Security Directory

V

Vorwerk

cookidoo.fr

64

Cookidoo.fr is the official French recipe platform for Thermomix®, operated by Vorwerk. It offers a comprehensive digital service including thousands of recipes, meal planning, and shopping list features tailored for Thermomix® users. The platform targets French-speaking consumers interested in cooking with Thermomix® appliances, providing a subscription-based model for access to premium content. The website demonstrates a high level of digital maturity with modern web technologies such as Algolia search and OneTrust cookie consent integration, hosted on professional infrastructure with AWS DNS services. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies are not visible in the provided content. Privacy compliance is moderate due to the absence of visible privacy policy and terms of service links on the analyzed page. Overall, the site is professional, trustworthy, and well-branded, with no signs of malicious or adult content.

L

Léo Chiron

leochiron.fr

57

Léo Chiron is a freelance full-stack web developer and webmaster based in France, with over 8 years of experience. The website serves as a professional portfolio showcasing his expertise in web development, SEO, WordPress, and site maintenance. The business targets clients needing custom website creation, e-commerce platforms, and ongoing site support. Technically, the site uses a modern tech stack including PHP, JavaScript, SQL Server, and integrates Google services such as Maps, reCAPTCHA, and Tag Manager. The hosting is provided by o2switch, a French hosting provider. Security posture is solid with HTTPS and reCAPTCHA protection on forms, but lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Vorwerk

cookidoo.it

63

Cookidoo.it is the official Italian recipe platform for Bimby® (Thermomix) users, operated by Vorwerk. It offers a comprehensive digital service with thousands of recipes, meal planning, and shopping list features tailored for Bimby® appliances. The platform targets Italian consumers and cooking enthusiasts, leveraging a subscription-based business model to deliver curated culinary content. The website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and strong localization. Privacy and cookie compliance are well-implemented using OneTrust, and analytics are managed responsibly with user consent. Security posture is strong with HTTPS and DNSSEC enabled, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

N

NEO handpan

handpan-vyroba.cz

46

The website handpan-vyroba.cz represents a small Czech manufacturing business specializing in the handcrafting of handpans, a unique musical instrument. The business is branded as NEO handpan and led by maker Jiří Káš. The site provides detailed information about the manufacturing process, emphasizing quality materials and manual craftsmanship. The target audience includes musicians and enthusiasts interested in high-quality, artisanal handpans. Technically, the site is built on WordPress 6.8.3, hosted on a Czech hosting provider, and uses modern web technologies such as CanvasJS and SVG icons. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. No contact emails or phone numbers are explicitly provided, which limits direct communication channels. Overall, the site is legitimate, consistent with the business profile, and free from suspicious elements or blocking mechanisms.

C

CanvasJS

canvasjs.com

68

CanvasJS is a specialized technology company providing a high-performance HTML5 JavaScript charting library designed for developers and businesses requiring advanced data visualization solutions. The company offers a broad range of chart types and supports multiple popular frameworks such as React, Angular, and jQuery, positioning itself as a versatile and developer-friendly solution in the data visualization market. The business is a subsidiary of Fenopix and has been operational since 2013, with a domain registration dating back to 2011, indicating a stable and established presence. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is optimized for performance and mobile responsiveness, with good SEO practices implemented via Yoast SEO. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring reliable uptime and performance. From a security perspective, the site enforces HTTPS with strong domain status protections and includes standard security headers. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response contacts are published, suggesting room for enhancement in transparency and security governance. The site does not expose sensitive data and uses asynchronous loading for analytics scripts to minimize performance impact. Overall, CanvasJS presents a professional, trustworthy, and technically sound web presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

F

Fluxite

fluxite.fr

45

Fluxite is a French technology company founded in 2023 that provides a turnkey website solution aimed at small businesses or individuals seeking a quick, easy-to-manage website without subscription fees. Their offering includes rapid installation, extensive customization options, human support, and two years of maintenance. The website is built on WordPress, hosted by o2switch, and uses modern technologies including Matomo and Google Analytics for traffic analysis, along with a GDPR-compliant cookie consent mechanism. The site is professionally designed with consistent branding and good user experience, targeting French-speaking users. Security posture is solid with HTTPS and privacy-focused analytics, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, Fluxite presents a credible and trustworthy business with a clear market niche between no-code and fully custom websites.

M

Mouvement Colibris

colibris-lemouvement.org

50

Mouvement Colibris is a well-established French non-profit organization focused on promoting ecological and social solidarity through community engagement, education, and activism. The website serves as a hub for information, resources, and connections to various partner projects and educational platforms. The organization targets individuals and groups interested in sustainable living and social change. Technically, the website is built on Drupal 7, uses HTTPS, and integrates privacy-conscious analytics via Matomo. While the site is generally well-designed and mobile-optimized, it lacks modern security headers and up-to-date CMS versions, which could pose risks. Privacy compliance is incomplete due to missing privacy and cookie policies. Security posture is moderate with good SSL but missing DNSSEC and security headers. No incident response or vulnerability disclosure information is published. The domain registration is consistent and trustworthy, supporting the legitimacy of the organization. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risks and improve user trust.

M

MIRAMAP

miramap.org

57

MIRAMAP is a French non-profit organization dedicated to supporting and consolidating the movement of AMAPs (Associations for the Maintenance of Peasant Agriculture) across France. The organization promotes local, ecological, and solidarity-based agriculture by connecting producers and consumers through AMAP networks. MIRAMAP acts as a national representative and facilitator for these local networks, providing tools, events, and advocacy to strengthen sustainable food systems. The website reflects a mature and well-established entity with a domain registered since 2009, consistent with its organizational history. Technically, the website is built on WordPress using the Astra theme, leveraging common plugins such as Contact Form 7, Leaflet.js for interactive maps, and Matomo for analytics. The site is hosted by OVH sas, a reputable provider, and employs HTTPS with a valid SSL certificate. Mobile optimization and SEO practices are good, though some accessibility features could be improved. Cookie consent is managed via CookieYes, indicating attention to privacy compliance, although a dedicated privacy policy page is not explicitly found. From a security perspective, the site uses HTTPS and Google reCAPTCHA on forms, but lacks DNSSEC and several recommended security headers. No direct incident response or vulnerability disclosure policies are present, which could be areas for improvement. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, MIRAMAP presents a credible, professional, and trustworthy online presence for a non-profit agricultural movement. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing clear privacy and security policies to improve compliance and trust further.

T

Terre de Liens

terredeliens.org

63

Terre de Liens is a well-established French non-profit organization dedicated to preserving agricultural land and supporting sustainable farming practices. The organization operates through a network of associations, an investment solidarity enterprise, and a public utility foundation. Their website reflects a mature digital presence with good content quality, clear navigation, and a focus on community engagement and transparency. Technically, the site uses modern JavaScript frameworks and analytics tools, hosted under reputable providers with HTTPS enabled. However, explicit privacy policies and terms of service are not readily found, and security headers are not visibly implemented, indicating areas for improvement in compliance and security posture. Overall, the domain registration data supports the legitimacy and trustworthiness of the organization.

A

Autour du 1er mai

autourdu1ermai.fr

44

Autour du 1er mai is a French non-profit cultural association dedicated to cinema, popular education, and collective projects aimed at societal improvement. The website serves as a portal for film-related resources, including a cinema and society database, filmographies, and event information. It also coordinates the TESSA project and participates in the CoreDem network, indicating active collaboration within the cultural sector. The target audience is general public interested in cinema and social issues. The organization has a long-standing presence since 2006, supported by a domain age of over 17 years and multiple partner affiliations. Technically, the website is built on the SPIP CMS platform, using standard web technologies such as HTML5, CSS, JavaScript, and jQuery. It employs Matomo analytics, a privacy-respecting tool, and is hosted by OVH, a reputable provider. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and privacy-conscious analytics but lacks explicit security headers and a cookie consent mechanism. There is no visible security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing a legitimate and stable registration. Overall, the website is professional, trustworthy, and serves its niche well. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and improving accessibility to strengthen compliance and security posture.

M

mairie-me

mairie-me.org

64

The website mairie-me.org appears to be a community engagement platform aimed at inhabitants of a commune or municipality, encouraging them to propose ideas and act collectively to improve local living conditions. The business model focuses on local governance participation, targeting residents as the primary audience. The website is built on the Bubble.io platform, utilizing modern JavaScript libraries and Google Fonts, with hosting provided by OVH sas. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is basic with HTTPS enabled and a cookie consent mechanism in place, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. The WHOIS data raises concerns due to a domain creation date set in the future, which questions the legitimacy and operational status of the domain. Overall, the website content is safe and suitable for a general audience with no adult or explicit content detected.

S

SIPPEREC

sipperec.fr

42

SIPPEREC is a French public syndicate specializing in energy and digital services for member municipalities, holding a leading market position in electricity concession, renewable energy production, and digital infrastructure in the Île-de-France region. The website is built on TYPO3 CMS and employs modern web technologies including Matomo for privacy-conscious analytics and Tarteaucitron.js for cookie consent management. The site is well-structured, mobile-optimized, and provides comprehensive content relevant to its target audience of local governments and residents. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are not visibly implemented. Privacy compliance is strong with clear policies and consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but is common for French domains under AFNIC. Overall, the site presents a professional and trustworthy digital presence for a public sector entity.

B

Bordeaux Métropole

bordeaux-metropole.fr

61

Bordeaux Métropole is the official metropolitan government entity serving 28 communes around Bordeaux, France, providing a wide range of public services including urban planning, transport, waste management, water, economic development, and environmental initiatives. The website serves residents, professionals, associations, and visitors with comprehensive information and digital services. Technically, the site is built on Drupal 10 with modern frontend technologies like Swiper.js, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is typical for some ccTLDs or privacy-protected domains and does not detract from the site's legitimacy given its government nature. Overall, the site is professional, trustworthy, and well-maintained, supporting the metropolitan community effectively.

H

Hespul

hespul.org

60

Hespul is a French non-profit association with over 30 years of experience specializing in renewable energy, particularly solar photovoltaic technology, and energy efficiency. The organization focuses on accelerating the energy transition through project development, education, and community engagement. Their website reflects a mature digital presence with a clear mission and professional content targeting professionals and communities interested in sustainable energy solutions. Technically, the site uses modern web technologies including Foundation framework, FontAwesome icons, and Matomo analytics, hosted on a reputable registrar's infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and cookie consent mechanisms. The absence of direct contact emails or phone numbers is a minor limitation, with contact primarily via web forms. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

E

Emmaüs

label-emmaus.co

62

Label Emmaüs is an ethical and solidarity-driven e-commerce platform affiliated with the Emmaüs association in France. The website offers a variety of second-hand and vintage products including clothing, books, vinyls, reconditioned smartphones, and artisan goods, targeting consumers interested in responsible consumption and social causes. The platform positions itself as a militant e-shop, emphasizing sustainability and social impact. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, along with Tailwind CSS for styling, and integrates advanced monitoring and analytics tools like New Relic and Klaviyo. The website is well-optimized for mobile devices and includes comprehensive privacy and cookie policies with active consent management, reflecting good GDPR compliance. Security-wise, the site uses HTTPS with appropriate security headers and content security policies, though it lacks a publicly available security policy or incident response information. Overall, the domain registration data aligns with the website's claims, supporting its legitimacy and trustworthiness.

E

eko & co

discre.to

57

Discre.to is a French-based small technology company offering 'discreto', an open source GDPR-compliant consent management tool focused on user privacy and anonymity. The website provides extensive documentation, configuration options, and integration with popular analytics and advertising services, emphasizing anonymized data collection and user control. The company, eko & co, sponsors the project and offers consulting and donation options. Technically, the site uses modern web technologies including JavaScript, Sass, and Webpack, and is hosted likely on OVH. Security practices include respecting Do Not Track headers and anonymizing IP addresses, though explicit security headers and policies are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with GDPR principles, though it lacks explicit privacy and terms of service pages.

Technimax is a Czech-based e-commerce company specializing in the sale of refurbished IT hardware, primarily Dell and HP computers, notebooks, monitors, printers, and servers. The company targets small and medium-sized businesses seeking high-quality, cost-effective IT solutions with extended warranty options up to five years. Their website demonstrates a professional and well-structured online presence with detailed product categorization and clear contact information, supporting their market position as a specialist in refurbished IT equipment in the Czech Republic. Technimax emphasizes quality assurance with an A+ grading system for their products and offers professional servicing and rapid complaint handling.

A

Auto Hotárek s.r.o.

autohotarek.cz

59

Auto Hotárek s.r.o. operates a specialized e-commerce platform and physical retail stores in the Czech Republic, focusing on automotive accessories and parts. The company targets vehicle owners seeking tailored and universal car accessories, offering a broad product catalog and expert services. Their market position is that of a trusted specialist with a strong local presence, supported by recognized certifications such as the Heureka Shop of the Year awards. Technically, the website employs modern JavaScript frameworks and integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook SDK, and Adform, hosted behind Cloudflare infrastructure. The site is mobile-optimized with good SEO and accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is addressed with cookie consent and detailed privacy policies, supporting GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security policies, and monitoring domain registration status to ensure continued legitimacy.

G

Goldea.cz

goldea.cz

59

Goldea.cz is a Czech-based e-commerce retailer specializing in high-quality home textiles including bedding, curtains, towels, and table linens. The company emphasizes Czech craftsmanship, custom tailoring, and natural materials, positioning itself as a trusted brand with a strong customer satisfaction record. Founded in 2016 and operated by MIONET s. r. o., Goldea.cz serves primarily the Czech market with localized content and regional language support. The website is professionally designed with excellent content quality and user experience, supporting clear navigation and mobile responsiveness. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and error monitoring, though some HTTP security headers and explicit security policies are absent. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and business legitimacy evident on the site. Overall, Goldea.cz is a well-established retail platform with solid digital maturity and privacy compliance, though domain registration transparency should be improved.

R

REScoop.eu

rescoop.eu

42

REScoop.eu is a well-established European federation representing over 2,500 energy communities and 2 million citizens engaged in the energy transition. The organization operates primarily in the energy sector, focusing on cooperative principles and community-driven renewable energy projects. Their services include project support, networking, training, advocacy, financing, and coaching, positioning them as a key player in the European community energy landscape. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their audience. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Mailchimp for newsletter management and Google Tag Manager for analytics. The site demonstrates good performance and accessibility standards, though explicit CMS or hosting details are not disclosed. Privacy compliance is robust with clear privacy and cookie policies and an active consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to privacy protection, which is common and justified for a non-profit federation in Europe. Overall, the site presents a low risk profile with a strong trustworthiness rating. Strategically, REScoop.eu should consider enhancing their security posture by publishing security policies, implementing security headers, and providing vulnerability disclosure information to further build trust and compliance. Continued focus on privacy and transparent data practices will support their community-oriented mission and regulatory adherence.

The Fondation Charles Léopold Mayer pour le Progrès humain (FPH) is a Swiss non-profit foundation established in 1982, dedicated to supporting civil society organizations advocating for social and ecological transition. Funded by the estate of Charles Léopold Mayer, the foundation operates with a long-term vision to promote participatory, fair, and sustainable societal development. The website presents clear information about the foundation's history, aims, and governance, targeting philanthropic partners and civil society actors. Technically, the website is built using the SPIP CMS with custom CSS and JavaScript, including Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no explicit security headers or incident response policies are visible, and cookie consent mechanisms are absent, which could be improved for better GDPR compliance. Overall, the security posture is moderate with room for enhancement. The domain WHOIS data aligns well with the website content, showing a consistent and legitimate registration for a Swiss foundation. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

V

Vorwerk

recipecommunity.co.uk

64

Cookidoo® is the official Thermomix® recipe platform operated under the Vorwerk brand, offering a comprehensive digital service for Thermomix® users in the UK. The platform provides thousands of recipes, meal planning tools, shopping list management, and cooking tutorials, positioning itself as a leading culinary resource for its target audience. The business model is subscription-based, focusing on delivering value through curated and user-friendly content. Technically, the website employs modern web technologies including custom web components, Algolia search, and a cookie consent mechanism via OneTrust, ensuring a good user experience across devices with solid SEO and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and policies are not prominently published. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation on the analyzed page. The domain registration is consistent and legitimate, supporting the platform's credibility. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

B

Brownells France

brownells.fr

58

Brownells France operates as a specialized e-commerce retailer focused on firearms accessories, spare parts, and gunsmithing tools, serving primarily the French market. The website demonstrates a professional design with clear navigation and a comprehensive product catalog targeting shooting sports enthusiasts, hunters, and armory professionals. The company emphasizes customer satisfaction with trust signals such as high customer ratings and a long-standing market presence. Technically, the site leverages modern JavaScript libraries, the ePages platform, and integrates marketing and analytics tools like Microsoft Clarity and APSIS, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and incident response disclosures are missing. The absence of WHOIS data is a notable gap, slightly impacting trustworthiness, but the overall business credibility remains good based on content and operational indicators.

M

Městská část Praha 18

praha18.cz

45

The website praha18.cz serves as the official digital portal for the municipal district Praha 18 (Letňany) in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, social support, public notices, events, and contact details. The site also promotes a mobile application to enhance citizen engagement and accessibility. The business model is that of a government service portal focused on transparency and community interaction. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google Analytics and Google reCAPTCHA for analytics and form security, respectively. The site is hosted on reputable Czech providers and employs HTTPS with strong SSL configuration. The design is responsive and accessible, with good SEO practices and clear navigation. From a security perspective, the site demonstrates good practices including HTTPS enforcement, GDPR-compliant cookie consent with granular options, and use of reCAPTCHA to prevent spam. However, it lacks explicit security policies, incident response contacts, and security headers which could enhance its security posture. No vulnerabilities or suspicious content were detected. Overall, praha18.cz is a trustworthy and professionally maintained municipal website with a strong focus on user accessibility and compliance. Strategic improvements in security policy transparency and header implementation could further strengthen its security and trustworthiness.

I

iQLANDIA

iqlandia.cz

61

iQLANDIA.cz is a well-established modern science and entertainment center based in Liberec, Czech Republic, founded in 2011. It operates multiple venues including science centers, a planetarium, and a fab lab, targeting families, children from age 3, schools, and corporate clients. The website reflects a professional and consistent brand with rich content focused on educational and entertaining experiences. Technically, the site uses Concrete CMS, modern JavaScript libraries, and embeds multimedia content such as YouTube videos. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies, indicating room for compliance improvement. Analytics are implemented via Google Tag Manager, suggesting moderate user tracking. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

E

ESPRIT BOHEMIA s.r.o.

espritbohemia.cz

66

ESPRIT BOHEMIA s.r.o. operates as a Czech publishing company specializing in magazines such as TVOŘÍME s láskou, RITUALS, ESTETIKA, PERFECT WOMAN, Sofie, and Sofie Bydlení. The company targets a general audience interested in lifestyle and family-oriented content, offering subscriptions and e-commerce sales of their publications. The website is professionally designed and provides clear navigation and relevant content for its niche market. Technically, the site is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery and integrating modern tracking and consent management tools such as Google Tag Manager and Iubenda. The site is mobile optimized and uses HTTPS for secure communications.

V

Vorwerk & Co. KG

cookidoo.cz

67

Cookidoo.cz is the official Czech platform for Thermomix® recipes, operated by Vorwerk & Co. KG. It offers a comprehensive digital subscription service providing thousands of recipes, meal planning, and shopping list features tailored for Thermomix® users. The platform is well-established since 2014 and serves the Czech market with localized content and language support. Technically, the website leverages modern web technologies including Algolia for search, OneTrust for cookie consent, and Snowplow for analytics, hosted on AWS infrastructure, ensuring good performance and scalability. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security contact and incident response information are not publicly disclosed. Privacy compliance is robust with clear policies and consent mechanisms aligned with GDPR. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.

V

Vorwerk

vorwerk.com

62

Vorwerk is a globally recognized manufacturing company specializing in household appliances such as Thermomix and Kobold. The website serves as a country selector landing page, directing users to localized portals tailored for various international markets. The company targets consumers and distributors interested in high-quality home appliances, leveraging a direct sales business model with a strong global footprint. The website's content is primarily in German, reflecting its German origin, and provides a gateway to multiple country-specific sites, indicating a well-established international presence. From a technical perspective, the website employs basic JavaScript and inline CSS to facilitate country selection. The absence of advanced frameworks or CMS detection suggests a custom or minimalistic approach. Performance and mobile optimization are moderate, with basic accessibility and SEO features. However, the lack of visible security headers, HTTPS confirmation, and privacy-related policies indicates room for significant improvement in digital maturity and security posture. Security evaluation reveals critical gaps including missing HTTPS enforcement, absence of security headers, and no published privacy or cookie policies. The WHOIS data is unavailable, limiting domain legitimacy verification and raising concerns about transparency. No contact information or incident response channels are evident, which could impact user trust and compliance with data protection regulations. Overall, the website presents a moderate risk profile primarily due to incomplete security and compliance implementations. Strategically, Vorwerk should prioritize implementing robust security measures such as HTTPS, security headers, and clear privacy and cookie policies. Enhancing transparency through accessible contact and incident response information will improve trustworthiness. Technical modernization and comprehensive compliance adherence will support sustained market leadership and customer confidence.

R

Retargeted

retargeted.co

56

The website retargeted.co serves as a management panel login interface for a retargeting service platform. The site is built using modern web technologies such as React and Next.js and is hosted behind Cloudflare, which provides performance and security benefits. The content is minimal, focusing solely on user authentication with no public-facing business or compliance information. The lack of privacy, cookie, and terms of service policies, as well as absence of contact details, limits transparency and user trust. Technically, the site demonstrates a moderate level of digital maturity with a modern tech stack and mobile optimization. However, the absence of explicit security headers and compliance documentation indicates room for improvement in security posture and regulatory adherence. The use of Cloudflare Insights suggests some level of analytics and monitoring, but privacy compliance appears weak. From a security perspective, the site uses HTTPS and Cloudflare services but lacks visible security best practices such as CSP and HSTS headers. No vulnerabilities or exposed sensitive data were detected in the provided content, but the absence of a vulnerability disclosure policy or security contact reduces incident response readiness. Overall, the site is functional for its purpose but requires enhancements in privacy compliance, security hardening, and business transparency to improve trustworthiness and regulatory alignment.

Crossdesk Systems operates a web-based login portal primarily built on legacy ASP.NET Web Forms technology, serving as an access point for its users or clients. The website content is minimal, focusing solely on user authentication without public-facing business descriptions or policies. The domain is well-established, registered since 2007, indicating a mature presence in its sector. However, the lack of visible privacy, cookie, or terms of service policies suggests limited public compliance transparency. Technically, the site uses jQuery and standard ASP.NET mechanisms with basic client-side scripting for UI enhancements and session initialization. The absence of modern security headers and advanced security features indicates room for improvement in security posture. No analytics or marketing tools are detected, reflecting a minimalistic approach to user tracking and advertising. Security-wise, the site employs basic protections such as frame busting and password masking but lacks comprehensive HTTP security headers and explicit GDPR compliance indicators. The domain registration status and DNS setup are consistent with a legitimate business, but the site would benefit from enhanced security controls and privacy disclosures. Overall, the website is functional but basic, with moderate trustworthiness based on domain age and registration. Strategic improvements in security, privacy compliance, and user experience would enhance its credibility and resilience against threats.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) with embedded offline dinosaur game scripts and styles. No actual website content, business information, or user-facing data is present. The page serves as a placeholder or error display within the Chrome browser when a requested website is unreachable or offline. Consequently, there is no business presence, market positioning, or commercial services to evaluate. The technical infrastructure is limited to client-side JavaScript and HTML5 canvas elements for the embedded game, with no server-side or hosting details available. Security posture is minimal due to the lack of accessible content and absence of security headers or policies. Overall, the page is not a functional website but an internal browser error page, resulting in a low trust and credibility score.

D

Digital Pharmacist

digitalpharmacist.com

72

Digital Pharmacist is a healthcare technology company specializing in providing digital pharmacy software solutions. Their platform offers pharmacies customized websites, digital marketing services, IVR systems, mobile applications, and secure messaging to enhance pharmacy operations and patient engagement. The company targets pharmacies and pharmacy professionals, positioning itself as a comprehensive digital partner in the pharmacy sector. The website demonstrates a moderate level of digital maturity with a WordPress CMS infrastructure, Divi theme, and integration of marketing and analytics tools such as HubSpot and Google Analytics. Security posture is generally good with HTTPS enabled and secure messaging features, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trust. Strategic recommendations include publishing clear privacy and cookie policies, implementing security headers, and providing explicit contact information for incident response. Overall, the website is professional and trustworthy but could improve in privacy compliance and domain registration transparency.

E

ESPRIT BOHEMIA s.r.o.

perfectwoman.cz

58

The website perfectwoman.cz represents the Czech lifestyle magazine PERFECT WOMAN, published by ESPRIT BOHEMIA s.r.o. The magazine targets active and confident women, offering content on fashion, beauty, health, relationships, family, career, and travel. The business model revolves around magazine publication with subscription and advertising revenue streams. The company has a stable market presence of approximately 19 years, indicating a well-established brand in the Czech media sector. Technically, the site is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery. The site uses modern web technologies including JavaScript and CSS3, and is optimized for mobile devices with good SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating basic privacy compliance. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for enhancement. The absence of WHOIS data limits domain trust verification, though the website content and business information appear professional and legitimate. Overall, the site is a good-quality, professional media platform with moderate technical and security maturity. Strategic improvements in privacy documentation, security headers, and domain transparency would enhance trust and compliance.

A

Asociace kosmetických a kadeřnických oborů ČR

akocr.cz

9

The website represents the Asociace kosmetických a kadeřnických oborů ČR, an association supporting entrepreneurs and professionals in the cosmetics and hairdressing industry in the Czech Republic. It aims to enhance the prestige of the industry and promote education and expertise among its members. The site is built using modern web technologies such as Nuxt.js and FontAwesome, hosted via a Czech registrar Wedos, and presents a professional and consistent brand image. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks explicit security headers and detailed security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy, although a cookie consent mechanism is present. Overall, the site is trustworthy and serves its niche audience effectively.

The website represents the official Weleda Beauty & Store in the Czech Republic, specializing in retailing natural and BIO cosmetics alongside holistic beauty salon services. The business leverages the heritage of the Swiss Weleda brand and targets consumers seeking high-quality natural beauty products and personalized care. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern web technologies including Turbo and Ruby on Rails frameworks, with Google Analytics and Tag Manager for tracking. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies, lack of DNSSEC, and missing security headers. No contact information is explicitly provided on the analyzed page, which may impact user trust and compliance. Overall, the security posture is moderate but could be improved with better header configurations and policy disclosures.

F

FCC

fcc.es

71

FCC is a global leader in citizen services, specializing in environmental services, integral water management, infrastructure, concessions, and real estate. The company maintains a strong market position with a comprehensive corporate website that reflects its business scope and sustainability commitments. The website is built on modern technologies including Liferay CMS, Bootstrap, and React, ensuring a responsive and accessible user experience. Security measures such as HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms are implemented, although explicit security headers could be enhanced. Overall, the site demonstrates a mature digital presence aligned with enterprise standards.

K

KPMG Česká republika, s.r.o.

danovky.cz

65

The website danovky.cz serves as a professional information portal providing tax, legal, and accounting updates primarily for Czech Republic businesses and professionals. It is operated by KPMG Česká republika, a subsidiary of the global KPMG network, reflecting a strong market position in the finance and consulting sector. The site offers regularly updated articles, podcasts, newsletters, and event invitations, supporting KPMG's advisory services and thought leadership. Technically, the website employs modern JavaScript frameworks, consent management tools, and analytics services such as Google Analytics and Google Tag Manager. It is hosted by REG-ZONER, with a custom or proprietary CMS. The site is mobile-optimized with good SEO and basic accessibility features, delivering moderate performance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with comprehensive policies and GDPR-aligned consent management. Overall, the website presents a low-risk profile with professional content and infrastructure. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen trust and resilience.

E

Enel Cuore Onlus

enelcuore.it

74

Enel Cuore Onlus is a non-profit organization affiliated with the Enel Group, dedicated to supporting social welfare initiatives across Italy. The website clearly communicates its mission to promote social well-being through funding and supporting non-profit projects focused on education, social inclusion, health, and autonomy. The organization leverages its strong brand association with Enel, enhancing its credibility and market position within the energy and non-profit sectors. Technically, the website is built on Adobe Experience Manager, utilizing modern web technologies including Adobe DTM for tag management and AblePlayer for accessible media playback. The site demonstrates good performance, mobile optimization, and accessibility compliance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard security best practices, although some HTTP security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence that effectively supports the organization's mission. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining compliance documentation to further strengthen security and trust.

F

Fondazione Centro Studi Enel

enelfoundation.org

71

Enel Foundation is a non-profit organization dedicated to advancing knowledge and education in the clean energy sector. It operates as a knowledge platform focusing on capacity-building, research, and fostering partnerships to support the energy transition. The foundation is linked to the Enel Group, a major player in the energy industry, which strengthens its market position and credibility. The website presents a professional and well-structured digital presence, leveraging Adobe Experience Manager and Adobe marketing technologies to deliver content and manage user experience effectively. Privacy and cookie policies are clearly implemented, reflecting compliance with GDPR standards. Security posture is solid with HTTPS enforced and consent mechanisms in place, though additional security headers and explicit security policies could enhance protection. Overall, the foundation's website demonstrates a mature digital infrastructure and a trustworthy business profile suitable for its sector and audience.

Agentura Bora operates the website pronajemchalup.net, a specialized online catalog offering rental listings for cottages, chalets, and pensions primarily in the Czech Republic, with a focus on southern Bohemia and mountain regions such as Šumava and Krkonoše. The business targets families and tourists seeking vacation accommodations, providing a searchable database with photos, pricing, and booking forms. The company has a long-standing presence since 2004, reinforcing its market credibility in the regional hospitality sector. Technically, the website is built on a custom stack using basic HTML, CSS, and JavaScript, with integration of third-party analytics and retargeting scripts. However, it lacks modern security features such as HTTPS, DNSSEC, and security headers, which exposes it to potential risks. The site is not mobile optimized and has limited accessibility features, indicating room for technical modernization. From a security and compliance perspective, the site does not provide privacy or cookie policies, nor GDPR compliance statements or a data protection officer contact. The absence of HTTPS and security headers further weakens its security posture. Contact information is available via phone and a contact form, but no company email addresses are published. The site does maintain a terms of service page. Overall, while the business model and content quality are solid for its niche, the website requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user safety.

E

e Penziony CZ

e-penziony.cz

53

e-penziony.cz is a Czech hospitality platform offering a comprehensive database of over 4,000 pensions and private apartments primarily in the Czech Republic. The site targets travelers seeking affordable, commission-free accommodation directly from owners, as well as property owners wishing to register their listings. Technically, the website uses a custom-built infrastructure with standard web technologies including jQuery, Google Analytics, and MapLibre for mapping. It is hosted behind Cloudflare DNS, ensuring reliable performance and security. However, the use of an outdated jQuery version and absence of privacy and cookie policies indicate areas for improvement in security and compliance. The site is accessible without WAF blocking and shows consistent WHOIS data supporting its legitimacy. Overall, the platform is a well-established niche player in Czech hospitality with moderate digital maturity and some compliance gaps.

P

Paris Wine Company

pariswinecompany.com

65

Paris Wine Company is a specialized wine exporter based in Paris, founded in 2012. The company focuses on curating a network of environmentally conscious French wine producers and connecting them with distributors worldwide. Their market position is niche, targeting professional distributors and wine enthusiasts interested in traditional and biodynamic wines. The website is built on WordPress with modern performance optimizations and complies with GDPR through a comprehensive cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-maintained, supporting the company's business goals effectively.

A

Anaïs Guégan

spectre-visible.com

55

Spectre visible is a personal portfolio website for the artist Anaïs Guégan, showcasing photographic or artistic works themed around visible spectrums and colors. The site targets a general audience interested in art and photography, operating as a small-scale personal branding platform. The website is built on WordPress, hosted by OVH sas, and uses modern web technologies including jQuery and FontAwesome. It features a clean design with good navigation and mobile optimization, although accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is legitimate and professionally presented but would benefit from enhanced privacy compliance and security hardening.

The website territoires-emplois.org represents a collaborative initiative by ADEME and Réseau Action Climat France to provide a specialized tool (TETE) for estimating job creation through ecological transition policies at various territorial levels in France. The site offers the tool as a downloadable Excel file accompanied by guides and training resources, targeting local authorities, associations, and other stakeholders involved in climate-energy planning. The business model is primarily non-commercial, focusing on free tool distribution with optional paid training. Technically, the site is built on WordPress, using standard web technologies and hosted by OVH. While the site is accessible and professionally designed with good content relevance and navigation, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Tracking is implemented via Google Analytics and Tag Manager with moderate user tracking. Overall, the domain registration is consistent and legitimate, supporting the site's credibility.

C

Collectif pour une Transition Citoyenne

fete-des-possibles.org

50

The website fete-des-possibles.org represents a French non-profit initiative called 'La Fête des Possibles' organized by the Collectif pour une Transition Citoyenne. It serves as a platform to promote and coordinate hundreds of civic events focused on sustainability, social solidarity, and citizen engagement across France and Belgium. The site offers event listings, resources for organizers, and a newsletter subscription, supported by a network of partners including European institutions and foundations. Technically, the site is built on WordPress, hosted by OVH, and employs modern tools such as Matomo for privacy-conscious analytics and Complianz for GDPR-compliant cookie consent management. The website demonstrates good design quality, clear navigation, and mobile optimization, though accessibility could be further enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response information. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.

R

Réseau TEPOS (animated by réseau Cler)

tepos.fr

54

The website tepos.fr represents the TEPOS network, a French energy transition network animated by the larger association réseau Cler. It serves over 150 local actors including municipalities and project leaders engaged in positive energy transition initiatives. The site provides news, events, resources, and a newsletter subscription to support and coordinate these actors. The business model focuses on network facilitation and knowledge sharing within the energy sector in France. Technically, the site is built on WordPress, uses modern JavaScript libraries like Vue.js and Axios, and is hosted by OVH, a reputable provider. The site is well-structured, mobile-optimized, and includes SEO best practices. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though it lacks explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its target audience.

E

Eolise

eolise.fr

52

Eolise is a French independent company specializing in the development of local wind and photovoltaic energy projects primarily in the Poitou region. Founded in 2016, it operates with a small team of 12 employees possessing complementary skills in energy, environment, agriculture, and communication. The company emphasizes local partnerships and sustainable development, positioning itself as a regional leader in renewable energy project development. The website reflects a professional and consistent brand image with clear information about projects, team, and local engagement. Technically, the website is built on WordPress and hosted by OVH, utilizing modern web technologies including HTML5, CSS3, JavaScript, and libraries such as Modernizr and Axios. It incorporates Google Analytics for visitor tracking with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and includes cookie consent for privacy compliance. However, it lacks published formal security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection masking, indicating legitimacy. Overall, the website presents a trustworthy and professional digital presence with moderate to good technical and security posture. Strategic improvements could include publishing detailed security and incident response policies, enhancing accessibility, and adding terms of service to strengthen compliance and user trust.

C

Collectif Transition Citoyenne

suivi-pacte-transition.org

57

The website suivi-pacte-transition.org is a French non-profit project focused on monitoring and evaluating local government policies related to environmental and social transition based on the Pacte pour la Transition. It provides tools, reports, and interactive maps to engage citizens and collectives in assessing municipal progress. The project is supported by recognized partners such as Collectif Transition Citoyenne, Réseau Action Climat, and Alternatiba, positioning it as a niche but credible player in the environmental non-profit sector. Technically, the site is built on WordPress with modern front-end technologies including Vue.js, Axios, Leaflet for mapping, and Tailwind CSS for styling. It is hosted by OVH sas, a reputable provider, and uses HTTPS with a valid SSL certificate. Performance and mobile optimization are good, though accessibility is basic. SEO is well addressed with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and domain protections like clientDeleteProhibited status but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is used for tracking without a visible consent mechanism, which may pose privacy concerns. Overall, the website is professional and trustworthy with good content quality and business credibility but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing vulnerability disclosure information.

Odoo S.A. operates a comprehensive open source business application platform that integrates ERP, CRM, eCommerce, accounting, inventory, and other business management tools. With a large global user base of 15 million, Odoo positions itself as a leading provider of flexible and customizable business software solutions. The company offers both a free Community edition and a paid Enterprise edition, catering to a wide range of business sizes and industries. Technically, the website is built on the Odoo framework, leveraging modern web technologies and providing excellent mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit incident response contacts and vulnerability disclosure pages are not found. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the strong brand presence and professional website. Strategic recommendations include publishing incident response details and vulnerability disclosure information to enhance trust and security transparency.

S

SEOPress

seopress.org

71

SEOPress is a well-established provider of WordPress SEO plugins and related SEO tools, targeting a broad audience including bloggers, small businesses, developers, agencies, and SEO experts. The company offers a freemium business model with free and premium versions of their SEO plugin, along with add-ons such as SEOPress Insights for off-site SEO tracking. Their market position is strong, supported by over 350,000 active installs and numerous positive reviews, and they maintain a professional online presence with comprehensive resources and integrations. Technically, the website is built on WordPress using modern technologies including Bootstrap 5, jQuery, and various plugins like Gravity Forms and Easy Digital Downloads. Hosting is provided by o2switch, a reputable French hosting provider. The site demonstrates excellent performance, mobile optimization, and SEO best practices, including rich metadata and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully visible in the HTML, the site shows no signs of exposed sensitive data or vulnerabilities. However, the absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The lack of WHOIS data due to privacy protection is common for commercial software vendors and does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and compliance.