Security Directory

X

XTUNING LTD. - pobočka

xtuning.cz

50

XTuning is a professional automotive tuning company specializing in chip tuning services for passenger cars, agricultural machinery, and trucks. Established since 1999, the company operates primarily in the Czech Republic and neighboring countries, offering performance optimization and fuel consumption reduction services. The website reflects a mature digital presence with certifications from the Ministry of Transport and TÜV SÜD, enhancing trust and credibility. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with proper consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, XTuning demonstrates a solid market position with clear service offerings and customer engagement channels.

L

Les Ateliers Grandis

lesateliersgrandis.fr

43

Les Ateliers Grandis is a French artisan manufacturer specializing in luxury clothing, with a strong heritage dating back to 1993. The company focuses on delivering refined, rare, and precious garments that reflect technical mastery and excellence in craftsmanship. Their market position is solid within the luxury fashion manufacturing sector, serving prestigious couture houses and emphasizing quality and tradition. The website reflects this positioning with professional design, clear navigation, and detailed business descriptions. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and SEO, and includes a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and professionally maintained, with clear contact information and social media presence supporting legitimacy.

V

Vacances Scolaires

vacances-scolaires.com

64

Vacances Scolaires is a specialized informational website dedicated to providing official French school holiday calendars for multiple years (2025-2027), covering metropolitan zones A, B, C, Corse, and overseas territories. The site targets parents, students, and educators seeking authoritative and up-to-date holiday schedules, offering downloadable PDFs and iCal files for easy integration into personal calendars. The business model relies primarily on advertising revenue and affiliate marketing partnerships. Technically, the site employs modern web technologies including Bootstrap 5, jQuery, FontAwesome, and Google Fonts, hosted on a reputable French hosting provider (o2switch). It integrates Google Adsense for monetization and Matomo for analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced and basic protections, though minor backend PHP warnings and lack of explicit security headers suggest areas for improvement. The domain is newly registered in late 2023, consistent with the site's focus on future school years, and WHOIS data shows no suspicious patterns. Overall, the website is professional, trustworthy, and well-optimized for its niche audience.

Entreprendredanslorne.com is a regional business facilitation platform focused on supporting companies seeking to establish operations in the Orne department of Normandy, France. The website offers services including project accompaniment, real estate and land search, public aid identification, and networking with local actors. It positions itself as a key regional player providing a free and tailored support network for business implantation. The site is linked to regional government entities, enhancing its credibility. Technically, the website employs a modern front-end stack including Bootstrap 3.3.7, jQuery, Font Awesome, Google Fonts, and interactive components like FlexSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and SnapEngage chat for user engagement and analytics. Security measures include HTTPS with reCAPTCHA v3 on forms, but lack explicit security headers and cookie consent mechanisms. The security posture is moderate with good SSL configuration and secure form handling, but improvements are needed in security headers and privacy compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details suggest a legitimate regional business service. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency. Strategically, verifying domain registration and adding explicit privacy and security policies would strengthen trust. Enhancing security headers and cookie consent would improve compliance and user trust. Continued monitoring of third-party scripts and analytics is recommended to mitigate potential vulnerabilities.

P

Pays d'Argentan d'Auge et d'Ouche (P2AO)

p2ao.fr

57

Pays d'Argentan d'Auge et d'Ouche (P2AO) is a regional governmental entity focused on supporting local businesses and territorial development in the Argentan, Auge, and Ouche regions of France. The website serves as an informational portal providing event agendas and contact avenues for stakeholders. The business model is public administration with a focus on regional economic and community development. The site targets local businesses, residents, and regional partners. Technically, the website employs basic web technologies including jQuery and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. The absence of a CMS or modern frameworks suggests a simple, possibly custom-built site. No hosting provider or SSL configuration details were identified from the provided data. From a security perspective, the site uses a cookie consent banner indicating GDPR awareness but lacks visible privacy policies, terms of service, or security headers. WHOIS data is unavailable, which reduces domain trustworthiness. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. The security posture is moderate but could be improved by implementing HTTPS, security headers, and publishing clear privacy and incident response policies. Overall, the website is functional but basic, with room for improvement in content richness, security, and compliance documentation. The domain legitimacy is uncertain due to missing WHOIS data, but the content and contact information suggest a legitimate regional government presence.

F

France Travail

pole-emploi.fr

57

France Travail is a French governmental employment platform providing a comprehensive range of services including job offer searches, allocation and aid estimations, online registration for job seekers, and dedicated employer services. The website is well-branded, professionally designed, and targets job seekers and employers across France. It serves as a national public employment service with a large user base and extensive content offerings. Technically, the site uses modern web technologies including JavaScript frameworks, Dynatrace monitoring, and Piano Analytics for performance and user behavior tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and secure form practices, though explicit security headers and incident response information are not visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and safe, with no suspicious or adult content detected.

S

SHEMA

shema.fr

51

SHEMA is a French regional public-private mixed economy company specializing in urban development, public facility construction, and business real estate in Normandy. It serves local authorities and economic actors with a strong regional presence and a portfolio of ongoing projects. The website reflects a professional and well-structured digital presence with clear business information and modern technology use. The technical infrastructure is based on WordPress with performance optimizations and privacy compliance mechanisms in place. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and incident response contacts. WHOIS data is missing, which slightly impacts trust but the overall legitimacy is supported by the website content and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details.

The website orne-developpement.com currently serves a default directory index page with no substantive content, metadata, or business information. The domain is registered with TotallyDomain LLC since December 2022 and is set to expire in December 2025, indicating a relatively new domain. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present. The lack of content and contact information severely limits the ability to assess the business or its market position. Technically, the site lacks modern web technologies, SEO optimization, and accessibility features. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure information is available. Overall, the website appears inactive or under development, resulting in a low trust and credibility score.

A

AD Normandie

adnormandie.fr

47

AD Normandie is a regional economic development agency serving the Normandy region in France. The agency acts as a single point of contact for economic development and provides tailored support and aid to local businesses. The website reflects a professional government entity with a clear mission to assist companies in project formalization and implantation within Normandy. The digital infrastructure is built on a modern WordPress platform with SEO and analytics tools, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. No critical vulnerabilities or suspicious elements were detected.

D

Descartes Développement & Innovation

descartes-devinnov.com

45

Descartes Développement & Innovation (DDI) is a French organization focused on fostering innovation in sustainable urban development within the Paris-Est region. It operates as a technopole, providing information, promotion, networking, and project engineering services, alongside managing a fablab and an incubator. The website reflects a professional and modern digital presence built on WordPress with WooCommerce and Elementor, indicating a mature technical infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though the absence of a public privacy policy and terms of service pages suggests room for compliance improvement. The lack of WHOIS data reduces domain trustworthiness, but the active social media presence and quality content support legitimacy. Overall, the site is well-positioned in its niche but should enhance transparency and compliance documentation.

The website at pepite3ef.fr is currently inaccessible due to a TYPO3 CMS configuration error related to the trusted hosts pattern, resulting in an HTTP 503 error page. This prevents access to any meaningful content or business information. The domain is registered through OVH, a reputable French registrar, with a creation date in 2014, indicating a mature domain age consistent with a small or medium-sized French entity. The hosting provider is OVH, and the CMS in use is TYPO3. No privacy, cookie, or terms of service policies are present, and no contact information or forms are accessible. The lack of accessible content and security headers limits the ability to fully assess the website's security posture or compliance status.

S

Santé publique France

santepubliquefrance.fr

57

Santé publique France is the official French national public health agency, providing authoritative information, surveillance, and prevention services related to public health. The website serves a broad audience including the general public, healthcare professionals, and policymakers. It is positioned as a key government institution in the healthcare sector in France, offering publications, studies, and health data. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for bot protection, and New Relic for performance monitoring, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy policy documentation in the provided content. Security posture is good with no evident vulnerabilities, but could be improved with better security headers and published incident response information. Overall, the site is trustworthy and professional, with a strong business credibility as a government entity.

I

Institut Technologique FCBA

fcba.fr

9

Institut Technologique FCBA is a French industrial technical center specializing in forestry, cellulose, wood construction, and furniture sectors. It provides a range of services including innovation support, environmental performance evaluation, training, laboratory testing, certification, and diagnostics. The organization targets professionals in these industries and holds recognized certifications such as Qualiopi, COFRAC, and ASI, positioning itself as a reputable technical institute in France. The website is built on WordPress with Elementor and uses modern web technologies including jQuery, Bootstrap, and various UI libraries. It features a cookie consent mechanism and is mobile-optimized with good navigation and content quality. However, some images have lazy loading errors, and explicit privacy and terms of service pages are not clearly found, indicating room for improvement in compliance and user experience. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security headers and a vulnerability disclosure mechanism. No WHOIS data was retrievable, limiting domain legitimacy verification, but the website content and structure suggest a legitimate and professional organization. Overall, the website is functional, professional, and trustworthy with recommendations to enhance privacy compliance, security headers, and user experience for improved trust and regulatory adherence.

I

Institut national de l’information géographique et forestière

ign.fr

61

The Institut national de l’information géographique et forestière (IGN) is a French government entity specializing in the production and dissemination of geographic and forestry data. The website serves a diverse audience including individuals, professionals, public policy actors, educators, and students. It offers a comprehensive range of cartographic services, data access, and applications, positioning itself as the authoritative national geographic data provider in France. The business model is public service-oriented, focusing on data accessibility and support for various user needs. Technically, the website is built on Drupal 10, leveraging modern web technologies such as JavaScript and CSS, with good mobile optimization and accessibility features. The site demonstrates moderate performance and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of publicly available WHOIS data is typical for .fr domains and does not detract from the legitimacy of the site. The presence of official contact information, social media channels, and comprehensive policies further enhance credibility. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.

C

CHI Créteil

chicreteil.fr

11

The Centre Hospitalier Intercommunal de Créteil (CHI Créteil) is a large public healthcare institution serving the Créteil region in France. The website provides comprehensive information about the hospital's services, specialties, patient resources, and professional opportunities. It is well-positioned as a regional healthcare provider with a strong focus on accessibility, patient care, and medical expertise. The site also highlights research and teaching activities, indicating an integrated healthcare and academic mission. Technically, the website is built on WordPress with modern web technologies including jQuery, Slick Carousel, and Google Fonts. It uses Matomo analytics configured with privacy by design, and a robust cookie consent mechanism via Tarteaucitron, reflecting a mature approach to privacy compliance. The site is mobile-optimized and accessible, with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent controls. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly present and should be implemented to enhance security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted. Overall, the website is trustworthy, professional, and compliant with GDPR and cookie regulations. The lack of WHOIS data is typical for .fr domains and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and CMS to mitigate vulnerabilities.

A

Assistance publique - Hôpitaux de Paris (AP-HP)

aphp.fr

66

Assistance publique - Hôpitaux de Paris (AP-HP) is the largest public healthcare institution in Europe, operating 38 hospitals and serving millions of patients annually. The website provides comprehensive information on patient care, research, education, and innovation, targeting patients, healthcare professionals, researchers, and partners. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. WHOIS data is missing, which is unusual but likely due to AFNIC policies or privacy protection, not indicating malicious intent. Overall, the website is professional, trustworthy, and compliant with GDPR.

A

Anses - Agence nationale de sécurité sanitaire de l’alimentation, de l’environnement et du travail

anses.fr

52

Anses is the French national agency responsible for health safety in food, environment, and work sectors. It provides scientific expertise, risk assessment, regulatory decisions, and public communication. The agency holds a strong market position as a government authority with a large organizational size and a comprehensive digital presence. The website is built on Drupal 10 with modern frontend technologies and includes multilingual support. Privacy and cookie consent mechanisms are implemented effectively. However, WHOIS data is missing, which slightly impacts domain trustworthiness. The site demonstrates good security practices but lacks explicit security policy and incident response information.

É

École nationale des ponts et chaussées

enpc.fr

55

École nationale des ponts et chaussées is a prestigious French grande école specializing in engineering education, research, and professional training with a strong focus on ecological and digital transitions. The institution offers a wide range of programs including engineering degrees, masters, doctoral studies, and continuing education, supported by multiple research laboratories and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and professionals. Technically, the site is built on Drupal CMS with modern JavaScript libraries and privacy-respecting analytics (Matomo). Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

ClimateLaunchpad

climatelaunchpad.org

48

ClimateLaunchpad is a globally recognized green business ideas competition that supports entrepreneurs and innovators in transforming their sustainable ideas into successful startups. Established in 2015 and co-funded by the European Union through Climate KIC, it offers training, coaching, and competitive platforms culminating in national and regional finals. The website reflects a mature digital presence with a WordPress CMS, integration of Google Tag Manager for analytics, and a responsive design optimized for mobile users. Security practices include HTTPS enforcement and domain transfer protections, although enhancements like DNSSEC and security headers could improve the security posture. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site demonstrates high professionalism, trustworthiness, and a strong commitment to its mission of fostering green innovation worldwide.

S

SDIS34

sdis34.fr

54

SDIS34 is the official fire and rescue service for the Hérault department in France, providing essential public safety services including firefighting, rescue operations, prevention, and recruitment of volunteer and professional firefighters. The website serves as an information portal for residents and stakeholders, offering news, practical information, and access to services. The organization maintains a strong social media presence and uses modern web technologies to deliver content effectively. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder and Slider Revolution, integrating Google Maps for location services. The site is secured with HTTPS and employs standard security headers, reflecting a good security posture. Performance and mobile optimization are adequate, though accessibility could be improved. Security-wise, the site shows good practices like HTTPS enforcement and no visible vulnerabilities. However, the absence of explicit privacy, cookie, and terms of service pages, as well as missing WHOIS data, slightly reduce trust and compliance confidence. There is no visible incident response or vulnerability disclosure information. Overall, SDIS34's website is a professional and trustworthy public service platform with room for improvement in privacy compliance and transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security and incident response information, and ensuring WHOIS data availability to enhance legitimacy and trust.

Tourisme Hérault operates an official regional tourism website promoting the Hérault region in Southern France. The site offers rich multimedia content, multilingual support, and detailed information about natural and cultural attractions, targeting tourists and holidaymakers. The business model focuses on tourism promotion and visitor engagement through surveys, videos, and inspirational content. Technically, the website is built on WordPress with Elementor and integrates modern analytics and tracking tools such as Google Tag Manager and Matomo. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are not detected and no explicit incident response contacts are provided. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the site is trustworthy and well-maintained but would benefit from improved transparency in domain registration and contact information.

M

Montpellier Tourisme

montpellier-tourisme.fr

56

Montpellier Tourisme operates as the official tourism promotion website for Montpellier, France, providing comprehensive information on local attractions, events, accommodations, and activities. The site targets tourists and visitors seeking to explore Montpellier and the surrounding region. It offers multi-language support and integrates booking and event management services to enhance user experience. Technically, the website employs a modern stack including WordPress CMS with a custom Woody theme, various JavaScript libraries, and third-party integrations such as Django Travel and touristic maps. The site is well-optimized for mobile devices and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of publicly available WHOIS data and privacy policy reduces transparency slightly but does not detract significantly from the site's legitimacy. Overall, Montpellier Tourisme presents a professional, trustworthy, and user-friendly platform for tourism promotion.

The website 'Produire bio en Bretagne' serves as an informational and support platform dedicated to organic farming in the Brittany region of France. Operated by FRAB, it provides educational content, technical resources, testimonials, and event information to assist farmers considering or undergoing conversion to organic agriculture. The site is positioned as a regional authoritative resource with a clear focus on organic agriculture principles and practices. Technically, the website is built on WordPress using the Total theme and Visual Composer, with integrations such as Google Analytics and Revolution Slider. Hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business's history and location. Security posture is adequate with HTTPS enforced and some privacy considerations, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, targeting agricultural professionals and stakeholders in organic farming.

F

FNAB (Fédération Nationale d'Agriculture Biologique)

agribiolien.fr

43

Agribiolien.fr is a French-language online platform dedicated to organic farmers, providing a specialized marketplace for posting and searching bio-certified agricultural announcements such as sales of forage, land, animals, and agricultural equipment. The platform is supported by the FNAB (Fédération Nationale d'Agriculture Biologique) and partners with Agence Bio, positioning itself as a niche service within the organic agriculture sector in France. The website offers a user-friendly interface with search filters by region, department, and product categories, and includes a video presentation to assist users. Technically, the site employs standard web technologies including jQuery and Bootstrap, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data suggests privacy protection, which is reasonable for this non-profit affiliated site. Overall, Agribiolien.fr demonstrates a solid business and technical foundation with room for security enhancements.

C

Chambres de Métiers et de l'Artisanat (CMA)

unmetierdeouf.fr

65

Un Métier de Ouf is a French educational platform launched in 2020, dedicated to promoting artisan trades such as mechanics, carpentry, cooking, and aesthetics. It targets young people and apprentices seeking career guidance in artisan professions. The website is affiliated with CMA France, a reputable organization supporting artisan trades. The platform offers video content and career resources to engage its audience and facilitate discovery of trades. Technically, the site is built using modern React and Next.js frameworks, hosted by OVH, and integrates analytics tools like Matomo, TikTok, and Facebook pixels. Privacy and cookie consent mechanisms are implemented, reflecting good compliance practices. Security posture is solid with HTTPS and no exposed vulnerabilities, though security headers and incident response policies could be improved. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear branding and consistent content quality.

Aides-entreprises.fr is a French government-affiliated platform managed by CMA France, providing a comprehensive database of over 2400 public financial aids for businesses. The website serves as a key resource for French businesses seeking financial support, offering advanced search tools, newsletters, and a mobile application to enhance accessibility and user engagement. The platform is well-positioned as a trusted reference in the French business aid ecosystem, supported by numerous partnerships with governmental and regional agencies. Technically, the site leverages AngularJS and Ionic frameworks, integrates Google Maps API, and uses Matomo for analytics, indicating a modern and moderately performant infrastructure. Security practices include HTTPS enforcement and GDPR-compliant cookie consent, though some security headers could be improved. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected. The domain's WHOIS data confirms a long-standing and consistent registration, reinforcing the platform's legitimacy. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

blackpills studio is a media production company specializing in the development, production, and international distribution of premium short-form series. The company positions itself as an international content producer with a focus on mobile and SVOD platforms, targeting a general audience interested in original series. The website reflects a small-sized media business founded in 2006, with consistent branding and a professional online presence hosted on the MyPortfolio platform and OVH infrastructure. Technically, the site uses modern web technologies including HTTPS, JavaScript, and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy or security policies. No contact information or detailed compliance documentation is present, which limits transparency and user trust. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

A

Altice Europe

altice.net

64

Altice Europe was a major telecommunications company with a long-standing domain registration since 2003. The website currently serves as an archive following the company's delisting and cessation of operations. It primarily directs investors to Altice France and Altice International for ongoing information. The technical infrastructure is based on Drupal CMS with legacy JavaScript libraries, showing moderate digital maturity. Security posture is basic with HTTPS enforced but lacking DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional but minimal, with limited business and security disclosures.

Smulders is a well-established multidisciplinary construction company specializing in the engineering, production, delivery, and assembly of heavy, technically complex steel structures, with a strong focus on offshore wind farm integration. Operating primarily in Belgium and neighboring countries, it serves industrial and energy sectors as a comprehensive EPC contractor. The company benefits from a large workforce and a reputable market position supported by its parent company, Eiffage. The website reflects a professional corporate identity with clear messaging and comprehensive service descriptions. Technically, the site uses modern web technologies including Google Tag Manager and Matomo Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some advanced security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

G

Groupe Goyer

goyer.fr

37

Groupe Goyer is a well-established French company specializing in the design, manufacturing, and installation of custom façades, particularly in aluminium and mixed materials, with a history dating back to 1931. The company operates an integrated industrial process from conception to installation, serving a European market. Their website reflects a mature digital presence built on WordPress with modern plugins and SEO tools, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. The domain registration data is consistent with the company's long history and business claims, hosted by OVH, a reputable provider. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

E

Eiffage

aprr.com

60

APRR is a major motorway concession operator in France, managing a 2,410 kilometer network focused on sustainable and efficient mobility solutions. It operates under the umbrella of the Eiffage group, a large construction and infrastructure conglomerate. The website reflects a mature digital presence with comprehensive content about their services, sustainability initiatives, and corporate governance. Technically, the site uses modern JavaScript libraries, integrates video APIs, and employs cookie consent management tools, indicating a good level of digital maturity. Security-wise, HTTPS is enforced and reCAPTCHA is used, but explicit security headers and policies are not evident, suggesting room for improvement. The absence of WHOIS data is unusual but the website's branding and social media presence support its legitimacy. Overall, APRR's website is professional, compliant with privacy regulations, and serves its audience effectively.

B

Best4Run Běžecká speciálka

best4run.cz

54

Best4Run is a Czech Republic based specialty retailer focused on running shoes, apparel, and equipment. Established in 2015, it operates both an e-commerce platform and a physical store in Přerov, serving customers from surrounding regions. The website offers a comprehensive product catalog, educational content, and diagnostic services for runners. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern web technologies and multiple analytics and marketing tools with user consent mechanisms. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data reduces domain trust but the website content and business presence appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.

S

Sykora spol. s r.o.

sykora.eu

60

Sykora spol. s r.o. is a Czech-based company specializing in high-quality custom kitchens and interior furniture solutions. Their website showcases a comprehensive product catalog including kitchens, wardrobes, bathrooms, and living room furniture, targeting consumers seeking tailored interior design. The company operates through multiple retail studios and emphasizes professional design and modern technology integration. Technically, the website is built on the Studio9 webManager CMS, uses modern JavaScript libraries such as jQuery, and integrates Google Tag Manager, Google Analytics, Facebook Pixel, and Pinterest tracking for marketing and analytics purposes. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and rich multimedia content. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and does not raise legitimacy concerns. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for customers.

Restaurace Maxima is a small hospitality business based in the Czech Republic, specializing in traditional gastronomy with a modern twist. The website presents a professional and visually appealing interface that highlights their daily menus, event hosting, and quality culinary offerings. The business targets local customers, families, and corporate clients seeking quality dining experiences. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and privacy policy pages indicates gaps in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking security headers and incident response information. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

T

TAŠ STAPPA

tas-stappa.cz

47

TAŠ STAPPA is a Czech Republic based company specializing in the supply of concrete and aggregates primarily serving the Zlín region. With over 25 years of experience, it positions itself as a reliable local supplier offering concrete delivery, pumping services, and concrete plant equipment. The website reflects a medium-sized business with a clear focus on construction materials and services. Technically, the site is built on Joomla CMS using modern frameworks and libraries such as Bootstrap, jQuery, and Smart Slider 3, with integrated Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

P

PURLIVE

purlive.cz

47

PURLIVE is a Czech-based certified manufacturer and supplier specializing in prefabricated construction systems primarily for family houses, modular wooden buildings, and container components. The company positions itself as a leading provider of energy-efficient and cost-effective building solutions in the Czech market. Their website reflects a professional digital presence with clear business offerings targeted at construction firms, architects, and private customers interested in modern prefabricated housing solutions. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Smart Slider 3, ensuring a responsive and user-friendly experience. The site integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data for the domain is a notable gap in trust verification, though the website content and structured data suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

S

Selectra

selectra.com

59

Selectra is a well-established international company specializing in utilities comparison and subscription services across energy, telecom, insurance, and finance sectors. Founded in 2007 and operating in 17 countries, Selectra serves a broad consumer base seeking to optimize household utility expenses. The website demonstrates strong branding, professional design, and extensive content supporting its market position as a leading player in its industry. Technically, the website employs modern tracking tools such as Google Analytics and Google Tag Manager, with DNS managed via Cloudflare and domain registration through Amazon Registrar. The site is mobile-optimized and SEO-friendly, though some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the site uses HTTPS and domain status protections but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms, which is a notable gap given the tracking technologies in use. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security transparency to align with best practices and regulatory expectations.

Y

Home | YOTTABE

yottabe.com

57

The website www.yottabe.com is hosted on the Wix platform and appears to be a small or new business site with minimal content and no clear business description or contact information. The lack of WHOIS registration data raises concerns about the domain's legitimacy and ownership. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security configurations and privacy compliance features. The absence of privacy policies, cookie consent mechanisms, and contact details further diminishes trustworthiness. Overall, the site demonstrates a low level of digital maturity and security posture, with significant gaps in compliance and transparency.

Z

Zdravie.sk, s.r.o.

zdravie.sk

56

Zdravie.sk is a well-established Slovak health and lifestyle portal founded in 2004, operated by Zdravie.sk, s.r.o. It offers comprehensive health information, lifestyle content, medical news, and community forums targeting a general audience in Slovakia. The website enjoys a strong market position as a popular and trusted source of health-related content. Technically, the site uses a modern tech stack including Google Fonts, Google Analytics, Facebook SDK, and multiple advertising platforms. It is hosted with Google Domains and employs HTTPS for secure communications. However, the site lacks explicit privacy and cookie policies and does not display security headers, which are areas for improvement. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the site demonstrates good content quality and business credibility but could enhance privacy compliance and security posture.

Z

Zoznam, s.r.o.

plnielanu.sk

58

Plnielanu.sk is a Slovak lifestyle and health-oriented media website operated under the company Zoznam, s.r.o. It provides inspirational content focused on maintaining a healthy and active lifestyle for a general adult Slovak-speaking audience. The website leverages a WordPress CMS with Yoast SEO for content management and optimization, supported by a range of modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, Gemius, and Didomi for GDPR-compliant consent management. The site integrates advertising networks such as Google Ad Manager and Adform, indicating a business model reliant on content publishing and advertising revenue. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website presents a professional and trustworthy digital presence consistent with a regional media brand.

S

Slovenská produkčná, a.s.

prezenu.sk

62

The website zenske.joj.sk is a Slovak lifestyle media portal targeting contemporary women with content focused on fashion, health, relationships, and entertainment. It is operated by Slovenská produkčná, a.s., a recognized media company in Slovakia. The site features a professional design, consistent branding, and a clear navigation structure that supports user engagement. The business model is primarily advertising-driven, leveraging multiple ad networks and analytics platforms integrated with a consent management system to comply with privacy regulations. Technically, the site uses modern JavaScript libraries and ad bidding frameworks, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not published. Privacy compliance is supported by a visible cookie consent mechanism, but a dedicated privacy policy page was not found in the analyzed content. Overall, the domain registration data aligns well with the website's business claims, supporting high legitimacy and trustworthiness.

Z

Zoznam, s.r.o.

vysetrenie.sk

59

The website vysetrenie.zoznam.sk is a Slovak health and wellness media portal operated by Zoznam, s.r.o., a recognized media company in Slovakia. It provides a wide range of health-related content including articles, interviews, quizzes, and practical tools such as health calculators and listings of medical facilities. The site targets the general public interested in health, lifestyle, and medical information. Its business model is primarily content publishing supported by advertising revenue, positioning it as a significant player in the Slovak online media landscape focused on health topics. Technically, the website employs a modern technology stack including Google Tag Manager, jQuery, Vue.js, and multiple advertising and analytics platforms such as Google Ad Manager, Gemius, and Yieldbird. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts to enhance user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. It uses a comprehensive consent management platform (Didomi) to comply with GDPR requirements, reflecting a mature privacy posture. However, explicit security policies and incident response contacts are not published, and there is no security.txt file for vulnerability disclosure. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong legitimacy and trustworthiness, supported by consistent WHOIS registration data matching the business identity. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

Z

Zoznam, s.r.o.

feminity.sk

57

Feminity.sk is a Slovak lifestyle media website operated by Zoznam, s.r.o., offering content focused on fashion, beauty, health, horoscopes, and celebrity news. The site targets a broad audience of modern Slovak men and women interested in lifestyle topics. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates multiple third-party analytics and advertising services, and uses a CDN for content delivery. It demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses standard security headers, and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact information. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

Z

Zoznam s.r.o.

sportky.sk

58

Športky.sk is a Slovak-language sports news portal operated by Zoznam s.r.o., providing comprehensive coverage of sports such as football, hockey, tennis, and cycling. The site targets Slovak sports fans with up-to-date results, event calendars, and multimedia content. It holds a solid market position as part of the established Zoznam media brand. Technically, the website employs modern JavaScript frameworks including Vue.js and jQuery, integrates Google Analytics and Tag Manager for tracking, and uses Didomi for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced and basic security headers are present, though some headers like HSTS and X-Content-Type-Options should be confirmed or added. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear cookie policy and consent mechanism. However, explicit contact details and terms of service pages are not directly found on the site, which could be improved for transparency. Overall, the website is professional, trustworthy, and well-maintained, suitable for its audience and business model.

Z

Zoznam s.r.o.

dromedar.sk

57

The website dromedar.zoznam.sk is a Slovak travel magazine operated by Zoznam s.r.o., offering travel articles, tips, and cultural content aimed at Slovak-speaking travel enthusiasts. The site is well-branded, professionally designed, and provides a rich content experience with clear navigation and mobile optimization. Technically, it employs modern JavaScript libraries such as jQuery and Vue.js, integrates multiple analytics and advertising platforms, and uses a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility, with WHOIS data confirming legitimacy and consistency with the brand.