Security Directory

E

Zážitkový vlak KDS – Pronajímáme vlakovou soupravu a motorový vůz, které umožňují klientům prožít večírek originálním způsobem na kolejích. Nabízíme služby eventové agentury, jejímž hlavním cílem je nenechat klienta na holičkách.

event-zazitkovyvlak.cz

55

The website event-zazitkovyvlak.cz represents a small Czech business specializing in the rental of train sets and motor vehicles for unique event experiences, alongside event agency services. The business targets clients looking for original party venues on rails, positioning itself as a niche provider in the transportation and event management sectors. The website is built on WordPress with Elementor, indicating a moderate level of digital maturity and ease of content management. The presence of Cookiebot and Google Tag Manager shows awareness of privacy and analytics needs, although no explicit privacy policy or terms of service pages were found, which is a compliance gap. Security posture is adequate with HTTPS and consent mechanisms, but lacks advanced security headers and incident response information. Overall, the website is functional and professional but could improve in privacy and security transparency.

R

Rewora

rewora.io

66

Rewora is a technology company specializing in customer experience tools designed to boost sales and build trust through authentic product and store reviews, Q&A forums, and business intelligence analytics. The company targets e-commerce businesses seeking to increase conversion rates and customer loyalty by leveraging social proof and advanced review management features. The website presents a professional and modern digital presence with clear branding and comprehensive service descriptions. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates analytics tools like Google Tag Manager and Hotjar, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent banner. However, the absence of a terms of service page and explicit security or incident response policies are gaps to address. Overall, the domain registration data aligns with the business profile, indicating a legitimate and consistent startup operation launched in 2023.

K

Kaira

kairaweb.com

65

Kaira is a specialized provider of WordPress themes, WooCommerce plugins, and block tools aimed at creators and developers seeking to build fast, modern websites. Established with a domain registered since 2010 and business activity since 2013, Kaira holds a trusted position in the WordPress ecosystem. The website demonstrates a good level of technical maturity, leveraging WordPress 6.8.3, popular plugins, and integrations such as Google Analytics and MailerLite for marketing and analytics. Hosting is provided by HOSTINGER operations, UAB, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

eMD Plugins, operated by eMarket Design LLC, offers enterprise-grade WordPress plugins designed to provide robust, reliable, and feature-rich solutions for businesses ranging from startups to large corporations. The company emphasizes ease of use, customization without coding, and exceptional support to empower customers in building successful online presences. The website reflects a mature business with a consistent brand and a clear focus on technology and software solutions for WordPress. Technically, the website leverages modern JavaScript frameworks such as Alpine.js, Swiper.js, and MeiliSearch for search functionality, hosted with Cloudflare DNS and registered via Amazon Registrar. The site is mobile-optimized, fast-loading, and SEO-friendly, with a professional design and clear navigation. Analytics are handled via Matomo, indicating a moderate level of user tracking with some privacy considerations. From a security perspective, the site uses HTTPS with good SSL configuration and domain status locks to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, and no public security or incident response policies are found. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present. No vulnerability disclosure or security.txt files are published. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, DNSSEC, cookie consent, and incident response transparency would enhance trust and compliance further.

P

Login - pmb.community

pmb.community

63

PMB Community is a niche social network platform dedicated to users of the PMB library management software. It offers thematic spaces, forums, and collaborative tools such as wikis, shared calendars, and file sharing to facilitate knowledge exchange among librarians and documentalists. The platform is powered by the HumHub CMS and built on the Yii PHP framework, leveraging modern web technologies like jQuery and Bootstrap for a responsive and user-friendly experience. The website is secured with HTTPS and employs CSRF tokens to protect user interactions. However, it lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The WHOIS data is unavailable due to TLD restrictions and privacy protections, limiting domain registration transparency. Overall, the site presents a professional and safe environment for its target audience but could improve in privacy compliance and transparency.

P

PMB Services

pmbservices.fr

66

PMB Services is a French company specializing in the development and support of PMB, an open-source library management software designed for libraries, documentation centers, and educational institutions. The company offers a comprehensive suite of services including consulting, installation, hosting, training, and support, serving over 1800 clients with more than 10,000 users. Their market position is solid, supported by a professional website with good content quality and consistent branding. Technically, the website employs a mature technology stack including jQuery, UIkit, Dojo Toolkit, and FontAwesome, alongside analytics tools like Google Analytics and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance level. Privacy and cookie policies are well implemented, indicating GDPR compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but the Content-Security-Policy header is empty, representing a potential security weakness. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain www.sigb.net is a concern, suggesting the domain may be unregistered or expired, which could impact trustworthiness. Overall, the website presents a professional and trustworthy front for PMB Services, but the domain registration inconsistency should be addressed to ensure legitimacy and prevent potential security risks. Strategic recommendations include enhancing security headers, verifying domain registration status, and maintaining up-to-date software components.

P

Parola spol. s r.o.

jihlavske-listy.cz

49

Jihlavske-listy.cz is a regional news website operated by Parola spol. s r.o., serving the Vysočina region in the Czech Republic. The site offers a broad range of local news, cultural content, sports updates, and magazines, targeting residents and readers interested in regional affairs. The business model relies on advertising and subscription services, supported by a consistent brand presence and active social media engagement. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and CKEditor for content management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA for form protection, but lacks visible security headers which are recommended for enhanced protection. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site presents a professional and trustworthy regional news platform with moderate technical and security maturity. Strategic improvements in security headers, privacy policy presence, and WHOIS transparency would enhance trust and compliance.

P

PhDr. Vladimír Sůva

denik-knihy.cz

55

Deník KNIHY is a Czech media platform focused on providing daily updated information about newly published books, authors, and literary events. It serves as a comprehensive resource for readers, publishers, distributors, and booksellers, offering a catalog of books with direct purchase options and editorial content including interviews and videos. The website is positioned as a key player in the Czech literary market, supporting both domestic and international authors with promotional services. Technically, the site is built on WordPress with common plugins for galleries and polls, integrates Google Analytics and Facebook SDK for tracking, and is hosted under a Czech registrar with appropriate domain age and consistency. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks formal privacy and cookie policies, which impacts its compliance posture. Security practices are basic with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is trustworthy and professional but could improve in privacy compliance and security hardening.

T

Televize Natura s.r.o.

tvnatura.cz

55

TV Natura is a small Czech internet television platform focused on nature, environmental awareness, and community engagement. The website offers live streaming, archived videos, articles, and opportunities for user-generated content. The business operates as a small media entity with a non-profit or community-supported model, recently transitioning to a paid membership platform due to regulatory and financial challenges. Technically, the site uses modern web technologies including HTTPS, Bootstrap, and integrates Google Analytics and Facebook Pixel for tracking. The security posture is moderate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no terms of service or incident response information is found. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site provides a good user experience with relevant content for its target audience but would benefit from enhanced security and compliance measures.

I

Institut pro TCIM/CAM, z. ú.

mkz2021praha.cz

53

The website www.mkz2021praha.cz serves as the official portal for the International Health Congress 2021 held in Prague, focusing on traditional, complementary, and integrative medicine (TCIM). It provides extensive information about the congress, including participant profiles, event recordings, publications, and a dedicated information platform called Platforma 2020 Praha. The site targets healthcare professionals, researchers, and the general public interested in TCIM, positioning itself as a niche but reputable organizer in the healthcare non-profit sector. Technically, the website employs a modern but straightforward tech stack including jQuery, bxSlider, simpleLightbox, Google reCAPTCHA, and Google Tag Manager for analytics. It is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. The site uses HTTPS and includes anti-bot measures on forms, but lacks advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data reduces transparency and trust slightly. Privacy compliance is basic, with a privacy policy implied on the contact page but no dedicated cookie or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich, supporting its mission to disseminate TCIM knowledge. Strategic improvements in security headers, privacy transparency, and WHOIS data availability would enhance trust and compliance.

D

DnesniObed.cz

dnesniobed.cz

44

DnesniObed.cz is an online platform focused on aggregating daily and lunch menus from restaurants primarily in Prague and its surroundings. It serves as a valuable resource for users seeking up-to-date meal options, restaurant details, and ordering capabilities. The platform also highlights gastronomic events, enhancing its appeal to food enthusiasts. The website demonstrates a solid market position within its niche, catering to a local audience with a medium-sized operational scale. Technically, the website employs a combination of Bootstrap 3.3.7, jQuery, Font Awesome, and lazy loading techniques to deliver a responsive and user-friendly experience. Integration with Google Analytics and Facebook Pixel indicates a moderate level of digital marketing maturity. While the site is mobile-optimized and SEO-friendly, some technical improvements such as updating libraries and enhancing accessibility could be beneficial. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, the absence of security headers and privacy/cookie policies suggests gaps in compliance and security best practices. The lack of WHOIS data reduces domain trustworthiness, although the website content and external references support its legitimacy. Overall, DnesniObed.cz presents a functional and relevant service with room for improvement in privacy compliance and security posture. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

Z

zonasvobody.cz

zonasvobody.cz

41

Zóna svobody is a small hospitality and event venue based in Říčany, Czech Republic, offering refreshments, cultural activities, and entertainment for a broad audience including families and children. The website presents information about events, food and beverage offerings, and community programs, positioning itself as a local cultural hub. Technically, the site is built on WordPress with common libraries such as jQuery and Font Awesome, and it is moderately optimized for mobile devices with a good user experience. Security posture is basic with HTTPS enabled but lacking important security headers and privacy policies, which are critical for GDPR compliance. The absence of contact emails and phone numbers reduces business credibility and user trust. Overall, the site is functional and informative but would benefit from enhanced security and compliance measures.

E

Extravíno U Labutě

extravinoulabute.cz

40

Extravíno U Labutě is a small local wine retailer based in Říčany, Czech Republic, offering wine products through a WooCommerce-powered website built on WordPress with the Divi theme. The website targets local wine consumers and operates primarily as a retail business. Technically, the site uses common web technologies including Google Analytics and Tag Manager for tracking, but lacks advanced security headers and visible privacy or cookie policies. The site is mobile optimized and presents a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled but missing additional security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent with the business claims, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

L

LABE TRI CLUB Hradec Králové z.s.

skolnitriatlon.cz

41

The website skolnitriatlon.cz represents the LABE TRI CLUB Hradec Králové z.s., a small Czech sports organization focused on organizing school and public triathlon events. The site provides event schedules, contact information, and photo galleries to engage its target audience of athletes ranging from school children to general sports enthusiasts. The business model centers on event organization in collaboration with a sports equipment rental partner, Topsports Centrum. The website is modest but functional, with a clear focus on local sports community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, supplemented by Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the business location. The site is mobile-optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and modern tracking tools but lacks visible security headers and formal privacy or cookie policies, which impacts its privacy compliance score. No active forms or incident response contacts are present, and no vulnerability disclosure mechanisms are found. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small local sports event organizer with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

P

ProfiBeauty s.r.o.

profibeauty.cz

58

ProfiBeauty s.r.o. operates a specialized e-commerce website focused on hair extensions, hair care products, wigs, and related accessories primarily targeting the Czech market. Established in 2009, the company has a stable online presence with a well-structured website offering a variety of products and clear contact information. The site integrates modern web technologies including PrestaShop CMS, Google Analytics, Facebook Pixel, and reCAPTCHA, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and basic security measures implemented, though there is room for improvement in security headers and published policies. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy found. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

U

UnisSoft s.r.o.

hairsoft.cz

38

HairSoft.cz is a professional website offering a comprehensive beauty salon management software solution developed by UnisSoft s.r.o. The software targets beauty salons, hairdressers, cosmeticians, and wellness providers primarily in the Czech and Slovak markets. The company emphasizes efficiency, modularity, and practical features derived from 25 years of industry experience. The website is well-designed, mobile-optimized, and rich in content including testimonials, detailed feature descriptions, and trial offers. Technically, the site uses Joomla CMS with modern frameworks and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS and CSRF protections, though some security headers and privacy compliance mechanisms are missing. WHOIS data is unavailable, which slightly reduces trustworthiness but the business information and website professionalism compensate for this. Overall, the site is a credible and valuable resource for its target audience.

U

UnisSoft s.r.o.

unisbook.cz

47

UnisSoft s.r.o. operates the UnisBook platform, a specialized online reservation system tailored for beauty and salon services. The company targets beauty professionals seeking efficient, automated booking solutions with features such as multi-branch management, client communication automation, and integration with payment gateways. The website demonstrates a mature digital presence with a professional design, clear navigation, and multilingual support, indicating a well-developed technical infrastructure based on Joomla CMS and modern web technologies. Security posture is solid with HTTPS and CSRF protections, though some security headers and cookie consent mechanisms could be improved. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business credibility is supported by detailed policies, partner integrations, and active social media channels. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and improving accessibility features to further strengthen trust and compliance.

F

Frisör Klier správní s.r.o.

klier.cz

62

Frisör Klier správní s.r.o. operates the largest network of hair salons in the Czech Republic, catering to both men and women with professional hairdressing services and premium hair care products. The company maintains a strong market position as a leading retail service provider in the hair care industry, supported by an e-commerce platform for product sales. Their website reflects a professional and consistent brand image, targeting a broad audience seeking quality hair care solutions. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and the Nette Framework, ensuring a robust digital presence with moderate performance and good mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and an active cookie consent mechanism, demonstrating adherence to GDPR requirements. However, the absence of WHOIS registration data and visible security headers slightly detracts from the overall trustworthiness. No direct contact phone numbers or physical addresses were found on the homepage, though a professional contact email is provided. Overall, the website is secure, user-friendly, and business credible, with room for improvement in transparency and security hardening.

E

ELEGANCE s.r.o.

sothys.cz

68

Sothys.cz represents a luxury French professional cosmetics brand operating primarily in the Czech Republic, targeting beauty salons, wellness, and spa centers. The company, identified as ELEGANCE s.r.o., offers high-end cosmetic products and professional treatments, positioning itself as a premium player in the beauty retail sector. The website reflects a well-structured digital presence with clear branding and a focus on professional clientele. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and privacy policy documentation is not clearly found, suggesting room for compliance improvement. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, but could enhance transparency by publishing detailed privacy and security policies. Strategic recommendations include improving security headers, publishing privacy and incident response information, and enhancing contact availability to strengthen trust and compliance.

B

Beauty Store

beauty-store.cz

10

Beauty Store is a Czech Republic based e-commerce platform specializing in beauty products, particularly eyelash extension supplies and related training courses. The website offers a comprehensive catalog of products, including cosmetics, salon equipment, and professional makeup items, targeting beauty professionals and consumers interested in eyelash extensions and beauty care. The business operates primarily online with a focus on retail sales and educational workshops. Technically, the website is built on the Shoptet CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security-wise, the site enforces HTTPS and uses CSRF tokens in forms, but it relies on an outdated jQuery version and lacks some modern security headers, which could be improved. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy detected in the provided content. WHOIS data is not publicly available, indicating privacy protection, which is typical for small e-commerce businesses. Overall, the site appears legitimate and professional with moderate technical maturity and a good security posture, though improvements in privacy and security practices are recommended.

G

Green Beauty Market

greenbeautymarket.cz

10

Green Beauty Market is a well-established event organizer specializing in natural, bio, vegan, and eco-friendly cosmetics, hosting Europe's largest pop-up event in this niche since 2016. The website effectively communicates the event details, brand values, and social media presence, targeting consumers interested in clean beauty products primarily in the Czech Republic and Slovakia. Technically, the site is built on WordPress with a modern theme and includes essential features such as cookie consent and GDPR compliance, though it lacks some advanced security headers and explicit security policies. The security posture is solid with HTTPS and cookie management but could be enhanced with additional headers and incident response information. Overall, the website is professional, trustworthy, and provides a good user experience with clear navigation and relevant content.

B

BEST OF NATURE

bestofnature.sk

10

Best of Nature is a small retail business specializing in natural plant-based oils and wellness products, targeting consumers interested in aromatherapy and traditional herbal remedies primarily in Slovakia and the Czech Republic. The website presents a professional and consistent brand image with clear product promotion and customer engagement through exhibitions and online sales. Technically, the site uses modern web technologies including Vue.js and FontAwesome, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent and privacy policies implemented, but lacks explicit security headers and incident response information. Overall, the website is trustworthy and compliant with GDPR, though improvements in security policies and technical hardening are recommended.

V

VELAE LEGAL GROUP

velaelegalgroup.com

10

VELAE LEGAL GROUP is an established international full-service law firm with offices in Spain and Latin America, providing comprehensive legal services to multinational and middle market clients. The firm leverages over 40 years of combined experience from predecessor firms and is recognized by leading legal directories. The website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy policies. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site demonstrates strong business credibility but would benefit from enhanced privacy compliance and security best practices.

F

Fundación Estatal para la Formación en el Empleo - Fundae

fundae.es

64

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

D

DKV

dkv.es

10

DKV is a well-established health insurance provider in Spain offering a broad range of insurance products including health, dental, life, home, accident, and travel insurance. The website is professionally designed using Drupal 10 CMS and integrates multiple marketing and analytics tools such as Google Tag Manager, HubSpot, and Inbenta chatbot, reflecting a mature digital infrastructure. The site is fully accessible, mobile-optimized, and provides clear navigation and comprehensive content tailored to individuals and families seeking private health insurance in Spain. Security posture is good with HTTPS enforced and use of bot detection scripts, though explicit security headers and policies are not publicly visible. Privacy compliance is basic with cookie consent implemented but no visible privacy or terms of service pages in the provided content. WHOIS data is not publicly accessible due to privacy protection, which is justified for this business type. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and consistent branding.

The website www.zaragoza.es/sede/ is the official electronic headquarters of the Ayuntamiento de Zaragoza, serving as a comprehensive digital platform for municipal services, citizen information, and electronic administration. It offers a wide range of services including public employment offers, cultural agendas, citizen participation, and access to various municipal resources. The site targets residents and visitors of Zaragoza, providing a government-backed, authoritative source of information and services. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and FontAwesome, with integrations for Google Tag Manager and Google Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and shows good security practices, though explicit security headers and a cookie consent mechanism could be improved. The WHOIS data is unavailable due to access restrictions, but the domain is a recognized official government domain, lending high legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical digital interface for Zaragoza's municipal government.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

C

Cerf à Lunettes

creation-site-web-grenoble.fr

9

Cerf à Lunettes is a small web design agency based in Grenoble, France, specializing in website creation and development services. The company positions itself as the number one website creation service in Grenoble, targeting local businesses and individuals seeking professional web presence. The website is built on WordPress using Elementor and optimized with WPRocket and Rank Math PRO for SEO. The technical infrastructure is modern and hosted by OVH, a reputable provider. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional but could improve privacy compliance and security practices.

L

Les Echos Le Parisien Annonces

annonces-legales.fr

10

Les Echos Le Parisien Annonces operates an online platform dedicated to publishing legal announcements in France at competitive prices. The website offers access to over 600 authorized newspapers, providing customers with fast attestation of publication and comprehensive customer support via phone, chat, and email. The platform targets businesses and individuals needing to comply with French legal publication requirements. Technically, the site employs modern web technologies including Google Tag Manager, Hotjar, and a consent management platform (Didomi), ensuring a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. The absence of WHOIS data reduces domain trust slightly, but external trust signals such as Trustpilot reviews and clear contact information support the site's legitimacy. Overall, the website is professional, user-friendly, and compliant with privacy regulations, making it a reliable service for legal announcement publication in France.

T

Trophée Industrie Grand Ouest

trophees-industrie-grand-ouest.com

61

The website 'Trophées Industrie Grand Ouest' serves as a regional award platform recognizing top-performing industrial companies in Brittany, Normandy, and Pays de la Loire regions of France. It is positioned as a small-sized business focused on manufacturing sector awards and recognition. The site is built on the Wix platform, leveraging Wix Thunderbolt framework, and hosted by Wix, providing a moderate level of technical maturity with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and structure appear professional and business-oriented. Contact information is limited to a phone number and postal address embedded in structured data, with no email or contact forms present. Overall, the site is functional and relevant to its target audience but requires improvements in privacy, security, and domain legitimacy verification.

P

Le Palmarès des Entreprises

palmaresdesentreprises.com

6

The website www.palmaresdesentreprises.com is hosted on the Wix platform and appears to be a business-oriented site in French. However, the content is minimal and primarily consists of Wix's standard scaffolding and scripts, with no visible business descriptions, contact information, or policies. The domain WHOIS data is unavailable, indicating either a very recent registration or privacy protection, which raises concerns about the legitimacy and transparency of the site. Technically, the site uses modern JavaScript libraries and error monitoring via Sentry, but lacks advanced security headers and privacy compliance mechanisms. Overall, the site demonstrates basic technical infrastructure but lacks critical business and security information, resulting in a moderate risk profile.

FrankenPHP is a modern PHP application server built on top of the Caddy web server and written in Go and C. It targets PHP developers and organizations seeking a performant, easy-to-deploy PHP server with advanced features such as HTTP/3 support, automatic HTTPS, and a unique worker mode that keeps applications in memory for faster response times. Sponsored by Les-Tilleuls.coop and created by Kévin Dunglas, a Symfony Core Team member, FrankenPHP positions itself as a niche but innovative solution in the PHP ecosystem. The website reflects a high level of technical maturity with excellent design, responsive layout, and clear navigation, supporting a positive user experience.

A

API Platform

api-platform.com

11

API Platform is a mature technology company specializing in providing an API-first framework that enables developers and enterprises to create REST and GraphQL APIs efficiently. The company offers a comprehensive suite of tools including client app scaffolding, a beautiful admin interface, and real-time data streaming capabilities leveraging the Mercure protocol. Their market position is strong within the developer community, supported by open source contributions and enterprise subscription offerings. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site uses a modern tech stack including React, Symfony, Next.js, and is hosted with OVH and Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced, security headers present, and a published security policy, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though it lacks explicit cookie consent mechanisms. Strategic recommendations include enabling DNSSEC, adding cookie consent, and publishing incident response contacts to further enhance security and compliance.

E

ESSENS Restaurant

restaurantessens.cz

9

ESSENS Restaurant is a fine dining establishment located in the culturally significant Chateau de Frontiere in South Moravia, Czech Republic. It offers a high-end gastronomic experience focusing on multi-course tasting menus with locally sourced and seasonal ingredients. The restaurant targets discerning customers seeking Michelin-quality cuisine in a refined setting. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various sliders, with tracking integrations including Google Tag Manager and Facebook Pixel. However, there is a lack of visible privacy and cookie policies, and WHOIS data is unavailable, which impacts trust and compliance. Security headers are not evident, suggesting room for improvement in security posture. Overall, the website is professionally designed and user-friendly but requires enhancements in privacy compliance and security transparency.

M

MĚSTO TŘEBÍČ

trebiczije.cz

47

The website trebiczije.cz serves as an official informational portal for the city of Třebíč, Czech Republic, targeting citizens, entrepreneurs, and tourists. It provides comprehensive information about living, business opportunities, tourism, and community events, supported by a dedicated incoming team. The site positions itself as a regional hub for local development and engagement, reflecting a medium-sized government entity with a focus on sustainable urban growth and community well-being. Technically, the site employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and integrates analytics tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. It features responsive design and basic accessibility, with cookie consent mechanisms aligned with GDPR requirements. However, the absence of detected security headers and incomplete WHOIS data indicate areas for improvement in security and domain transparency. From a security perspective, the site benefits from HTTPS encryption and client-side form validation but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The missing WHOIS data raises concerns about domain registration legitimacy, although the website content and contact information strongly suggest it is an official municipal resource. Overall, the website is professionally designed and functional, with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and resolving WHOIS data visibility to improve trust and compliance. These steps will strengthen the site's security posture and business credibility while maintaining its role as a vital community resource.

P

Paris&Co

parisandco.com

10

Paris&Co is a territorial innovation agency serving Paris and its metropolitan area, focused on accelerating impactful projects related to sustainable transitions. The organization targets entrepreneurs, enterprises, institutions, and territories, providing sector-specific expertise and tailored programs to foster innovation. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. It integrates marketing and analytics tools such as Google Analytics and HubSpot, and implements a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy, terms of service, and explicit contact information limits full compliance and user trust. The lack of WHOIS data for the domain is a notable concern, although the website content and branding strongly indicate legitimacy. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information.

Axess Groupe is a French technology company specializing in cloud sovereign hosting and IT infrastructure services. They provide secure, performant, and compliant cloud hosting solutions tailored for enterprises, including healthcare data hosting certified under HDS and ISO 27001 standards. The company targets a broad range of clients from SMEs to large public institutions within France, emphasizing data sovereignty and security. Their website demonstrates a mature digital presence with comprehensive content, professional design, and strong GDPR compliance. Technically, the site uses Drupal CMS with modern analytics and marketing tools, ensuring good performance and accessibility. Security posture is strong with certifications and secure hosting practices, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS registration data slightly impacts domain trust but does not overshadow the overall professionalism and legitimacy of the business. Strategic recommendations include enhancing security disclosures and verifying domain registration details to improve trust further.

M

MVE Sarl

mve.fr

46

MVE Sarl operates a website focused on the sale of used construction and public works equipment, targeting businesses and professionals in the construction sector primarily in France. The company has a long-standing domain registered since 1999, indicating an established presence in the market. The website uses WordPress with WooCommerce for e-commerce functionality and integrates SEO and analytics tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is modern but lacks some advanced security headers and explicit privacy compliance documentation. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but no published security or incident response policies were found. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

A

Amicus Therapeutics, Inc.

galafoldhcp.com

10

Galafoldhcp.com is the official healthcare professional website for Galafold® (migalastat), an FDA-approved oral medication for treating adults with Fabry disease and an amenable GLA gene variant. The site is operated by Amicus Therapeutics, Inc., a reputable pharmaceutical company specializing in rare diseases. The website provides comprehensive product information, safety data, prescribing information, patient referral forms, and access to support programs such as AMICUS ASSIST. The target audience is clearly defined as licensed U.S. healthcare professionals, with access gated by an entry confirmation. The site maintains consistent branding and professional content quality, reinforcing its market position as a specialized rare disease treatment provider.

C

Chiesi Global Rare Diseases

chiesirarediseases.com

10

Chiesi Global Rare Diseases is a family-owned biopharmaceutical company specializing in rare disease therapeutics. The company positions itself as a Certified B Corporation committed to providing innovative treatments and support to patients with rare diseases. Their market position is niche but well-established, supported by a clear business model focused on research, development, and patient advocacy. The website reflects a medium-sized enterprise with a global presence and a parent company, Chiesi Farmaceutici S.p.A., which recently acquired Amryt Pharma, expanding its portfolio. Technically, the website uses modern frameworks such as Bootstrap and integrates Google Tag Manager for analytics. Hosting is managed via EasyDNS, and the site is mobile-optimized with good SEO practices. Accessibility is basic but present. Security posture is adequate with HTTPS enforced, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the security posture is solid with no critical vulnerabilities detected, but the absence of a public security policy or incident response information is a gap. The domain WHOIS data is consistent with the business claims, showing transparency and legitimacy. The website content is safe for general audiences, focusing on healthcare and patient support without any adult or explicit content. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

The website nami.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, preventing access to any substantive content. The domain is long-established, registered since 1996 with Network Solutions, LLC, and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no business, contact, or policy information is available for analysis. The technical infrastructure indicates use of modern security tools like Cloudflare's WAF and CAPTCHA to protect the site from automated threats. However, this also limits the ability to assess the website's content quality, security posture, and compliance status. Overall, the site appears legitimate based on domain age and registrar data, but the lack of accessible content restricts further evaluation.

The website thebls.com currently presents a security verification page employing Google reCAPTCHA v3, indicating a bot protection mechanism is in place. No actual business content, services, or company information is accessible on the provided page, limiting the ability to assess the business comprehensively. The domain is registered since 2007 with Tucows Domains Inc., showing a stable and legitimate registration history. However, the lack of visible content and policies suggests the site is either under maintenance, restricted, or protected by a security gateway. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for security verification. There is no evidence of DNSSEC, security headers, or HTTPS enforcement visible in the provided content, which are areas for improvement. The site’s mobile optimization and accessibility are basic, and SEO elements are minimal or absent. Security posture is moderate due to the presence of reCAPTCHA but lacks other best practices such as DNSSEC and security headers. No privacy, cookie, or terms of service policies are found, indicating poor privacy compliance. No contact or incident response information is available, which reduces trust and business credibility. Overall, the site is currently inaccessible beyond the security verification challenge, resulting in a low AI score and limited insights. Strategic recommendations include enabling DNSSEC, implementing HTTPS with security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

Le Mouvement Associatif operates a French-language website focused on promoting inclusivity within associations through an evaluation tool called Inclusiscore. The site targets associations and their stakeholders, providing educational resources and a questionnaire to assess inclusiveness in project scope, openness, and governance. The organization positions itself as a niche non-profit resource provider within the French associative sector. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with Matomo analytics integrated and configured to require cookie consent. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No CMS or hosting provider details are evident. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS (assumed from canonical URLs), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented inline with GDPR principles, but no formal privacy policy or terms of service pages were found. WHOIS data is privacy protected or unavailable, which is common for non-profits but limits registrant transparency. No contact emails or phone numbers are provided, which could impact user trust and support. Overall, the website is professional, trustworthy, and safe with no adult or questionable content. The main risks relate to limited transparency in registrant data and absence of explicit privacy and security policies. Strategic improvements in these areas would enhance compliance and user trust.

A

Site not installed - OVHcloud

assojadorejadhere.fr

3

The domain assojadorejadhere.fr is registered with OVH since August 2021 and currently hosts only a placeholder page indicating that the site is not installed. There is no active business content, contact information, or policies available on the site. The hosting provider is OVH, a reputable French cloud and hosting company. The technical infrastructure is minimal, consisting of basic HTML and CSS with no advanced frameworks or CMS detected. Security posture cannot be fully assessed due to lack of content and absence of security headers or HTTPS status information. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site appears to be inactive or under development, limiting the ability to evaluate business credibility or security maturity.

F

Fondation Lilian Thuram

thuram.org

46

Fondation Lilian Thuram is a French non-profit organization dedicated to education against racism and promoting equality. The website serves as a platform to provide educational resources, multimedia content, and public awareness campaigns. It targets a broad audience including educators, students, and activists. The foundation is well-positioned in the non-profit education sector with a clear mission and professional online presence. Technically, the site is built on WordPress with common plugins and multimedia integrations, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website's content and structure support its legitimacy. Overall, the site is a credible and valuable resource for anti-racism education.

U

Upian

upian.com

46

Upian is a French media company specializing in digital storytelling, offering studio services to media companies, institutions, and brands, as well as producing documentaries and magazines for web and television. The company positions itself as a creative and editorially focused production house with an international footprint. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy and cookie policies, which could be improved to enhance compliance and trust. Overall, the website is professional and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic improvements in privacy compliance and security headers are recommended to strengthen the security posture and regulatory adherence.

M

Madmoizelle

madmoizelle.com

68

Madmoizelle is a French online magazine focused on feminist perspectives, culture, society, lifestyle, and pop culture. It targets French-speaking women interested in these topics and offers content through articles, podcasts, newsletters, and forums. The website is well-branded and maintains a consistent professional presence with active social media channels. Technically, the site is built on WordPress and integrates modern analytics and advertising technologies, including Google Tag Manager, Piano Analytics, and Didomi for consent management. The site is mobile-optimized and performs moderately well with good SEO practices. Security-wise, the site enforces HTTPS and uses security headers to some extent, but lacks explicit security policies or incident response information. Privacy compliance is strong with comprehensive cookie and privacy policies and a consent mechanism. However, the absence of WHOIS data for the domain reduces transparency and trust in domain registration details. Overall, the site is professional and trustworthy but could improve security transparency and domain registration clarity.

S

Storck

riesen.de

10

The website www.riesen.de represents the RIESEN brand, a confectionery product line specializing in dark chocolate caramel candies, owned by the established company Storck. The site serves primarily as a marketing and informational platform, providing detailed product descriptions, nutritional information, and brand-related content targeted at general consumers in Germany. The website is professionally designed with consistent branding and clear navigation, optimized for mobile devices and compliant with GDPR through a visible privacy and cookie consent mechanism. Technically, the site employs modern JavaScript libraries such as RequireJS, jQuery, and Lodash, and uses Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. No direct contact emails or phone numbers are published, but a contact page is available. Overall, the site is trustworthy, safe, and well-maintained, reflecting the reputation of the parent company Storck.

S

Storck

werthers-original.de

70

Werther's Original is a well-established confectionery brand specializing in caramel products such as bonbons, soft toffees, caramel popcorn, and sugar-free sweets. The website reflects a mature digital presence with a consistent brand identity and multiple international localized versions. The business operates under the parent company Storck, a recognized name in the confectionery retail sector. The site provides comprehensive product information and marketing content targeted at general consumers interested in caramel confectionery. Technically, the website is built on TYPO3 CMS and utilizes modern JavaScript libraries including RequireJS, Lodash, and jQuery, with analytics powered by Piwik PRO. The site is mobile-optimized and demonstrates good SEO practices.