Security Directory

D

DIGEEK

digeek.fr

48

DIGEEK is a small digital communication agency based in Toulouse, France, specializing in graphic design, website and mobile application development, video production, and digital marketing. The company targets businesses, startups, institutions, and associations primarily in the Toulouse region. Their website demonstrates a professional and consistent brand image supported by strong client testimonials and active social media engagement. Technically, the site is built on WordPress with modern technologies and performance optimizations, ensuring fast loading and excellent mobile responsiveness. Security posture is good with HTTPS and performance plugins, though some security headers and explicit incident response information are missing. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

T

Typeform

videoask.it

55

VideoAsk by Typeform is a technology-driven SaaS platform specializing in interactive video communication tools designed to enhance business conversations and relationships at scale. The platform offers services such as video funnels, AI-powered chatbots, multimedia messaging, and video forms, targeting businesses in recruitment, sales, marketing, and customer support sectors. The website demonstrates a strong market position with over 10,000 companies as customers and consistent branding aligned with its parent company, Typeform. Technically, the website employs a modern tech stack including React and Next.js, with integrations for cookie consent (OneTrust), A/B testing (Optimizely), and analytics (Google Tag Manager). The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. The security posture is strong overall, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Overall, VideoAsk presents a professional, secure, and privacy-conscious platform with a solid business foundation. Strategic recommendations include publishing detailed security policies, providing direct security contacts, and enhancing transparency through vulnerability disclosure programs to further strengthen trust and compliance.

OnlineStrat.fr is a French digital marketing and internet strategy website managed by David Chelly. It provides news, guides, directories, and resources aimed at internet professionals, marketers, startups, and beginners interested in web technologies and e-business. The site features a variety of content including articles on SEO, e-commerce, startups, and digital tools, positioning itself as a niche resource in the French-speaking digital marketing community. Technically, the website uses standard HTML, CSS, and JavaScript with legacy Adobe Spry framework components and integrates Google services such as Analytics and Custom Search Engine. While the site is accessible and content-rich, it lacks modern security headers and explicit GDPR cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is missing, which reduces transparency and trust but the active and professional nature of the site partially mitigates this concern. Overall, the site is moderately mature technically and business-wise, with room to enhance security and privacy compliance.

T

Table de massage : usage, types, avantages, prix

tabledemassage.fr

38

The website tabledemassage.fr is a newly registered French informational site focused on massage tables, their usage, types, advantages, and pricing. It targets professionals in massage therapy, physiotherapy, wellness centers, and individuals interested in massage equipment. The site provides detailed, well-structured content but lacks business contact information and formal policies. Technically, it uses a modern frontend stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization. However, no CMS or backend technologies are detected, and performance is moderate. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and contact details for incident response. The domain is very new (registered in late 2024) but WHOIS data is transparent and consistent with the website content, indicating legitimacy. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences with no adult or explicit material. Overall, the website scores moderately on content quality and business credibility but scores low on privacy compliance and security posture due to missing policies and headers. There are no critical security issues detected, but improvements are needed to enhance trust and compliance. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies, providing clear contact information, and enhancing security headers to improve the security posture and user trust.

F

Fullstack

fstck.co

59

Fullstack is a Paris-based digital agency specializing in comprehensive digital solutions including web design, development, e-commerce, mobile applications, and UX/UI design. Established in 2014, the agency serves a diverse clientele including major brands such as Disneyland Paris and EDF, positioning itself as a trusted partner in the French digital market. The website reflects a professional and user-centric approach with detailed service offerings and client testimonials. Technically, the site employs modern web technologies and privacy-conscious analytics, delivering fast and mobile-optimized experiences. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and cookie consent mechanisms indicates room for compliance improvements. Overall, Fullstack presents a credible and mature digital presence aligned with its business claims.

A

Ankorstore

ankorstore.com

71

Ankorstore operates as a wholesale marketplace connecting over 25,000 unique brands with retailers across Europe. The platform focuses on providing a curated selection of high-quality brands, exclusive purchasing conditions, and simplified distribution to support a thriving retailer community. The website's market position is strong within the European wholesale retail sector, emphasizing brand discovery and streamlined wholesale purchasing. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, Braze, and Amplitude, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and GDPR-compliant consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given its professional presentation and compliance posture. Overall, Ankorstore presents a secure, professional, and user-friendly platform for wholesale retail operations.

W

WSN Community

wsn.community

57

The website at https://wsn.community/fr/pro/login is currently inaccessible beyond a minimal loading spinner, indicating that a Web Application Firewall (WAF) or other security mechanism is blocking full content access. Due to this, no meaningful business information, contact details, or policies are available for analysis. The site uses modern JavaScript frameworks such as Vue.js and Vuetify, but no metadata or structured data is present. The WHOIS data is restricted and does not provide registrant or domain creation details, limiting trust assessment. Overall, the site appears to be in a blocked or pre-load state, preventing comprehensive evaluation.

H

HYVOR

hyvor.community

67

HYVOR Community is a technology-focused online forum dedicated to discussions around HYVOR products. It serves as a platform for users and developers to engage in product support, feedback, and announcements. The site leverages the Discourse platform, a modern and secure community software, ensuring a robust technical infrastructure. The website demonstrates good digital maturity with fast performance, mobile optimization, and SEO-friendly metadata. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with a privacy policy and terms of service present, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of HYVOR product users and developers.

FortGuard, a product of HYVOR based in France, offers a state-of-the-art spam detection API designed for developers and website owners seeking to prevent spam content effectively. The service includes advanced features such as human-like accuracy through multiple large language models, language detection, sentiment analysis, and IP geolocation capabilities. The availability of a WordPress plugin facilitates easy integration for WordPress websites, enhancing its accessibility and market reach. The business model is subscription-based with a free trial, targeting a niche market in spam detection and content moderation services. Technically, the website is built using modern JavaScript frameworks, specifically Svelte, and is hosted on Cloudflare infrastructure, ensuring fast performance and good mobile optimization. The site demonstrates good SEO practices and basic accessibility features. The integration of Crisp Chat indicates a minimal level of user interaction tracking, aligned with privacy-first principles. However, some security best practices such as DNSSEC and security headers could be improved. From a security perspective, the website enforces HTTPS and maintains a privacy-first approach by not storing or sharing user data. The domain registration details are consistent with the business claims, enhancing trustworthiness. There is no evidence of security policy documentation or incident response contacts, which could be areas for future enhancement. No critical vulnerabilities or suspicious content were detected. Overall, FortGuard presents a professional, secure, and privacy-conscious service with a solid technical foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

L

Letní kina v ČR - Letňáky.cz

letnaky.cz

54

Letnaky.cz is a Czech Republic-based online portal providing the largest comprehensive overview of summer outdoor cinemas across the country, listing 494 venues with detailed programming information. The website targets cinema enthusiasts and the general public interested in outdoor cultural events. The business model is informational, focusing on content aggregation and event promotion without direct transactional services. The domain has been active since 2015, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Facebook SDK for social media features. Hosting is provided by a Czech hosting provider (Forpsi). The site shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data, but accessibility features are minimal. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. There are no forms or data collection mechanisms on the homepage, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, Letnaky.cz is a trustworthy and legitimate informational website with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

A

Alpha Networks

kinow.com

66

Alpha Networks is a technology company specializing in video content distribution and monetization platforms. They provide modular and advanced OTT software solutions tailored for media, sports, and content producers. The company has a strong market presence with over 6 million TV fans served and more than 110 platforms powered worldwide. Their product suite includes Tucano, Gecko, and Bee, each targeting different video platform needs. The website demonstrates a mature digital infrastructure using modern frameworks like Nuxt.js and integrates multimedia content effectively. Security posture is good with HTTPS and secure forms, though some security headers and incident response details could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the company presents a professional and trustworthy online presence suitable for B2B clients in the media and telecommunications sectors.

C

GoGoCarto - Des cartes à GoGo

carte.bio

46

GoGoCarto is a French-language web platform designed to enable users to create and share map projects easily. It targets a general audience interested in mapping and geographic data visualization, offering open source code access and documentation to support user engagement. The platform positions itself as a niche technology tool with a focus on community-driven map creation. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and FontAwesome icons, with moderate performance and good mobile responsiveness. However, the site lacks advanced frameworks or CMS detection and does not show evidence of strong hosting or performance optimization. From a security perspective, the site currently exhibits minimal security posture with no detected security headers or explicit HTTPS confirmation in the provided data. There are no visible privacy or cookie policies, nor contact or incident response information, which limits compliance and transparency. The WHOIS data is privacy protected or unavailable, which is common for small projects but reduces trust signals. Overall, the site is safe for general audiences and provides a functional, well-branded user experience but would benefit from enhanced security and compliance measures.

S

Staffbase

staffbase.com

64

Staffbase is a well-established enterprise technology company founded in 2003, specializing in AI-native employee experience and internal communication platforms. Their solutions include intranet, employee apps, email, SMS, and digital signage, targeting large organizations globally. The company positions itself as a leader in employee communications with over 2000 customers worldwide. Technically, the website is built on modern frameworks such as Symfony with advanced JavaScript components and is hosted on Amazon infrastructure with Cloudflare protection. The site demonstrates excellent design, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though DNSSEC is not enabled. Privacy compliance is robust with GDPR-aligned cookie management and a comprehensive privacy policy. Business credibility is high, supported by ISO 27001 certification and transparent corporate information. Overall, the website reflects a mature digital presence with a strong focus on security and privacy.

B

Bitly, Inc.

onlyo.co

60

Bitly, Inc. is a well-established technology company specializing in branded link management and URL shortening services. Founded in 2003, Bitly serves a broad business and marketing audience, providing tools to customize, share, and track links effectively. The company holds a strong market position as a trusted provider for many pioneering brands worldwide. Technically, the website is built on WordPress with modern JavaScript libraries and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, domain locking, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit incident response contacts are published. Overall, the website is professional, secure, and compliant with privacy regulations, supporting Bitly's credibility and trustworthiness in the market.

S

SoftNews NET SRL

softpedia.com

77

Softpedia is a well-established technology company operating a large-scale software download and review platform since 2001. The website offers a comprehensive library of over one million software applications across multiple platforms including Windows, Mac, Linux, and mobile devices. It also provides technology news and reviews, targeting a broad general audience interested in software and technology. The company operates under the legal entity SoftNews NET SRL and maintains consistent branding and a professional online presence. Technically, the website employs modern web technologies including Google Analytics, Google Adsense, and a consent management platform to comply with GDPR regulations. Hosting appears to be provided by Aptum, and the site uses custom fonts and JavaScript for enhanced user experience. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its professional presentation and market presence. Overall, Softpedia demonstrates a mature digital infrastructure with good privacy and security practices, serving a large user base with relevant content and services.

S

Socleo

panierlocal.org

58

Socleo is a French technology company specializing in SaaS software solutions dedicated to simplifying management tasks for farmers, processors, and distributors involved in local product short circuits. Established in 2006, it holds a pioneer position in its niche market with a strong user base across France and Belgium. The website clearly communicates its business model, subscription pricing, and personalized onboarding services, supported by numerous customer testimonials and partner endorsements. Technically, the site employs modern JavaScript frameworks like Vue.js and CKEditor, ensuring a responsive and performant user experience optimized for mobile devices. Security posture is solid with HTTPS enforcement and CSRF protections, though it lacks some advanced security headers and formal security policies. Privacy compliance is evident with accessible privacy and cookie policies, and GDPR adherence is implied. Overall, the site is professional, trustworthy, and well-structured, with no signs of blocking or WAF interference.

Verizon Media, operating under the Yahoo brand, is a major global media and technology company providing digital content, advertising, and analytics services. The analyzed page is a Finnish language consent management interface designed to comply with GDPR and related privacy regulations, enabling users to accept or reject cookie usage and data processing by Verizon Media and its partners. The company maintains a strong market position with a portfolio of well-known media brands and a business model centered on advertising and digital media services. Technically, the website employs modern web technologies including JavaScript and CSS, with a focus on user consent and privacy compliance. Security posture is moderate with HTTPS usage evident, though explicit security headers and policies are not visible on this page. Overall, the site demonstrates good privacy compliance and business credibility, with no signs of blocking or WAF interference.

SDM Communication operates the website monsite.link, providing affordable, responsive web design and hosting solutions primarily targeting small businesses such as TPEs, PMEs, and auto-entrepreneurs in France. Their offerings include OnePage and OneScreen websites, microblogging options, and social media page creation, supported by hosting and maintenance services. The company positions itself as a cost-effective, professional web presence provider with a focus on simplicity and mobile responsiveness. The website content is well-structured, professionally designed, and localized in French, reflecting a clear understanding of their target market.

The website www.jadopteunprojet.com/challenge is currently inaccessible due to a bot detection challenge page that blocks direct content access. This page is designed to verify human visitors and prevent automated access, likely implemented via a third-party service (BunkerWeb). Due to this, no meaningful business content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain returned no registration data, indicating either a privacy-protected registration or an unregistered domain, which raises concerns about legitimacy and trustworthiness. The technical infrastructure appears minimal with basic JavaScript and CSS used solely for the challenge page. No security headers or SSL configuration details are available from the provided data. Overall, the site’s security posture cannot be fully assessed, and the lack of accessible business information limits credibility assessment.

M

MACIF

macif.fr

60

MACIF is a major French mutual insurance company providing a wide range of insurance and financial services including auto, home, health insurance, credit, and life insurance. The website targets both individuals and professionals, offering online insurance quotes and comprehensive information about their products. The company maintains a strong market position in France with a large customer base and high customer satisfaction ratings. Technically, the website is built on a modern stack including Jahia CMS, uses Google Tag Manager for analytics, DataDome for bot protection, and OneTrust for cookie consent management. The site is well-optimized for mobile and accessibility, with excellent SEO practices and structured data implementation. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses bot protection services. However, explicit security policies and incident response contacts are not publicly available, and no vulnerability disclosure program is evident. The WHOIS data is not publicly accessible, likely due to privacy protection, which is justified given the nature of the business. Overall, MACIF's website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy platform for customers. Strategic improvements could include publishing explicit security and incident response policies and enhancing transparency around data protection officer contacts and data retention policies.

C

Centre pour la Communication Scientifique Directe (CCSD)

hal.science

66

HAL (Hyper Articles en Ligne) is a French open archive platform dedicated to the deposit and dissemination of scientific publications. It is supported by major French research organizations including CNRS, INRIA, and INRAE, and serves the academic and research community by providing a sustainable, public infrastructure for open science. The platform offers services such as long-term preservation, institutional portals, and integration with research identifiers like ORCID. Technically, HAL uses a modern JavaScript stack with libraries such as jQuery, Select2, MathJax, and Matomo for privacy-conscious analytics. The website is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is strong with HTTPS enforced and privacy policies in place, though explicit security headers could be improved. The domain registration is consistent with the organization's identity and history, indicating high legitimacy. Overall, HAL is a trustworthy, well-maintained platform with a strong focus on open science and research dissemination.

Maylhop is a professional email service offered by Medialibs, a company specializing in digital solutions including website creation software and CMS platforms. The service provides personalized email addresses linked to customers' domain names, enhancing digital presence and credibility. Maylhop offers features such as email aliases, redirections, mailing lists, spam and antivirus protection, and webmail access, targeting professionals and businesses seeking reliable email solutions. The website is hosted as a subdirectory under medialibs.com, indicating close integration with the parent company’s digital ecosystem. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery, and integrates Google Tag Manager and Google reCAPTCHA for analytics and spam protection. A cookie consent mechanism compliant with GDPR is implemented using tarteaucitron.js, allowing granular user control over cookies. The site is mobile-optimized and presents a professional design with clear navigation. From a security perspective, HTTPS is enforced, and forms are protected with reCAPTCHA. However, no explicit security headers were detected, and no privacy policy or terms of service pages are published, which are gaps in compliance and transparency. The WHOIS data for the domain www.maylhop.com is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional content. Overall, the website is functional and professional but would benefit from improved transparency through published policies and enhanced security headers. The domain registration inconsistency should be addressed to improve trustworthiness.

L

Liventa s.r.o.

speakeri.cz

61

Speakeři.cz is a Czech-based service operated by Liventa s.r.o. that specializes in connecting event organizers with professional speakers tailored to their event goals and communication needs. The company offers comprehensive event consulting services including speaker sourcing, dramaturgy, and administrative support. The website is well-structured, professionally designed, and targets corporate and professional clients seeking impactful event speakers. Technically, the site uses modern web technologies such as Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and client-side form validation, though it lacks some security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but the presence of company registration details on the site supports legitimacy. Overall, the site presents a credible and professional business with room for improvement in privacy and security transparency.

E

ESTILO DESIGN s.r.o.

estilodesign.cz

53

ESTILO DESIGN s.r.o. is a Czech-based small business specializing in printing and graphic design services. Their offerings include production and installation of advertising media, large and small format printing, and graphic design studio services. The company targets businesses and individuals in the Czech Republic and Slovakia, providing an online e-shop with a print calculator for customer convenience. The website is professionally designed with clear navigation and good content quality, reflecting a consistent brand image and trust indicators such as GDPR compliance and contact transparency. Technically, the site uses modern web technologies including Google Tag Manager and Analytics, with HTTPS enforced and a cookie consent mechanism implemented. However, no explicit security headers or incident response policies are publicly available, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Overall, the website is secure, compliant, and professional, suitable for its business purpose.

C

Centre national du livre

cnl-demandesdaides.fr

10

The website cnl-demandesdaides.fr is an official French government-related portal managed by the Centre national du livre (CNL) to facilitate digital submission and management of literary aid requests. It serves authors, translators, and literary structures by providing secure login and registration functionalities, emphasizing GDPR compliance and data protection. The site is professionally designed with consistent branding and clear navigation, targeting French literary professionals and organizations. Technically, the site uses a custom JavaScript framework with AJAX for dynamic interactions and file uploads. It employs HTTPS and security tokens to protect user sessions and data submissions. However, it lacks visible security headers and cookie consent mechanisms, and mobile optimization is basic. No third-party analytics or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as CSRF token usage and secure password handling. The domain registration data aligns with the official nature of the service, enhancing trustworthiness. No vulnerabilities or suspicious patterns were found in the source code. However, the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the website presents a secure, compliant, and professional digital service for literary aid management, with recommendations to enhance security headers, privacy notices, and mobile accessibility to further strengthen its posture.

S

Spiffy Checkouts

spiffy.co

52

Spiffy Checkouts is a technology company specializing in SaaS solutions for creating conversion-optimized checkout pages with one-click upsells and subscription management. The website presents a professional and modern interface, targeting businesses and online sellers seeking to improve their sales funnel efficiency. The technical infrastructure is based on WordPress with modern JavaScript libraries and SEO optimizations, ensuring good performance and mobile responsiveness. Security posture is adequate with HTTPS and Content Security Policy in place, though additional security headers and explicit policies are lacking. Overall, the website is trustworthy and well-positioned in its niche, but could improve transparency and compliance by adding privacy, cookie, and security policies.

A

Kalendář akcí | Akce.cz

akce.cz

60

The website www.akce.cz is a small-scale site hosted on the Wix platform, primarily serving content in Czech language. The site appears to be a basic informational or promotional site with minimal business details and no visible contact or privacy policies. The technical infrastructure relies on Wix's standard hosting and scripts, including Google Adsense for advertising. The site is accessible without any WAF or security challenge blocking content. Security posture is basic with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data and registrant information reduces trustworthiness and business credibility. Overall, the site is functional but lacks comprehensive business and security transparency.

Č

Český ráj outdoor s.r.o.

ceskyraj.com

63

Český ráj outdoor s.r.o. operates a professional e-commerce website specializing in outdoor equipment including camping, hiking, and climbing gear. Established since 1993, the company targets Czech and Slovak outdoor enthusiasts with a broad product range and rental services. The website demonstrates a mature digital presence with modern tracking and marketing technologies integrated, including Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Privacy and cookie policies are implemented with GDPR compliance. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness but the website content and business information appear legitimate and consistent with a medium-sized retail business. Overall, the site provides a good user experience with clear navigation and relevant content.

T

Turistika.cz s.r.o.

porovname.cz

45

The website www.porovname.cz hosts an administrative login page for an advertising server operated by Turistika.cz s.r.o., a Czech company likely involved in tourism-related advertising. The platform uses Revive Adserver version 5.3.1 to manage and serve advertisements. The site is minimalistic, primarily serving as an authentication portal for internal or authorized users rather than public-facing content. The lack of public business information, privacy policies, or contact details limits transparency and user trust. Technically, the site employs legacy frontend practices such as an IE=7 compatibility meta tag and lacks modern security headers or HTTPS enforcement visible in the HTML content. The use of Revive Adserver indicates a specialized advertising technology stack, but overall technical implementation is basic with limited SEO or accessibility features. The absence of WHOIS data for the domain www.porovname.cz raises concerns about domain legitimacy and registration status. From a security perspective, the site shows basic security hygiene with a POST login form but lacks critical protections such as HTTPS, security headers, and visible anti-CSRF measures. No privacy or cookie policies are present, indicating poor compliance with GDPR or other data protection regulations. The missing WHOIS data further reduces trustworthiness and raises questions about domain ownership and legitimacy. Overall, the website presents a low-risk profile in terms of content safety, as it contains no adult or explicit material, but it suffers from significant security and compliance shortcomings. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and resolving WHOIS data visibility to improve trust and compliance.

The domain fgov.be is an official Belgian federal government domain registered since 1996 under the registrant Kanselarij van de Eerste Minister - Externe Communicatie Chancellerie du Premier Ministre - Communication Externe. The website content provided is not the full site but a security challenge page with captcha and obfuscated JavaScript, indicating bot mitigation and access control mechanisms. No privacy, cookie, or terms of service policies are present on this page, nor is there any contact information or business forms. The technical infrastructure includes custom scripts and fingerprinting techniques, but lacks visible modern SEO, accessibility, or security headers. The domain registration data is consistent and trustworthy, confirming the legitimacy of the site as a government entity. However, the content quality and user experience are poor due to the blocking mechanism and minimal content.

The domain belgium.be is an official Belgian government domain registered since 1995 by the Chancellery of the Prime Minister. The website content is currently inaccessible due to a security challenge page with CAPTCHA and obfuscated JavaScript, indicating the presence of a Web Application Firewall or similar security mechanism. This prevents direct content analysis and limits visibility into the website's privacy, cookie, and terms of service policies, as well as contact information. The WHOIS data confirms the legitimacy and consistency of the domain registration with the Belgian government entity. The website appears to serve as a governmental portal targeting the general public and residents of Belgium, providing official information and services. However, the analyzed page lacks visible business or security policy information, and no external links or analytics scripts were detected.

S

Svaz kulturistiky a fitness České republiky

skfcr.cz

43

The Svaz kulturistiky a fitness České republiky (SKFČR) is the official national federation for bodybuilding and fitness in the Czech Republic. The website serves as an information portal for athletes, clubs, and enthusiasts, providing event calendars, competition results, regulatory information, and educational content. The federation maintains partnerships with fitness nutrition brands and media outlets, reinforcing its position in the national sports community. The website content is primarily in Czech and targets the local bodybuilding and fitness community. Technically, the site uses standard web technologies with embedded Google Analytics and Facebook Pixel for user tracking. However, the site lacks modern CMS features and advanced mobile optimization.

R

Readymag

readymag.website

73

Readymag is a well-established technology company founded in 2008, offering a SaaS platform focused on website design, prototyping, collaboration, and publishing. The company targets designers and creative professionals seeking an intuitive and powerful design tool. The website demonstrates a mature digital infrastructure with custom fonts, modern JavaScript frameworks, and integration of multiple analytics and marketing tools, all managed with user privacy in mind through Cookiebot consent mechanisms. Security posture is strong with HTTPS enforced and domain registration protections in place, although some security headers could be improved and a formal security policy is not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a medium-sized technology business with a solid market position.

R

Readymag

readymag.com

73

Readymag is a technology company providing a SaaS platform for designing, prototyping, collaborating, and publishing outstanding websites. Established in 2008, it targets designers and creative teams seeking an intuitive and powerful web design tool. The company maintains a strong market position within the niche of design-focused website builders, offering key services that include website creation, prototyping, and team collaboration. The website is professionally designed, mobile-optimized, and demonstrates consistent branding and high content quality. Technically, Readymag leverages modern web technologies, including Google Analytics, Tag Manager, Hotjar, and Cookiebot for tracking and privacy compliance, hosted on Cloudflare DNS with GoDaddy as the registrar. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

S

Shopper Park Plus Nyrt.

shopperparkplus.hu

47

Shopper Park Plus Nyrt. is a Hungarian real estate investment company specializing in regional retail properties. The company operates a portfolio of retail parks across several Hungarian cities, targeting investors interested in stable, long-term euro-denominated returns. The website presents a professional image with detailed portfolio descriptions and investor-focused content, though it lacks explicit privacy and terms of service pages. Technically, the site is built on WordPress using Elementor, with a cookie consent mechanism in place and HTTPS properly configured. Security posture is moderate but could be improved with additional security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its market segment but would benefit from enhanced privacy compliance and contact transparency.

L

LIVENTA s.r.o.

eventfest.cz

55

Event Fest is a leading event marketing festival in the Czech Republic and Slovakia, targeting professionals from agencies, venues, suppliers, and corporate clients. The website presents a well-structured platform showcasing the festival's expo, conference, and networking opportunities, supported by a strong partner ecosystem. The business model revolves around event organization, exhibitor participation, and ticket sales, positioning Event Fest as a key player in the regional event marketing industry. Technically, the site employs modern tracking and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, with a responsive design and multimedia content hosted partly on Microsoft Azure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the professional presentation and contact transparency mitigate concerns. Overall, the site demonstrates a mature digital presence aligned with its business objectives.

C

CEA

leti-cea.com

10

The website represents CEA-Leti, a prominent French government-funded research center specializing in micro and nanotechnologies. It serves a broad audience including researchers, institutions, companies, and the general public. The site provides comprehensive information on applied research, industrial innovation, education, and partnerships. The business model focuses on collaborative R&D and technology transfer to industry. The organization holds a strong market position within European technological research. Technically, the site is built on Microsoft SharePoint, uses modern analytics (Matomo), and integrates security features like Google reCAPTCHA. The security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit cookie consent are lacking. WHOIS data for the domain www.leti-cea.com is missing, which slightly reduces trust but the site’s affiliation with the official CEA domain and consistent branding supports legitimacy. Overall, the site is professional, informative, and trustworthy with room for improvement in privacy compliance and security headers.

A

Asya Nasirli / Uppergrounds

uppergrounds.com

58

Uppergrounds.com is a professional graphic design portfolio website representing Asya Nasirli, a multidisciplinary creative specializing in branding, art direction, and storytelling. The site showcases a curated portfolio of design projects and targets clients seeking creative services. The business operates as a small independent entity with a focus on visual presence and creative storytelling. Technically, the website is built on the Readymag platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and HLS.js for video playback. The site is mobile-optimized and includes embedded videos and images with a clean, professional design. Security-wise, the website uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the site is safe, trustworthy, and professionally presented but would benefit from enhanced security and compliance measures.

N

Nadační fond Eduzměna

eduzmena.cz

42

Eduzměna is a Czech non-profit endowment fund dedicated to systemic education reform, focusing on regional pilot projects to improve school support and teaching quality. The organization collaborates with public institutions and private donors to create sustainable education models. The website is professionally designed, content-rich, and targets donors, educators, and public stakeholders. Technically, the site uses modern analytics and marketing tools, is mobile-optimized, and employs HTTPS, but lacks some security headers and a published privacy policy. The absence of WHOIS data reduces domain trust slightly, but the overall presentation and contact transparency support legitimacy. Recommendations include adding privacy and security policies and improving accessibility.

L

Lepor s.r.o.

fotoradosti.cz

43

FotoRadosti, operated by Lepor s.r.o., is a Czech Republic based e-commerce business specializing in digital photo printing and personalized photo gifts such as photo books, calendars, and canvases. Established in 2012, the company targets general consumers seeking quality photo printing services at competitive prices. The website is professionally designed with clear navigation and good mobile optimization, supporting multiple languages including Czech, English, and Slovak. The technical infrastructure includes modern JavaScript frameworks, Facebook SDK integration for marketing, and Sentry for error monitoring, hosted on websupport.cz servers. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and incident response policies indicates room for improvement. Privacy compliance is partially met with comprehensive GDPR and terms of service documents available, but lacks a cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stability.

V

Vlaams Audiovisueel Fonds

vaf.be

51

The Vlaams Audiovisueel Fonds (VAF) is a government-affiliated organization dedicated to supporting the professional audiovisual and games sector in Flanders, Belgium. The website clearly communicates its mission to provide financial subsidies, training, coaching, and public film culture support. It serves as a key regional institution with a strong market position in the media sector, targeting professionals and creators in audiovisual and gaming industries. The site is well-branded, consistent, and professionally designed, reflecting its official status and credibility. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and performs well, providing a positive user experience. The presence of cookie consent mechanisms and comprehensive privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site uses HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced security posture. WHOIS data is privacy protected, which is justified given the organization's nature, but limits domain registration transparency. Overall, the VAF website is a trustworthy, professional, and well-maintained digital presence for a government-supported media fund. It effectively balances user experience, privacy compliance, and security, though it could improve by publishing security policies and implementing additional security headers.

A

Aller Service

allerservice.dk

72

Aller Service is a Danish media subscription service specializing in providing subscriptions to Allers weekly magazines and other publications in both print and digital formats. The company targets Danish-speaking magazine readers and operates under the parent company Aller Media. The website is professionally designed with a clear focus on subscription services, offering a user-friendly experience optimized for mobile devices. The technical infrastructure leverages modern web technologies including Nuxt.js, Tailwind CSS, and is hosted on Microsoft Azure, indicating a mature digital presence. Security measures such as HTTPS, security headers, and cookie consent mechanisms are implemented, reflecting a good security posture. However, the absence of a public security policy and vulnerability disclosure limits transparency. Overall, the website is trustworthy and compliant with GDPR, with no signs of malicious activity or adult content.

T

Tamda Express

tamdaexpress.eu

59

Tamda Express operates as a multilingual e-commerce platform specializing in grocery and food delivery services, primarily targeting Vietnamese-speaking customers in the Czech Republic. The website offers a broad product range including fresh, frozen, grocery, beverages, and personal care items, positioning itself as a niche regional online retailer with home delivery capabilities. The business model focuses on direct-to-consumer sales through an online storefront with multi-language support to cater to its target demographic. Technically, the website is built on the CS-Cart CMS platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5. It integrates GDPR compliance tools like Klaro for cookie consent and uses Foxentry for address verification, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and does not provide explicit security policies or incident response contacts. No critical vulnerabilities or WAF protections were detected, suggesting a stable but improvable security posture. The absence of privacy and terms of service documents represents a compliance gap. Overall, Tamda Express presents a moderately professional and trustworthy online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in security headers, policy transparency, and incident response readiness would strengthen its risk posture and customer trust.

S

Outlook

seine-eure.com

5

The website at seine-eure.com presents a Microsoft Outlook Web Access (OWA) login portal, indicating it is primarily used for email access rather than as a public-facing business site. The domain is long-established, registered since 1999, but the website content lacks any business branding, descriptive content, or contact information. The site is minimalistic, focusing solely on user authentication for Outlook services. Technically, the site uses standard HTML, CSS, and JavaScript consistent with Microsoft OWA implementations, but lacks modern SEO, accessibility, and mobile optimization features. Security-wise, the site uses a POST form with autocomplete disabled, but no visible security headers or advanced protections are present in the HTML content. No privacy, cookie, or terms of service policies are found, and no contact or incident response information is provided, limiting compliance and trust indicators. Overall, the site appears to be a functional webmail login portal with limited public business information or security transparency.

D

Denník N

mnt.sk

55

Denník N operates a Slovak news media website providing fast, real-time news updates across politics, economy, culture, and sports. The platform targets a general audience interested in current affairs in Slovakia and internationally. The website uses modern web technologies including React and integrates analytics and advertising tools such as Google Tag Manager and Gemius. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are not found on the analyzed page. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the site presents professional content with good user experience and moderate technical performance.

R

Radiostudio.be

radiostudio.be

43

Radiostudio.be is a specialized Belgian company focused on the rental and sale of radio broadcast equipment and software, including mobile studios and consultancy services. They hold exclusive partnerships with notable brands such as mAirlist and Lawo, serving a diverse client base including major broadcasters and European institutions. The website presents a professional image with good content quality and consistent branding, targeting media professionals and broadcasters primarily in Belgium. Technically, the site uses basic modern web technologies like HTML5, CSS3, JavaScript, and integrates Facebook social plugins, but lacks advanced CMS or frameworks. Mobile optimization and accessibility are basic but functional. Security posture is moderate with some best practices like HTTPS assumed but lacks critical security headers, privacy policies, and incident response information. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent and supports legitimacy. Overall, the site is functional and credible but requires improvements in privacy compliance and security hardening.

P

Petr Staníček

pixy.cz

43

The website pixy.cz is a well-established personal and professional homepage of Petr Staníček, a seasoned web architect, UX designer, frontend developer, and author based in the Czech Republic. The site showcases his extensive experience, portfolio, publications, and personal projects, targeting potential clients and collaborators interested in web design and development services. The business model is primarily freelance and consulting, supported by a strong personal brand and a long domain history dating back to 2002. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript frameworks such as React, Redux, Vue, and Angular, and backend technologies like PHP and Nette. The site is well-structured, mobile-optimized, and uses minimal tracking via plausible.io, reflecting a privacy-conscious approach. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms, reducing attack vectors. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, which are areas for improvement to enhance compliance and security posture. Overall, the website is professional, trustworthy, and content-rich, with a high business credibility score. The main risks relate to privacy compliance and security best practices, which if addressed, would further strengthen the site's standing and user trust.

S

SASU CIRCE CONSEILS

circe-conseils.fr

53

Circé Conseils is a small French communication studio specializing in project guidance, brand identity creation, communication strategy, and website development. The company positions itself as a boutique service provider offering personalized and impactful communication solutions to professionals and businesses. The website is built using modern technologies such as Nuxt.js and Vue.js, hosted on Netlify, and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. The domain registration is consistent with the business information, indicating legitimacy. Overall, the website reflects a professional and trustworthy business with a clear market niche.

S

SOARE SEKT SLOVAKIA, s.r.o.

nassad.sk

53

SOARE SEKT SLOVAKIA, s.r.o. operates the website nassad.sk, promoting and selling traditional fruit wines under the brand 'Náš sad'. The company targets adult consumers in Slovakia, emphasizing quality and traditional production methods. The website presents a professional and consistent brand image with clear product descriptions and retail availability through major chains and online partners. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security measures include an age verification popup and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. Privacy policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

R

ROZBUBLAJ ZÁBAVU | ROBBY BUBBLE

robbybubble.sk

53

Robby Bubble is a Slovak-based brand specializing in non-alcoholic sparkling beverages designed for children’s parties and family celebrations. The website presents a colorful, well-structured digital presence built on modern web technologies such as Vue.js and Nuxt.js, hosted by Active24 with DNSSEC enabled, indicating a secure and reliable infrastructure. The brand emphasizes fun, fruit-flavored bubbly drinks that appeal to children and families, positioning itself as a popular choice in its regional market. However, the website lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Security practices are generally good, with HTTPS enforced and security headers present, but there is room for improvement in privacy compliance and incident response readiness.