Security Directory

L

Le Bien Public

bienpublic.com

72

Le Bien Public is a regional French news media organization focused on delivering local news, videos, and services for Dijon and the Côte d'Or region. It operates under the EBRA Group umbrella and offers subscription-based access complemented by advertising revenue. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, Didomi for consent management, and reCAPTCHA for form security. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR adherence, including a named Data Protection Officer contact. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its professional presentation and known parent company. Overall, the site is trustworthy, well-maintained, and suitable for a general audience.

L

L'Est Républicain

estrepublicain.fr

63

L'Est Républicain is a well-established regional news media organization serving the Franche-Comté and Lorraine regions in France. The website offers continuous news updates, videos, digital editions, and subscription services, targeting a broad general audience interested in local and national news. It operates under the parent company EBRA Groupe, reflecting a strong market position in regional media. Technically, the website employs modern web technologies including Google Tag Manager, Didomi consent management, and Google reCAPTCHA to ensure user privacy and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and secure form handling, although some HTTP security headers could be improved. Privacy compliance is robust, with clear GDPR adherence and a visible Data Protection Officer contact. Overall, the website is trustworthy, professional, and safe for general audiences.

L

Le Journal de Saône et Loire

lejsl.com

68

Le Journal de Saône et Loire (Le JSL) is a regional French news media organization focused on delivering live news, photos, and videos primarily for the Saône-et-Loire area. The website presents a professional and consistent brand image with active social media presence and app availability, targeting a general audience interested in regional news. Technically, the site employs modern web technologies including Google Tag Manager and consent management via Didomi, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and consent mechanisms, though lacks visible security headers and explicit privacy policies. WHOIS data is unavailable, raising questions about domain registration status and legitimacy, which should be monitored. Overall, the site is functional and trustworthy as a regional news source but would benefit from enhanced privacy disclosures and security hardening.

L

Les Dernières Nouvelles d'Alsace

dna.fr

67

Les Dernières Nouvelles d'Alsace (DNA) is a prominent regional news media organization serving Strasbourg, Alsace, and broader France. The website provides continuous live news updates covering local, national, and international events including politics, sports, economy, and environment. It holds a strong market position as a leading regional news source with a large audience base. The business model centers on digital news publishing supported by advertising revenue and mobile app distribution. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The infrastructure supports mobile optimization and integrates multiple advertising and analytics services for monetization and user insights. Security posture is robust with HTTPS enforcement, security headers, and privacy policies in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good content quality and compliance, suitable for its media industry role.

L

L'Alsace

lalsace.fr

66

L'Alsace is a regional news media organization providing continuous local, national, and international news coverage focused on the Alsace region in France. The website offers a broad range of news categories including society, sports, politics, economy, health, and environment, targeting a general audience interested in regional and national news. The site is well-branded and maintains consistent messaging aligned with its media focus. Technically, the website employs modern JavaScript frameworks and tracking technologies such as Google Tag Manager and Didomi for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, ensuring secure access for users. However, explicit privacy policies and contact information are not clearly presented, which may impact user trust and compliance. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and incident response details. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security best practices.

G

Groupe EBRA

ebra.fr

63

Groupe EBRA is the leading French regional daily press group, publishing multiple well-known regional newspapers and offering advertising, audiovisual, and event services. The website reflects a professional media company with a strong market position in France. The technical infrastructure uses modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms, indicating digital maturity. Security posture is good with HTTPS and security headers, but lacks explicit published security policies or incident response information. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trust. Overall, the website is well-designed, content-rich, and trustworthy for its audience.

A

Auchan

auchan.fr

60

Auchan is a major French retail and e-commerce company providing a wide range of products including groceries, household goods, electronics, and more. The website offers multiple shopping channels such as drive, click & collect, and home delivery, targeting general consumers in France. The site is professionally designed with clear navigation and strong branding consistency, reflecting its enterprise-level market position. Technically, Auchan.fr uses modern JavaScript libraries, asynchronous loading, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized and performs well with responsive design and lazy loading techniques. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website's content and external links support legitimacy. Overall, Auchan.fr is a high-quality, trustworthy retail website with good privacy and security practices.

G

Gîtes de France®

gites-de-france.com

61

Gîtes de France® is a well-established French vacation rental platform offering a variety of accommodations including gîtes, chambres d'hôtes, camping, and citybreaks. The website targets families, couples, and groups seeking quality vacation rentals across France, leveraging a recognized quality label to build trust. The platform provides booking services, thematic stay inspirations, and gift cards, positioning itself as a leader in the French hospitality sector. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security-wise, the site uses HTTPS and secure Drupal forms but lacks visible advanced security headers, suggesting room for improvement. The absence of WHOIS registration data is a concern but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly platform for vacation rental bookings in France.

U

URW

urw.com

72

Unibail-Rodamco-Westfield (URW) is a leading European commercial real estate company specializing in owning, developing, and operating sustainable, high-quality real estate assets in major cities. The company focuses on creating destinations that foster community connections and meaningful experiences. Their website reflects a mature digital presence with comprehensive investor relations content, sustainability initiatives, and multimedia engagement. Technically, the site is built on modern frameworks such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and standard security headers, though public security policies and incident response contacts are not prominently disclosed. The absence of WHOIS data is unusual but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around vulnerability disclosures.

C

Just a moment...

cora-france.fr

61

The website www.carrefour.com is currently inaccessible due to a Cloudflare security challenge page, which prevents access to any meaningful content or metadata. The WHOIS lookup for the domain failed, returning no registration data, which is unusual for a major global retail brand. Due to these access restrictions, no business, contact, or compliance information could be extracted or verified. The lack of accessible content and metadata severely limits the ability to assess the website's technical infrastructure, security posture, or privacy compliance. The domain's legitimacy is questionable based on the absence of WHOIS data, although this may be due to privacy protection or registry issues. Overall, the website's risk profile is elevated due to the lack of transparency and accessibility.

G

Groupe BPCE

groupebpce.com

77

Groupe BPCE is a major French banking and insurance group, operating through well-known brands such as Banque Populaire, Caisse d'Epargne, and Natixis. It holds the position of the second largest banking group in France, financing a significant portion of the national economy. The website reflects a mature digital presence with comprehensive content targeting customers, investors, journalists, and partners. The business model focuses on retail banking, insurance, investment management, and corporate banking services. The site is professionally designed, mobile-optimized, and SEO-friendly, indicating a high level of digital maturity. Technically, the website is built on WordPress, leveraging modern JavaScript libraries, SEO plugins, and tag management tools like Tealium. Security measures include HTTPS enforcement and bot protection via hCaptcha. Cookie consent and privacy policies are implemented in compliance with GDPR, demonstrating attention to privacy and regulatory requirements. However, explicit security policies and incident response contacts are not prominently available, which could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a notable anomaly but does not detract from the overall legitimacy given the extensive corporate branding and content. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Groupe BPCE's website is a robust, professional platform supporting its business operations and stakeholder communications. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.

F

FERRERO France

ferrero.fr

73

Ferrero France is a subsidiary of the globally recognized Ferrero Group, a family-owned Italian confectionery company founded in 1946. The company operates in the manufacturing and retail sectors, specializing in sweet food products with iconic brands such as Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher®. The website reflects a mature, enterprise-level business with a strong emphasis on quality, sustainability, and corporate social responsibility. The digital presence is well-structured, multilingual, and professionally designed, targeting a broad general audience including consumers, partners, and job seekers. Technically, the website is built on Drupal CMS and incorporates modern web technologies such as Google Tag Manager for analytics, AddToAny for social sharing, and UserWay for accessibility enhancements. The site is mobile-optimized and includes SEO best practices, though accessibility compliance is moderate at 57%. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a published vulnerability disclosure policy. However, WHOIS data for the domain is unavailable, which is unusual for a major brand and warrants monitoring. Overall, the website demonstrates a high level of digital maturity and security awareness, with comprehensive privacy and cookie policies aligned with GDPR requirements. The absence of explicit contact emails and phone numbers on the public site suggests a preference for contact via forms or social media channels. The site is safe for general audiences with no adult or questionable content detected.

S

SUEZ

suez.com

68

SUEZ is a global enterprise specializing in water and waste management, offering circular economy solutions to local authorities and businesses. The company positions itself as an expert in environmental services, supporting sustainable development and resource management. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to a corporate audience. Technically, the site employs modern web standards, including HTTPS, security headers, and optimized fonts, ensuring a secure and performant user experience. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the website is trustworthy and well-maintained, but the lack of WHOIS data raises questions that warrant further registrar-level verification.

M

Musée d'Aquitaine

musee-aquitaine-bordeaux.fr

60

Musée d'Aquitaine is a prominent cultural institution in Bordeaux, France, dedicated to preserving and showcasing the history and heritage of Bordeaux and the Aquitaine region. The museum offers a variety of exhibitions, educational programs, and online resources targeting a broad audience including families, students, researchers, and tourists. It operates under the auspices of the City of Bordeaux, reflecting its important role in regional cultural preservation. Technically, the website is built on Drupal 11, leveraging modern web technologies such as jQuery, Bootstrap, and specialized tools like Piano Analytics for visitor tracking and Tarteaucitron for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, providing a smooth user experience with clear navigation and rich content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is not publicly available, likely due to privacy protection, which is justified given the nature of the institution. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen the security posture and user trust.

E

Eurométropole de Metz

metzmetropole.fr

61

The Eurométropole de Metz website serves as the official digital presence of the metropolitan government entity responsible for the Metz region in France. It provides comprehensive information about the territory, administrative structures, public services, urban development projects, ecological commitments, cultural activities, tourism, and economic development. The site targets residents, businesses, students, and visitors, offering a broad range of resources and service information. The business model is that of a public sector government authority focused on regional governance and service delivery. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery, SoundManager2, OpenLayers for mapping, and the Foundation CSS framework. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. Privacy compliance is strong, featuring a GDPR-compliant cookie consent mechanism and a detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent respecting Do Not Track signals. However, no explicit security headers were detected in the provided data, and no published security policy or incident response contacts were found. No vulnerabilities or exposed sensitive data were identified. The WHOIS data is unavailable due to privacy protection, which is typical and justified for a government entity. External links are primarily to related government or regional partner domains, and analytics are handled via Matomo with transparent user consent. Overall, the website presents a trustworthy, professional, and well-maintained digital presence for the Eurométropole de Metz. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen security posture and user trust.

É

École Supérieure d'Art et Design de Saint-Étienne

esadse.fr

56

The École Supérieure d'Art et Design de Saint-Étienne (ESADSE) is a French higher education institution specializing in art and design. The website serves as an informational portal for students, educators, researchers, and partners, providing access to academic programs, research activities, alumni networks, and partnerships. The site also integrates with the Cité du design platform, which consolidates new content and news. The business model is focused on education and cultural development within the art and design sector, targeting a regional and international audience interested in these fields. Technically, the website employs a legacy jQuery-based stack with additional libraries such as Font Awesome and highlight.js. Cookie consent is managed via tarteaucitron.js, indicating awareness of privacy regulations. The site is hosted by OVH, a reputable French hosting provider. Performance and mobile optimization are moderate, with room for improvement in accessibility and modern web standards. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers and incident response information. No security.txt or vulnerability disclosure mechanisms are present. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is adequate but could benefit from enhancements in headers, policies, and transparency. The overall risk is low given the educational nature of the site and absence of suspicious elements. Strategic recommendations include improving security headers, publishing privacy and security policies, enhancing mobile and accessibility features, and formalizing incident response procedures to strengthen trust and compliance.

É

École supérieure d’art et de design des Pyrénées

esad-pyrenees.fr

62

École supérieure d’art et de design des Pyrénées is a French higher education institution specializing in art and design education, serving students primarily in the Pyrénées region. The website presents a professional and well-structured platform offering information on admissions, courses, diplomas, international programs, and public workshops. The institution maintains an active presence with regular updates on events and exhibitions, supported by partnerships with cultural and governmental organizations. Technically, the website employs modern JavaScript libraries and external services such as Mapbox for mapping, Plausible for analytics, and Sendinblue for newsletter management, hosted on OVH infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and cookie consent mechanisms, which are important for GDPR compliance. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

É

éditions B42

editions-b42.com

58

éditions B42 is a specialized French publishing company focusing on books and journals related to design, typography, and contemporary cultural studies. The company operates a professional e-commerce website built on WordPress and WooCommerce, offering a wide catalog of publications and related objects. The website targets readers, designers, academics, and students interested in these niche fields. The domain is well-established since 2008, registered with a reputable registrar, and the website content aligns with the business profile, indicating a legitimate and credible operation. Technically, the site uses modern web technologies and supports multilingual content via WPML, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

K

KM2 >>

km2.de

53

KM2 >> is a professional digital agency based in Düsseldorf, Germany, specializing in web development, design, and online marketing services. The company positions itself as a trusted TYPO3 Gold Member and certified Solutions Partner, offering comprehensive digital solutions to businesses seeking enhanced online visibility. Their website reflects a mature digital presence with clear service offerings and client references, targeting businesses aiming to improve their digital footprint. Technically, the site is built on TYPO3 CMS, hosted behind Cloudflare, and integrates modern tracking and consent management tools such as Google Tag Manager and Usercentrics CMP. Security is well-managed with HTTPS, appropriate security headers, and privacy compliance mechanisms in place. No critical vulnerabilities or suspicious patterns were detected. Overall, KM2 >> demonstrates a strong security posture and digital maturity appropriate for a small to medium-sized digital agency.

A

Alliance Digitale

iabfrance.com

63

Alliance Digitale is a French non-profit industry association dedicated to structuring and defending the digital marketing sector in France. It brings together experts, advertisers, agencies, and technology providers to promote innovative and responsible solutions, ensuring a reliable and high-performing industry. The organization offers certifications such as the Privacy Protection Pact and Drive to Trust, publishes reports and guides, and hosts events and webinars to foster collaboration and knowledge sharing. The website reflects a mature digital presence with professional design, comprehensive content, and active engagement with its members and the broader industry. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is good with HTTPS and no obvious vulnerabilities, though some security headers and incident response policies are not explicitly published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, though improvements in transparency and compliance would enhance its security and privacy posture.

J

Joker Kazino

joker.lv

55

Joker Kazino is an established online casino platform operating primarily in Latvia, offering a variety of popular slot games, jackpots, and bonuses targeted at adult gamblers. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries such as jQuery and Moment.js, Bootstrap for styling, and Google Tag Manager for analytics and marketing integration. Cookie consent is managed through Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages suggests gaps in full regulatory compliance. Security posture is adequate with HTTPS enforced and no WAF blocking detected, but could be improved by adding security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

L

La Plateforme Maladies Rares

plateforme-maladiesrares.org

46

La Plateforme Maladies Rares is a French non-profit collaborative platform established in 2001, dedicated to coordinating efforts among key stakeholders in the rare diseases ecosystem. It is administered by Maladies Rares Info Services and primarily funded by AFM-Téléthon and the French Ministry of Health. The platform serves patients, families, healthcare professionals, researchers, and public health authorities by fostering collaboration, sharing knowledge, and providing support services. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding. Technically, it uses modern JavaScript libraries and fonts, hosted by a reputable registrar and hosting provider. Security posture is good with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and privacy compliance. Overall, the platform demonstrates high trustworthiness and professionalism, serving as a critical resource in the healthcare non-profit sector.

A

Alliance Maladies Rares

alliance-maladies-rares.org

49

Alliance Maladies Rares is a French non-profit organization dedicated to promoting research, mutual aid, information dissemination, training, and advocacy related to rare diseases and rare disabilities. Established since 2001, it serves patients, families, healthcare professionals, and researchers within the rare disease community in France. The website reflects a professional and consistent brand presence, targeting a general audience interested in healthcare and support services for rare conditions. Technically, the website is built on WordPress, utilizing common libraries such as jQuery and Bootstrap, hosted by OVH sas, a reputable French hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. Cookie consent mechanisms are implemented, indicating awareness of GDPR requirements, although privacy and terms of service policies are missing. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no security headers were detected, representing areas for improvement. No incident response or vulnerability disclosure policies are published, which could enhance trust and compliance. No adult or explicit content is present, making the site safe for general audiences. Overall, the website is credible and trustworthy, with a solid business foundation and technical infrastructure. Strategic improvements in privacy compliance, security headers, and DNSSEC implementation would strengthen its security posture and regulatory adherence.

A

AFM-Téléthon

afm-telethon.fr

65

AFM-Téléthon is a prominent French non-profit organization dedicated to combating rare diseases through fundraising, research support, and patient assistance. The website reflects a mature digital presence with comprehensive content targeting families affected by rare diseases, donors, researchers, and healthcare professionals. It offers donation mechanisms, educational resources, and extensive information about its activities and subsidiaries. Technically, the site is built on Drupal CMS, employs modern analytics and consent management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and headers could be enhanced. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, the site is professional, trustworthy, and well-aligned with its mission.

N

NeuroEros

neurosphinx.fr

61

NeuroEros is a small French health and wellness blog launched in 2023, focusing on sexuality, mental health, slimming, and beauty. The site provides educational content, product reviews, and guides aimed at a general adult audience interested in improving their well-being and sexual health. The business model appears to rely on content publishing with affiliate marketing. Technically, the website is built on WordPress using Elementor, hosted with Cloudflare DNS, and employs HTTPS with good SSL configuration. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response policies. Privacy compliance is good with GDPR-aligned policies and cookie consent. No suspicious or malicious content or domains were detected. Overall, the website is professional and trustworthy, though improvements in security practices and explicit contact information could enhance credibility and safety.

O

onestar press

onestarpress.com

58

Onestar Press is a niche e-commerce business specializing in the sale of artists' books, prints, and multiples, operating since 2000. The website is professionally designed using Shopify and React technologies, providing a good user experience with clear navigation and mobile optimization. The business targets collectors and enthusiasts of contemporary art publications, offering a curated selection of unique and special edition works. Despite the professional presentation, the WHOIS data for the domain is missing, indicating either a recent registration or privacy protection, which conflicts with the claimed business history. The website includes comprehensive legal pages and contact information, supporting business credibility. Technically, the site uses modern frameworks and is hosted on Shopify, ensuring reliable infrastructure and moderate performance.

C

CBS Nakladatelství s. r. o.

cbs-cesko.cz

48

CBS Nakladatelství s. r. o. is a Czech publishing company specializing in unique landscape-related products such as hand-painted maps, aerial photography books, and cartographic maps. The company serves a diverse audience including municipalities, educational institutions, and tourists, positioning itself as a niche regional leader in media and cartography. Their product portfolio is complemented by aerial photography and video services, enhancing their market offering. Technically, the website is built on a modern WordPress platform using the Bricks theme and several plugins, including Jet Engine and Automatic CSS. The site is well-optimized for mobile devices, uses HTTPS with a valid SSL certificate, and integrates Google Analytics for user tracking. However, some security best practices like security headers and cookie consent mechanisms are missing. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and legitimate. No security policy or incident response contacts are published, which could be improved. Overall, CBS Česko presents a professional and trustworthy online presence with strong content quality and business credibility. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance their security posture and trust further.

C

CBS spol, s.r.o.

cbs.sk

53

CBS spol, s.r.o. is a Slovak publishing company specializing in unique landscape-related products such as artistic maps, aerial photography books, and interactive 360° photo banks. The company holds a niche market position in Slovakia, targeting cultural enthusiasts, tourists, and general audiences interested in Slovakian landscapes. Their business model combines publishing with e-commerce, supported by a portfolio of related domains and projects. Technically, the website is built on a modern WordPress platform with up-to-date plugins and themes, optimized for performance and mobile devices. The site employs comprehensive cookie consent mechanisms and adheres to GDPR requirements, reflecting a mature privacy posture. Security-wise, the site uses HTTPS and best practices but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations for enhanced security headers and published security policies.

M

MapTiler

maptiler.com

10

MapTiler is a technology company specializing in providing mapping platforms and tools designed primarily for developers and enterprises. Their offerings include ready-to-use map styles, custom map design tools, SDKs for web and mobile applications, and location services such as geocoding and IP geolocation. The company also supports secure on-premise deployment and geodata processing, positioning itself as a versatile player in the mapping technology market. The website demonstrates a strong market position with notable clients like Siemens, Oracle, and Cisco, and a comprehensive suite of services tailored to various industries including real estate, aviation, drones, and logistics. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and employs advanced analytics and tracking tools like Google Tag Manager and Fathom Analytics. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly detailed. From a security perspective, the site maintains a strong posture with no evident vulnerabilities or exposed sensitive data. However, the absence of a vulnerability disclosure policy and direct security contact information suggests room for improvement in transparency and incident readiness. The WHOIS data for the domain is unavailable or protected, which slightly reduces trust from a domain registration standpoint but does not detract significantly from the overall legitimacy given the professional presentation and external trust signals. Overall, MapTiler presents a professional, secure, and comprehensive mapping platform with a strong business model and technical foundation. Strategic recommendations include enhancing security transparency, publishing incident response details, and verifying domain registration information to further strengthen trust and compliance.

O

Offline Online

offline-online.ch

50

Offline Online is a niche online journal affiliated with ECAL, focusing on art, design, and cultural content. The website offers interviews, portfolios, workshops, exhibitions, and travel reports primarily in French, targeting a general audience interested in creative fields. The business model centers on content publishing and cultural journalism with a small-scale operation linked to an educational institution. Technically, the site is built on WordPress with a modern tech stack including jQuery, FullPage.js, Bootstrap, and performance optimizations via WP Rocket. It is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is solid with HTTPS and local Matomo analytics, but missing security headers and explicit policies reduce compliance maturity. No privacy or cookie policies are found, and contact information is not clearly provided, which impacts trust and privacy compliance scores. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

E

ECAL/Ecole cantonale d’art de Lausanne

ecal-typefaces.ch

55

ECAL Typefaces is a digital platform operated by the Ecole cantonale d’art de Lausanne (ECAL), showcasing typefaces created by students and alumni. The website serves as a resource for designers and educators, offering previews, licensing information, and stories related to typography. The platform leverages WordPress with WooCommerce for e-commerce functionality, supported by SEO and performance optimization plugins. The site is well-structured, mobile-optimized, and uses HTTPS with a cookie consent mechanism, reflecting a mature digital presence. Security measures include Google reCAPTCHA and Matomo analytics, though some improvements in security headers and plugin dependencies are recommended. Overall, the website is trustworthy, professionally maintained, and aligned with the educational mission of ECAL.

E

ECAL/Ecole cantonale d’art de Lausanne

ecal-shop.ch

47

ECAL Shop is the official e-commerce platform of the Ecole cantonale d’art de Lausanne (ECAL), specializing in selling art and design publications, limited edition art prints, objects, and collaborations created by students, graduates, and affiliated designers. The website targets art enthusiasts, collectors, and the general public interested in contemporary art and design products. It operates as a niche educational retail platform with a clear focus on quality and exclusivity. The platform supports multilingual access (French and English) and integrates modern e-commerce functionalities via WooCommerce. Technically, the website is built on WordPress with WooCommerce, enhanced by Bootstrap for responsive design, and uses several modern libraries such as jQuery, Slick Carousel, and FontAwesome. SEO is managed through Yoast SEO, and multilingual support is provided by WPML. Performance is moderate with caching via WP Rocket. The site is mobile-optimized and accessible with a clear navigation structure. From a security perspective, the site enforces HTTPS and uses Matomo analytics with privacy considerations. Cookie consent is implemented, and no sensitive data is exposed in the HTML. However, explicit security headers are not detected, and no formal security or incident response policies are published. There are no detected vulnerabilities or suspicious elements, indicating a generally secure posture suitable for its business model. Overall, ECAL Shop presents a professional, trustworthy, and well-maintained online presence aligned with its educational and artistic mission. Strategic improvements could include enhancing security headers, publishing a security policy, and adding incident response contacts to strengthen trust and compliance further.

BetBolt.io is a website associated with Hi Steaks Entertainment Limited, a company registered in Comoros in 2022. The site appears to be related to online gambling or betting services, as suggested by the domain name and logo. However, direct access to the website content is blocked by a Cloudflare Turnstile captcha challenge, preventing detailed content analysis. The site uses Cloudflare for security and performance, and Google Fonts for typography. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available on the accessible page. The domain registration data is transparent and consistent with a small entertainment business, but the lack of accessible content and policies limits trust and compliance assessment.

Nomorewords is a small Amsterdam-based label services company specializing in music production, promotion, and distribution services including vinyl, CD, cassette manufacturing, webshop and Bandcamp management, order fulfilment, and licensing administration. The company targets musicians, bands, and record labels seeking comprehensive label support. Technically, the website employs a modern JavaScript stack with jQuery, Bootstrap, and media playback libraries, providing a responsive and user-friendly experience. However, some accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enforced and secure login forms, but lacks published privacy and cookie policies, security headers, and terms of service, which are critical for compliance and trust. WHOIS data is unavailable, which reduces domain trustworthiness despite professional site content. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency.

F

Freie Universität Berlin

fu-berlin.de

50

Freie Universität Berlin is a leading German excellence university established in 1948, offering over 150 academic programs across twelve faculties and three central institutes. The website serves a diverse audience including students, researchers, staff, and international partners, providing comprehensive information on study programs, research, international cooperation, and campus services. The site is well-structured, professionally designed, and supports accessibility and mobile optimization. Technically, it is built on a Ruby on Rails framework with Infopark CMS Fiona, leveraging modern web standards and security best practices such as HTTPS and security headers. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website demonstrates a strong security posture with no detected vulnerabilities or suspicious content, reflecting the institution's credibility and trustworthiness.

MakeArt s.r.o. is a Czech digital agency specializing in creating custom e-shops, web design, and SEO services primarily for ambitious brands and companies. Established in 2009, the company has built a strong market position with a portfolio of recognized clients and award-winning projects. Their business model focuses on delivering tailored digital solutions combining creativity and technology to help clients grow. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs modern technologies including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA, supported by a custom CMS likely built on the Nette Framework. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Cookie consent and privacy mechanisms are well implemented, indicating good digital maturity. From a security perspective, the site uses HTTPS with strong SSL configuration and integrates Google reCAPTCHA to protect forms. However, it lacks explicit HTTP security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good but could be enhanced by adopting additional best practices and transparency. The overall risk assessment is low with no blocking or WAF detected, and the domain registration data supports legitimacy. Strategic recommendations include implementing security headers, publishing security policies, and maintaining up-to-date libraries to further strengthen security and compliance.

S

Svobodná účetní - Seyfor, a. s.

svobodnaucetni.cz

41

Svobodná účetní - Seyfor, a. s. operates an online educational platform focused on training individuals to become independent accountants within three months. The business targets both beginners and experienced accountants seeking freelance opportunities. Their model combines video lessons, software training, expert consultations, and certification endorsed by the Czech accounting association Svaz účetních. The website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress, jQuery, and Google Tag Manager. Privacy and cookie consent mechanisms are implemented, reflecting GDPR compliance. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. The absence of WHOIS data is a notable concern but does not detract from the overall legitimacy suggested by the website content and partnerships.

S

SLUTO s.r.o.

vedeni-ucetnictvi.cz

11

SLUTO s.r.o. is a well-established Czech accounting and tax advisory firm founded in 2005, offering a broad range of services including online accounting, tax filing, payroll processing, and business consulting. The company positions itself as a trusted partner for businesses seeking professional financial management, leveraging modern technologies and digital solutions to enhance client experience. Their market position is reinforced by awards and memberships in professional organizations, indicating strong industry recognition. Technically, the website is built on WordPress with modern frameworks like Bootstrap and employs performance optimizations such as LiteSpeed Cache and lazy loading. Security measures include HTTPS, Google reCAPTCHA, and anti-spam protections, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a mature digital presence with high professionalism and trustworthiness.

S

STORMWARE s.r.o.

stormware.cz

11

STORMWARE s.r.o. is a well-established Czech software company specializing in economic and accounting software solutions, primarily through its flagship product POHODA. The company targets entrepreneurs and medium to large enterprises, offering a comprehensive suite of products including payroll, tax, and mobile invoicing software. Their market position is strong within the Czech Republic, supported by extensive customer support, training, and a professional online presence. Technically, the website is built on ASP.NET with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, reflecting a mature security posture. However, the absence of WHOIS data limits domain trust verification. Overall, the site is professional, secure, and compliant with GDPR, making it a trustworthy platform for its users.

I

iPodnik cloud s.r.o.

ipodnik.cz

10

iPodnik cloud s.r.o. is a Czech-based cloud service provider specializing in modern private cloud solutions built on Microsoft platforms. With over 14 years of experience and a customer base exceeding 4000, the company offers a range of services including hosting for accounting software Pohoda, Microsoft 365 applications, Power BI reporting, and custom cloud server configurations. Their market position is solid within the Czech and Slovak regions, targeting small to medium enterprises and accounting firms seeking secure and efficient cloud infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager, Facebook Pixel, and reCAPTCHA v3 for form security. Security posture is good with HTTPS enforced and some security best practices observed, though improvements in security headers and explicit privacy policy publication are recommended. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the business indicators and content quality. Overall, iPodnik demonstrates a strong business and technical foundation with room for enhanced privacy compliance and security hardening.

W

Wolters Kluwer ČR, a. s.

dauc.cz

10

DAUČ is a professional Czech Republic-based expert portal specializing in tax and accounting information, operated by Wolters Kluwer ČR, a reputable global information services company. The website offers a comprehensive range of expert articles, legal documents, commentaries, and practical tools targeted at professionals and businesses needing authoritative guidance on tax and accounting matters. The business model is subscription-based, providing premium content and services to registered users. The portal holds a strong market position within the Czech financial and legal information sector, supported by consistent branding and high-quality content.

A

ANAG, spol. s r.o.

anag.cz

10

ANAG, spol. s r.o. is a Czech publishing and educational company specializing in legal, economic, health, and leisure publications and seminars. The company offers a broad range of products including books, magazines, audiobooks, e-books, and organizes seminars both in-person and online. Their website is professionally designed, targeting professionals and individuals seeking educational materials in their fields of interest. The company maintains a strong presence on social media platforms and provides clear navigation and content relevant to their audience. Technically, the website employs modern JavaScript libraries such as jQuery, integrates Google Tag Manager for analytics, uses Smartsupp for live chat support, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The site is mobile optimized and performs moderately well, with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and consistency suggest legitimacy. Overall, ANAG's website presents a trustworthy and professional digital presence with room for improvement in security header implementation and transparency of security policies. The risk level is low, and the site is suitable for its intended audience.

S

Story by Jakub

storybyjakub.com

10

Story by Jakub is a Czech-based motivational and health awareness platform centered around Jakub Žák, an athlete and speaker who promotes cardiovascular health and personal development through motivational lectures, charity projects, and media content. The website serves a niche audience interested in health, motivation, and sports, leveraging partnerships with notable organizations such as Cardion and Toyota Brno. Technically, the site is built on WordPress with modern plugins and integrates analytics and social media effectively, though it lacks some privacy compliance elements such as explicit privacy and cookie policies. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and formal policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

D

Duacode

duacode.com

10

Duacode is a Spanish technology company specializing in custom software development and UX/UI design services. Their website presents a professional image with a clear focus on user experience and tailored software solutions. The company targets businesses and organizations seeking specialized digital products and interfaces. The website demonstrates a mature digital presence with modern technologies such as Cookiebot for consent management and Google Tag Manager for analytics. Social media integration and client area access further indicate a business-oriented approach. However, the lack of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to improve trust. Technically, the website is well-structured, mobile-optimized, and uses modern fonts and JavaScript libraries. Performance is moderate with good SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. No vulnerabilities or sensitive data exposures were detected. Overall, the security posture is solid but could be enhanced by adding security headers and incident response information. Privacy compliance is strong with clear policies and consent mechanisms. The business credibility is good, supported by clear contact information and professional content. The domain registration inconsistency is the main risk factor. Strategic recommendations include verifying and publishing domain registration details, implementing security headers, and providing a security policy or incident response contacts to strengthen trust and compliance.

M

Manifesta Comunicació Corporativa

observatorirenovables.cat

9

The Observatori Energies Renovables de Catalunya (OBERCat) is a specialized informational platform focused on renewable energy developments within Catalonia, Spain. Operated by Manifesta Comunicació Corporativa, the website serves as a regional observatory providing news, data, and educational content related to sustainable energy. The platform targets professionals, stakeholders, and the general public interested in renewable energy trends and policies in the region. The business model appears to be informational and educational, likely supported by regional or governmental entities. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Analytics for visitor tracking via the MonsterInsights plugin. The site is mobile-optimized with a moderate performance profile. However, some technical improvements could enhance security and privacy compliance, including enabling DNSSEC, adding security headers, and publishing comprehensive privacy and cookie policies. From a security perspective, the website uses HTTPS correctly, ensuring encrypted communications. No immediate vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and lack of incident response or vulnerability disclosure information indicate room for improvement in security posture. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the website is a credible and professionally presented resource within its niche but would benefit from enhanced privacy and security practices to improve trust and compliance. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies with consent mechanisms, adding security headers, and establishing clear incident response contacts.

A

Alianza por el Autoconsumo

alianzaautoconsumo.org

48

Alianza por el Autoconsumo is a Spanish non-profit alliance formed by over 60 organizations advocating for renewable energy self-consumption, primarily solar photovoltaic but also including wind, biomass, and mini-hydraulic sources. The alliance focuses on political advocacy, public awareness, documentation, events, and knowledge dissemination to accelerate Spain's energy transition and promote green economic recovery. The website is professionally designed using WordPress with modern plugins and technologies, optimized for SEO and mobile devices. Contact information and privacy compliance are clearly addressed, including GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Overall, the site is trustworthy, well-maintained, and serves as a credible platform for energy advocacy in Spain.

S

SolarPower Europe

solarpowereurope.org

10

SolarPower Europe is a leading European solar industry association focused on advocacy, market insights, and fostering collaboration across the solar PV value chain. The organization provides comprehensive reports, campaigns, and events to support the energy transition towards renewables, storage, and grid flexibility. Their website demonstrates a mature digital presence with modern technologies such as Nuxt.js, Google Analytics, and YouTube integration, delivering a rich user experience optimized for mobile and desktop users. Security posture is solid with HTTPS and no visible vulnerabilities, although some security headers and explicit security policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data limits domain trust verification, but the professional content and transparency support legitimacy. Overall, the website is a trustworthy and authoritative source for solar energy information and industry engagement.

G

Global Solar Council

globalsolarcouncil.org

10

The Global Solar Council is a non-profit organization serving as the global voice for the solar energy industry, representing associations and corporations worldwide. Their website demonstrates a strong market position as an advocacy and capacity-building entity within the renewable energy sector, particularly solar PV and battery storage. The site is professionally designed, mobile-optimized, and rich in relevant content including news, resources, events, and membership information. Technically, the website employs modern web technologies, integrates reputable analytics and marketing tools, and is hosted on a reliable platform with HTTPS enforced. Security posture is solid with cookie consent mechanisms aligned with GDPR and other privacy regulations, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is justified for this type of organization. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.