M6Shop

m6shop.fr

64

M6Shop is a French e-commerce platform specializing in merchandise and experiences related to popular French TV shows such as Top Chef. The website presents a professional and consistent brand image, targeting French-speaking consumers interested in TV show-related products. The platform is built on PrestaShop with Elementor, leveraging modern web technologies and third-party services like Google Tag Manager and Axeptio for analytics and consent management. The domain is well-established since 2008, registered with a reputable registrar, and hosted on AWS infrastructure, indicating a mature digital presence. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers are explicitly provided, which could impact user trust and compliance. Overall, the website is safe for general audiences and shows moderate to good technical and business credibility.

M

M6 Unlimited

m6pub.fr

59

M6 Unlimited is a prominent French multimedia advertising agency specializing in TV, radio, and digital advertising. As part of the Groupe M6, it offers integrated advertising solutions including an online platform (My6) for purchasing ad spaces. The website reflects a mature, professional business with a strong market position in the French media advertising sector. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, Matomo, and Hotjar, ensuring good digital maturity and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is well-designed, accessible, and compliant with GDPR regulations, supporting a high level of trust and professionalism.

M

M6

m6.fr

68

M6.fr is the official website of the French media group M6, offering a comprehensive streaming and replay platform for TV shows, series, cinema, and podcasts. The site targets a broad general audience interested in entertainment content and operates as a major player in the French media landscape. The platform integrates modern web technologies including React and advanced monitoring tools such as New Relic, ensuring a performant and responsive user experience across devices. Privacy compliance is robust, with GDPR-aligned cookie consent managed via Didomi, reflecting a mature approach to user data protection. Security posture is strong with HTTPS enforcement and content security policies, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity suitable for a large media enterprise.

P

Porn Inspector Review — Guiding you to worthy porn

porninspector.com

59

PornInspector.com is an adult content review website specializing in providing detailed and impartial reviews of pornographic websites, including sample videos, galleries, and user opinions. The site targets an adult audience seeking trustworthy guidance in the chaotic online erotica market. It operates primarily as a content review and affiliate referral platform, offering discounts and curated recommendations. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, AddThis social sharing, and Twitter widgets. The site is accessible, loads quickly, and has a basic mobile optimization level. Security posture is moderate with HTTPS enabled but lacks important security headers and explicit incident response or security policies. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism or GDPR indicators. Business credibility is limited by the absence of WHOIS registration data and lack of visible contact information, which reduces trustworthiness despite professional content presentation.

D

DOMOPLAN SICAV, a.s.

domoplanfund.eu

39

DOMOPLAN SICAV, a.s. operates the Domoplan Fund, an investment fund specializing in premium residential real estate development primarily in the Czech Republic. The fund targets qualified investors seeking stable, low-risk investment opportunities with above-standard returns. The company emphasizes portfolio diversification, guarantee mechanisms, and transparency through webcams and detailed project information. Technically, the website employs modern JavaScript libraries and frameworks, including jQuery, Barba.js, and Highcharts, with a cookie consent mechanism and Google Analytics integration. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reputable real estate investment fund.

F

FIPOX a.s.

fipox.com

60

FIPOX a.s. is an established investment group primarily focused on real estate and financial consulting sectors, operating mainly in the Czech Republic with a portfolio of brands such as MyResorts, QPD, Stoix, Domoplan, and THIERRA. The company targets investors and partners interested in sustainable and innovative real estate projects and comprehensive financial services. Their business model combines investment with operational management of their brands, emphasizing long-term value creation. The website reflects a professional corporate presence with clear branding, contact information, and investor-focused content. Technically, the website employs a modern JavaScript stack including jQuery, GSAP, ScrollMagic, Owl Carousel, and analytics tools like Google Analytics, Microsoft Clarity, and Smartlook. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are evident, and some security headers appear missing. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, FIPOX presents a credible and professional business front with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

R

remspace

remspace.cz

52

remspace.cz is a professional Czech online magazine and communication platform focused on the real estate and construction sectors. It provides industry news, articles, and organizes conferences and discussion events, targeting professionals and stakeholders in urban planning, development, and real estate markets. The website is well-branded, content-rich, and maintains a consistent presence with partners and social media channels. Technically, the site is built on WordPress with modern performance optimizations and uses Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some HTTP security headers are missing. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation supports legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant.

E

ENOÉ, créateur d'énergie

enoe-energie.fr

66

Enoé is a French renewable energy producer specializing in green and local energy solutions. The company manages the entire value chain from design to maintenance, positioning itself as a key player in the energy transition sector in France. Their website reflects a professional and consistent brand image with a focus on sustainability and expertise in renewable energy production. The digital infrastructure is based on WordPress with SEO optimization via the All in One SEO plugin, and integrates marketing and analytics tools primarily from HubSpot and social media platforms. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and structured data support legitimacy. Overall, the site is well-designed and user-friendly but would benefit from enhanced security and privacy compliance measures.

S

Sunzil

sunzil.com

49

Sunzil is a well-established company specializing in photovoltaic solar energy solutions, with a 40-year presence in French overseas territories. The company develops, constructs, and operates solar power plants for both residential and professional clients, offering turnkey solutions and consulting services. The website reflects a mature digital presence with comprehensive content, customer testimonials, and recognized certifications such as ISO 9001 and ISO 14001, reinforcing its market credibility. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern JavaScript libraries and analytics tools including Google Analytics and Facebook Pixel. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a good level of digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security policies and incident response information. Some JavaScript errors related to WooCommerce payment gateway dependencies were noted, which could affect user experience. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and certifications suggest a legitimate business. Overall, Sunzil presents a professional and trustworthy online presence with room for improvement in security transparency and domain registration clarity.

K

KBE Energy

kbe-energy.com

67

KBE Energy is a French company specializing in the installation, maintenance, and expertise of photovoltaic solar power plants. Established since 2006, it serves a broad range of clients including farmers, industrial investors, local authorities, and large retail and tertiary sectors. The company offers comprehensive photovoltaic solutions including large roof installations, floating parks, agrivoltaics, self-consumption systems, turnkey buildings, and project management assistance. It also provides financing options such as third-party investment and crowdfunding. The company is certified with ISO 14001, ISO 9001, Qualifelec RGE, and AQPV, reflecting its commitment to quality and environmental standards. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as Google reCAPTCHA, Yoast SEO, GSAP animations, and WP Rocket for performance optimization. The site is well-optimized for SEO, mobile-friendly, and provides a good user experience with clear navigation and professional design. Security measures include HTTPS enforcement, cookie consent management, and CAPTCHA integration, although explicit security headers and a published security policy are absent. The security posture is solid but could be improved by adding explicit security headers and publishing incident response information. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, although the website content and certifications support legitimacy. Overall, the site demonstrates a mature digital presence with good compliance to privacy regulations and a strong focus on renewable energy services. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, verifying domain registration details, and maintaining regular security audits to ensure ongoing protection and trustworthiness.