Security Directory

M

Mega Fitness

mega-fitness.eu

54

Mega Fitness is a small fitness club located in Prague, Czech Republic, offering personal training, nutrition planning, and body diagnostics. The business operates in a local market with a family-friendly atmosphere and provides a fully equipped gym facility. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. Contact information is clearly presented, supporting business credibility. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy and security practices.

W

wowyup

wowyup.agency

45

The website wowyup.agency represents a small digital agency offering services such as digital marketing, product photography, and web presentations. The site is minimalistic with limited content and lacks detailed business or contact information, which constrains its market positioning and trust signals. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, Bootstrap, and some animation libraries like Velocity.js and PhotoSwipe for galleries. However, the site lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak due to absence of visible security headers and no evidence of HTTPS enforcement from the provided data. Privacy and cookie policies are missing, and no contact or incident response information is available, which impacts compliance and user trust. WHOIS data is privacy protected by Identity Digital, which is common for small agencies but limits transparency. Overall, the site is functional but basic, with room for significant improvements in security, compliance, and business credibility.

D

David Chelly

davidchelly.com

38

David Chelly is a digital entrepreneur specializing in domain names, website monetization, and web strategy with over 25 years of internet experience. The website presents a professional portfolio of services including management of a large network of websites, domain consulting, publishing, and event organization. The business targets internet professionals, domain investors, and web marketing audiences primarily in France and internationally. Technically, the site uses a modern front-end stack with Bootstrap and popular JavaScript libraries, providing a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts compliance and trust. The WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

L

LadyGeekGeek Web Design

ladygeekgeek.com

34

LadyGeekGeek Web Design is a small freelance web design business based in Holywood and Belfast, Northern Ireland, specializing in bespoke, accessible, and responsive WordPress websites. The company has a strong market position serving local and international clients, including notable organizations such as Queen's University Belfast and Belfast Film Festival. The website showcases a professional portfolio and detailed service offerings, emphasizing user experience and content strategy. Technically, the site is built on WordPress, hosted by BigWetFish, and optimized for performance, mobile responsiveness, and accessibility. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

L

L'aéronef

aeronef.fr

59

L'aéronef is a non-profit cultural association based in Lille, France, specializing in organizing concerts and music-related cultural projects. Established in 2016, it holds a reputable position in the regional cultural scene, supported by partnerships with governmental and cultural institutions. The website serves as a platform for event promotion and ticketing, targeting a general audience interested in music and culture. Technically, the site is built on Drupal 11, employs Matomo for analytics, and uses modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and token-based ticketing, though explicit security policies and cookie consent mechanisms are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and privacy mechanisms are recommended.

T

TPF Consultores

tpf.pt

51

TPF Consultores is a well-established Portuguese consulting company specializing in project design and supervision, primarily in the energy and transportation sectors. With over 45 years of experience and a significant workforce, the company positions itself as a leader in infrastructure consulting and project management. Their website reflects a professional and consistent brand image, targeting business and public sector clients internationally. Technically, the website employs modern web technologies and tracking tools, including Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and some recommended security headers, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

V

Velvetyne

velvetyne.fr

58

Velvetyne is a small, France-based open source font collective specializing in the design and distribution of libre fonts. The website serves as a platform to showcase their font projects, offer custom font services, and promote workshops. The target audience includes typography enthusiasts, designers, and the open source community. The business model revolves around open source font creation and community engagement. Technically, the website is built on the ProcessWire CMS and hosted by Alwaysdata. It uses standard web technologies such as HTML5, CSS, and SVG for font previews. The site demonstrates good design quality, mobile optimization, and clear navigation, although accessibility features are basic. Performance is moderate, with no evident use of advanced analytics or tracking. From a security perspective, the site lacks visible security headers and published security policies. There is no privacy or cookie policy, nor any incident response or vulnerability disclosure information. The domain is well-registered with a reputable registrar and has been active since 2010, supporting the legitimacy of the business. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, Velvetyne presents a trustworthy and professional presence in its niche, but it would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

L

Lee Cooper

leecooper.com

64

Lee Cooper is a historic British denim brand with a legacy dating back to 1908. The website presents the brand's heritage and identity but is hosted on the Wix platform with minimal content and lacks critical business and security information. The technical infrastructure relies on Wix's CMS and standard web technologies but includes suspicious external scripts from unknown domains, raising potential security concerns. The absence of WHOIS registration data for the domain www.leecooper.com is a significant red flag, suggesting possible domain registration issues or privacy obfuscation. Security posture is basic with no advanced headers or policies detected, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site appears functional for brand marketing but requires improvements in security, compliance, and legitimacy transparency.

C

CAPRICE

capriceshoes.com

63

CAPRICE is an established international footwear retail brand operating an e-commerce platform targeting primarily women and men interested in fashionable shoes and accessories. The website is built on a modern e-commerce platform (Salesforce Commerce Cloud) and supports multiple country and language versions, indicating a mature digital presence. The site offers a wide range of products including seasonal collections and innovative footwear technologies. Technically, the site uses modern JavaScript libraries, tag management, and A/B testing tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is basic with a cookie consent banner but lacks visible privacy and terms of service pages. Overall, the site is professional and trustworthy with moderate tracking and analytics in place.

S

Sempleo Corporate

sempleo.com

67

Sempleo Corporate is a French web agency specializing in affordable turnkey website creation services primarily targeting small municipalities, associations, and small businesses. Founded in 1995, the company offers subscription-based web packages starting at 15€/month, emphasizing simplicity, all-inclusive support, and French-based solutions. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap, Firebase, and Matomo analytics, with a strong focus on privacy compliance through explicit cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though lacking explicit security policies or incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business content and trust indicators suggest a legitimate operation. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency.

The website progettocresco.it currently displays a 403 Forbidden error page, indicating that access to the content is blocked or restricted. There is no accessible business information, contact details, or policy documents available on the site. The domain is registered since 2011 and appears legitimate in terms of registration age and status, but the lack of accessible content severely limits the ability to assess the business or technical maturity. The technical infrastructure is minimal, using basic HTML and CSS with Google Fonts, and no advanced frameworks or CMS are detected. Security posture is weak due to absence of HTTPS information and security headers. Privacy compliance is non-existent as no privacy or cookie policies are found. Overall, the site is currently non-functional for end users and lacks critical trust and security indicators.

P

Performing Arts Forum

performingartsforum.ie

38

Performing Arts Forum is a well-established non-profit organization dedicated to strengthening and advocating for the performing arts community in Ireland. With a history dating back to the late 1990s, it serves over 300 members including theatre, dance, opera production companies, venues, festivals, and individual artists. The organization offers a comprehensive range of services including advocacy, resource provision, job and opportunity listings, networking events, and a Green Arts initiative focused on sustainability. The website reflects a professional and consistent brand image, targeting performing arts professionals and organizations in Ireland.

N

Nedeo : sondages d'anime et jeux vidéo

nedeo.fr

48

Nedeo.fr is a French niche website dedicated to community polls and rankings focused on anime and video games. It offers users the ability to vote and debate on popular characters and topics within these entertainment sectors. The site targets fans of anime and gaming, providing real-time updated rankings and interactive content. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Ionicons, Swiper.js, and the Bulma CSS framework, with backend indications of Laravel Livewire usage. Hosting is provided by o2switch, a French hosting provider, and the site is served over HTTPS with basic security measures such as CSRF tokens and reCAPTCHA integration. However, the site lacks explicit privacy and cookie policies, contact information, and security headers, which are important for GDPR compliance and user trust. The WHOIS data shows the domain is registered since 2018 with a reputable registrar and consistent hosting, indicating legitimacy. Overall, the site is functional and well-designed for its niche but would benefit from enhanced privacy, security, and compliance features.

S

SUEZ

suez.fr

63

SUEZ is a well-established enterprise operating in France, specializing in water and waste management services with a focus on circular economy solutions. The website presents a professional and consistent brand image, targeting clients in France seeking resilient and innovative environmental services. The company appears to have a strong market position within the energy and environmental sectors. Technically, the website uses modern web standards with good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is moderate, with no explicit security headers or policies detected, and the absence of WHOIS data slightly reduces trustworthiness. Privacy compliance indicators such as privacy and cookie policies are not evident, which is a gap for GDPR compliance. Overall, the site is safe and suitable for a general audience, with no adult or questionable content detected.

I

Imago Numeris

imago-numeris.fr

56

Imago Numeris is a small French technology company specializing in website conception, realization, and SEO referencing services primarily targeted at municipalities and local communes. Established since 2005, the company emphasizes accessibility and multi-device compatibility in its offerings, aiming to provide tailored web solutions that meet the evolving needs of internet users across various devices. The website content reflects a professional and consistent branding approach with clear business information such as the SIRET registration number, enhancing credibility. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and Bootstrap framework for responsive design. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation. However, there is no evidence of advanced CMS usage or modern hosting details. Performance is moderate with basic SEO and accessibility features implemented. From a security perspective, the site lacks visible HTTPS/SSL confirmation and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The absence of WHOIS data limits domain trust verification, although the displayed business registration details support legitimacy. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website is functional and professional but requires improvements in security best practices, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

C

Citopia

citopia.fr

52

Citopia is a French company specializing in digital solutions tailored for local governments and municipalities, focusing on citizen relationship management and digital transformation. The company offers a suite of products including citizen request management, communication tools, portals, mobile applications, and appointment management, positioning itself as a niche provider within the government technology sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the website is built on Drupal CMS, uses Matomo for analytics, and integrates a cookie consent management platform (tarteaucitron.io). The site demonstrates good technical implementation with modern web standards, responsive design, and SEO optimization. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is privacy-protected, which is common and justified for this business type. Overall, the security posture is good but could be improved with additional headers and documented policies. The overall risk assessment is low, with a trustworthy and professional online presence. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

The website centrefrance.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. The domain is registered with OVH sas since 1997, indicating a mature and legitimate domain. However, no business details, contact information, or policies are accessible for analysis. The technical infrastructure includes Cloudflare WAF protection, which is a positive security measure but limits content visibility. Due to the blocked content, a full security and compliance assessment cannot be performed, resulting in a low overall AI score.

E

Empik S.A.

empik.com

75

Empik.com is a major Polish e-commerce platform specializing in retail sales of books, music, films, electronics, toys, and home goods. It operates a marketplace and offers subscription services such as Empik Premium. The website is professionally designed with a comprehensive product catalog and clear navigation, targeting general consumers in Poland. Technically, the site uses AngularJS, Google Tag Manager, and various analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. Overall, the site presents a trustworthy and professional retail presence with minor gaps in transparency around security and WHOIS data.

P

Phishen Impossible Initiative

phishen-impossible.at

52

Phishen Impossible is a well-established Austrian initiative focused on educating the public about phishing and cybercrime prevention. Supported by government entities such as the Austrian Federal Ministry of the Interior and major corporations like Österreichische Post and A1 Telekom Austria, it provides comprehensive educational content including videos, phishing rules, news updates, quizzes, and contact resources. The website is professionally designed, mobile-optimized, and offers clear navigation in German, targeting a broad audience of internet users in Austria. Technically, the site uses modern web technologies including jQuery and Matomo analytics, hosted on PSA Services infrastructure. Security posture is strong with HTTPS enforced and a cookie consent mechanism in place, although explicit security headers and incident response contacts are not present. Privacy compliance is well addressed with a detailed privacy policy and cookie management. Overall, the site is trustworthy, safe, and serves as a valuable resource for phishing awareness.

Fanatics.com is a leading enterprise-level e-commerce platform specializing in officially licensed sports apparel, fan gear, and collectibles. The website targets sports fans across major leagues such as NFL, MLB, NBA, NHL, Soccer, and College sports, offering a wide range of merchandise including jerseys, hats, and collectibles. The site demonstrates strong branding consistency and excellent content quality, positioning itself as a trusted retailer in the sports merchandise market. Technically, the website employs modern web technologies including JavaScript, CSS, and third-party analytics and tracking tools such as Pinterest and Verint SDKs. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS enforced and error logging implemented, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies in the analyzed content. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for large e-commerce enterprises. Overall, Fanatics.com is a professional and trustworthy sports merchandise retailer with room for improvement in privacy transparency and security best practices.

C

Connex Marketing GmbH

connexgroup.net

55

Connex Marketing GmbH operates as a specialist provider of sales promotion, customer loyalty, and employee motivation solutions primarily targeting businesses in the German-speaking market, particularly Austria. Their offerings include voucher solutions, promotion systems, loyalty programs, and data generation services. The company maintains a professional online presence with consistent branding and clear navigation, supported by social media channels and integrated marketing tools. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Cookiebot for consent management, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site is safe for general audiences and compliant with GDPR requirements through detailed cookie consent mechanisms.

R

Reserved

reserved.com

72

Reserved is a large European fashion retail brand operating an e-commerce platform targeting Finnish customers. The website offers discounted collections for women, men, and children, supporting both online and in-store shopping. The business is part of the LPP S.A. group, a major player in the retail sector. Technically, the website employs modern SPA architecture with extensive use of JavaScript, third-party analytics, and marketing tools such as New Relic, Cookiebot, and Dynamic Yield, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. The absence of WHOIS registration data slightly reduces trust but is likely due to privacy protection. Overall, the website is professional, secure, and compliant, suitable for its retail business model.

S

Sinsay

sinsay.pl

70

Sinsay operates as an international online fashion retailer targeting women, men, and children across 19 countries. The website serves as a country selection portal directing users to localized stores, emphasizing a broad European presence. The business model focuses on e-commerce retail with a user-friendly interface and clear navigation to enhance shopping experience. The brand maintains consistent visual identity and offers cookie consent mechanisms aligned with GDPR requirements. Technically, the website employs modern JavaScript libraries and third-party services such as Cookiebot for consent management, New Relic for performance monitoring, and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and SEO practices but lacks explicit CMS or hosting provider details. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces domain trustworthiness, though the website content and compliance features suggest legitimate operations. Overall, the website presents a professional and trustworthy e-commerce platform with solid privacy compliance but would benefit from enhanced security transparency and contact information to improve business credibility and user trust.

R

Rheine. Tourismus. Veranstaltungen. e. V.

rheine-tourismus.de

53

Rheine. Tourismus. Veranstaltungen. e. V. is a local tourism and event promotion organization serving the city of Rheine, Germany. The website provides comprehensive information on sightseeing, events, guided tours, booking options, and local services aimed at tourists and residents. The organization operates as a non-profit association with a focus on enhancing visitor experience and promoting local culture and attractions. The website is well-structured with clear navigation and a professional design consistent with its branding. Social media integration and contact details reinforce its community presence. Technically, the website employs modern web technologies including ExtJS, Swiper.js, Font Awesome, and a consent management system (Klaro). It is hosted with CDN support and uses HTTPS with basic security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Analytics usage is minimal and privacy compliant, with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS and uses secure forms for login. However, it lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the website's local tourism focus, showing no suspicious patterns. Overall, the website presents a low-risk profile with good content quality and technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance. The site is suitable for general audiences and does not contain adult or questionable content.

M

SEO tool to track your Google positions every day

monitorank.com

59

Monitorank is a professional SEO tool focused on daily Google position tracking for websites and competitors. It offers a modular subscription model with API access and integration with Google Looker Studio, targeting SEO professionals, agencies, and businesses. The website demonstrates a solid market position with notable clients and partners, supported by testimonials and trusted payment methods. Technically, the site uses modern web technologies, is mobile optimized, and integrates live chat and video content to enhance user experience. Security posture is good with HTTPS and secure payment options, though improvements are needed in security headers and cookie consent mechanisms. The absence of WHOIS data raises some concerns about domain legitimacy, but the overall professional presentation and client references mitigate this risk. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing security policies, and verifying domain registration details.

L

LWS

lws.fr

57

LWS is a well-established French web hosting company founded in 1999, offering a comprehensive range of services including domain registration, shared and dedicated hosting, VPS, WordPress optimized hosting, email solutions, and cloud storage. The company positions itself as a leading French hosting provider with a strong customer base of over 680,000 hosted sites and emphasizes performance, security, and customer support. Their infrastructure is based in France with ISO 27001 certified datacenters, ensuring data sovereignty and compliance with European regulations. Technically, the website is modern, fast, and mobile-optimized, leveraging popular JavaScript libraries and tracking tools such as Google Tag Manager and Bing Ads. The presence of cookie consent mechanisms and structured data indicates a mature digital presence with good SEO and privacy compliance. The company uses multiple social media channels for marketing and customer engagement. From a security perspective, LWS demonstrates strong practices including HTTPS enforcement, daily backups, and ISO 27001 certification. However, explicit security headers and a public vulnerability disclosure policy are not evident, which could be improved. The WHOIS data is not publicly available, likely due to privacy protection, but this is consistent with the company's profile and does not raise immediate concerns. Overall, LWS presents a trustworthy and professional web hosting service with a strong focus on the French market. The website quality, business credibility, and security posture are solid, making it a reliable choice for individuals and businesses seeking hosting solutions in France.

Mailjet operates as a cloud-based email delivery platform specializing in transactional and marketing emails, serving thousands of customers globally. The analyzed subdomain mjt.lu is used primarily for link redirection and static content hosting, reflecting a technical support role within the broader Mailjet infrastructure. The website content is minimal but clearly communicates the purpose and provides essential contact information for abuse reporting. The business is positioned as a reputable player in the email delivery market with strict anti-spam policies and transparent legal documentation. From a technical perspective, the site uses basic HTML and CSS with no detected advanced frameworks or CMS. The performance and mobile optimization are moderate to basic, with no evident analytics or tracking scripts, indicating a focus on minimalism and privacy. Security posture is adequate with HTTPS usage and abuse contact channels, but lacks advanced security headers and cookie consent mechanisms, which could be improved. Overall, the security posture is moderate with strengths in abuse handling and policy transparency but opportunities exist to enhance security headers and privacy compliance. The domain WHOIS data aligns well with the business branding and shows no suspicious patterns, supporting legitimacy. The site is safe for general audiences with no adult or questionable content detected. Strategic recommendations include implementing security headers, adding cookie consent if applicable, improving mobile and accessibility features, and publishing a vulnerability disclosure policy to strengthen trust and compliance.

N

Norsk Hydro ASA

shapesbyhydro.com

67

Shapes by Hydro is a professionally designed content platform operated by Norsk Hydro ASA, focusing on aluminium-related knowledge, design, and industry insights. The website serves as a resource hub for designers, engineers, and industry professionals interested in aluminium applications and innovations. It supports Norsk Hydro's brand positioning as a global leader in the aluminium sector. The technical infrastructure leverages modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, Microsoft Application Insights, and Cookiebot for consent management, ensuring good performance, mobile optimization, and compliance with privacy regulations. Security posture is solid with HTTPS and telemetry integration, though explicit security headers and dedicated security policies are absent. The WHOIS data is missing or unavailable, which is inconsistent with the professional nature of the site and slightly reduces trust. Overall, the site is highly professional, content-rich, and trustworthy, with room for improvement in security transparency and contact information availability.

T

Truckecopower LTD.

truckecopower.cz

53

Truckecopower LTD. operates a specialized business focused on software tuning and optimization services for heavy vehicles such as trucks and buses, aiming to reduce operational costs and improve engine performance. The company offers a comprehensive suite of services including engine software modifications, GPS-based vehicle monitoring, driver training for economical driving, and particulate filter cleaning. Their market position is that of a niche provider within the transportation sector in the Czech Republic, targeting fleet operators and commercial vehicle owners. Technically, the website is built on a modern stack utilizing HTML5, CSS3, Bootstrap, and jQuery, with integrations for Google Tag Manager, Facebook Pixel, and Pipedrive forms for lead capture. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the website content and external partner references support legitimacy. Overall, the website presents a professional and trustworthy front for a small specialized business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture.

A

Agroecopower LIMITED - pobočka

agroecopower.cz

53

Agroecopower LIMITED is a specialized company operating primarily in the Czech Republic since 2004, focusing on software tuning and performance optimization for agricultural and forestry machinery. Their services include ECU remapping and software modifications to increase power and reduce operational costs for tractors, harvesters, sprayers, and other machinery. The company maintains a professional online presence with a well-structured website, multiple country-specific domains, and active social media channels. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support legitimacy. Overall, the company appears credible with a focused business model serving agricultural machinery clients.

X

XTUNING s.r.o.

dpf-xtuning.cz

49

XTUNING s.r.o. operates the website dpf-xtuning.cz, providing specialized cleaning services for diesel particulate filters (DPF) primarily targeting vehicle owners with diesel engines in the Czech Republic. The company positions itself as a niche service provider focusing on emission compliance and vehicle inspection readiness through professional DPF cleaning. The website is well-structured, with clear service descriptions and a professional design that supports user engagement and conversion via contact forms and ordering options. The business model revolves around service delivery with partnerships in related automotive performance sectors.

M

Sign in - Matomo

monmatomo.com

53

The website monmatomo.com serves as a login portal for the Matomo analytics platform, an open-source, privacy-focused web analytics solution. The platform is hosted by Scaleway SAS, a French hosting provider, and the domain registration aligns with this hosting arrangement. The site primarily offers analytics services targeting website owners and administrators who require detailed visitor tracking and data analysis capabilities. The business model appears to be centered around providing analytics software either as a service or self-hosted solution, with a focus on privacy and data control. The platform is relatively new, with the domain registered in late 2022, indicating a growing or recently launched service. Technically, the site uses standard web technologies including JavaScript, PHP, and HTML5, with the Matomo platform as the core framework. The site enforces HTTPS, ensuring secure data transmission. However, the site lacks visible security headers and explicit privacy or cookie policies on the login page, which are important for compliance and user trust. The site’s performance and mobile optimization are basic but functional, suitable for its purpose as a login portal. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, support for two-factor authentication, and client-side DoNotTrack detection. However, the absence of security headers and public security policies reduces the overall security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent and transparent, with no privacy protection, which supports legitimacy. Overall, the site is functional and trustworthy as a login portal for an analytics platform but would benefit from enhanced privacy disclosures, security headers, and contact information to improve compliance and user confidence. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and implementing security headers to strengthen the security posture.

G

Site en construction

goyer.cloud

53

The website goyer.cloud is currently a placeholder page indicating that the site is under construction. It is hosted and registered through OVHcloud, a reputable French hosting provider. The site content is minimal, consisting primarily of a 'Site en construction' message in French, with links to OVHcloud support resources. There is no business-specific content, contact information, or policies published at this time. From a technical perspective, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. The hosting infrastructure is OVHcloud, but no security headers or DNSSEC are enabled, representing minor security gaps. The site is mobile responsive at a basic level but lacks SEO optimization and accessibility features. Security posture is minimal with no HTTPS enforcement details available and no privacy or cookie policies present. No forms or data collection mechanisms are implemented, reducing immediate data protection concerns but also indicating a lack of business maturity. The domain registration is consistent and legitimate, created recently in April 2023, matching the site's under construction status. Overall, the site currently poses low risk but also offers limited business credibility or user engagement. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and adding contact information to improve trust and compliance.

R

Accès aux massifs forestiers

risque-prevention-incendie.fr

49

The website www.risque-prevention-incendie.fr functions as an informational portal providing access maps and data related to forest massif access in Mediterranean departments of France. It is a government-related service in partnership with Météo France and Valabre, aimed at supporting fire prevention and public information. The site offers interactive maps embedded via iframe and department-specific links to forest access information. Technically, the site is built with basic HTML and CSS, with no detected CMS or advanced frameworks. Mobile optimization and accessibility are basic but functional. Security posture is limited, with no HTTPS verification in the provided data, no security headers, and no privacy or cookie policies, which are critical for compliance and trust. WHOIS data is unavailable, which reduces domain trustworthiness, though the content and external partner references suggest legitimacy. Overall, the site is functional and serves its informational purpose but requires improvements in security, privacy compliance, and contact transparency to enhance trust and compliance.

P

Playmain

playmain.com

47

Playmain is a small web development duo based in Indonesia, operated by a married couple who focus on crafting quality websites with an emphasis on both aesthetic design and functional code. Their website serves as a personal portfolio and family playground for their creative web design and development projects. The site is simple, with limited content and no advanced interactive features. Technically, the site uses basic web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises concerns about domain legitimacy. Overall, the site is functional but lacks professional security and compliance features.

P

Programy na Programosy.pl - codzienna dawka programów

programosy.pl

34

Programosy.pl is a well-established Polish software download portal offering a large categorized database of installation programs, portable versions, and language localizations. The site features user comments, ratings, and an active forum, catering primarily to Polish-speaking users interested in software downloads and reviews. The business model revolves around content aggregation and advertising revenue, primarily through Google Adsense. Technically, the site uses classic web technologies including HTML5, CSS3, JavaScript with jQuery 1.7.1, and integrates Google Analytics and Google Custom Search Engine for enhanced user experience and tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is privacy protected, common for this type of portal, but the site claims a long operational history consistent with domain age expectations. Overall, the site is functional, content-rich, and moderately secure, serving a general audience without adult or questionable content.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible. No real website content, metadata, or business information is present. The page appears to be a browser-generated error page rather than a live website. Consequently, no privacy, cookie, or terms of service policies are found, and no contact or security information is available. The technical infrastructure is limited to Chromium open-source code for the offline dinosaur game, which is embedded in the error page. The security posture cannot be fully assessed due to lack of real content and headers. Overall, the site is inaccessible and cannot be properly evaluated for business credibility or compliance.

I

Irfan Skiljan

irfanview.info

49

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users worldwide. The website presents the software as fast, compact, and supporting multiple Windows versions with multi-language and Unicode support. The business model is freeware distribution with optional donations and support registrations. The site is small-scale, run by the author Irfan Skiljan, and hosted by domainunion in Austria. Technically, the website uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is domainunion, and the site performance is moderate with basic mobile optimization and accessibility. Security posture is moderate; no HTTPS status or security headers were confirmed from the data, and no forms collect sensitive data. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a generic email address. Overall, the site is trustworthy and professional but could improve security and privacy features.

I

Irfan Skiljan

irfanview.net

47

IrfanView.net is the official homepage for IrfanView, a widely recognized and popular freeware graphic viewer software primarily targeting Windows users. The website offers downloads for multiple versions of the software, including 32-bit, 64-bit, and ARM64, along with plugins, skins, and language packs. The business model is freeware for non-commercial use with options for donations and support registrations. The site is maintained by the author Irfan Skiljan, with a long domain history dating back to 2004, reinforcing its established market presence. Technically, the website is a straightforward static site using basic HTML, CSS, and JavaScript without modern frameworks or CMS. It is hosted by Hetzner Online GmbH, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website claims, showing a legitimate and long-standing domain registration. Overall, the website is trustworthy, professional, and safe for general audiences. However, improvements in security headers, privacy compliance, and transparency about data protection and incident response would enhance its security posture and user trust.

M

Mulhouse Expo SAEML

parcexpo.fr

57

Parc Expo de Mulhouse is a well-established event venue and exhibition center located in Mulhouse, France, founded in 1996. The company operates as Mulhouse Expo SAEML and offers modular, functional spaces for hosting salons, congresses, fairs, and cultural events. The website reflects a regional market position targeting event organizers and visitors in the Mulhouse area and surrounding regions. The business model centers on venue rental and event hosting services, supported by a comprehensive event agenda and partnerships with various event organizers. The site content is professionally presented in French, with clear navigation and consistent branding.

M

Mulhouse

mulhousecestvous.fr

66

Mulhouse C'est Vous is a French local government participatory platform operated by the Ville de Mulhouse, designed to facilitate citizen engagement, project collaboration, and community participation. The platform offers a variety of services including project proposals, consultations, event calendars, and newsletters targeting citizens, associations, municipal agents, and institutions within Mulhouse. The website is well-established since 2015 and maintains a consistent brand and professional content quality. Technically, it leverages modern web technologies such as React, Bootstrap, and Google APIs, integrated within a Symfony-based backend and the Cap Collectif participatory platform framework. Security posture is solid with HTTPS enforcement, CAPTCHA protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with comprehensive GDPR-aligned policies and a named Data Protection Officer. Overall, the site is trustworthy, well-maintained, and serves its public sector mission effectively.

Entreprendredanslorne.com is a regional business facilitation platform focused on supporting companies seeking to establish operations in the Orne department of Normandy, France. The website offers services including project accompaniment, real estate and land search, public aid identification, and networking with local actors. It positions itself as a key regional player providing a free and tailored support network for business implantation. The site is linked to regional government entities, enhancing its credibility. Technically, the website employs a modern front-end stack including Bootstrap 3.3.7, jQuery, Font Awesome, Google Fonts, and interactive components like FlexSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and SnapEngage chat for user engagement and analytics. Security measures include HTTPS with reCAPTCHA v3 on forms, but lack explicit security headers and cookie consent mechanisms. The security posture is moderate with good SSL configuration and secure form handling, but improvements are needed in security headers and privacy compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details suggest a legitimate regional business service. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency. Strategically, verifying domain registration and adding explicit privacy and security policies would strengthen trust. Enhancing security headers and cookie consent would improve compliance and user trust. Continued monitoring of third-party scripts and analytics is recommended to mitigate potential vulnerabilities.

F

France Travail

pole-emploi.fr

57

France Travail is a French governmental employment platform providing a comprehensive range of services including job offer searches, allocation and aid estimations, online registration for job seekers, and dedicated employer services. The website is well-branded, professionally designed, and targets job seekers and employers across France. It serves as a national public employment service with a large user base and extensive content offerings. Technically, the site uses modern web technologies including JavaScript frameworks, Dynatrace monitoring, and Piano Analytics for performance and user behavior tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and secure form practices, though explicit security headers and incident response information are not visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and safe, with no suspicious or adult content detected.

A

Assistance publique - Hôpitaux de Paris (AP-HP)

aphp.fr

66

Assistance publique - Hôpitaux de Paris (AP-HP) is the largest public healthcare institution in Europe, operating 38 hospitals and serving millions of patients annually. The website provides comprehensive information on patient care, research, education, and innovation, targeting patients, healthcare professionals, researchers, and partners. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. WHOIS data is missing, which is unusual but likely due to AFNIC policies or privacy protection, not indicating malicious intent. Overall, the website is professional, trustworthy, and compliant with GDPR.

blackpills studio is a media production company specializing in the development, production, and international distribution of premium short-form series. The company positions itself as an international content producer with a focus on mobile and SVOD platforms, targeting a general audience interested in original series. The website reflects a small-sized media business founded in 2006, with consistent branding and a professional online presence hosted on the MyPortfolio platform and OVH infrastructure. Technically, the site uses modern web technologies including HTTPS, JavaScript, and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy or security policies. No contact information or detailed compliance documentation is present, which limits transparency and user trust. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

C

CULLINAN.CZ s.r.o.

cullinan.cz

58

Cullinan.cz is a Czech company specializing in the manufacturing of commemorative medals and vending machines with a 15-year tradition. Their products are distributed primarily through unmanned vending machines located in zoological gardens and Dino parks across the Czech Republic, Slovakia, Poland, and Russia. The company emphasizes artistic quality, collaborating with notable sculptors and using certified materials such as Nordic Gold. The website is professionally designed, mobile-optimized, and provides detailed business and product information, although it lacks privacy and cookie policies. Technically, the site uses modern JavaScript modules and image galleries but does not show advanced security headers or analytics integrations. The security posture is moderate with no critical vulnerabilities detected, but improvements in privacy compliance and security headers are recommended. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the company.

S

Stadt Rheine

rheine.de

56

Stadt Rheine operates as the official municipal government website for the city of Rheine in Germany, providing a broad range of public services, cultural information, and tourism resources. The site targets residents, visitors, and businesses, offering online forms, event information, and administrative contacts. The website is well-structured with comprehensive navigation and modern design elements, reflecting a medium-sized government entity with a strong local presence. Technically, the site employs modern JavaScript libraries such as Swiper.js and ExtJS, uses a recognized CMS (Recon CMS), and implements cookie consent via Klaro, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and basic security headers present, though additional headers and a published incident response policy would enhance trust. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Przelewy24

przelewy24.pl

74

Przelewy24 is a well-established Polish online payment service provider offering a variety of payment methods including BLIK, Google Pay, and Apple Pay. The website targets businesses seeking to integrate efficient and diverse payment solutions into their e-commerce platforms. The company positions itself as a key player in the Polish online payments market, providing reliable and fast payment processing services. The website content is professional, well-structured, and localized in Polish, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a good level of digital maturity and compliance with privacy regulations. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks some advanced security headers and explicit security policies. No WHOIS data is available due to privacy protection, which is justified for a financial services provider. Overall, the site demonstrates a strong security posture and compliance with GDPR, with room for improvement in transparency and incident response readiness.

M

Mairie de Montigny la Resle

mairie-montigny-la-resle-89.fr

57

The website www.mairie-montigny-la-resle-89.fr serves as the official online presence for the town hall of Montigny la Resle, a small commune in the Bourgogne region of France. It provides residents and visitors with essential information about municipal services, local news, administrative procedures, health advisories, and community events. The site is well-structured and targets local citizens and stakeholders, offering a comprehensive resource for civic engagement and public service access. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. It is mobile-optimized and accessible, featuring responsive design and navigation aids. However, the technology stack is somewhat dated, notably with an older jQuery version, and lacks advanced security headers. Performance is moderate, with no evident tracking or analytics scripts, indicating a privacy-conscious approach. From a security standpoint, the site uses HTTPS, which is mandatory, but does not implement additional security headers that could enhance protection against common web threats. There is no visible privacy or cookie consent mechanism, which is a compliance gap under GDPR. The WHOIS data is unavailable, which slightly reduces trust but is not uncommon for .fr domains. No vulnerabilities or sensitive data exposures were detected. Overall, the website is a trustworthy and functional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and updating libraries would enhance its security posture and regulatory adherence.

M

Mairie de Gurgy

gurgy.net

58

The website www.gurgy.net serves as the official municipal portal for the town of Gurgy, France, providing residents and visitors with news, administrative information, community services, and event announcements. It targets local citizens and stakeholders, offering a centralized platform for municipal communication and public service access. The site maintains a consistent and professional presentation aligned with government standards, including clear navigation and relevant content. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and integrates third-party services like Google Analytics and Meteo France weather widgets. Cookie consent is managed via the tarteaucitron library, ensuring compliance with privacy regulations. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and manages user consent for cookies, but it does not implement several recommended security headers or provide incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, as it reduces trust in domain legitimacy despite the website's official appearance. Overall, the website is functional, trustworthy, and serves its purpose well, but improvements in security headers, WHOIS transparency, and incident response readiness are advised to enhance its security posture and trustworthiness.