Security Directory

D

Družstvo CBA CZ

bimkarta.cz

40

BIM Karta is a Czech Republic based retail loyalty program operated by Družstvo CBA CZ, offering customers benefits such as discounts, vouchers, and product catalogs. The website serves as a customer portal for registration, account management, and accessing promotional materials. Technically, the site is built on WordPress using the GeneratePress theme and integrates common plugins like Yoast SEO and Google reCAPTCHA for security and SEO optimization. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent banner. Overall, the site is legitimate, professional, and trustworthy with consistent WHOIS data and no blocking mechanisms detected.

B

Bohušovická mlékárna, a.s.

skyrcz.cz

58

Bohušovická mlékárna, a.s. is a Czech dairy manufacturer specializing in the production of Skyr, a traditional Icelandic dairy product. The company is a market leader in the Czech Republic for Skyr products, offering a variety of flavors and promoting healthy living through high-protein, low-fat dairy options. Their website is professionally designed, mobile-optimized, and rich in content including product details, recipes, and retail partner information. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA to enhance user experience and security. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Security posture is good with HTTPS and CAPTCHA protection on forms, though security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations.

I

IFLR1000

iflr1000.com

71

IFLR1000 is a well-established publishing entity specializing in financial and corporate law firm rankings, serving legal professionals and corporate clients globally. The website provides annual rankings and editorial content, positioning itself as a market leader in its niche. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and integrates multiple analytics and advertising platforms such as Google Analytics, Microsoft Clarity, and Adition, hosted on Azure DNS infrastructure. The site demonstrates good digital maturity with responsive design and comprehensive cookie consent mechanisms ensuring GDPR compliance. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit published security policies and incident response contacts. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen trust and compliance.

svt Products BV operates a specialized web platform and Android app called the Logboek manager, designed to facilitate fire protection project management including recordings, inventories, work preparations, and logbook compilation for clients and regulatory bodies. The company targets professionals and organizations involved in fire safety compliance in the Netherlands, positioning itself as a niche provider with a focused service offering. The website is built on a legacy ASP.NET WebForms platform with Telerik UI components, indicating a stable but somewhat dated technical infrastructure. The presence of DNSSEC and an active domain registered since 2015 supports the legitimacy and operational maturity of the business. However, the website lacks modern privacy and cookie policies, and security headers are absent, which are areas for improvement.

Agentura Alie s.r.o. is a Czech-based professional translation and accounting agency offering a broad range of language services including translations, proofreading, localization, DTP, copywriting, interpreting, and accounting. With over 15 years of market presence and a team of more than 200 translators and native speakers, the company positions itself as a reliable provider of high-quality language and accounting services primarily targeting businesses and individuals in need of such services. The website is well-structured, multilingual, and provides clear contact information and client testimonials, supporting its market credibility. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 to enhance user experience, analytics, and security. The site is mobile optimized and performs moderately well, though some improvements in accessibility and security headers could be made. The use of HTTPS and reCAPTCHA indicates a good baseline security posture. From a security perspective, the site lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. The WHOIS data is privacy protected or unavailable, which is common for small businesses but limits domain age verification and registrant transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance its security posture and user trust.

Y

YMY CL s.r.o.

ymy.cz

46

YMY CL s.r.o. is a Czech-based company specializing in interior design services including office and residential interiors, 3D visualizations, and complete realization and furnishing. Established in 1994 and operating as a limited liability company since 2010, it serves clients primarily in Prague, Liberec, Česká Lípa, and Northern Bohemia. The company positions itself as a professional and comprehensive service provider in the interior design sector with a focus on customer needs and quality execution. Technically, the website employs modern web technologies such as jQuery, Foundation CSS, and analytics tools like Google Analytics and Piwik, indicating a moderate level of digital maturity. However, the absence of WHOIS data and privacy/cookie policies reveals gaps in transparency and compliance. Security posture is moderate with HTTPS usage but lacks security headers and formal incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.

F

FARMA HOLANY s.r.o.

apartmanyholany.cz

47

Apartmány Holany is a small hospitality business offering family apartments for rent near Česká Lípa, Czech Republic. The website provides detailed accommodation information, contact details, and local tourist tips, positioning itself as a local lodging provider near Milčanský pond. The business is operated by FARMA HOLANY s.r.o., a registered Czech company. The website is professionally designed with responsive features and uses modern web technologies including Google Analytics and reCAPTCHA for security and tracking. However, the absence of WHOIS data limits domain trust assessment. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and incident response information. Privacy compliance is supported by a cookie consent banner and privacy policy in Czech language. Overall, the site is safe, family-friendly, and functional, but could improve transparency and security practices.

A

Ace IT s.r.o.

aceit.cz

53

Ace IT s.r.o. is a Czech-based technology company specializing in the creation of custom web projects, including websites, e-shops, and online applications, with a strong focus on quality and client-centric services since 2008. The company positions itself as a boutique agency delivering tailored solutions with an emphasis on performance and user experience. Their service portfolio includes web development, online marketing, hosting, and IT outsourcing, targeting businesses seeking professional digital presence and marketing support. Technically, the website demonstrates a mature digital infrastructure using modern frameworks such as Nette and Node.js, along with front-end technologies like Bootstrap and Google Fonts. The site is well-optimized for performance and mobile responsiveness, employs HTTPS with strong SSL configuration, and integrates advanced cookie consent management and CAPTCHA for form security, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS, uses Cloudflare Turnstile CAPTCHA to mitigate spam, and provides a detailed cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS transparency and lack of explicit security policies or incident response contacts represent areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital front with solid privacy compliance and security practices. The main risk lies in the missing WHOIS data, which slightly impacts domain trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to further strengthen the security posture and compliance.

D

Diamond Experts

rezani-vrtani.cz

52

Diamond Experts is a specialized service provider in the Czech Republic focusing on core drilling and concrete cutting services. With over 25 years of experience, the company serves both businesses and households primarily in Prague and the surrounding regions. Their offerings include a wide range of concrete-related services such as wall saw cutting, joint cutting, chemical anchoring, and structural reinforcement. The website reflects a mature business with clear contact information, certifications, and customer testimonials that enhance trust and credibility. Technically, the site employs modern JavaScript libraries and Google services for analytics and advertising, with a cookie consent mechanism that aligns with GDPR requirements. Security measures include the use of hCaptcha for bot protection, but there is room for improvement in security headers and incident response transparency. Overall, the website is professional, well-structured, and trustworthy, supporting the company's market position as a local expert in construction services.

S

SalesFeed Nederland B.V.

salesfeed.com

55

SalesFeed Nederland B.V. is a Dutch technology company specializing in B2B lead generation, marketing automation, and account based marketing software. The company offers a SaaS platform focused on business recognition, real-time website personalization, and CRM enrichment to help businesses optimize sales and marketing efforts. The website is professionally designed, targeting Dutch B2B companies, and demonstrates a mature digital presence with integrations of modern marketing and analytics tools. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies are missing. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high based on website content and branding.

V

Van der Horst aannemers

vanderhorstaannemers.nl

51

Van der Horst aannemers is a medium-sized Dutch construction company specializing in complex building projects with a strong focus on budget management, planning, logistics, and fire safety. The company maintains a significant portfolio of residential and commercial properties and has a solid regional market presence. Their website reflects a professional and consistent brand image, targeting construction clients and municipalities. Technically, the website employs modern analytics and marketing tools, including Google Analytics, Facebook Pixel, and Hotjar, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data supports the legitimacy of the domain and business. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance.

T

TAB

tabbv.nl

49

TAB is a specialized Dutch company focused on building fire prevention services including compartmentalization, penetrations, emergency lighting, and maintenance. The website positions TAB as a niche expert in this field, targeting businesses and professionals requiring fire safety solutions. The site is built on WordPress with a modern tech stack including Google Tag Manager, Hotjar, and Cookiebot for analytics and compliance. Structured data and SEO metadata are well implemented, enhancing search visibility. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and published privacy or security policies, indicating room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

I

IPCOM

ipcom.be

66

IPCOM is a leading European distributor specializing in energy-efficient insulation and HVAC-R solutions, operating through six dedicated business units across 21 countries. The company emphasizes sustainability, fast delivery, and customer service excellence, positioning itself as a market leader in its sector. The website is professionally designed using Drupal 11, incorporating modern tracking and consent management technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data is restricted, which is common for commercial entities in Europe, but the website's professionalism and trust indicators support its legitimacy. Overall, IPCOM presents a credible and well-established business with a strong online presence.

G

G2O Brand Builders

g2o.nl

62

G2O Brand Builders is a specialized branding bureau based in Veenendaal, Utrecht, Netherlands, focusing on building strong brands through comprehensive brand strategy, design, and marketing services. The company positions itself as more than a traditional advertising agency, emphasizing brand building and strategic consultancy. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with a robust tech stack including Bootstrap, jQuery, and various marketing and analytics tools. The site is well-optimized for performance, mobile responsiveness, and SEO, providing a rich user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though there is room for improvement in security headers and explicit cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

K

Kreishandwerkerschaft Prignitz

handwerk-prignitz.de

9

The website 'Kreishandwerkerschaft Prignitz' serves as an informational platform for a regional crafts association in the Prignitz area of Germany. It provides an overview of partners and services relevant to local craftsmen. The site is built on Joomla! CMS and employs common frontend technologies such as jQuery, Bootstrap, and UIkit, along with Usercentrics for cookie consent management, indicating compliance efforts with GDPR. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is present in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the site is functional and serves its informational purpose but could improve in transparency and security best practices.

C

Comité régional du Tourisme de la région Centre-Val de Loire

tourisme-pro-centre-valdeloire.fr

10

The website 'Tourisme Pro' serves as the official digital platform for the Comité régional du Tourisme de la région Centre-Val de Loire, targeting tourism professionals within the region. It offers a comprehensive range of services including tourism data, professional training, innovation support, publications, and sustainable tourism initiatives. The site positions itself as a key regional resource and authority in tourism promotion. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for content management, GDPR compliance, and user engagement. Hosting is provided by Infomaniak Network SA, a reputable provider. The site demonstrates good mobile optimization, moderate performance, and solid SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully detected, no vulnerabilities or exposed sensitive data were found. The absence of direct contact emails or phone numbers suggests reliance on contact forms for communication. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It maintains good privacy compliance and provides a safe browsing experience. Strategic recommendations include enhancing security headers, expanding contact information transparency, and continuous security monitoring.

T

Tours Val de Loire Box

valdeloire-box.fr

41

Tours Val de Loire Box is a small French hospitality business specializing in selling curated experience gift boxes focused on the Val de Loire region. Their offerings include cultural passes, vintage vehicle rides, helicopter tours, gastronomy workshops, and weekend stays, targeting tourists and gift buyers interested in unique regional experiences. The website is professionally designed using WordPress with the Divi theme and WooCommerce platform, supported by modern web technologies such as jQuery and Snap.svg. The site is hosted by OVH, a reputable French provider, and includes SEO optimizations and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy policies and terms of service are present and accessible, indicating GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence for a niche tourism business.

T

Tours City Pass

tourscitypass.com

65

Tours City Pass is a small-sized tourism-focused business founded in 2020, offering digital city passes and related tourism packages for visitors to Tours, France. The website serves as an e-commerce platform enabling users to purchase passes, access interactive maps, and benefit from discounts and cultural offers. The business is positioned as a local tourism enabler with a clear target audience of tourists and visitors seeking cultural and leisure activities in the Tours metropolitan area. The parent company is Otipass, which provides the technological platform and payment processing services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, React, and various analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site demonstrates good practices such as encrypted communications, cookie consent, and no visible sensitive data exposure. There is no evidence of a published security policy or incident response plan, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, enabling DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

G

Gerstenberg Verlag GmbH & Co. KG

die-kleine-raupe-nimmersatt.de

61

Gerstenberg Verlag GmbH & Co. KG is a reputable German publishing company specializing in children's literature, notably the internationally acclaimed 'Die kleine Raupe Nimmersatt' by Eric Carle. The website serves as a blog and information portal for their publications, events, and educational content, targeting parents, educators, and children. Their market position is that of an established niche publisher with a strong brand presence and consistent content quality. Technically, the website is built on WordPress with Bootstrap framework, enhanced by Matomo analytics for user tracking. The site is hosted likely by Deutsche Telekom, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks some advanced security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy standards. It provides a safe environment focused on children's educational content. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

K

kimverlag GmbH

kimverlag.de

10

kimverlag GmbH is an independent, artist-led publishing company specializing in children's media, hobby art, and creativity. They develop and publish magazines, audio content, and digital media, also producing and licensing content for German and international book publishers. The company positions itself as a niche publisher with a focus on creative and child-friendly content, targeting children and hobby artists. The website reflects a small-sized business with a professional and consistent brand presence, founded around 2020 in Germany. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS platform with good SEO practices. Hosting is provided by rzone.de, a German hosting provider, and the site uses Google Analytics and a consent management platform for tracking and privacy compliance. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. However, no direct contact emails or phone numbers were found in the content provided. Overall, the website is trustworthy, professional, and compliant with privacy regulations, suitable for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information for security or incident response purposes.

S

SPL-XDEMAT

spl-xdemat.fr

47

SPL-XDEMAT is a French public local company established in 2012 by multiple departmental governments to provide digital dematerialization services tailored for local authorities. The company offers a suite of applications and services including administrative document management, electronic signatures, public procurement platforms, and citizen communication tools. The website reflects a mature regional service provider with a strong focus on government clients and compliance with French regulations. Technically, the site uses standard web technologies such as jQuery and JavaScript, with a responsive and accessible design optimized for mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. The absence of WHOIS data limits domain legitimacy verification but the professional presentation and official departmental partnerships support trustworthiness.

S

SPL-XDEMAT

maelis.info

47

Maelis.info is the official website for the MAELIS application, a service provided by SPL-XDEMAT aimed at facilitating local community engagement through a smartphone app. The app offers practical information, alerts, incident reporting, and access to local public services and associations. The website is professionally designed with clear navigation and mobile optimization, targeting French local government citizens and community members. The business model focuses on providing a digital platform for local government communication and citizen participation. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery and AOS for animations. It supports mobile platforms with links to iOS and Android app stores. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common but reduces transparency. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with no signs of malicious content or suspicious behavior. Strategic recommendations include implementing security headers, adding cookie consent, improving privacy disclosures, and providing clear contact information for security incidents to enhance trust and compliance.

The website www.tours-tourisme.fr serves as the official online presence of the Office de Tourisme de Tours Val de Loire, providing tourism-related services such as hotel reservations, activity bookings, guided tours, and holiday stays. It targets tourists and visitors interested in the Tours Val de Loire region in France. The site is built using modern web technologies including Gatsby and React, indicating a contemporary digital infrastructure. However, the technical implementation shows room for improvement in security and privacy compliance, as no privacy or cookie policies were detected, and security headers are absent. The WHOIS data is unavailable from the AFNIC database, which limits the ability to fully verify domain legitimacy and age. Overall, the site appears professional and trustworthy in content and design but would benefit from enhanced security and compliance measures.

A

Altimax

altimax.com

49

Altimax is a French digital agency specializing in strategy, web development, social media, SEO, and audiovisual production. Based in Annecy, France, the company serves both BtoB and BtoC clients nationally and internationally. The website demonstrates a mature digital presence with a professional design, comprehensive service offerings, and active client case studies. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not outweigh the professional presentation and compliance indicators. Overall, Altimax presents as a credible and established digital agency with room for minor security enhancements.

I

IICA - Instituto Interamericano de Cooperación para la Agricultura

iica.int

65

The Instituto Interamericano de Cooperación para la Agricultura (IICA) is a well-established international organization focused on agricultural cooperation and development in the Americas. The website presents a professional and consistent brand image, targeting governments, agricultural institutions, and rural communities. It offers cooperation programs, strategic alliances, and technical assistance to promote innovation and sustainable agriculture. The domain age and WHOIS data align with the organization's history, supporting its legitimacy. Technically, the website is built on WordPress with Elementor and optimized for performance using WP Rocket and Cloudflare services. It employs modern web technologies and provides a good user experience with mobile optimization and clear navigation. However, accessibility features are basic, and explicit privacy and cookie policies are not evident in the provided content. From a security perspective, the site uses HTTPS and benefits from Cloudflare DNS, but lacks explicit security headers and visible incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency and compliance. The overall risk is low, with recommendations to enhance privacy disclosures, implement security headers, and provide clear contact information for security incidents to strengthen trust and compliance.

S

Synergiles

synergile.fr

44

Synergiles is a French innovation cluster specializing in energy and ecological transition, acting as an interface between technical, scientific, and institutional stakeholders. The website presents a professional and consistent brand image with a clear focus on its mission and services. The technical infrastructure is based on WordPress with the Divi theme and includes modern web technologies and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and policies are absent. The absence of WHOIS data limits domain legitimacy verification, but the active social media presence and quality content support business credibility. Overall, the website is functional, secure, and professionally maintained but would benefit from enhanced transparency and security documentation.

L

Les Gîtes d'Olive

lesgitesdolive.com

58

Les Gîtes d'Olive is a small hospitality business specializing in rural holiday rental accommodations in France. The website offers direct booking capabilities and targets tourists seeking vacation stays in a natural setting. The business has been established since 2011, with a consistent domain registration history and a professional online presence. The website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. Privacy and cookie compliance are managed through Iubenda, reflecting good adherence to GDPR requirements. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although DNSSEC is not enabled. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in explicit security and incident response disclosures.

S

Spoconline Ads

spoconline-ads.fr

61

Spoconline Ads is a technology company specializing in urban innovation and smart city solutions, focusing on sustainable, connected, and people-centered urban environments. Their offerings include solar-powered connected urban furniture, advertising LCD screens, mapping solutions, and a digital creative studio, targeting businesses and municipalities primarily in the Caribbean region. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information are not publicly detailed. WHOIS data is unavailable due to privacy protection, which is typical for this business type. Overall, the site presents a trustworthy and credible business presence.

J

Judyth Dressing

judythdressing.com

53

Judyth Dressing is a French-based e-commerce retailer specializing in elegant, colorful, and modern women's fashion collections. The website offers a range of products including dresses, tops, pants, jewelry, and accessories, targeting women who want to express their femininity and character through fashion. The business appears to be newly founded in 2024, with a domain registration date consistent with this timeline. The company operates on a WordPress platform using WooCommerce for e-commerce functionality and Elementor for page building, indicating a modern and flexible technical infrastructure. Hosting is provided by OVH sas, a reputable European hosting provider. From a security perspective, the website uses HTTPS with a valid SSL certificate and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML source, which could be improved to enhance security posture. Privacy and cookie policies are not found on the site, and no consent mechanisms are implemented, which may pose compliance risks under GDPR. Google Analytics is used for tracking, integrated via the Site Kit plugin, indicating moderate user tracking. Overall, the website is professionally designed with good content quality, clear navigation, and mobile optimization. The business credibility is supported by consistent branding and transparent domain registration data. The security posture is moderate but could benefit from additional hardening measures. Privacy compliance is currently weak due to missing policies and consent mechanisms. Strategic improvements in these areas would enhance trust and regulatory compliance.

Manpower France operates as a leading recruitment and temporary staffing agency in France, providing a wide range of employment services including permanent and fixed-term contracts. The company is part of the global ManpowerGroup, which enhances its market position and credibility. The website is professionally designed, targeting job seekers and employers with clear navigation and comprehensive service offerings. The content is primarily in French, reflecting its local market focus. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. Security best practices are observed with HTTPS enforcement and appropriate security headers, although there is room for improvement in accessibility and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is readily available, including a dedicated Data Protection Officer email, enhancing trust and compliance. Overall, the website presents a low risk profile with a solid business credibility and technical foundation. The main limitation is the absence of WHOIS data, which is likely due to registry policies but should be monitored. Strategic recommendations include establishing a public vulnerability disclosure policy and enhancing accessibility features.

A

Association Foire Haute-Savoie Mont Blanc

rochexpo.com

59

Rochexpo operates as a regional event venue and exhibition center located in Haute-Savoie, France, managed by the Association Foire Haute-Savoie Mont Blanc. The organization provides modular event spaces and comprehensive event management services, targeting businesses and event organizers in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins for SEO, social media integration, and performance optimization. While the site uses HTTPS and has cookie consent mechanisms in place, it lacks some security headers and has an unconfigured Google Analytics plugin, indicating room for improvement in security posture. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website is functional, secure enough for general use, and compliant with GDPR, but would benefit from enhanced security practices and WHOIS transparency.

M

Discover Top OnlyFans Telegram Channels | Free Content Previews | mayndrive.fr

mayndrive.fr

6

The website mayndrive.fr operates as a niche content aggregator focusing on adult entertainment, specifically promoting and linking to OnlyFans Telegram channels with free preview content. The business model revolves around aggregating and providing access to various Telegram groups, many of which contain explicit or leaked adult content. The site targets an adults-only audience and positions itself as a resource for discovering popular adult content groups on messaging platforms. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS. The design and content quality are basic, with moderate mobile optimization and limited SEO features. Security posture is weak, lacking essential security headers and privacy compliance mechanisms. The domain is very new with minimal WHOIS data, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but low security and compliance readiness.

P

Portail - Centre commercial

centre-commercial.fr

58

The website www.centre-commercial.fr is a French portal dedicated to listing Carrefour shopping centers across France. It serves as an informational platform for users to locate and learn about various Carrefour commercial centers, providing addresses and links to individual center pages. The site targets general consumers in France interested in retail shopping locations affiliated with Carrefour. The business model is primarily informational, supporting Carrefour's retail presence by enhancing customer access to store locations. Technically, the website is built on WordPress using the Elementor page builder, integrating modern web technologies such as jQuery, Google Tag Manager for analytics, and Google Maps API for location services. The site includes a cookie consent mechanism compliant with GDPR norms, implemented via OneTrust. The design is responsive and optimized for mobile devices, with good SEO practices including structured data (JSON-LD) and Open Graph metadata. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of explicit privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, indicating privacy protection, which is common for commercial sites but slightly reduces transparency. Overall, the website presents a professional and trustworthy front for Carrefour shopping centers in France, with moderate technical maturity and a good security baseline. Strategic improvements include adding explicit privacy and security policies, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.

D

Digilor

digilor.fr

54

Digilor is a French technology company specializing in innovative interactive digital devices and custom tactile application development. The company targets businesses, public sector entities, and enterprises seeking advanced digital signage, interactive kiosks, and video conferencing solutions. Their market position is that of a specialized B2B provider with a strong focus on tactile and digital display technologies. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, including modern lazy loading and tracking technologies. Security posture is good with HTTPS and some security headers, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, supporting user trust. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, Digilor demonstrates a mature digital presence suitable for its business domain.

V

Ville de Vandœuvre

vandoeuvre.fr

52

The website www.vandoeuvre.fr serves as the official digital presence for the city of Vandœuvre-les-Nancy in France, providing residents and visitors with access to municipal news, event agendas, and a variety of online administrative services. The site targets a broad audience including families, seniors, students, and local businesses, positioning itself as a comprehensive resource for community engagement and public service delivery. The business model is typical of government websites, focusing on information dissemination and facilitating citizen interactions with municipal services. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The inclusion of libraries like jQuery, PhotoSwipe, and Leaflet indicates a moderately modern tech stack aimed at enhancing user experience with interactive elements such as maps and image galleries. The site demonstrates good mobile optimization and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, allowing users granular control over tracking. However, the absence of explicit security headers and lack of visible privacy policy or terms of service pages represent areas for improvement. The WHOIS data is notably missing, which is unusual for an official municipal domain and slightly detracts from the domain's trustworthiness. Overall, the site is a well-structured, professional municipal portal with solid technical foundations and a focus on user privacy. Strategic enhancements in security policy transparency and domain registration clarity would further strengthen its credibility and compliance posture.

A

AJI Groupe

exponum.salon

53

Exponum.salon is a French digital platform owned by AJI Groupe SAS that provides innovative digital mini-sites for exhibitors and organizers of salons, exhibitions, and events. The platform enhances visibility and engagement by offering dynamic digital plans, personalized QR codes, and easy-to-manage exhibitor mini-sites. The website is professionally designed using WordPress with Elementor and Yoast SEO, ensuring good SEO and user experience. The platform integrates Google reCAPTCHA v3 for form security and maintains comprehensive legal and privacy documentation, indicating strong compliance with GDPR and related regulations. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy, well-maintained, and targeted at B2B clients in the event technology sector.

P

Publicore

publicore.fr

52

Publicore is a well-established communication agency based in Colmar, France, specializing in content marketing, branding, video and photo production, web development, and social media strategy. The website reflects a professional and comprehensive digital presence with clear service offerings and client engagement. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the professional content and contact transparency. Overall, the site is safe, well-structured, and compliant with privacy regulations.

P

Parc des Expositions de Colmar

colmar-expo.fr

41

Parc des Expositions de Colmar operates as a regional exhibition and event center in Colmar, France, offering 43,500 m² of modular spaces for professional and public events including concerts, trade shows, and congresses. The website is built on WordPress using Elementor and related plugins, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS and security headers properly configured, and a cookie consent mechanism is implemented. However, the site lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance and user trust. Contact information is available primarily through a contact page and forms, with social media presence on Facebook, Instagram, and LinkedIn. WHOIS data is unavailable, limiting domain legitimacy assessment, but the website content and branding appear professional and consistent with a legitimate business.

O

OJS - Office de Justification des Statistiques

ojs.fr

39

OJS - Office de Justification des Statistiques operates as a trusted observatory and data controller for the French event industry, providing verified statistics, studies, and event data to stakeholders. The organization is accredited by COFRAC and follows ISO standards, reinforcing its credibility and regulatory compliance. The website serves as a public-facing platform to disseminate this information and support transparency in the sector. Technically, the site is built on WordPress using the Enfold theme and includes modern SEO and analytics tools, indicating a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policy disclosures. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

The Mecklenburg-Prignitzer Elektrogemeinschaft (m-peG) is a regional professional community focused on the electrical trade sector in Mecklenburg-Vorpommern, Germany. It serves as a platform for electrical installation companies and related stakeholders to collaborate, access training, and participate in industry events. The website reflects a well-structured, professional presence with clear navigation and relevant content tailored to its target audience of trade professionals and members. The business model centers on membership and event-based revenue streams, supported by partnerships with regional industry associations and companies. Technically, the website is built on Django CMS with modern frontend technologies including Bootstrap 5 and Swiper.js for interactive elements. It employs Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security practices include HTTPS enforcement and CSRF protection on forms, but lack explicit security headers and cookie consent mechanisms. From a security perspective, the site demonstrates a solid baseline posture with no evident vulnerabilities or exposed sensitive data. However, the absence of a cookie consent banner and security policy documentation suggests room for improvement in GDPR compliance and transparency. The WHOIS data is minimal but consistent with the website's regional focus, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures. Strategically, the organization should prioritize implementing cookie consent mechanisms, publishing security policies, and adding vulnerability disclosure information to strengthen compliance and user trust. Enhancing accessibility and security headers will further improve the site's robustness and reputation.

V

VDE VERLAG GmbH

vde-verlag.de

66

VDE VERLAG GmbH operates as a specialized technical publisher and seminar provider focused on electrical engineering standards, technical literature, and professional training. The company serves professionals and organizations in the energy and electrical engineering sectors primarily in Germany. Their business model centers on publishing DIN-VDE and IEC standards, technical books, journals, and offering subscription services and seminars. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, hosted on German Telekom infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Analytics are implemented via etracker with user consent mechanisms in place. Security best practices such as HTTPS enforcement and anti-clickjacking scripts are present, though HTTP security headers and a formal security policy are absent. Security posture is solid but could be improved by adding explicit security policies and incident response contacts. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. WHOIS data is minimal but consistent with a legitimate German entity. No suspicious or malicious indicators were found. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's position as a reputable technical publisher. Strategic improvements in security transparency and header implementation would enhance trust and resilience.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

nasa.de

64

Nahverkehrsservice Sachsen-Anhalt GmbH (NASA GmbH) is a regional public transportation authority responsible for planning, ordering, and financing local rail passenger transport in the German state of Sachsen-Anhalt. The company also operates the INSA timetable information system, serving public transport users and stakeholders in the region. The website reflects a professional and consistent brand presence, targeting primarily German-speaking users interested in regional mobility services. The business model focuses on public sector transportation planning and service provision, positioning NASA GmbH as an essential regional player in transportation infrastructure and information services. Technically, the website is built on the TYPO3 CMS platform, integrating modern web technologies such as jQuery, ReadSpeaker for accessibility, and Cookiebot for GDPR-compliant cookie management. Hosting is managed via DomainControl nameservers, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Analytics are conducted using Piwik (Matomo), indicating a privacy-conscious approach to user data collection. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain registration appears legitimate and consistent with the business's regional focus. Overall, the website presents a low-risk profile with strong privacy compliance and good technical implementation. Strategic improvements could include publishing a formal security policy, adding security headers, and establishing a vulnerability disclosure process to enhance trust and security posture further.

V

VMV – Verkehrsgesellschaft Mecklenburg-Vorpommern mbH

vmv-mbh.de

54

VMV – Verkehrsgesellschaft Mecklenburg-Vorpommern mbH operates as a regional public transportation company in Mecklenburg-Vorpommern, Germany, providing services related to public transit schedules, ticketing, and regional transport network management. The website serves as an information portal for residents and travelers, offering schedule information, news updates, and contact options. The company positions itself as a key regional transportation authority with a focus on accessibility and customer engagement. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is evident with a comprehensive privacy and cookie policy, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's regional transportation mission.

V

valantic

valantic.com

68

valantic is a leading enterprise specializing in digital solutions, consulting, and AI-powered transformation. With over 4300 experts, the company delivers tailored end-to-end solutions that enable businesses to leverage AI and innovative digital technologies for growth and operational excellence. Their market position is strong, serving multiple industries including technology, finance, manufacturing, and telecommunications. The website reflects a mature digital presence with multilingual support and comprehensive service offerings. Technically, the site is built on WordPress with modern libraries and frameworks, optimized for performance, accessibility, and SEO. Security posture is robust with HTTPS, security headers, and privacy compliance mechanisms in place. However, WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall legitimacy. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance transparency and trust.

A

Anixy

anixy.eu

42

Anixy is a French company specializing in comprehensive ticketing and event management services for fairs and public trade shows. Positioned as a leader in its domain within France, the company offers end-to-end solutions including pre-event access preparation, on-site management of human and financial flows, and post-event result analysis. The website reflects a professional business model targeting event organizers, supported by client references and experience counters indicating over two decades of operation. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager and Axeptio for cookie consent. The site is mobile-optimized with good SEO and basic accessibility features. Hosting details are not explicit, but the domain is registered with a reputable registrar, GANDI. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, it lacks explicit security headers, a published security policy, and incident response contacts. No vulnerabilities or suspicious elements were detected in the analysis. Overall, the website presents a trustworthy and professional digital presence with moderate to good technical and security posture. Strategic improvements in privacy compliance documentation and security policy publication would enhance trust and compliance.

Z

Zeitverlag Gerd Bucerius GmbH & Co. KG

zeitverlag.de

51

Die ZEIT Verlagsgruppe ist ein etabliertes und renommiertes Medienunternehmen mit einem breiten Portfolio an Print-, Online-, Audio- und Eventangeboten. Die Website präsentiert das Unternehmen als eines der führenden Medienhäuser Europas mit einem starken Fokus auf Innovation, digitale Angebote und Bildungsprogramme. Die Zielgruppe umfasst Leser, Geschäftskunden sowie potenzielle Mitarbeiter. Technisch basiert die Website auf WordPress mit modernen Plugins und Frameworks, die eine gute Performance und mobile Optimierung gewährleisten. Die Sicherheitsmaßnahmen umfassen HTTPS, Cookie-Consent-Management und reCAPTCHA, jedoch fehlen explizite Sicherheitsrichtlinien und Incident-Response-Informationen. Insgesamt zeigt die Website eine hohe Professionalität, gute Datenschutzkonformität und eine vertrauenswürdige Marktposition.

L

Landesmedienzentrum Baden-Württemberg

lmz-bw.de

67

The Landesmedienzentrum Baden-Württemberg is a well-established public educational institution focused on media education, technical support, and digital learning resources for schools, educators, parents, and related stakeholders in the Baden-Württemberg region of Germany. The website reflects a mature digital presence with comprehensive content, event promotion, and active social media engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, delivering good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed or enhanced. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

P

Promethean World

prometheanworld.com

74

Promethean World is a well-established company founded in 1997, specializing in interactive displays and software solutions for education and workplace environments. The company positions itself as a global leader in this niche, targeting educational institutions and workplace technology users with a B2B business model. Their website reflects a professional and consistent brand image, supported by comprehensive privacy and cookie policies, and active social media presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates various marketing and analytics tools such as Google Tag Manager and Cookiebot, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks publicly visible security policies or incident response contacts, which could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and structured data suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

Red Robin Books is an independent children's book publisher and retailer specializing in high-quality books for early years to early teens. The company offers a range of products including picture books, board books, audio books, and educational resources, targeting children, parents, and educators. The website serves as an e-commerce platform built on WordPress and WooCommerce, providing a professional and user-friendly shopping experience. The business appears to be small-sized and niche-focused with a consistent brand presence and active social media engagement. Technically, the website leverages modern web technologies such as WordPress CMS, WooCommerce for e-commerce, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile-optimized with good SEO practices implemented via Yoast SEO plugin. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling. However, it lacks visible security headers and does not display privacy or cookie policies, which are important for compliance and user trust. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security best practices, and domain registration transparency are recommended to enhance trust and security posture.

V

Verlagsgruppe Oetinger Service GmbH

oetinger.de

56

Verlagsgruppe Oetinger Service GmbH is a well-established German publishing group specializing in children's and youth literature. Their website offers a broad catalog of books, including popular titles like Pippi Langstrumpf and Tintenwelt, targeting children and young readers. The company maintains a consistent brand presence with active social media channels and a professional online storefront. Technically, the website is built on Drupal 10 with the Thunder distribution, integrating modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS, employs standard security headers, and uses a cookie consent mechanism, though it lacks a publicly stated security policy or incident response contact. WHOIS data aligns well with the business claims, indicating legitimacy and consistent domain registration. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.