Security Directory

PlayHT is a mature and reputable SaaS company specializing in AI voice generation and text-to-speech technology. Founded in 2016, it offers a comprehensive platform with over 200 realistic AI voices across 30+ languages, targeting creators, enterprises, and developers. The company positions itself as a leader in the AI voice generation market, supported by strong branding and partnerships with well-known companies. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Cloudflare and AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers could be improved. Privacy compliance is good with clear privacy and terms of service pages, though cookie consent mechanisms are not evident. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

Domain Union AG operates as a small-sized domain registration and web hosting provider primarily serving German-speaking customers. The company offers affordable .de domain registrations with additional services such as email hosting, FTP access, and SSL certificates. Their market position is focused on cost-effective solutions with quick domain registration turnaround times, supported by customer testimonials emphasizing speed and service quality. Technically, the website is built on basic HTML and CSS without modern frameworks or CMS, showing moderate performance but lacking mobile optimization and accessibility features. Security posture is limited with no visible HTTPS enforcement or security headers, and privacy compliance is minimal despite the presence of a privacy policy page. Overall, the website is functional but could benefit from modernization and enhanced security practices.

I

Irfan Skiljan

irfanview.info

49

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users worldwide. The website presents the software as fast, compact, and supporting multiple Windows versions with multi-language and Unicode support. The business model is freeware distribution with optional donations and support registrations. The site is small-scale, run by the author Irfan Skiljan, and hosted by domainunion in Austria. Technically, the website uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is domainunion, and the site performance is moderate with basic mobile optimization and accessibility. Security posture is moderate; no HTTPS status or security headers were confirmed from the data, and no forms collect sensitive data. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a generic email address. Overall, the site is trustworthy and professional but could improve security and privacy features.

I

Irfan Skiljan

irfanview.net

47

IrfanView.net is the official homepage for IrfanView, a widely recognized and popular freeware graphic viewer software primarily targeting Windows users. The website offers downloads for multiple versions of the software, including 32-bit, 64-bit, and ARM64, along with plugins, skins, and language packs. The business model is freeware for non-commercial use with options for donations and support registrations. The site is maintained by the author Irfan Skiljan, with a long domain history dating back to 2004, reinforcing its established market presence. Technically, the website is a straightforward static site using basic HTML, CSS, and JavaScript without modern frameworks or CMS. It is hosted by Hetzner Online GmbH, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website claims, showing a legitimate and long-standing domain registration. Overall, the website is trustworthy, professional, and safe for general audiences. However, improvements in security headers, privacy compliance, and transparency about data protection and incident response would enhance its security posture and user trust.

C

Office de Tourisme Cap d'Agde Méditerranée, Hérault, Occitanie

capdagde.com

57

The website www.capdagde.com serves as the official tourism office portal for the Cap d'Agde Mediterranean region in Hérault, Occitanie, France. It provides comprehensive information on local tourism services including accommodation, activities, events, and gastronomy, targeting tourists and visitors to the region. The site is built on WordPress and integrates Matomo analytics for visitor tracking. The technical infrastructure is modern with responsive design and good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

F

France Travail

pole-emploi.fr

57

France Travail is a French governmental employment platform providing a comprehensive range of services including job offer searches, allocation and aid estimations, online registration for job seekers, and dedicated employer services. The website is well-branded, professionally designed, and targets job seekers and employers across France. It serves as a national public employment service with a large user base and extensive content offerings. Technically, the site uses modern web technologies including JavaScript frameworks, Dynatrace monitoring, and Piano Analytics for performance and user behavior tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and secure form practices, though explicit security headers and incident response information are not visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and safe, with no suspicious or adult content detected.

I

Institut national de l’information géographique et forestière

ign.fr

61

The Institut national de l’information géographique et forestière (IGN) is a French government entity specializing in the production and dissemination of geographic and forestry data. The website serves a diverse audience including individuals, professionals, public policy actors, educators, and students. It offers a comprehensive range of cartographic services, data access, and applications, positioning itself as the authoritative national geographic data provider in France. The business model is public service-oriented, focusing on data accessibility and support for various user needs. Technically, the website is built on Drupal 10, leveraging modern web technologies such as JavaScript and CSS, with good mobile optimization and accessibility features. The site demonstrates moderate performance and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of publicly available WHOIS data is typical for .fr domains and does not detract from the legitimacy of the site. The presence of official contact information, social media channels, and comprehensive policies further enhance credibility. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.

A

Assistance publique - Hôpitaux de Paris (AP-HP)

aphp.fr

66

Assistance publique - Hôpitaux de Paris (AP-HP) is the largest public healthcare institution in Europe, operating 38 hospitals and serving millions of patients annually. The website provides comprehensive information on patient care, research, education, and innovation, targeting patients, healthcare professionals, researchers, and partners. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. WHOIS data is missing, which is unusual but likely due to AFNIC policies or privacy protection, not indicating malicious intent. Overall, the website is professional, trustworthy, and compliant with GDPR.

blackpills studio is a media production company specializing in the development, production, and international distribution of premium short-form series. The company positions itself as an international content producer with a focus on mobile and SVOD platforms, targeting a general audience interested in original series. The website reflects a small-sized media business founded in 2006, with consistent branding and a professional online presence hosted on the MyPortfolio platform and OVH infrastructure. Technically, the site uses modern web technologies including HTTPS, JavaScript, and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy or security policies. No contact information or detailed compliance documentation is present, which limits transparency and user trust. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

S

Stadt Rheine

rheine.de

56

Stadt Rheine operates as the official municipal government website for the city of Rheine in Germany, providing a broad range of public services, cultural information, and tourism resources. The site targets residents, visitors, and businesses, offering online forms, event information, and administrative contacts. The website is well-structured with comprehensive navigation and modern design elements, reflecting a medium-sized government entity with a strong local presence. Technically, the site employs modern JavaScript libraries such as Swiper.js and ExtJS, uses a recognized CMS (Recon CMS), and implements cookie consent via Klaro, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and basic security headers present, though additional headers and a published incident response policy would enhance trust. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and safe for general audiences.

The website mairie-venoy.fr serves as the official online presence for the Mairie de Venoy, a local government entity in France. It provides residents and visitors with municipal information, administrative procedures, community news, and contact details. The site targets local citizens and those interested in the commune's affairs, offering a basic but functional information portal. The business model is typical of government websites, focusing on public service and information dissemination rather than commercial activities. From a technical perspective, the website employs traditional web technologies including HTML, CSS, and JavaScript libraries such as Prototype.js and Scriptaculous, alongside LightboxJS2 for image display. Hosting is provided by OVH, a reputable provider. However, the site lacks modern CMS frameworks and shows signs of aging technology, with limited mobile optimization and basic accessibility features. Performance is moderate, and SEO practices are minimal. Security posture is moderate but could be significantly improved. The site uses HTTPS and includes Google Analytics for visitor tracking but lacks critical security headers and modern security practices. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and trustworthy as a local government portal but requires updates to its security, privacy compliance, and technical infrastructure to meet modern standards and improve user experience. Strategic improvements in these areas will enhance trust, compliance, and operational resilience.

Č

ČVIRO

cviro.sk

54

ČVIRO is a small Slovak vehicle rental company specializing in utility vehicles such as vans, pickups, buses, refrigerated trucks, and tractors. The website presents basic information about the business and its offerings, targeting individuals and businesses in need of utility vehicle rentals. The domain is well established since 2006, with consistent WHOIS data and DNSSEC enabled, indicating legitimacy and good domain security practices. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern web design features such as mobile responsiveness and accessibility enhancements. Security posture is weak with no visible security headers or HTTPS enforcement details, and privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to phone numbers and one email address, with no physical address or social media presence. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

G

GoDaddy Operating Company, LLC

vakita.com

73

The website is a professionally designed domain aftermarket sales landing page operated by GoDaddy Operating Company, LLC. It offers the domain vakita.com for sale with options to buy outright or lease to own, supported by secure payment methods and transaction assistance. The site leverages modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, and demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS and secure payment integrations, though explicit security headers and terms of service pages are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and well-positioned in the domain aftermarket e-commerce sector.

N

NetCURD

netcurd.fr

40

NetCURD is a small French marketing and communication agency founded in 2015, serving clients primarily in the Rennes and Nantes regions. The company offers a comprehensive suite of services including marketing strategy consulting, graphic design for web and print, web development with WordPress and e-commerce solutions, and digital marketing services such as SEO, SEA, social media management, and email campaigns. Their market position is that of a regional agency providing 360° accompaniment to business growth. The website is professionally designed, mobile optimized, and uses modern technologies such as Next.js and SVG graphics. Hosting is provided by Infomaniak Network SA, a reputable provider.

P

Paris Saint-Germain

psg.fr

69

Paris Saint-Germain's official website serves as a comprehensive digital platform for fans and stakeholders to access the latest news, live match updates, and exclusive content related to the club's various sports activities including men's and women's football, handball, judo, and esports. The site is professionally designed with consistent branding and targets a global audience of sports enthusiasts and PSG supporters. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

S

Singula soft s.r.o.

singula.cz

39

Singula soft s.r.o. is a Czech Republic based small technology company specializing in custom software development and process automation using modern low-code and no-code platforms, notably as a partner of Tabidoo. Their website presents a professional image with clear business descriptions, team contacts, and service offerings focused on digital transformation for small businesses and entrepreneurs. The technical infrastructure is modern, leveraging JavaScript and Google Tag Manager for analytics, with a responsive design and cookie consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policy are notable gaps. The WHOIS data is unavailable, which impacts domain trust but the website content and business information appear legitimate. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

MKW-air, s.r.o. is a small Czech aviation company specializing in sightseeing flights, observation flights, introductory flights, photo flights, and ultralight pilot training based at Plzeň - Letkov airport. The company has been operating since 2008 and presents itself as a local aviation service provider with a focus on the Western Czech region. The website content is primarily in Czech and targets aviation enthusiasts, tourists, and prospective pilots. Technically, the website uses basic HTML 4.0 Transitional with CSS and JavaScript, including Google Analytics for user tracking. The site lacks modern CMS or frameworks and shows basic mobile and accessibility features. Security posture is moderate with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are published, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but would benefit from modernization and improved security and privacy compliance.

ABCproZDRAVÍ.cz is a Czech Republic-based small e-commerce business specializing in health products, dietary supplements, and cosmetics. Operating since 1995, the company offers a range of products focused on healthy nutrition, immunity strengthening, and weight management. The website provides product listings, descriptions, and an online shopping cart, targeting health-conscious consumers in the Czech market. The business model centers on direct online sales with expert advisory services. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. Security posture is average; HTTPS is assumed but no advanced security headers or anti-CSRF protections are evident. Privacy compliance is basic, with cookie consent implemented but no detailed GDPR policy found. The absence of WHOIS data limits domain trust verification, though the website content and business claims appear consistent and legitimate. Overall, the site is functional but would benefit from technical and security enhancements to improve trust and user experience.

S

spoilercentrum.cz

spoilercentrum.cz

48

Spoilercentrum.cz is a Czech Republic-based online retailer specializing in automotive tuning parts and accessories. The website offers a wide range of products including spoilers, filters, suspension components, and custom carbon fiber parts targeting car enthusiasts and vehicle owners interested in aftermarket modifications. The business operates primarily as an e-commerce platform with a niche focus on automotive tuning. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery 1.7.2, with some legacy components such as an older jQuery version. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and uses outdated libraries which could pose risks. The absence of WHOIS data limits domain trust assessment, though the website provides clear contact information and integrates trusted Czech e-commerce widgets. Overall, the site is functional and professional but could benefit from technical and security improvements to enhance trust and compliance.

The website www.deky.eu is a Czech e-commerce platform specializing in the sale of bedding products including blankets, pillows, bed sheets, and mattress protectors. It emphasizes Czech manufacturing and quality products suitable for allergy sufferers. The site is structured with clear navigation and product categorization, targeting general consumers in the Czech Republic seeking home textile products. Technically, the site uses standard web technologies such as jQuery and custom JavaScript, with basic mobile optimization and SEO practices. However, there is no evidence of HTTPS enforcement or advanced security headers, which poses a moderate security risk. Privacy compliance is limited, with no explicit privacy policy page found, though a cookie consent mechanism is implemented. Contact information is not clearly provided, which may impact user trust and support accessibility. Overall, the site appears legitimate and functional but would benefit from enhanced security and privacy measures.

M

- MojeNákupy.cz

mojenakupy.cz

40

MojeNákupy.cz is a Czech online retail store specializing in a broad assortment of household, garden, and tool products. The website offers shopping without mandatory registration and free shipping for orders exceeding 10,000 CZK. The business targets Czech consumers seeking convenient online access to diverse product categories including cleaning supplies, electronics, and pest control. The market position appears to be a niche local e-commerce retailer with a basic but functional online presence. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Facebook SDK, and Heureka widgets for social and marketing integration. The site lacks advanced CMS or modern frameworks and shows basic mobile optimization and SEO practices. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are not found, indicating compliance gaps. WHOIS data is missing, reducing trust and raising concerns about domain legitimacy. Overall, the site is functional for retail but requires improvements in security, privacy compliance, and transparency to enhance business credibility and user trust.

A

ALTER s.r.o.

alter-hk.cz

49

ALTER s.r.o. is a Czech Republic-based company specializing in the wholesale and manufacturing of cleaning, disinfecting, and hygiene products. With over 24 years of market presence, the company serves primarily registered business customers, offering a broad range of products including cleaning agents, packaging materials, and gastro supplies. The website reflects a well-established regional wholesaler with a clear B2B business model and a focus on professional clientele. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, but uses an outdated jQuery version which poses security risks. The site is moderately optimized for performance and mobile use, with basic accessibility and good SEO practices. Security posture is moderate; HTTPS is used, and cookie consent mechanisms are implemented, but there is a lack of modern security headers and the use of outdated libraries. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from technical and security updates.

P

PT SERVIS

ptservis.cz

43

PT SERVIS operates an e-commerce website focused on sports nutrition, healthy nutrition, bodybuilding, fitness, and aerobic products primarily targeting fitness enthusiasts and health-conscious consumers in the Czech Republic. The website offers a broad catalog of supplements, fitness equipment, and related health products, supported by promotional campaigns and customer engagement tools such as live chat and discount coupons. Technically, the site uses standard web technologies including JavaScript, jQuery, and CSS, with integrations for marketing and tracking services. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks a publicly accessible privacy policy and terms of service pages, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, limiting the ability to verify domain legitimacy and age. Overall, the website presents a professional and functional e-commerce platform with moderate technical maturity and security posture.

L

Lékárna Srdcovka

lekarnasrdcovka.cz

45

Lékárna Srdcovka operates as a local and online pharmacy based in Prostějov, Czech Republic, offering a wide range of health-related products including over-the-counter medicines, supplements, and cosmetics. The business targets Czech-speaking customers seeking convenient access to pharmaceutical products both online and in physical stores. The website supports e-commerce transactions and provides services such as e-prescription reservations, positioning itself as a trusted regional healthcare retailer. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with integration of Facebook Pixel for marketing and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information suggest a legitimate business. Overall, the site maintains a moderate security posture with recommendations to improve privacy and security practices. The overall risk assessment is moderate with a score of 74 out of 100, reflecting good content quality and business credibility but some technical and compliance gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and investigating the missing WHOIS data to improve domain trustworthiness.

M

Mega levné pneu

megalevnepneu.cz

48

Mega levné pneu is a Czech Republic-based retailer specializing in the sale of tires and wheels for a wide range of vehicles including motorcycles, cars, trucks, and agricultural machinery. The company also offers onsite tire services (pneuservis) near Prague, emphasizing fast service and ecological tire disposal. The website presents a professional and content-rich platform targeting vehicle owners and fleet operators in the region. Technically, the site uses legacy technologies such as windows-1250 charset and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is functional and credible but would benefit from enhanced security and compliance transparency.

A

Adis Transition

adis-transition.com

49

Adis Transition is a small French consulting business specializing in management de transition and operational leadership within high technology and industrial sectors. The company leverages nearly 30 years of experience to support business leaders in transforming and optimizing industrial performance. Their services include general management, operational diagnostics, R&D direction, and industrial transformation. The website is professionally designed using WordPress, featuring modern technologies such as Google reCAPTCHA v3 for form protection. While the site is well-structured and content-rich, it lacks explicit privacy and terms of service pages, and no WHOIS registration data is available, which raises some legitimacy concerns. Security posture is moderate with HTTPS enabled but missing key security headers. Overall, the site is safe, business-focused, and trustworthy, but improvements in transparency and security practices are recommended.

L

LED MULTIMEDIA s.r.o.

ledmultimedia.cz

47

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

the new botanist

thenewbotanist.com

59

The New Botanist is a French ecological gardening initiative focused on promoting biodiversity by offering seed kits of local wildflowers to create pollinator refuges. The website is hosted on Squarespace, leveraging standard web technologies and security features such as HTTPS and HSTS. While the site is well-designed, mobile-optimized, and provides relevant content for environmentally conscious gardeners, it lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate small business. Security posture is strong with HTTPS and reCAPTCHA usage, but improvements in privacy compliance and contact transparency are recommended.

M

MK software, s.r.o.

mkweb.cz

47

MK software, s.r.o. is a Czech-based small technology company specializing in custom e-commerce solutions, web design, and bespoke software development primarily targeting B2B and B2C clients. The company offers tailored internet shops, CMS-based websites, and integrated information systems with a focus on SEO and online marketing services. Their market position is supported by multiple client references and a partnership with ESET antivirus solutions. Technically, the website is built on standard web technologies including HTML, CSS, JavaScript, PHP, and SQL, with a custom CMS implied. The site demonstrates good content quality and SEO optimization but lacks modern security practices such as HTTPS enforcement and security headers. Privacy compliance is minimal, with no explicit privacy or terms of service pages found, though a cookie consent mechanism is implemented. The absence of WHOIS data limits domain legitimacy verification, but the website content and client references suggest a legitimate business presence. Overall, the site scores moderately on AI evaluation with room for improvement in security and privacy compliance.

K

Koalice proti palmovému oleji

stoppalmovemuoleji.cz

44

Koalice proti palmovému oleji is a Czech non-profit coalition established in 2013, dedicated to reducing global palm oil consumption and promoting local fat alternatives. The organization operates as an advocacy and educational platform, providing resources such as petitions, informational materials, event calendars, and community engagement opportunities. Their market position is solid within the Czech environmental NGO sector, supported by a network of 94 organizations and 141 members. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery, and integrates analytics tools like Google Analytics and Smartlook. However, the use of multiple jQuery versions and lack of visible security headers indicate areas for improvement. Security posture is moderate with no critical vulnerabilities detected but lacking advanced protections and compliance mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

D

Divadlo Husa na provázku

provazek.cz

62

Divadlo Husa na provázku is a well-established cultural theatre organization based in Brno, Czech Republic, with a history dating back to 1967. The institution focuses on contemporary theatrical performances and cultural projects, serving a general audience interested in arts and culture. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and privacy policy documentation are missing. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong partner ecosystem and content quality.

M

Métropole Européenne de Lille

lillemetropole.fr

64

Métropole Européenne de Lille (MEL) is a public metropolitan government entity serving 95 communes in the Lille region of France, with a population of approximately 1.2 million residents. The website serves as an official portal providing information and services related to urban planning, waste management, transportation, culture, economic development, and environmental sustainability. The MEL positions itself as a key regional authority with a comprehensive service offering to residents, businesses, and professionals. Technically, the website is built on Drupal 10, leveraging modern web technologies and providing a responsive, accessible user experience. The site includes cookie consent mechanisms and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and well-aligned with the public institution it represents.

A

ABMI Engineering

abmi-engineering.com

68

ABMI Engineering is a well-established French engineering company founded in 2002, specializing in multiple industrial sectors including nuclear, rail, aerospace, health, and manufacturing. The company offers a broad range of engineering services such as design, industrialization, supply chain management, robotics, and IoT solutions. Their market position is supported by a diversified sector presence and partnerships with major industry players. Technically, the website is built on a modern Next.js framework, optimized for performance and mobile responsiveness, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website projects a professional and trustworthy image with strong business credibility and technical maturity.

L

Accueil | Lecture en tête

lecture-en-tete.fr

50

Lecture-en-tete.fr is a French cultural or literary website associated with an organization and a literary festival. The site is minimalistic, primarily serving as a portal linking to related association and festival websites. The domain is well-established since 2010 and registered with a reputable registrar, indicating legitimacy. The technical infrastructure is basic, using standard CSS and Typekit fonts, hosted by IONOS SE. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. No contact information or forms are present, limiting user engagement and compliance with privacy regulations. Overall, the site is functional but lacks modern security and privacy features, which should be addressed to improve trust and compliance.

L

Loire Atlantique Développement

tourisme-loireatlantique.com

57

Loire Atlantique Développement operates the official regional tourism website for Loire-Atlantique, France, providing comprehensive information on local activities, cultural heritage, natural sites, and seasonal events. The website targets tourists and local visitors seeking authentic experiences, accessibility information, and sustainable travel options. It holds a strong market position as the authoritative source for tourism in the region, supported by consistent branding and high-quality content. Technically, the website is built on WordPress, leveraging modern web technologies including JavaScript, SVG graphics, and responsive design. Hosting is provided by Nuxit, with domain registration dating back to 2015, indicating an established digital presence. The site demonstrates good SEO and accessibility practices, with structured data and mobile optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers, and does not publish a security policy or incident response information. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and user-friendly, with a solid security posture for its business type. Strategic improvements include enabling DNSSEC, adding security headers, and publishing security and vulnerability disclosure policies to enhance trust and resilience.

C

CIC Market Solutions

cic-marketsolutions.eu

72

CIC Market Solutions is a specialized financial services division of Crédit Mutuel Alliance Fédérale, providing market solutions and advisory services to corporate clients and financial institutions. With a workforce of approximately 200 employees and multiple trading rooms across France and internationally, the company serves over 6,000 enterprises and 600 financial institutions. Their offerings include market financing, treasury placement, corporate brokerage, and financial communication services, positioning them as a significant player in the French financial services sector. Technically, the website employs modern web technologies including jQuery and JavaScript, with responsive design and good SEO practices. The site is served over HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, accessibility compliance is currently poor, and some security headers are not explicitly detected, indicating room for improvement in security hardening. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks explicit security policies, incident response contacts, and detailed data protection officer information. The absence of WHOIS registrant data is due to EURid privacy protection, which is common and justified for financial entities. No critical vulnerabilities or suspicious patterns were detected. Overall, CIC Market Solutions presents a professional and trustworthy online presence consistent with its business profile. Strategic recommendations include enhancing accessibility, publishing explicit security and privacy policies, and improving security header implementation to strengthen the security posture and compliance.

I

Irfan Skiljan

irfanview.com

47

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users. The website serves as the official homepage offering downloads, information, and support for the software. It positions itself as one of the most popular image viewers worldwide with a focus on simplicity, speed, and multi-language support. The business model is freeware for non-commercial use with options for donations and support. The website content is professionally presented with clear navigation and relevant partner links, targeting a general audience interested in image viewing and editing tools. Technically, the website uses standard HTML, CSS, and JavaScript without advanced frameworks or CMS. Hosting is provided by domainunion.de, and the site offers multiple download mirrors. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the website's apparent long history and professional presentation. No forms collect sensitive data, reducing immediate risk, but the absence of HTTPS verification and security policies is a gap. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is moderate with recommendations to improve domain registration transparency, implement HTTPS and security headers, add privacy and cookie policies, and publish security incident response information. These steps would enhance trust and compliance, aligning the site with modern security and privacy standards.

A

Action Media

actionmedia.fr

54

Action Media is a French communication agency specializing in the automotive aftermarket and building sectors, established since 1973. The company provides strategic communication and production services to major players in the automotive industry both domestically and internationally. The website reflects a professional and consistent brand presence, targeting automotive industry professionals and distributors. Technically, the site is built on the Wix platform using modern web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though some security headers and privacy compliance elements are missing. Overall, the site appears legitimate and trustworthy, though improvements in privacy and security policies are recommended.

T

Typeform

videoask.it

55

VideoAsk by Typeform is a technology-driven SaaS platform specializing in interactive video communication tools designed to enhance business conversations and relationships at scale. The platform offers services such as video funnels, AI-powered chatbots, multimedia messaging, and video forms, targeting businesses in recruitment, sales, marketing, and customer support sectors. The website demonstrates a strong market position with over 10,000 companies as customers and consistent branding aligned with its parent company, Typeform. Technically, the website employs a modern tech stack including React and Next.js, with integrations for cookie consent (OneTrust), A/B testing (Optimizely), and analytics (Google Tag Manager). The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. The security posture is strong overall, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Overall, VideoAsk presents a professional, secure, and privacy-conscious platform with a solid business foundation. Strategic recommendations include publishing detailed security policies, providing direct security contacts, and enhancing transparency through vulnerability disclosure programs to further strengthen trust and compliance.

OnlineStrat.fr is a French digital marketing and internet strategy website managed by David Chelly. It provides news, guides, directories, and resources aimed at internet professionals, marketers, startups, and beginners interested in web technologies and e-business. The site features a variety of content including articles on SEO, e-commerce, startups, and digital tools, positioning itself as a niche resource in the French-speaking digital marketing community. Technically, the website uses standard HTML, CSS, and JavaScript with legacy Adobe Spry framework components and integrates Google services such as Analytics and Custom Search Engine. While the site is accessible and content-rich, it lacks modern security headers and explicit GDPR cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is missing, which reduces transparency and trust but the active and professional nature of the site partially mitigates this concern. Overall, the site is moderately mature technically and business-wise, with room to enhance security and privacy compliance.

L

Letní kina v ČR - Letňáky.cz

letnaky.cz

54

Letnaky.cz is a Czech Republic-based online portal providing the largest comprehensive overview of summer outdoor cinemas across the country, listing 494 venues with detailed programming information. The website targets cinema enthusiasts and the general public interested in outdoor cultural events. The business model is informational, focusing on content aggregation and event promotion without direct transactional services. The domain has been active since 2015, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Facebook SDK for social media features. Hosting is provided by a Czech hosting provider (Forpsi). The site shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data, but accessibility features are minimal. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. There are no forms or data collection mechanisms on the homepage, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, Letnaky.cz is a trustworthy and legitimate informational website with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

Verizon Media, operating under the Yahoo brand, is a major global media and technology company providing digital content, advertising, and analytics services. The analyzed page is a Finnish language consent management interface designed to comply with GDPR and related privacy regulations, enabling users to accept or reject cookie usage and data processing by Verizon Media and its partners. The company maintains a strong market position with a portfolio of well-known media brands and a business model centered on advertising and digital media services. Technically, the website employs modern web technologies including JavaScript and CSS, with a focus on user consent and privacy compliance. Security posture is moderate with HTTPS usage evident, though explicit security headers and policies are not visible on this page. Overall, the site demonstrates good privacy compliance and business credibility, with no signs of blocking or WAF interference.

Maylhop is a professional email service offered by Medialibs, a company specializing in digital solutions including website creation software and CMS platforms. The service provides personalized email addresses linked to customers' domain names, enhancing digital presence and credibility. Maylhop offers features such as email aliases, redirections, mailing lists, spam and antivirus protection, and webmail access, targeting professionals and businesses seeking reliable email solutions. The website is hosted as a subdirectory under medialibs.com, indicating close integration with the parent company’s digital ecosystem. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery, and integrates Google Tag Manager and Google reCAPTCHA for analytics and spam protection. A cookie consent mechanism compliant with GDPR is implemented using tarteaucitron.js, allowing granular user control over cookies. The site is mobile-optimized and presents a professional design with clear navigation. From a security perspective, HTTPS is enforced, and forms are protected with reCAPTCHA. However, no explicit security headers were detected, and no privacy policy or terms of service pages are published, which are gaps in compliance and transparency. The WHOIS data for the domain www.maylhop.com is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional content. Overall, the website is functional and professional but would benefit from improved transparency through published policies and enhanced security headers. The domain registration inconsistency should be addressed to improve trustworthiness.

E

ESTILO DESIGN s.r.o.

estilodesign.cz

53

ESTILO DESIGN s.r.o. is a Czech-based small business specializing in printing and graphic design services. Their offerings include production and installation of advertising media, large and small format printing, and graphic design studio services. The company targets businesses and individuals in the Czech Republic and Slovakia, providing an online e-shop with a print calculator for customer convenience. The website is professionally designed with clear navigation and good content quality, reflecting a consistent brand image and trust indicators such as GDPR compliance and contact transparency. Technically, the site uses modern web technologies including Google Tag Manager and Analytics, with HTTPS enforced and a cookie consent mechanism implemented. However, no explicit security headers or incident response policies are publicly available, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Overall, the website is secure, compliant, and professional, suitable for its business purpose.

T

Turistika.cz s.r.o.

porovname.cz

45

The website www.porovname.cz hosts an administrative login page for an advertising server operated by Turistika.cz s.r.o., a Czech company likely involved in tourism-related advertising. The platform uses Revive Adserver version 5.3.1 to manage and serve advertisements. The site is minimalistic, primarily serving as an authentication portal for internal or authorized users rather than public-facing content. The lack of public business information, privacy policies, or contact details limits transparency and user trust. Technically, the site employs legacy frontend practices such as an IE=7 compatibility meta tag and lacks modern security headers or HTTPS enforcement visible in the HTML content. The use of Revive Adserver indicates a specialized advertising technology stack, but overall technical implementation is basic with limited SEO or accessibility features. The absence of WHOIS data for the domain www.porovname.cz raises concerns about domain legitimacy and registration status. From a security perspective, the site shows basic security hygiene with a POST login form but lacks critical protections such as HTTPS, security headers, and visible anti-CSRF measures. No privacy or cookie policies are present, indicating poor compliance with GDPR or other data protection regulations. The missing WHOIS data further reduces trustworthiness and raises questions about domain ownership and legitimacy. Overall, the website presents a low-risk profile in terms of content safety, as it contains no adult or explicit material, but it suffers from significant security and compliance shortcomings. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and resolving WHOIS data visibility to improve trust and compliance.

S

Svaz kulturistiky a fitness České republiky

skfcr.cz

43

The Svaz kulturistiky a fitness České republiky (SKFČR) is the official national federation for bodybuilding and fitness in the Czech Republic. The website serves as an information portal for athletes, clubs, and enthusiasts, providing event calendars, competition results, regulatory information, and educational content. The federation maintains partnerships with fitness nutrition brands and media outlets, reinforcing its position in the national sports community. The website content is primarily in Czech and targets the local bodybuilding and fitness community. Technically, the site uses standard web technologies with embedded Google Analytics and Facebook Pixel for user tracking. However, the site lacks modern CMS features and advanced mobile optimization.

S

Shopper Park Plus Nyrt.

shopperparkplus.hu

47

Shopper Park Plus Nyrt. is a Hungarian real estate investment company specializing in regional retail properties. The company operates a portfolio of retail parks across several Hungarian cities, targeting investors interested in stable, long-term euro-denominated returns. The website presents a professional image with detailed portfolio descriptions and investor-focused content, though it lacks explicit privacy and terms of service pages. Technically, the site is built on WordPress using Elementor, with a cookie consent mechanism in place and HTTPS properly configured. Security posture is moderate but could be improved with additional security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its market segment but would benefit from enhanced privacy compliance and contact transparency.

V

Vlaams Audiovisueel Fonds

vaf.be

51

The Vlaams Audiovisueel Fonds (VAF) is a government-affiliated organization dedicated to supporting the professional audiovisual and games sector in Flanders, Belgium. The website clearly communicates its mission to provide financial subsidies, training, coaching, and public film culture support. It serves as a key regional institution with a strong market position in the media sector, targeting professionals and creators in audiovisual and gaming industries. The site is well-branded, consistent, and professionally designed, reflecting its official status and credibility. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and performs well, providing a positive user experience. The presence of cookie consent mechanisms and comprehensive privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site uses HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced security posture. WHOIS data is privacy protected, which is justified given the organization's nature, but limits domain registration transparency. Overall, the VAF website is a trustworthy, professional, and well-maintained digital presence for a government-supported media fund. It effectively balances user experience, privacy compliance, and security, though it could improve by publishing security policies and implementing additional security headers.

T

Tamda Express

tamdaexpress.eu

59

Tamda Express operates as a multilingual e-commerce platform specializing in grocery and food delivery services, primarily targeting Vietnamese-speaking customers in the Czech Republic. The website offers a broad product range including fresh, frozen, grocery, beverages, and personal care items, positioning itself as a niche regional online retailer with home delivery capabilities. The business model focuses on direct-to-consumer sales through an online storefront with multi-language support to cater to its target demographic. Technically, the website is built on the CS-Cart CMS platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5. It integrates GDPR compliance tools like Klaro for cookie consent and uses Foxentry for address verification, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and does not provide explicit security policies or incident response contacts. No critical vulnerabilities or WAF protections were detected, suggesting a stable but improvable security posture. The absence of privacy and terms of service documents represents a compliance gap. Overall, Tamda Express presents a moderately professional and trustworthy online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in security headers, policy transparency, and incident response readiness would strengthen its risk posture and customer trust.

D

Denník N

mnt.sk

55

Denník N operates a Slovak news media website providing fast, real-time news updates across politics, economy, culture, and sports. The platform targets a general audience interested in current affairs in Slovakia and internationally. The website uses modern web technologies including React and integrates analytics and advertising tools such as Google Tag Manager and Gemius. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms policies are not found on the analyzed page. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the site presents professional content with good user experience and moderate technical performance.