Security Directory

M

Magic store s.r.o.

sperkynanohy.cz

58

Magic store s.r.o. operates the Czech e-commerce website sperkynanohy.cz, specializing in foot jewelry such as anklets, toe rings, chains, hosiery, and foot care products. The business targets primarily women interested in fashionable and elegant foot accessories. The website presents a niche market position with a clear product focus and a small business scale. The company provides transparent contact and registration information, enhancing trustworthiness. Technically, the website is built on WordPress with WooCommerce and uses modern e-commerce plugins and SEO tools. The site is mobile optimized and includes a cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO and basic accessibility features. The site uses external analytics and advertising services including Google Analytics and DoubleClick. Security posture is good with HTTPS enforced and no visible sensitive data exposure. However, security headers are missing and no explicit vulnerability disclosure or incident response policies are found. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is mitigated by the detailed company information on the site. Overall, the website is professional, secure, and compliant with privacy regulations, suitable for its business model. Strategic improvements in security headers and incident response documentation would enhance its security maturity and trust profile.

České modelky s.r.o. is a Czech Republic based modeling and hostess agency established in 2006, offering a wide range of services including hostesses, photo modeling, fashion shows, casting organization, and photo competitions. The company maintains a large database of over 22,000 models and operates multiple partner sites across Europe. The website is professionally designed with good content quality and moderate technical implementation, leveraging technologies such as jQuery, Google Analytics, and Google reCAPTCHA. Security posture is adequate with HTTPS enabled but lacks several important security headers. Privacy compliance is limited due to absence of explicit privacy and terms of service pages, though cookie consent is implemented. Overall, the business appears legitimate and well-established with a moderate risk profile.

L

Le Club Nef

leclubnef.com

58

Le Club Nef is a French online platform dedicated to promoting responsible consumption by connecting consumers with ethical brands and projects financed by the Nef ethical bank. The platform offers features such as brand listings, discounts, and event invitations to encourage sustainable purchasing decisions. Technically, the website is built on the Softr platform using modern frontend technologies including Bootstrap, jQuery, and MicroModal, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration transparency, although the association with Nef bank lends credibility. Overall, the website is functional and well-designed but would benefit from enhanced security practices and clearer compliance documentation.

L

Les Amis de la Terre France

amisdelaterre.org

51

Les Amis de la Terre France is a well-established non-profit environmental organization founded in 1970, dedicated to protecting the environment, climate, and human rights through investigation, awareness, advocacy, and civil disobedience. The website reflects a mature digital presence with active campaigns, local group news, and donation capabilities, targeting a general audience interested in environmental activism. Technically, the site is built on WordPress with modern JavaScript libraries, optimized for performance and mobile responsiveness, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and reCAPTCHA v3 implemented, though some security headers could be improved. Privacy compliance is evident with a privacy policy and cookie consent mechanism, but no explicit terms of service or security policy pages were found. WHOIS data is unavailable, which slightly reduces trust but the overall site professionalism and content quality support legitimacy.

R

renault

renault.es

69

Renault España operates as the official Spanish website for Renault, a major automotive manufacturer offering a wide range of vehicles including electric, hybrid, and commercial models. The site targets general consumers in Spain interested in purchasing new vehicles, providing detailed vehicle information, configuration options, and stock availability. The website demonstrates a high level of digital maturity with modern technologies such as React, optimized images, and integration of Google Analytics and Tag Manager for analytics and marketing purposes. Security measures are robust with HTTPS enforcement and security headers, alongside a cookie consent mechanism ensuring compliance with privacy regulations. However, explicit privacy policies, terms of service, and clear contact information are not found in the provided content, representing areas for improvement. Overall, the site is professional, trustworthy, and well-optimized for user experience.

Iberdrola is a leading Spanish energy company specializing in electricity and gas services for residential and commercial customers. The website offers detailed tariff plans and energy solutions tailored to customer consumption needs, reflecting a strong market position in the energy sector. The site targets primarily Spanish consumers and operates at an enterprise scale with consistent branding and professional content. Technically, the website is built on the Liferay CMS platform and integrates multiple modern technologies including Google Tag Manager, OneTrust for consent management, and various analytics and marketing tools. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the website enforces HTTPS, employs security headers, and uses reCAPTCHA to protect forms, though it lacks a dedicated security policy or incident response contact information. Overall, the domain registration data aligns well with the company's identity, supporting the site's legitimacy and trustworthiness.

G

Gic

recargagic.com

62

Gic is a Spanish company specializing in the installation and management of electric vehicle charging points, serving individual consumers, businesses, and public sectors. The company positions itself as a national leader with a strong reputation and high customer satisfaction. Their digital presence is built on a WordPress platform with multilingual support and SEO optimization, reflecting a moderate to good level of technical maturity. The website includes comprehensive privacy and cookie policies with active consent mechanisms, indicating good privacy compliance. Security posture is adequate with HTTPS enabled but lacks advanced HTTP security headers, suggesting room for improvement. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position effectively.

E

Endesa X

endesax.com

69

Endesa X is a prominent energy services provider operating primarily in Spain, focusing on innovative energy solutions including mobility, home automation, and digital energy management. The company is positioned as a subsidiary or brand under the Enel Group, a major multinational energy corporation. The website reflects a mature digital presence with professional design, clear navigation, and localized Spanish content targeting individuals, businesses, and public administrations. Technically, the site leverages Adobe Experience Manager CMS and integrates advanced analytics and monitoring tools such as Adobe Launch and Dynatrace, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, potentially due to privacy protection or data unavailability, which slightly impacts trustworthiness. Overall, the site is safe, professional, and compliant with GDPR, but could improve transparency in security and contact information.

E

EDP

edpenergia.es

69

EDP Energia is a large energy company operating in Spain, focusing on providing sustainable and innovative energy solutions for businesses. Their website highlights key services such as solar energy installations, electricity and gas supply, electric vehicle charging infrastructure, and energy efficiency services. The company positions itself as a leader in the energy sector with a strong emphasis on renewable energy and business customer support. Technically, the website uses a modern CMS (webControl CMS 3.5) and integrates various marketing and analytics tools including Google Tag Manager, Google Analytics, and Visual Website Optimizer. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA, but lacks visible security headers and published security policies or incident response contacts. Privacy compliance is basic with no explicit privacy or cookie policies detected on the analyzed page. Overall, the website is trustworthy and professional but could improve transparency and security posture by adding privacy policies, cookie consent mechanisms, and security disclosures.

C

CEiiA

ceiia.com

67

CEiiA is a Portuguese engineering and product development center specializing in high-tech industries such as mobility, aeronautics, and space. The company focuses on creating sustainable technologies and collaborates with global partners to develop innovative products and services. Their website reflects a professional and modern digital presence, showcasing their projects, news, and market sectors clearly and attractively. The technical infrastructure is built on Webflow with integrations for analytics and cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. Overall, the website is trustworthy and well-maintained, though the absence of WHOIS data introduces some uncertainty about domain registration transparency.

M

Mediastream

mdstrm.com

56

Mediastream is a well-established streaming technology company founded in 2007, specializing in providing comprehensive audio and video content management, distribution, and monetization solutions primarily targeting media companies, broadcasters, and enterprises in Ibero-America. The company positions itself as a leader in the region with a mature product portfolio including OTT platforms, live streaming, podcasting, and dynamic ad insertion. Their website reflects a professional and modern digital presence with strong branding and client trust signals. Technically, the website is built on Webflow CMS and leverages a robust set of analytics and marketing tools such as Google Analytics, Facebook Pixel, Heap, Oribi, and Hotjar, indicating a mature digital marketing and performance monitoring strategy. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses secure third-party services but lacks explicit security headers like Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a clear privacy policy and terms of service, but no cookie consent mechanism was found despite extensive tracking. Overall, the website and business demonstrate high credibility and professionalism with minor areas for improvement in security headers and privacy transparency. The risk profile is low, and the company appears legitimate and trustworthy.

WhistleblowerSoftware.com is a professional SaaS provider specializing in whistleblowing systems designed for organizations ranging from 50 to over 10,000 employees. The company, branded as Formalize, offers a secure, GDPR-compliant platform with ISAE 3000 certification and end-to-end encryption, positioning itself as a leading solution in the whistleblowing software market. The website reflects a mature digital presence with a modern tech stack hosted on AWS and utilizes Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The integration of multiple analytics and marketing tools indicates a data-driven approach to customer engagement and business growth. Security posture is solid with HTTPS enforced and domain registration consistent with the business profile, although DNSSEC is not enabled and some security headers appear absent. No explicit privacy policy or terms of service were found in the provided content, which is a notable gap in compliance documentation. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in explicit security and compliance disclosures.

S

Surfshark B.V.

surfshark.com

72

Surfshark B.V. is a well-established cybersecurity company specializing in VPN and related privacy products. Founded in 2018 and operating from the Netherlands, Surfshark offers a comprehensive suite of services including VPN, Antivirus, data breach alerts, and alternative online identities. The company holds a strong market position supported by multiple industry awards and a global user base. Their website reflects a mature digital presence with modern technologies and a user-friendly design optimized for performance and accessibility. Security practices are robust, with HTTPS enforcement, security headers, and a no-logs policy, although enabling DNSSEC and publishing a vulnerability disclosure policy would enhance trust further. Overall, Surfshark demonstrates high business credibility and technical maturity, making it a trusted provider in the privacy and cybersecurity sector.

The website vpn-streaming.com is an informational platform in French focused on educating users about the benefits and usage of VPNs for streaming video content. It targets French-speaking users seeking to bypass geo-restrictions and enhance privacy while streaming. The site primarily recommends third-party VPN providers such as ExpressVPN, NordVPN, and CyberGhost through affiliate links, without offering its own VPN service. Technically, the site uses common frontend technologies including Bootstrap, jQuery, OwlCarousel, and FontAwesome, delivering a moderately optimized and mobile-friendly experience. However, it lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is safe for general audiences but requires improvements in security, privacy compliance, and business transparency to enhance trust and credibility.

K

Kodi Foundation

kodi.tv

67

Kodi Foundation operates the website kodi.tv, providing an open source home theater software solution that supports multiple platforms and devices. The website serves a global audience interested in media playback and home entertainment, offering extensive features, community add-ons, and developer engagement. The business model is community-driven and supported by sponsorships, positioning Kodi as a leading open source media player in its industry. Technically, the website is built using modern web technologies including React and Gatsby, hosted on Netlify, and optimized for performance and mobile devices. The site demonstrates good SEO and accessibility practices, with a clean and professional design that enhances user experience. From a security perspective, the site enforces HTTPS, implements key security headers, and maintains domain registration protections. However, it lacks some advanced security disclosures such as a published security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms are absent. Overall, kodi.tv is a trustworthy and well-maintained website with a strong community focus and solid technical foundation. Strategic improvements in privacy consent and security transparency would further enhance its security posture and compliance standing.

G

Glooton

glooton.com

60

Glooton is a French-language technology news and tutorial website providing content on current technology trends, cybersecurity, blockchain, AI, and ethical discussions related to technology. The site targets French-speaking technology enthusiasts and professionals seeking in-depth articles and practical tutorials. The business model appears to be content publishing, likely monetized through advertising and affiliate marketing. Technically, the site is built on WordPress with common plugins such as Rank Math PRO for SEO and Matomo for analytics, using modern web technologies like jQuery and Slick Carousel. The website is mobile-optimized and well-structured with good SEO practices. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, raising some concerns about domain legitimacy, though the active and professional website presence mitigates this somewhat. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

Svatba na jednom místě Brno

svatbanajednommistebrno.cz

50

The website 'Svatba na jednom místě Brno' offers comprehensive wedding services including ceremony hosting, catering, coordination, and accommodation in the Brno-Modřice area. It targets couples seeking an all-in-one wedding venue and service provider. The business operates as a small local hospitality service focused on wedding event planning and execution. Technically, the site is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized with a moderate performance profile and good SEO practices. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

Slunečnice Food s.r.o.

jidelnaslunecnice.cz

51

Jídelna Slunečnice is a small-scale food service business operating in Brno, Czech Republic, with a focus on providing affordable and honest meals, particularly targeting seniors and the local community. The business offers onsite meal pickup, meal delivery services, and an online ordering system, positioning itself as a community-oriented social dining provider. The website is professionally designed, mobile-optimized, and provides clear information about services and contact details, although it lacks phone contact information. Technically, the website is built on the Webnode platform, leveraging Amazon Cloudfront CDN for hosting and Google Tag Manager for analytics. The site uses HTTPS, ensuring secure communication, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. From a security perspective, the site shows basic good practices such as HTTPS usage and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The privacy policy is present and appears GDPR compliant, but cookie consent is missing. Overall, the security posture is moderate but could be improved with additional headers and compliance features. The overall risk assessment indicates a generally trustworthy and functional website for a local food service business, but the missing WHOIS data and lack of cookie consent reduce trust and compliance scores. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and verifying domain registration details to enhance credibility and compliance.

T

Tiersbox

tiersbox.net

66

Tiersbox is a small French cooperative ISP specializing in providing fiber and wifi internet services to transitional urban spaces, engaged companies, and atypical venues. Founded in 2021, it operates with a cooperative business model emphasizing sustainability, equity, and employee ownership. The website presents clear business descriptions and key services including fiber installation, network deployment, and maintenance, targeting niche markets such as urbanism transitory and associative actors. Technically, the website is built on GravCMS with modern CSS frameworks and jQuery-based plugins, offering a good user experience and mobile optimization. However, the site lacks advanced SEO and accessibility features and does not implement common security headers. The domain is registered with Scaleway SAS and shows consistent WHOIS data appropriate for the business age. Security posture is moderate with some best practices like clientTransferProhibited domain status but lacks DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact is only available via a contact form, with no direct emails or phone numbers listed. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced security measures, privacy compliance, and more transparent contact information to improve user trust and regulatory adherence.

I

Idea Books

ideabooks.nl

46

Idea Books is a specialized wholesaler and distributor of books, magazines, and exhibition catalogues focused on architecture, art, photography, design, fashion, and film. Established in 1976 and based in the Netherlands, it serves a niche market including book retailers and cultural institutions. The website reflects a professional e-commerce platform built on Shopware 6, featuring a catalog of products and a clean, navigable design optimized for mobile devices. Technical infrastructure includes modern web technologies and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and privacy policies are lacking. Overall, the site is trustworthy and well-positioned in its market segment but would benefit from enhanced privacy compliance and clearer contact information.

P

Paon diffusion

paon-diffusion.com

40

Paon diffusion is a French small business operating an e-commerce website primarily built on WordPress with WooCommerce and the Divi theme. The site targets retail customers in France, offering products through an online storefront. The technical infrastructure is modern and leverages popular CMS and e-commerce plugins, with hosting provided by OVH sas, a reputable provider. The website demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. No privacy or cookie policies were detected, which is a compliance gap. Overall, the site appears legitimate and functional but would benefit from enhanced security and privacy measures.

A

Agence Parisienne du Climat

adaptaville.com

45

Adaptaville is a French non-profit platform initiated by the Agence Parisienne du Climat, dedicated to cataloging and promoting ecological adaptation solutions to climate change specifically for the Île-de-France region. The website serves as a resource hub for local authorities, policymakers, and environmental actors to access proven solutions such as vegetation, water management, and urban cooling techniques. The platform emphasizes facilitating the replication of these solutions through public policies at various administrative levels. Technically, the website employs a custom CMS with modern JavaScript libraries including jQuery and Lucide icons, and integrates privacy-focused analytics via Plausible. The site is mobile-optimized with good SEO practices and a professional design, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. From a security and compliance perspective, the site does not expose sensitive data and uses secure forms, but it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. WHOIS data for the domain is unavailable, which slightly impacts trust but the professional presentation and partnerships mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves a clear public interest mission. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing a security policy, and enhancing contact transparency to improve user trust and regulatory adherence.

The website www.visittrebic.eu serves as the official tourism portal for the city of Třebíč, Czech Republic. It provides comprehensive information about the city's UNESCO heritage sites, cultural events, museums, natural attractions, and wellness activities. The portal targets tourists and visitors interested in exploring the historical and natural beauty of Třebíč and its surroundings. The business model is focused on tourism promotion, supported by local government and regional partners, positioning itself as a trusted source for visitor information. Technically, the website employs a traditional web stack including jQuery, Swiper.js for sliders, Fancybox for media display, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Seznam Retargeting. The site is mobile-optimized with good navigation and SEO practices, although no explicit CMS or hosting provider details were identified. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and explicit security or incident response policies. The WHOIS data is unavailable due to privacy protection, which is common and justified for this type of municipal website. No critical vulnerabilities or suspicious patterns were detected in the content or technical setup. Overall, the website presents a professional, trustworthy, and user-friendly platform for tourism promotion. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

M

Město Třebíč

trebic.cz

49

The website www.trebic.cz serves as the official digital presence of the city of Třebíč, Czech Republic. It provides comprehensive information and services for residents, tourists, and local businesses, including municipal news, event updates, electronic citizen services, and urban development projects. The site is well-structured and targets a broad audience interested in local government and community activities. Technically, the site uses a custom CMS platform (Vismo) and integrates several Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate. The website is mobile-optimized, accessible, and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it lacks visible security headers and does not publish formal security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and security posture. Overall, the website is trustworthy and professional, with clear contact information and official branding. The absence of WHOIS data limits domain trust assessment but does not detract from the site's legitimacy as a government portal. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen security and compliance.

S

Stellplatz Lednice s.r.o.

stellplatzlednice.cz

47

Stellplatz Lednice s.r.o. operates a specialized hospitality business offering a peaceful camping site in the heart of the Lednicko-valtický wine region in the Czech Republic. The business integrates camping services with a winery experience, including wine tastings, tours, and a bistro serving regional specialties. The website is professionally designed using WordPress and Elementor, providing multilingual support and clear navigation. Contact information and partner affiliations are prominently displayed, enhancing trust and business credibility. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel, with HTTPS enabled and basic security practices in place. However, explicit security policies and incident response information are absent, representing an area for improvement. Overall, the website presents a legitimate, small-sized hospitality business with a good security posture and compliance with privacy regulations.

V

Vinařství Málek Valtice s. r. o.

malekvaltice.cz

57

Vinařství Málek Valtice s. r. o. operates a historic wine cellar and accommodation business located in Valtice, Czech Republic, a renowned wine tourism destination. The company offers wine cellar tours, tastings, event hosting, and accommodation in both rooms and modern apartments. Their market position is that of a specialized local hospitality provider catering primarily to tourists and wine enthusiasts visiting the South Moravia region. The website reflects a professional and consistent brand image with good content quality and clear service descriptions. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses modern web technologies including JavaScript and CSS, and is served over HTTPS ensuring secure communication. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured content. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, demonstrating some compliance with privacy regulations. However, it lacks explicit security headers and published privacy or security policies, which are important for comprehensive security posture. The absence of WHOIS data reduces domain trust verification, though the website content and business details appear legitimate and professional. Overall, the website presents a trustworthy and professional front for a small hospitality business with moderate technical maturity and security posture. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and trustworthiness.

M

Maurerův Výběr

maureruv-vyber.cz

60

Maurerův Výběr operates a niche gastronomy-focused reservation and media platform based in the Czech Republic. The website promotes a curated reservation program called Maurerův Stůl, offering exclusive dining experiences, alongside media content including a regular column in the Metro newspaper. The business targets general audiences interested in gastronomy and restaurant culture. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, hosted on a Czech provider consistent with its domain registration. The site is mobile optimized and well-structured with good SEO practices but lacks visible privacy and cookie policies, which impacts compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers are not explicitly detected. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

H

HZ Hotel s.r.o.

chateaudefrontiere.com

47

Chateau de Frontiere is a luxury 4-star hotel resort located in South Moravia, Czech Republic, within the UNESCO-listed Lednicko-valtický area. The business offers upscale accommodation, wellness, fine dining through its restaurants ESSENS and Chateau Petit, wine cellar experiences, and event hosting services. The website is professionally designed with multilingual support and integrated booking functionality, reflecting a mature digital presence. Technically, the site uses modern libraries and tracking tools but lacks some advanced security headers and explicit incident response information. The security posture is adequate with HTTPS and cookie consent mechanisms but could be improved with additional security best practices. WHOIS data is missing, which slightly reduces trustworthiness, but the overall business credibility is high due to clear contact information, social media presence, and external references.

L

La Cooperative des Tilleuls

les-tilleuls.coop

67

Les-Tilleuls.coop is a French technology cooperative specializing in API, web, and cloud expertise. They are creators of the API Platform framework and FrankenPHP, and maintainers of Symfony. The company operates as a self-managed, egalitarian cooperative with over 70 employees and multiple offices across France. Their market position is strong within the open source and enterprise technology sectors, serving over 200 partners with consultancy, development, training, and cloud services. Technically, the website is built on modern frameworks including Next.js, Symfony, Laravel, and Vue.js, hosted with Cloudflare DNS and CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, lacking explicit cookie consent and detailed privacy policies. Overall, the company demonstrates high business credibility and trustworthiness with certifications like B Corp and a transparent WHOIS record.

Actu-Environnement is a well-established French independent media outlet specializing in environmental news, sustainability, and development topics. The website offers daily updated content including news articles, newsletters, event agendas, and expert blogs targeting professionals and subscribers interested in environmental issues. The business model relies on subscriptions and advertising, supported by a consistent brand presence and social media engagement. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, implements responsive design, and integrates Google Analytics GA4 for user tracking. The site is served over HTTPS with cookie consent mechanisms in place, indicating a good baseline for privacy compliance. However, no explicit security headers were detected, and no direct contact emails or phone numbers are publicly listed, which could be improved for transparency and trust. The WHOIS data for the domain is missing or unavailable, which is unusual for a site with a claimed history since 2003, but the website content and social presence strongly suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security posture and contact transparency.

L

Le Journal des Entreprises

lejournaldesentreprises.com

70

Le Journal des Entreprises is a French regional economic news media platform offering a website and monthly magazine with 14 local editions covering 27 departments. The site targets business professionals and regional economic actors, providing news, dossiers, podcasts, and company profiles. Technically, it is built on Drupal 10 with modern web technologies, including Google Tag Manager and Didomi for consent management. The website is well-structured, mobile-optimized, and uses HTTPS, but lacks visible security headers in the HTML source. No WHOIS data was found for the domain, which raises concerns about domain registration legitimacy. Overall, the site presents a professional and trustworthy business media presence but should verify domain registration and improve privacy policy visibility.

I

IndyMotion

indymotion.fr

48

IndyMotion is an independent French-language PeerTube instance offering free and unlimited video hosting access primarily to individuals and organizations with a non-profit focus. The platform leverages the open-source PeerTube technology to provide decentralized video streaming and live chat capabilities. The website presents a consistent brand and clear business purpose, targeting the French-speaking community interested in alternative video hosting solutions. Technically, the site uses modern web technologies including Angular and PeerTube version 7.3.0, hosted on Scaleway infrastructure in France. The platform supports advanced video streaming features such as HLS and WebRTC, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and transparency. The site is safe for general audiences with no adult or explicit content detected.

L

La Quadrature du Net

mamot.fr

57

Mamot.fr is a French-language Mastodon social networking server operated by La Quadrature du Net, a recognized non-profit organization advocating for digital rights. The platform serves a niche community interested in privacy-focused federated social media, with approximately 2.7K active users. The website is built on the Mastodon 4.4.7 platform, leveraging modern web technologies including React and ES modules, hosted by ScaleWay. The technical infrastructure is solid, with good SSL configuration and secure resource loading practices. However, the site lacks explicit cookie consent mechanisms and terms of service pages, which slightly impacts privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a vulnerability disclosure policy would enhance trust. Overall, Mamot.fr presents a professional, trustworthy, and privacy-conscious social platform with room for improvement in compliance documentation and user contact transparency.

S

Street Art Rillieux

streetartrillieux.com

52

Street Art Rillieux is a cultural initiative based in Rillieux-la-Pape, France, focused on promoting street art through an annual festival, permanent murals, artist residencies, and community engagement activities. The project is supported by the local city government and partners, aiming to transform the city into an open-air museum and foster cultural enrichment. The website is professionally designed using WordPress with modern plugins and themes, providing detailed information about events, artists, and exhibitions. Social media integration is strong, enhancing community outreach. Security posture is adequate with HTTPS and some security plugins, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which reduces domain trust but the website content and structure indicate a legitimate cultural project. Overall, the site is a good digital representation of a local cultural initiative with room for improvement in privacy and security transparency.

L

L'industrie Magnifique

industriemagnifique.com

61

L'industrie Magnifique is a cultural event organizer based in Strasbourg, France, specializing in industrial heritage exhibitions. The website promotes an upcoming event scheduled for October 2025, targeting a general audience interested in regional industrial culture. The business operates on a small scale with a focus on event-based services. Technically, the website is built on WordPress using Elementor and Rank Math SEO, with integrations such as Google Tag Manager and Axeptio for cookie consent. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the domain registration is consistent with the business claims, showing legitimacy and stability.

M

Métropole de Lyon

lyoncampus.com

62

Lyon Campus is an official student information portal managed by the Métropole de Lyon, targeting students and new arrivals in the Lyon metropolitan area. The website provides comprehensive resources including housing, jobs, cultural events, and support services, positioning itself as a key regional platform for student engagement and assistance. The site is well-branded with consistent use of official logos and maintains active social media channels to enhance outreach. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Matomo for privacy-conscious analytics and tarteaucitron.js for cookie consent management. The site demonstrates good mobile optimization and accessibility features, although there is room for improvement in security headers and explicit security policies. From a security perspective, the site enforces HTTPS and uses privacy-focused analytics, but lacks visible security headers and a published incident response or vulnerability disclosure policy. The WHOIS data is notably missing or unavailable, which is unusual for a government-affiliated site and may warrant further investigation. Overall, the security posture is solid but could be enhanced with additional transparency and technical controls. The overall risk assessment is moderate with a good trust level based on content and branding, but the absence of WHOIS data and some security best practices suggest areas for improvement. Strategic recommendations include implementing security headers, publishing a security policy, enhancing accessibility compliance, and improving contact transparency to bolster trust and compliance.

E

Eau du Grand Lyon

eaudugrandlyon.com

59

Eau du Grand Lyon operates as the potable water service provider for the Métropole de Lyon, France. The website serves as an informational portal for residents and businesses in the metropolitan area, offering details about water supply and related services. The business model is that of a public utility, focusing on water quality and customer service. The site is built on WordPress and employs common plugins for GDPR compliance and performance optimization. While the website is accessible and uses HTTPS, it lacks visible privacy and cookie policies in the provided content, and no contact information is explicitly presented. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy but does not necessarily indicate malicious intent given the official nature of the service.

M

Métropole de Lyon

toodego.com

67

Toodego is the official digital portal for the Métropole de Lyon and its partner communes, providing citizens with streamlined access to a wide range of public services including urbanism, mobility, environment, and social services. The platform is positioned as a key government digital service hub, facilitating easier public administration interactions for residents in the Lyon metropolitan area. The website features a well-structured navigation system, thematic and geographic service searches, and a dashboard for managing service requests, reflecting a user-centric design approach. Technically, the site employs modern web technologies such as jQuery, Select2, and Piwik/Matomo analytics, along with progressive web app features like service workers. The site is mobile-optimized and uses HTTPS, ensuring secure and accessible user experiences. However, some areas such as accessibility compliance and cookie consent mechanisms could be improved to enhance inclusivity and regulatory compliance. From a security perspective, the site benefits from HTTPS encryption and avoids exposing sensitive data in its HTML content. Nonetheless, the absence of explicit security headers and published security policies indicates room for maturity in security posture. The lack of WHOIS registration data is a notable concern, though the official branding and partner references strongly support the site's legitimacy. Overall, Toodego presents as a credible and professionally maintained government digital service portal with moderate technical sophistication and a good security baseline. Strategic improvements in privacy compliance, security policy transparency, and WHOIS data clarity would further strengthen trust and operational resilience.

S

Skeepers

skeepers.io

73

Skeepers is a technology company specializing in AI-powered User Generated Content (UGC) solutions designed to help brands enhance engagement, loyalty, and sales through authentic customer voices. Their platform offers a comprehensive suite of products including Verified Reviews, Feedback Management, Influencer Marketing, and Brand Communities, targeting brands that want to leverage UGC at scale. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site is built on WordPress with integrations of multiple marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and Microsoft Clarity, indicating a sophisticated marketing infrastructure. Security posture is good with HTTPS and domain protections, though there is room for improvement in DNS security and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and well-positioned in the technology sector, serving a medium-sized business founded in 2020 in France.

F

Fundación CONAMA

conamalocal.org

51

Conama Local 2025 is a Spanish environmental congress organized by Fundación CONAMA, focusing on local ecological transition and sustainability. The event is scheduled for December 2-4, 2025 in Viladecans, a city recognized for its green initiatives. The website serves as an information and registration portal, targeting municipalities, environmental professionals, and citizens interested in sustainability. Technically, the site is built on WordPress with Elementor and Yoast SEO, featuring modern design and good mobile optimization. Security posture is solid with HTTPS and no obvious vulnerabilities, though security headers could be improved. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable, which slightly reduces trust but the website's content and external references support legitimacy.

V

Varadero Software Factory

varadero.es

66

Varadero Software Factory is a well-established Spanish software development company founded in 1999, specializing in digital transformation and custom software solutions for B2B and B2C clients. The company offers a broad range of IT services including software development, system integration, IT consulting, UX/UI design, and web hosting. Their market position is strong, supported by over 20 years of experience and a comprehensive portfolio of digital projects. Technically, the website is built on WordPress with modern plugins and technologies, providing good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence.

A

AEDIVE

congresovehiculoelectrico.com

61

The website congresovehiculoelectrico.com represents the IX Congreso Europeo de Movilidad Eléctrica (CEVE2025), a well-established event organized by AEDIVE focused on the electric mobility sector. The event targets professionals and companies involved in the electric vehicle ecosystem, including manufacturers, charging point operators, and service providers. The site is professionally designed, mobile-optimized, and provides comprehensive information about the event, speakers, sponsors, and venue. Technically, the site uses modern front-end technologies such as Bootstrap, GSAP, and Google Tag Manager, and is built on the Umbraco CMS platform. Security posture is adequate with HTTPS enabled and cookie consent implemented, though improvements are recommended in DNSSEC and security headers. The domain is legitimate, with consistent WHOIS data and a long registration history. Overall, the site is trustworthy and serves its business purpose effectively.

C

CIRVE Project

cirveproject.com

54

The CIRVE Project website represents a European collaborative initiative focused on deploying interoperable fast charging infrastructure for electric vehicles across the Iberian Peninsula and connecting with the broader European Union. The project involves multiple partners from Spain, Portugal, and France, targeting electric vehicle users and stakeholders in sustainable transportation. The website is built on WordPress with multilingual support and integrates common plugins for SEO, forms, and analytics. It demonstrates a moderate level of digital maturity with good content quality and user experience. Security posture is adequate with HTTPS and some security plugins but lacks advanced security headers and DNSSEC. Privacy compliance is basic with cookie consent and a privacy policy in Spanish. Overall, the site is trustworthy and professionally maintained with consistent branding and partner endorsements.

C

Capital Radio

capitalradio.es

61

Capital Radio is a Spanish media company specializing in financial news, podcasts, and business-related content. It targets Spanish-speaking professionals interested in economy, markets, and quality of life. The website offers a rich content experience including news articles, podcasts, event information, and newsletters. Technically, the site uses modern web technologies including Google Analytics, InMobi Consent Manager for GDPR compliance, and custom CMS infrastructure. The site is mobile-optimized and SEO-friendly with structured data markup. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. WHOIS data is unavailable due to Red.es restrictions, limiting domain legitimacy verification. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a medium-sized business audience in Spain.

M

Mailjet: Email Delivery Service for Marketing & Developer Teams

mailjet.com

77

Mailjet is a large, established SaaS company specializing in email marketing software and email APIs designed for marketing and developer teams. The platform offers a comprehensive suite of services including email marketing, transactional email delivery, automation, segmentation, and deliverability solutions. It targets enterprises and teams requiring reliable and GDPR-compliant email solutions. The website demonstrates a high level of digital maturity with a modern WordPress CMS, Bootstrap framework, and integration of analytics and SEO tools. The content is professionally presented, mobile-optimized, and rich in relevant business information. Security posture is strong with HTTPS and secure form usage, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which slightly reduces trust but is not uncommon for SaaS providers. Overall, the website is trustworthy, professional, and well-positioned in the email marketing technology sector.

V

Velae Legal Group España

velaelegalgroup.es

51

Velae Legal Group España is a medium-sized international law firm established in 2012, providing comprehensive legal advisory services with a strategic focus. The firm operates primarily in Spain with offices in Madrid, Oviedo, Málaga, and Pontevedra, and has expanded internationally with subsidiaries in Latin America and Europe. Their service offerings cover a broad range of legal sectors including corporate law, litigation, real estate, compliance, and finance. The website reflects a professional and consistent brand image, targeting corporate clients and businesses seeking legal solutions. Technically, the site is built on WordPress using Elementor and Yoast SEO, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but could improve transparency and security practices.

The website bewanted.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page, which prevents access to any substantive content. As a result, no direct business information, contact details, or policies are available for analysis. The domain is registered since 2012 with GoDaddy and uses Cloudflare for DNS and security, indicating a mature and legitimate registration. However, the lack of accessible content limits the ability to assess the company's market position, services, or compliance posture. Technically, the site relies on Cloudflare's security infrastructure but lacks DNSSEC and visible security headers in the provided HTML snippet. Privacy and cookie policies are not found, and no contact or incident response information is available. The site does not expose any adult or explicit content and appears safe in terms of content safety.

M

Muzeum map Zlín

muzeummap.cz

50

Muzeum map Zlín is a specialized experiential museum located in the Czech Republic focusing on the history and technology of cartography. The museum offers interactive exhibits, including a unique sand model and a professional flight simulator, alongside a retail shop selling maps and related products. The website is professionally designed using WordPress with modern plugins and themes, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled, but lacks security headers and visible privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trust slightly, but the clear contact information and active social media presence support business credibility. Overall, the site is suitable for general audiences interested in educational and cultural content.

P

PermoniQ s.r.o.

permoniq.com

60

PermoniQ s.r.o. is a Czech-based technology company specializing in automated PPC advertising solutions for e-commerce businesses. Their flagship product, PermoniQ, leverages machine learning to optimize online ad campaigns across the Google Ads ecosystem, offering 24/7 campaign management and budget optimization. The company positions itself as a certified partner with major industry players, providing a SaaS model that integrates with various e-commerce platforms and advertising tools. The website is professionally designed, mobile-optimized, and rich in relevant content targeting online shops seeking efficient advertising solutions. Technically, the website employs modern web technologies including React, Google Tag Manager, and Cookiebot for consent management. It integrates tracking and advertising pixels from Google and Facebook, ensuring comprehensive analytics and retargeting capabilities. The site demonstrates good SEO and accessibility practices, with structured data enhancing search engine understanding. Performance is fast, and the site is fully accessible without any blocking or WAF challenges. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs cookie consent mechanisms aligned with GDPR requirements. While some advanced security headers are not explicitly visible, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data is consistent with the business claims, showing a recently registered domain matching the company's founding year, with no privacy protection masking, enhancing trustworthiness. Overall, PermoniQ presents a low-risk profile with a solid business and technical foundation. The main areas for improvement include publishing explicit security policies, incident response contacts, and a terms of service page to enhance transparency and compliance. Strategic recommendations include enabling DNSSEC, adding a security.txt file, and continuous monitoring of third-party scripts to maintain security integrity.

The website yottlyscript.com currently returns a 404 error page with no accessible content, metadata, or business information. The domain is registered with GoDaddy.com, LLC since 2015 and is valid until 2028, indicating a potentially legitimate registration. However, the absence of any visible website content or contact details severely limits the ability to assess the business or its market position. Technically, the site lacks HTTPS and security headers, and no privacy or cookie policies are present, indicating a low digital maturity and poor security posture. Overall, the site appears inactive or improperly configured, posing a risk to trust and credibility.