Security Directory

E

Eclosia Group

eclosia.com

0

Eclosia Group is a large diversified conglomerate based in Mauritius, operating across six main sectors including Food, Commerce, Logistics, Business Services, Education, and Hotels & Leisure. The company positions itself among the top five Mauritian groups with a regional presence spanning over 10 countries. Their business model focuses on production, commerce, and service sectors with multiple subsidiaries under their umbrella. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern JavaScript libraries such as jQuery, GSAP, and Swiper for interactive content, alongside Google Analytics for user tracking. The site is mobile-optimized and uses HTTPS, indicating a secure connection. However, some security best practices such as security headers and explicit incident response policies are not evident. From a security perspective, the site shows a moderate security posture with HTTPS enabled and anonymized IP tracking in analytics. The absence of WHOIS registration data for the domain raises concerns about domain transparency and legitimacy, although the website content and business information appear credible. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy from a content and technical standpoint but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include adding explicit security policies, improving contact information visibility, and implementing vulnerability disclosure mechanisms.

F

FRCI

frci.net

0

FRCI is a Mauritius-based IT consultancy specializing in Microsoft technologies, digital transformation, and training services. The company positions itself as a trusted partner enabling business success through people and technology, serving clients across multiple continents. Their key offerings include Microsoft licensing, project delivery, change management, technical support, business and digital solutions, and comprehensive IT training programs. The website reflects a professional and modern digital presence with clear navigation and relevant content targeting business clients seeking IT expertise. Technically, the website is built on the Umbraco CMS platform and leverages modern JavaScript libraries such as Swiper.js, Fancybox, GSAP, and jQuery. It uses Google Fonts and integrates Google Analytics for visitor tracking. The site is mobile-optimized with good design quality and user experience, though accessibility features are basic. The presence of a privacy policy is noted, but cookie consent mechanisms and detailed security policies are lacking. From a security perspective, the site uses HTTPS and employs email obfuscation to protect contact information. However, no explicit security headers were detected in the HTML content, and there is no published incident response or vulnerability disclosure information. The WHOIS data for the domain is missing or indicates the domain may be unregistered or expired, which raises concerns about domain legitimacy despite the professional website content. Overall, the website demonstrates a solid business and technical foundation but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

F

Freight and Transit Company Limited (FTL)

ftl.mu

0

Freight and Transit Company Limited (FTL) is a well-established logistics service provider founded in 1994, operating primarily in Mauritius, Madagascar, and South Africa. The company offers a comprehensive range of logistics services including air and sea freight, customs clearing, warehousing, project cargo management, and handling of perishable and dangerous cargo. Their website reflects a professional and consistent brand image, targeting businesses requiring reliable logistics solutions in the Indian Ocean and African regions. Technically, the website is built on Drupal 9 and incorporates modern web technologies such as Google Analytics, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks some security headers and explicit security policies. The WHOIS data is unavailable due to privacy protection, which is common but reduces transparency. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance and security documentation.

R

Rockjumper Birding Tours

rockjumperbirding.com

0

Rockjumper Birding Tours operates a specialized bird-watching adventure tour business targeting nature enthusiasts and bird watchers worldwide. The company positions itself as a niche leader offering global bird safaris and adventure travel experiences. The website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Trustpilot integration, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and relevant content for its audience. Security posture is adequate with HTTPS and DigiCert SSL certification, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and trust signals suggest a legitimate business presence. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance documentation.

T

Trade and Development Bank

tdbgroup.org

0

Trade and Development Bank (TDB) is a well-established multilateral development financial institution founded in 1985, focusing on advancing sustainable regional growth and integration in Eastern and Southern Africa. The bank offers a range of financial services including trade finance, project and infrastructure finance, asset management, and environmental and social management systems. It holds a strong market position supported by multiple international awards and recognitions, targeting governments, corporates, investors, and development partners. The website reflects a professional and comprehensive digital presence with detailed business and investor information.

A

African Network Information Centre

afrinic.net

0

AFRINIC is the Regional Internet Registry (RIR) for Africa, responsible for the allocation and management of Internet number resources including IPv4, IPv6, and ASNs. Established in 1999, AFRINIC serves a critical role in supporting the African internet community, including ISPs, network operators, governments, and other stakeholders. The organization offers a range of services such as resource management, DNS support, routing security, training, and policy development, positioning itself as a key infrastructure entity in the African internet ecosystem. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and Helix3, incorporating various third-party libraries such as jQuery and Font Awesome. It integrates analytics tools including Google Analytics and Matomo, and employs a comprehensive cookie consent mechanism via OneTrust, demonstrating a mature digital presence. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, AFRINIC enforces HTTPS and demonstrates good security practices including the use of DNSSEC and RPKI programs. However, explicit security headers are not fully confirmed, and no dedicated security policy or incident response contacts are published, indicating areas for improvement. The WHOIS data is consistent with the organization's identity and history, reinforcing trustworthiness. Overall, AFRINIC's website reflects a professional, credible, and secure platform aligned with its mission. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user experience.

The website rubric.mu currently serves a security verification page that blocks direct access to its content, employing Google Invisible reCAPTCHA as a bot protection mechanism. This indicates the presence of a Web Application Firewall (WAF) or similar security layer that restricts automated or suspicious traffic. Due to this blocking, no substantive business content, contact information, or policies are accessible for detailed analysis. The domain is registered in Mauritius since 2016 with a stable registration status, suggesting legitimate ownership and operational history. However, the lack of DNSSEC and absence of visible security headers or privacy policies on the accessible page limit the assessment of its security posture and compliance maturity. The technical stack includes Bootstrap 5.3.3 and Google reCAPTCHA, reflecting some modern web technologies, but the overall user experience and content quality are poor due to the blocking mechanism.

Constance Hotels & Resorts operates a professional and visually rich website showcasing luxury hospitality services across Indian Ocean destinations including Mauritius, Seychelles, Maldives, Madagascar, and Rodrigues. The brand targets affluent travelers seeking exclusive island experiences, offering accommodations, events, golf, spa, and wedding services. The website is built on modern technologies including Umbraco CMS, JavaScript libraries like Swiper and Flatpickr, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The absence of WHOIS data for the domain is a notable gap, potentially due to privacy protection, which slightly reduces business credibility. Overall, the site is professional, user-friendly, and compliant with GDPR, supporting a high trustworthiness rating.