Security Directory

V

videezy

videezy.com

59

Videezy is an online platform providing free and premium stock video footage, 4K videos, and After Effects templates targeted at videographers and content creators. The site operates a freemium business model, offering a community-driven resource for video content. The platform is well-branded and professionally designed, with a consistent user experience and clear navigation. Technically, the website employs modern JavaScript libraries, analytics tools, and monitoring services, indicating a mature digital infrastructure. However, some technical aspects such as security headers and privacy policies are lacking or not detected in the provided content. The security posture is moderate with HTTPS enforced and CSRF protections, but missing some best practices and incident response information. Overall, the website is safe for general audiences and maintains a moderate trust level, though the absence of WHOIS registration data reduces domain transparency and trustworthiness.

The website smartwings.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to the site's content. This prevents extraction of business, contact, or policy information from the site. The domain is registered since 2003 with a reputable registrar and uses Cloudflare for DNS and security services. However, no privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions accessible. The technical infrastructure relies on Cloudflare's security and CDN services, but the lack of accessible content limits the ability to assess digital maturity or user experience. Security posture is partially observable through the use of Cloudflare's WAF and Turnstile challenge, but no additional security headers or policies are evident. Overall, the site appears legitimate based on domain age and registration data, but the blocking mechanism significantly limits analysis and lowers the trust and quality scores.

N

NH HOTEL GROUP, S.A.

nh-collection.com

77

NH Collection Hotels, operated by NH HOTEL GROUP, S.A., is a large international hospitality brand offering premium hotel accommodations across more than 100 hotels in 24 countries. The website targets travelers and business customers seeking quality lodging in major cities such as Madrid, Milan, and Barcelona. The business model focuses on direct online bookings, reservation management, and customer loyalty programs. The brand maintains consistent and professional digital presence with multilingual support and clear navigation.

V

Vinofol, s.r.o.

vinofol.cz

52

Vinofol, s.r.o. is a well-established family winery based in the Czech Republic, operating since 1992. The company specializes in producing and selling high-quality wines from the Mikulov and Novosedly regions, leveraging modern technology and traditional winemaking methods. Their market position is strong within the Czech wine retail sector, supported by a broad product range, including award-winning wines, and a multi-channel sales approach via e-shop and physical vinoték stores. The website reflects a mature digital presence with integrated marketing and analytics tools, providing a professional user experience and clear business information. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content. The site targets adult consumers, implementing age verification due to alcohol sales regulations.

L

LED MULTIMEDIA s.r.o.

ledmultimedia.cz

47

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

TCL

tcl.com

70

TCL is a global technology company specializing in consumer electronics including TVs, mobile devices, and home appliances. The Finnish localized website showcases a broad product portfolio with clear navigation and professional branding, targeting general consumers interested in innovative technology products. The site is built on Adobe Experience Manager CMS and hosted likely on AWS infrastructure, utilizing modern JavaScript libraries and Google Tag Manager for analytics. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. The absence of WHOIS data reduces transparency but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and providing direct contact information to improve trust and compliance.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for European football fans, stakeholders, and media, providing news, live scores, video content, and detailed information about UEFA's competitions and initiatives. It holds a strong market position as the authoritative source for European football, supported by consistent branding and extensive content offerings. Technically, the site employs modern web technologies including React, Google Analytics, and Microsoft Application Insights, ensuring a fast, responsive, and accessible user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though the absence of publicly available WHOIS data limits full domain registration verification. Overall, UEFA.com demonstrates a mature digital infrastructure with strong privacy compliance and business credibility, making it a trusted resource in the sports domain.

Č

Český ráj outdoor s.r.o.

sportparadise.sk

71

Český ráj outdoor s.r.o. operates a well-established e-commerce platform specializing in outdoor equipment such as cycling, hiking, camping, and climbing gear. With over 30 years of market presence, the company maintains a strong brand reputation supported by a large physical store and a comprehensive online catalog. The website is professionally designed, localized in Slovak, and offers a seamless user experience with clear navigation and rich content including customer reviews and blog articles. Technically, the site uses a proprietary e-commerce CMS (BSSHOP) with modern JavaScript frameworks and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

T

the new botanist

thenewbotanist.com

59

The New Botanist is a French ecological gardening initiative focused on promoting biodiversity by offering seed kits of local wildflowers to create pollinator refuges. The website is hosted on Squarespace, leveraging standard web technologies and security features such as HTTPS and HSTS. While the site is well-designed, mobile-optimized, and provides relevant content for environmentally conscious gardeners, it lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate small business. Security posture is strong with HTTPS and reCAPTCHA usage, but improvements in privacy compliance and contact transparency are recommended.

M

MK software, s.r.o.

mkweb.cz

47

MK software, s.r.o. is a Czech-based small technology company specializing in custom e-commerce solutions, web design, and bespoke software development primarily targeting B2B and B2C clients. The company offers tailored internet shops, CMS-based websites, and integrated information systems with a focus on SEO and online marketing services. Their market position is supported by multiple client references and a partnership with ESET antivirus solutions. Technically, the website is built on standard web technologies including HTML, CSS, JavaScript, PHP, and SQL, with a custom CMS implied. The site demonstrates good content quality and SEO optimization but lacks modern security practices such as HTTPS enforcement and security headers. Privacy compliance is minimal, with no explicit privacy or terms of service pages found, though a cookie consent mechanism is implemented. The absence of WHOIS data limits domain legitimacy verification, but the website content and client references suggest a legitimate business presence. Overall, the site scores moderately on AI evaluation with room for improvement in security and privacy compliance.

K

Koalice proti palmovému oleji

stoppalmovemuoleji.cz

44

Koalice proti palmovému oleji is a Czech non-profit coalition established in 2013, dedicated to reducing global palm oil consumption and promoting local fat alternatives. The organization operates as an advocacy and educational platform, providing resources such as petitions, informational materials, event calendars, and community engagement opportunities. Their market position is solid within the Czech environmental NGO sector, supported by a network of 94 organizations and 141 members. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery, and integrates analytics tools like Google Analytics and Smartlook. However, the use of multiple jQuery versions and lack of visible security headers indicate areas for improvement. Security posture is moderate with no critical vulnerabilities detected but lacking advanced protections and compliance mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

T

Terén

jasuteren.cz

45

Terén is a Czech cultural platform dedicated to contemporary live art and new forms of audience engagement, operating primarily in the Czech Republic. Founded in 2019, it organizes performative art events, artistic projects, and open calls for artists, supported by the Centrum experimentálního divadla (CED) Brno. The website serves as an information hub for events, projects, and newsletters targeting a general audience interested in the arts. Technically, the site employs modern JavaScript libraries such as jQuery, GreenSock, and ScrollMagic, with asynchronous loading of Google Analytics and Tag Manager scripts, indicating a moderate level of digital maturity. Hosting and domain registration are consistent with the Czech location and cultural focus, enhancing trustworthiness. Security posture is adequate with HTTPS enforced, but lacks security headers and visible privacy or cookie policies, representing compliance and security improvement opportunities. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

D

Divadlo Husa na provázku

provazek.cz

62

Divadlo Husa na provázku is a well-established cultural theatre organization based in Brno, Czech Republic, with a history dating back to 1967. The institution focuses on contemporary theatrical performances and cultural projects, serving a general audience interested in arts and culture. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and privacy policy documentation are missing. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong partner ecosystem and content quality.

M

Métropole Européenne de Lille

lillemetropole.fr

64

Métropole Européenne de Lille (MEL) is a public metropolitan government entity serving 95 communes in the Lille region of France, with a population of approximately 1.2 million residents. The website serves as an official portal providing information and services related to urban planning, waste management, transportation, culture, economic development, and environmental sustainability. The MEL positions itself as a key regional authority with a comprehensive service offering to residents, businesses, and professionals. Technically, the website is built on Drupal 10, leveraging modern web technologies and providing a responsive, accessible user experience. The site includes cookie consent mechanisms and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and well-aligned with the public institution it represents.

The domain www.paris-saclay.com currently serves a security challenge page indicating anti-DDoS flood protection and firewall measures, effectively blocking normal access to website content. No business-related content, contact information, or policies are available, making it impossible to assess the company's operations or services. The domain WHOIS data is missing or unregistered, further reducing trust and legitimacy. Technically, the site uses minimal JavaScript and Google Fonts but lacks modern CMS or frameworks. Security posture is weak due to absence of HTTPS and security headers, although the presence of a WAF indicates some level of protection. Overall, the site is inaccessible for meaningful analysis and scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

G

Gouvernement Princier de Monaco

gouv.mc

67

The website www.gouv.mc is the official online portal of the Gouvernement Princier de Monaco, serving as the primary digital gateway for government information, public services, and news related to the Principality of Monaco. It targets a broad audience including citizens, residents, businesses, tourists, and international partners. The portal provides comprehensive access to government departments, legislative information, administrative procedures, and cultural and tourism content. Technically, the site employs modern JavaScript libraries and analytics tools such as Piwik (Matomo), with a custom or proprietary CMS likely used for content management. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and authoritative, consistent with its role as a government portal.

A

ABMI Engineering

abmi-engineering.com

68

ABMI Engineering is a well-established French engineering company founded in 2002, specializing in multiple industrial sectors including nuclear, rail, aerospace, health, and manufacturing. The company offers a broad range of engineering services such as design, industrialization, supply chain management, robotics, and IoT solutions. Their market position is supported by a diversified sector presence and partnerships with major industry players. Technically, the website is built on a modern Next.js framework, optimized for performance and mobile responsiveness, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website projects a professional and trustworthy image with strong business credibility and technical maturity.

C

Commune d'Écouché-les-Vallées

ecouchelesvallees.fr

9

The website www.ecouchelesvallees.fr serves as the official municipal portal for the Commune d'Écouché-les-Vallées in France. It provides residents and visitors with access to local government information, community services, event calendars, and administrative resources. The site is designed primarily for local citizens and stakeholders interested in municipal affairs. Technically, the site employs legacy JavaScript libraries such as jQuery 1.7.0 and uses CSS for layout and styling. It includes interactive elements like image sliders and accessibility tools, though some scripts are outdated and may pose security risks. Security posture is moderate; HTTPS is implied but no advanced security headers were detected, and the use of outdated libraries suggests potential vulnerabilities. Privacy compliance is limited, with no explicit privacy or terms of service pages found, though a cookie consent mechanism is present. WHOIS data is unavailable publicly due to AFNIC policies for .fr domains, but the domain appears legitimate and consistent with municipal use. Overall, the site is functional and trustworthy for its purpose but would benefit from modernization and enhanced security and privacy practices.

M

meetnlearn s.r.o.

meetnlearn.hr

10

meet'n'learn is an educational platform founded in 2021, focused on connecting students with verified tutors for individual lessons in Croatia and other European countries. The platform offers both online and in-person tutoring, free study question support, and a transparent review system to enhance trust. The business targets students and instructors, providing a user-friendly interface with modern search and matching capabilities. Technically, the site uses React, Bootstrap, and integrates Google and Facebook analytics, hosted likely via Websupport. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the platform demonstrates good digital maturity and a solid market position in the regional education sector.

The website www.ekalendar.cz serves as a product catalog showcasing a wide range of wall calendars and related products for the year 2026. It primarily functions as a partner demonstration platform, explicitly directing users to the partner site www.helma365.eu for actual purchases. The site targets partners and customers interested in calendar products, offering a well-organized catalog with clear navigation and product categorization. The business model is focused on product showcasing rather than direct e-commerce. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript, and popular libraries such as Lightbox2 and FontAwesome. Google Analytics is integrated for visitor tracking, with consent mechanisms in place. The site demonstrates good mobile responsiveness and basic SEO practices, though accessibility features are limited. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, but no explicit security headers were detected in the provided data. The absence of a privacy policy and terms of service pages indicates gaps in compliance and transparency. No contact information or incident response channels are provided, limiting user trust and support options. The WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about registration transparency. Overall, the website presents a professional and functional catalog experience but requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and security posture.

M

Mairie de Fontenilles

ville-fontenilles.fr

56

The website www.ville-fontenilles.fr serves as the official online presence for the municipal government of Fontenilles, France. It provides residents and visitors with comprehensive information about local events, administrative procedures, education, cultural activities, and social services. The site is positioned as a trusted source of municipal information and public services for the local community. Technically, the site is built on WordPress, utilizing popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, with a responsive design and moderate performance. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a cookie consent mechanism, although explicit security headers and privacy policies are not fully implemented or visible. Overall, the site demonstrates a good security posture and professional presentation, but could improve transparency and compliance by publishing privacy and terms of service documents and providing clear contact information for security and data protection matters.

The website restosducoeur31.org is currently a parked domain with no active business content. It displays a domain sale banner in Finnish and loads an iframe pointing to an unrelated external URL. There is no privacy policy, cookie policy, terms of service, or contact information available on the site. The WHOIS data is unavailable due to a malformed query and privacy protection, which limits transparency and trust. Technically, the site uses basic JavaScript and iframe embedding, hosted behind AWS Cloudfront CDN, but lacks HTTPS enforcement and security headers. The presence of multiple suspicious external domains related to ads and tracking further reduces trustworthiness. Overall, the site does not represent an active or legitimate business presence.

A

Amicale des Élèves de l'INSA Toulouse

amicale-insat.fr

45

Amicale des Élèves de l'INSA Toulouse is a student association dedicated to supporting students at INSA Toulouse by providing various services and managing campus life activities. The organization operates as a non-profit entity focused on enhancing the student experience through events, clubs, and associative management. The website reflects a small but active local presence with a clear focus on its target audience of INSA Toulouse students. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Tabulator.js library for interactive tables. Hosting is provided by reputable providers Scaleway and o2switch. The site is mobile responsive and well-structured, though some SEO and accessibility features could be improved. No CMS or complex frameworks were detected. From a security perspective, the site uses HTTPS and includes some basic CSRF protection meta tags but lacks explicit security headers and publicly available security policies. There is no evidence of vulnerability disclosure or incident response information. Privacy and cookie policies are missing, which represents a compliance gap with GDPR requirements. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy with no adult or explicit content. The domain registration data is consistent with the organization's profile, showing a long-established presence since 2006. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the security posture and trustworthiness of the site.

L

Loire Atlantique Développement

tourisme-loireatlantique.com

57

Loire Atlantique Développement operates the official regional tourism website for Loire-Atlantique, France, providing comprehensive information on local activities, cultural heritage, natural sites, and seasonal events. The website targets tourists and local visitors seeking authentic experiences, accessibility information, and sustainable travel options. It holds a strong market position as the authoritative source for tourism in the region, supported by consistent branding and high-quality content. Technically, the website is built on WordPress, leveraging modern web technologies including JavaScript, SVG graphics, and responsive design. Hosting is provided by Nuxit, with domain registration dating back to 2015, indicating an established digital presence. The site demonstrates good SEO and accessibility practices, with structured data and mobile optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers, and does not publish a security policy or incident response information. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and user-friendly, with a solid security posture for its business type. Strategic improvements include enabling DNSSEC, adding security headers, and publishing security and vulnerability disclosure policies to enhance trust and resilience.

C

CIC Market Solutions

cic-marketsolutions.eu

72

CIC Market Solutions is a specialized financial services division of Crédit Mutuel Alliance Fédérale, providing market solutions and advisory services to corporate clients and financial institutions. With a workforce of approximately 200 employees and multiple trading rooms across France and internationally, the company serves over 6,000 enterprises and 600 financial institutions. Their offerings include market financing, treasury placement, corporate brokerage, and financial communication services, positioning them as a significant player in the French financial services sector. Technically, the website employs modern web technologies including jQuery and JavaScript, with responsive design and good SEO practices. The site is served over HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, accessibility compliance is currently poor, and some security headers are not explicitly detected, indicating room for improvement in security hardening. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks explicit security policies, incident response contacts, and detailed data protection officer information. The absence of WHOIS registrant data is due to EURid privacy protection, which is common and justified for financial entities. No critical vulnerabilities or suspicious patterns were detected. Overall, CIC Market Solutions presents a professional and trustworthy online presence consistent with its business profile. Strategic recommendations include enhancing accessibility, publishing explicit security and privacy policies, and improving security header implementation to strengthen the security posture and compliance.

P

Pollutec

pollutec.com

67

Pollutec is an internationally recognized trade show and conference organizer specializing in environmental and energy solutions for industry, cities, and territories. The website serves as a professional platform to promote the event, provide information on exhibitors, sessions, and networking opportunities. The site is well-structured, uses modern web technologies including React and Adobe Experience Manager, and integrates analytics and marketing tools such as Google Tag Manager and Adobe Helix RUM. Security posture is generally good with HTTPS and OAuth2 PKCE authentication, but lacks some security headers and explicit privacy and terms policies. WHOIS data is missing, which raises some concerns about domain registration transparency, though the association with Reed Exhibitions supports legitimacy. Overall, the site is professional, targeted at industry professionals, and provides a good user experience.

D

Dans Mon Eau

dansmoneau.fr

56

Dans Mon Eau is a French non-profit transparency platform focused on providing accessible, official data on chemical pollutants in tap water. It is a collaborative project by Générations Futures and Data For Good, aiming to inform the public and mobilize authorities for better water quality. The website offers an interactive map, educational content, and regularly updated official data. Technically, the site is built on WordPress, uses modern JavaScript libraries, and is hosted with Cloudflare CDN, ensuring good performance and security. The security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data shows an unusual future creation date, which slightly impacts trust but is mitigated by the association with reputable organizations. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a general audience interested in environmental health.

I

Irfan Skiljan

irfanview.com

47

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users. The website serves as the official homepage offering downloads, information, and support for the software. It positions itself as one of the most popular image viewers worldwide with a focus on simplicity, speed, and multi-language support. The business model is freeware for non-commercial use with options for donations and support. The website content is professionally presented with clear navigation and relevant partner links, targeting a general audience interested in image viewing and editing tools. Technically, the website uses standard HTML, CSS, and JavaScript without advanced frameworks or CMS. Hosting is provided by domainunion.de, and the site offers multiple download mirrors. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the website's apparent long history and professional presentation. No forms collect sensitive data, reducing immediate risk, but the absence of HTTPS verification and security policies is a gap. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is moderate with recommendations to improve domain registration transparency, implement HTTPS and security headers, add privacy and cookie policies, and publish security incident response information. These steps would enhance trust and compliance, aligning the site with modern security and privacy standards.

The website at aptum.com is currently inaccessible due to a Vercel Security Checkpoint page that blocks access to the actual content. This security mechanism prevents analysis of the site's business, security, and compliance posture. The domain is registered since 2002 with GoDaddy and uses Cloudflare DNS, indicating a legitimate and established domain. However, no business or contact information, privacy policies, or security headers are visible due to the content block. The site appears to be hosted on the Vercel platform with Astro framework usage indicated by scripts. Without access to the real content, the security posture cannot be fully assessed, but the presence of a security checkpoint suggests some level of protection against automated or malicious access. Overall, the site is currently not analyzable beyond domain registration and hosting details.

A

Action Media

actionmedia.fr

54

Action Media is a French communication agency specializing in the automotive aftermarket and building sectors, established since 1973. The company provides strategic communication and production services to major players in the automotive industry both domestically and internationally. The website reflects a professional and consistent brand presence, targeting automotive industry professionals and distributors. Technically, the site is built on the Wix platform using modern web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though some security headers and privacy compliance elements are missing. Overall, the site appears legitimate and trustworthy, though improvements in privacy and security policies are recommended.

D

DIGEEK

digeek.fr

48

DIGEEK is a small digital communication agency based in Toulouse, France, specializing in graphic design, website and mobile application development, video production, and digital marketing. The company targets businesses, startups, institutions, and associations primarily in the Toulouse region. Their website demonstrates a professional and consistent brand image supported by strong client testimonials and active social media engagement. Technically, the site is built on WordPress with modern technologies and performance optimizations, ensuring fast loading and excellent mobile responsiveness. Security posture is good with HTTPS and performance plugins, though some security headers and explicit incident response information are missing. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

T

Typeform

videoask.it

55

VideoAsk by Typeform is a technology-driven SaaS platform specializing in interactive video communication tools designed to enhance business conversations and relationships at scale. The platform offers services such as video funnels, AI-powered chatbots, multimedia messaging, and video forms, targeting businesses in recruitment, sales, marketing, and customer support sectors. The website demonstrates a strong market position with over 10,000 companies as customers and consistent branding aligned with its parent company, Typeform. Technically, the website employs a modern tech stack including React and Next.js, with integrations for cookie consent (OneTrust), A/B testing (Optimizely), and analytics (Google Tag Manager). The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. The security posture is strong overall, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Overall, VideoAsk presents a professional, secure, and privacy-conscious platform with a solid business foundation. Strategic recommendations include publishing detailed security policies, providing direct security contacts, and enhancing transparency through vulnerability disclosure programs to further strengthen trust and compliance.

OnlineStrat.fr is a French digital marketing and internet strategy website managed by David Chelly. It provides news, guides, directories, and resources aimed at internet professionals, marketers, startups, and beginners interested in web technologies and e-business. The site features a variety of content including articles on SEO, e-commerce, startups, and digital tools, positioning itself as a niche resource in the French-speaking digital marketing community. Technically, the website uses standard HTML, CSS, and JavaScript with legacy Adobe Spry framework components and integrates Google services such as Analytics and Custom Search Engine. While the site is accessible and content-rich, it lacks modern security headers and explicit GDPR cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is missing, which reduces transparency and trust but the active and professional nature of the site partially mitigates this concern. Overall, the site is moderately mature technically and business-wise, with room to enhance security and privacy compliance.

T

Table de massage : usage, types, avantages, prix

tabledemassage.fr

38

The website tabledemassage.fr is a newly registered French informational site focused on massage tables, their usage, types, advantages, and pricing. It targets professionals in massage therapy, physiotherapy, wellness centers, and individuals interested in massage equipment. The site provides detailed, well-structured content but lacks business contact information and formal policies. Technically, it uses a modern frontend stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization. However, no CMS or backend technologies are detected, and performance is moderate. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and contact details for incident response. The domain is very new (registered in late 2024) but WHOIS data is transparent and consistent with the website content, indicating legitimacy. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences with no adult or explicit material. Overall, the website scores moderately on content quality and business credibility but scores low on privacy compliance and security posture due to missing policies and headers. There are no critical security issues detected, but improvements are needed to enhance trust and compliance. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies, providing clear contact information, and enhancing security headers to improve the security posture and user trust.

F

Fullstack

fstck.co

59

Fullstack is a Paris-based digital agency specializing in comprehensive digital solutions including web design, development, e-commerce, mobile applications, and UX/UI design. Established in 2014, the agency serves a diverse clientele including major brands such as Disneyland Paris and EDF, positioning itself as a trusted partner in the French digital market. The website reflects a professional and user-centric approach with detailed service offerings and client testimonials. Technically, the site employs modern web technologies and privacy-conscious analytics, delivering fast and mobile-optimized experiences. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and cookie consent mechanisms indicates room for compliance improvements. Overall, Fullstack presents a credible and mature digital presence aligned with its business claims.

A

Ankorstore

ankorstore.com

71

Ankorstore operates as a wholesale marketplace connecting over 25,000 unique brands with retailers across Europe. The platform focuses on providing a curated selection of high-quality brands, exclusive purchasing conditions, and simplified distribution to support a thriving retailer community. The website's market position is strong within the European wholesale retail sector, emphasizing brand discovery and streamlined wholesale purchasing. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, Braze, and Amplitude, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and GDPR-compliant consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given its professional presentation and compliance posture. Overall, Ankorstore presents a secure, professional, and user-friendly platform for wholesale retail operations.

W

WSN Community

wsn.community

57

The website at https://wsn.community/fr/pro/login is currently inaccessible beyond a minimal loading spinner, indicating that a Web Application Firewall (WAF) or other security mechanism is blocking full content access. Due to this, no meaningful business information, contact details, or policies are available for analysis. The site uses modern JavaScript frameworks such as Vue.js and Vuetify, but no metadata or structured data is present. The WHOIS data is restricted and does not provide registrant or domain creation details, limiting trust assessment. Overall, the site appears to be in a blocked or pre-load state, preventing comprehensive evaluation.

H

HYVOR

hyvor.community

67

HYVOR Community is a technology-focused online forum dedicated to discussions around HYVOR products. It serves as a platform for users and developers to engage in product support, feedback, and announcements. The site leverages the Discourse platform, a modern and secure community software, ensuring a robust technical infrastructure. The website demonstrates good digital maturity with fast performance, mobile optimization, and SEO-friendly metadata. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with a privacy policy and terms of service present, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of HYVOR product users and developers.

FortGuard, a product of HYVOR based in France, offers a state-of-the-art spam detection API designed for developers and website owners seeking to prevent spam content effectively. The service includes advanced features such as human-like accuracy through multiple large language models, language detection, sentiment analysis, and IP geolocation capabilities. The availability of a WordPress plugin facilitates easy integration for WordPress websites, enhancing its accessibility and market reach. The business model is subscription-based with a free trial, targeting a niche market in spam detection and content moderation services. Technically, the website is built using modern JavaScript frameworks, specifically Svelte, and is hosted on Cloudflare infrastructure, ensuring fast performance and good mobile optimization. The site demonstrates good SEO practices and basic accessibility features. The integration of Crisp Chat indicates a minimal level of user interaction tracking, aligned with privacy-first principles. However, some security best practices such as DNSSEC and security headers could be improved. From a security perspective, the website enforces HTTPS and maintains a privacy-first approach by not storing or sharing user data. The domain registration details are consistent with the business claims, enhancing trustworthiness. There is no evidence of security policy documentation or incident response contacts, which could be areas for future enhancement. No critical vulnerabilities or suspicious content were detected. Overall, FortGuard presents a professional, secure, and privacy-conscious service with a solid technical foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

L

Letní kina v ČR - Letňáky.cz

letnaky.cz

54

Letnaky.cz is a Czech Republic-based online portal providing the largest comprehensive overview of summer outdoor cinemas across the country, listing 494 venues with detailed programming information. The website targets cinema enthusiasts and the general public interested in outdoor cultural events. The business model is informational, focusing on content aggregation and event promotion without direct transactional services. The domain has been active since 2015, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Facebook SDK for social media features. Hosting is provided by a Czech hosting provider (Forpsi). The site shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data, but accessibility features are minimal. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. There are no forms or data collection mechanisms on the homepage, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, Letnaky.cz is a trustworthy and legitimate informational website with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

A

Alpha Networks

kinow.com

66

Alpha Networks is a technology company specializing in video content distribution and monetization platforms. They provide modular and advanced OTT software solutions tailored for media, sports, and content producers. The company has a strong market presence with over 6 million TV fans served and more than 110 platforms powered worldwide. Their product suite includes Tucano, Gecko, and Bee, each targeting different video platform needs. The website demonstrates a mature digital infrastructure using modern frameworks like Nuxt.js and integrates multimedia content effectively. Security posture is good with HTTPS and secure forms, though some security headers and incident response details could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the company presents a professional and trustworthy online presence suitable for B2B clients in the media and telecommunications sectors.

C

GoGoCarto - Des cartes à GoGo

carte.bio

46

GoGoCarto is a French-language web platform designed to enable users to create and share map projects easily. It targets a general audience interested in mapping and geographic data visualization, offering open source code access and documentation to support user engagement. The platform positions itself as a niche technology tool with a focus on community-driven map creation. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and FontAwesome icons, with moderate performance and good mobile responsiveness. However, the site lacks advanced frameworks or CMS detection and does not show evidence of strong hosting or performance optimization. From a security perspective, the site currently exhibits minimal security posture with no detected security headers or explicit HTTPS confirmation in the provided data. There are no visible privacy or cookie policies, nor contact or incident response information, which limits compliance and transparency. The WHOIS data is privacy protected or unavailable, which is common for small projects but reduces trust signals. Overall, the site is safe for general audiences and provides a functional, well-branded user experience but would benefit from enhanced security and compliance measures.

S

Staffbase

staffbase.com

64

Staffbase is a well-established enterprise technology company founded in 2003, specializing in AI-native employee experience and internal communication platforms. Their solutions include intranet, employee apps, email, SMS, and digital signage, targeting large organizations globally. The company positions itself as a leader in employee communications with over 2000 customers worldwide. Technically, the website is built on modern frameworks such as Symfony with advanced JavaScript components and is hosted on Amazon infrastructure with Cloudflare protection. The site demonstrates excellent design, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though DNSSEC is not enabled. Privacy compliance is robust with GDPR-aligned cookie management and a comprehensive privacy policy. Business credibility is high, supported by ISO 27001 certification and transparent corporate information. Overall, the website reflects a mature digital presence with a strong focus on security and privacy.

B

Bitly, Inc.

onlyo.co

60

Bitly, Inc. is a well-established technology company specializing in branded link management and URL shortening services. Founded in 2003, Bitly serves a broad business and marketing audience, providing tools to customize, share, and track links effectively. The company holds a strong market position as a trusted provider for many pioneering brands worldwide. Technically, the website is built on WordPress with modern JavaScript libraries and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, domain locking, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit incident response contacts are published. Overall, the website is professional, secure, and compliant with privacy regulations, supporting Bitly's credibility and trustworthiness in the market.

S

SoftNews NET SRL

softpedia.com

77

Softpedia is a well-established technology company operating a large-scale software download and review platform since 2001. The website offers a comprehensive library of over one million software applications across multiple platforms including Windows, Mac, Linux, and mobile devices. It also provides technology news and reviews, targeting a broad general audience interested in software and technology. The company operates under the legal entity SoftNews NET SRL and maintains consistent branding and a professional online presence. Technically, the website employs modern web technologies including Google Analytics, Google Adsense, and a consent management platform to comply with GDPR regulations. Hosting appears to be provided by Aptum, and the site uses custom fonts and JavaScript for enhanced user experience. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its professional presentation and market presence. Overall, Softpedia demonstrates a mature digital infrastructure with good privacy and security practices, serving a large user base with relevant content and services.

S

Socleo

panierlocal.org

58

Socleo is a French technology company specializing in SaaS software solutions dedicated to simplifying management tasks for farmers, processors, and distributors involved in local product short circuits. Established in 2006, it holds a pioneer position in its niche market with a strong user base across France and Belgium. The website clearly communicates its business model, subscription pricing, and personalized onboarding services, supported by numerous customer testimonials and partner endorsements. Technically, the site employs modern JavaScript frameworks like Vue.js and CKEditor, ensuring a responsive and performant user experience optimized for mobile devices. Security posture is solid with HTTPS enforcement and CSRF protections, though it lacks some advanced security headers and formal security policies. Privacy compliance is evident with accessible privacy and cookie policies, and GDPR adherence is implied. Overall, the site is professional, trustworthy, and well-structured, with no signs of blocking or WAF interference.

Verizon Media, operating under the Yahoo brand, is a major global media and technology company providing digital content, advertising, and analytics services. The analyzed page is a Finnish language consent management interface designed to comply with GDPR and related privacy regulations, enabling users to accept or reject cookie usage and data processing by Verizon Media and its partners. The company maintains a strong market position with a portfolio of well-known media brands and a business model centered on advertising and digital media services. Technically, the website employs modern web technologies including JavaScript and CSS, with a focus on user consent and privacy compliance. Security posture is moderate with HTTPS usage evident, though explicit security headers and policies are not visible on this page. Overall, the site demonstrates good privacy compliance and business credibility, with no signs of blocking or WAF interference.

SDM Communication operates the website monsite.link, providing affordable, responsive web design and hosting solutions primarily targeting small businesses such as TPEs, PMEs, and auto-entrepreneurs in France. Their offerings include OnePage and OneScreen websites, microblogging options, and social media page creation, supported by hosting and maintenance services. The company positions itself as a cost-effective, professional web presence provider with a focus on simplicity and mobile responsiveness. The website content is well-structured, professionally designed, and localized in French, reflecting a clear understanding of their target market.

The website www.jadopteunprojet.com/challenge is currently inaccessible due to a bot detection challenge page that blocks direct content access. This page is designed to verify human visitors and prevent automated access, likely implemented via a third-party service (BunkerWeb). Due to this, no meaningful business content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain returned no registration data, indicating either a privacy-protected registration or an unregistered domain, which raises concerns about legitimacy and trustworthiness. The technical infrastructure appears minimal with basic JavaScript and CSS used solely for the challenge page. No security headers or SSL configuration details are available from the provided data. Overall, the site’s security posture cannot be fully assessed, and the lack of accessible business information limits credibility assessment.

M

MACIF

macif.fr

60

MACIF is a major French mutual insurance company providing a wide range of insurance and financial services including auto, home, health insurance, credit, and life insurance. The website targets both individuals and professionals, offering online insurance quotes and comprehensive information about their products. The company maintains a strong market position in France with a large customer base and high customer satisfaction ratings. Technically, the website is built on a modern stack including Jahia CMS, uses Google Tag Manager for analytics, DataDome for bot protection, and OneTrust for cookie consent management. The site is well-optimized for mobile and accessibility, with excellent SEO practices and structured data implementation. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses bot protection services. However, explicit security policies and incident response contacts are not publicly available, and no vulnerability disclosure program is evident. The WHOIS data is not publicly accessible, likely due to privacy protection, which is justified given the nature of the business. Overall, MACIF's website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy platform for customers. Strategic improvements could include publishing explicit security and incident response policies and enhancing transparency around data protection officer contacts and data retention policies.