Security Directory

E

E2L - Ecole du Logiciel Libre

e2li.org

59

E2L - Ecole du Logiciel Libre is a French non-profit association dedicated to educating the public about free software through courses, conferences, and community events. Founded in 2015, it operates primarily in Ivry-sur-Seine and offers a range of educational activities including install parties, publications, and online resources. The organization targets individuals interested in free software, from beginners to IT professionals, emphasizing community involvement and open knowledge sharing. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Leaflet for maps, hosted via Gandi SAS. While the site is content-rich and professionally presented, it lacks formal privacy and cookie policies and does not show advanced security headers or DNSSEC, indicating room for improvement in security and compliance. Contact information is clearly provided, enhancing trust and credibility.

A

Association Electrocycle

electrocycle.co

55

Association Electrocycle is a French non-profit organization dedicated to promoting the reuse of electronic devices, particularly smartphones, through workshops and advocacy for free software. The website serves as a platform to share news, events, and educational content related to digital empowerment and ecological technology practices. The organization targets individuals and groups interested in sustainable technology and digital rights. Technically, the website is built on WordPress 6.8.3, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, reflecting a small but active community-focused entity.

W

Wikilibriste

wikilibriste.fr

61

Wikilibriste is a French-language educational website focused on digital freedom, privacy, and security. Founded in 2022, it offers tutorials and guides aimed at helping users improve their digital hygiene and regain control over their online lives. The site targets both beginners and experienced users interested in ethical and open-source digital tools. The business model appears to be content publishing with community engagement, without evident monetization through ads or affiliate marketing. Technically, the website is built on Ghost CMS 6.0, hosted by Infomaniak Network SA, and employs modern web technologies with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and modern font loading strategies but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

F

FFmpeg Project

ffmpeg.org

10

FFmpeg is a well-established open-source multimedia software project founded in 2002, providing a comprehensive cross-platform solution for recording, converting, and streaming audio and video. It holds a leading position in the multimedia technology sector, supported by a strong developer community and regular major releases. The website reflects a mature project with detailed documentation, changelogs, and community engagement channels, targeting developers, multimedia professionals, and system integrators worldwide. The business model is donation and sponsorship-based, with no commercial advertising evident on the site. Technically, the website is built on a modern, lightweight stack using Bootstrap, Font Awesome, and jQuery, hosted by a reputable data center (Telepoint). The site is fast, mobile-optimized, and accessible, though accessibility features are basic. SEO practices are good, with proper meta tags and structured navigation. No CMS is detected, indicating a custom or static site approach. From a security perspective, the domain is long-standing and registered with a reputable registrar, with domain status flags enhancing security. However, DNSSEC is not enabled, and no explicit security headers or security.txt file are detected, representing areas for improvement. The project maintains a dedicated security page and issues regular security updates, demonstrating a proactive security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific compliance indicators. Overall, FFmpeg.org is a trustworthy, professional, and content-rich website representing a critical open-source multimedia project. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security.txt file, and adding cookie consent mechanisms to enhance privacy compliance and security posture.

L

LikeBtn

likebtn.com

62

LikeBtn is a technology company specializing in providing embeddable like button widgets for websites, enabling user interaction through likes and dislikes with real-time statistics and insights. The company has been operating since 2013 and supports a wide range of CMS platforms through dedicated plugins, positioning itself as a versatile solution for website owners seeking to enhance user engagement. Technically, the website employs modern web technologies including asynchronous JavaScript loading, REST APIs, and Cloudflare for DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in DNSSEC adoption and explicit security policies. Privacy compliance is addressed with a comprehensive privacy policy and GDPR readiness, but lacks a cookie consent mechanism. Overall, LikeBtn presents a professional and trustworthy online presence with a mature product offering.

N

Nadace Preciosa

nadacepreciosa.cz

51

Nadace Preciosa is a well-established non-profit foundation affiliated with the Preciosa company, focusing on charitable activities primarily in the Liberec region of the Czech Republic. The foundation supports social, cultural, educational, health, and sports initiatives and has donated over 250 million CZK in its 27 years of operation. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at donors, volunteers, and beneficiaries. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit security policies are published. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness, but external media references and the association with Preciosa company support legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving its non-profit mission effectively.

R

Roman Kunert - Váš Digitální Stratég

romankunert.com

50

Roman Kunert operates a professional digital services business focused on website and e-shop development, SEO, digital marketing, and AI training. The company has a strong presence in the Czech Republic with multiple related projects and brands, positioning itself as a comprehensive digital strategist and service provider. The website is well-structured, visually consistent, and integrates modern web technologies and analytics tools. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, but the overall business presentation and multiple partner domains suggest a legitimate operation. Strategic recommendations include improving security headers, configuring third-party SDKs properly, and publishing clear privacy and security policies.

H

Herpain

herpain-urbis.be

51

Herpain Urbis is a Belgium-based real estate company with a domain registered since 2007, indicating a stable and established presence. The website provides basic information about the company, its projects, and corporate social responsibility initiatives, targeting a general audience interested in real estate services. The digital infrastructure is modest, relying on standard HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The site is accessible and mobile responsive at a basic level but lacks advanced SEO and accessibility features. Security posture is limited, with no visible security headers or incident response policies, and no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data aligns well with the business claims, supporting legitimacy. Social media presence on major platforms adds trust signals. Overall, the website is functional but could benefit from enhanced content, security, and compliance features.

C

cropmark

everythingisfun.eu

55

The website everythingisfun.com serves as a transitional landing page announcing the rebranding of 'Everything is Fun' to 'cropmark'. The business operates as a creative agency specializing in digital and branding design, with offices in Brussels and Luxembourg. The site emphasizes continuity of the team and services under the new brand identity. Technically, the site employs modern web technologies including GSAP for animations and Vimeo for video content, delivering a visually appealing and responsive experience. However, the site lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided, which may impact user trust and regulatory compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site is professional but could improve in transparency and security best practices.

L

Les partisans du moindre effort

lpdme.org

55

Les partisans du moindre effort is a small, niche cultural platform established in 2003 that offers free downloadable PDF posters and booklets focused on graphic design, typography, and urban culture. The website serves a specialized audience including designers, typographers, and urbanists by providing educational and artistic resources without commercial intent. Technically, the site uses basic HTML, CSS, and legacy jQuery scripts, with no detected CMS or advanced frameworks. The hosting and domain registration are stable, with Gandi SAS as the registrar and a domain age consistent with the site's longevity. Security posture is limited, with no visible security headers, no DNSSEC, and unknown SSL status, indicating room for improvement. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is functional and content-rich but lacks modern security and privacy features.

The website www.artyfarty-gallery.com is currently inaccessible to normal users due to a Cloudflare Turnstile security challenge page. This challenge blocks access to the actual website content, preventing any meaningful analysis of the business, services, or detailed technical infrastructure. The domain WHOIS data is unavailable, indicating the domain may not be registered or is newly created and not propagated in the registry. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible on the page. The technical infrastructure relies on Cloudflare's security services, but no further technologies or CMS platforms are detectable. The security posture cannot be fully assessed due to the lack of accessible content, but the presence of a WAF challenge indicates some level of security protection. Overall, the website's legitimacy and business credibility are questionable due to the absence of WHOIS data and content access.

F

French Data Network

fdn.org

49

French Data Network (FDN) is a pioneering French non-profit Internet Service Provider established in 1992, recognized as the oldest ISP in France still operating. The organization operates on a volunteer basis, providing internet access services including ADSL, VDSL, FTTH, and VPNs, primarily targeting members and organizations aligned with digital rights and internet neutrality. FDN is deeply involved in advocacy and supports initiatives related to fundamental freedoms in the digital space, also playing a key role in the Fédération FDN, a federation of associative ISPs in France. Technically, the website is well-structured, mobile-optimized, and uses modern web standards with no detected security vulnerabilities or tracking technologies. The site integrates with the Fediverse via Mastodon and provides various member and public services. However, some security headers are missing, and no explicit cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with good SSL configuration and no exposed sensitive data. The absence of WHOIS data is noted but likely due to AFNIC policies or privacy protection, which is common for French domains. No vulnerability disclosure or incident response information is published, which could be improved to enhance trust. Overall, FDN presents a trustworthy, professional, and ethically driven organization with a solid digital presence. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving transparency around incident response and vulnerability disclosure.

C

Color Library

colorlibrary.ch

44

Color Library is a specialized technology service provider focused on automated color separation for printing devices. The website presents a professional and consistent brand image, targeting printing professionals and businesses requiring advanced color profiles. The business operates primarily in Switzerland and leverages WordPress CMS with integrated payment processing via Stripe. The technical infrastructure includes modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and published security policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could pose regulatory risks. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

Cukrárna a kavárna U tří císařů s.r.o. operates a local confectionery and café business in Slavkov u Brna, Czech Republic, specializing in homemade cakes, pastries, and specialty coffee. The business emphasizes quality and local production, offering custom cakes and a pleasant café environment with daily opening hours. The website reflects a small hospitality business with clear contact details and company registration information, targeting local customers. Technically, the website uses standard HTML, CSS, and JavaScript technologies including jQuery 1.12.0 and a cookie consent library. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS. Security measures are basic, with no visible security headers and use of an outdated JavaScript library posing potential risks. The cookie consent mechanism and privacy policy link indicate awareness of privacy compliance. Security posture is moderate with no critical vulnerabilities detected in the visible content, but improvements are needed in updating libraries, adding security headers, and enhancing form protections. The site is fully accessible without WAF or blocking mechanisms, and no suspicious or malicious content was found. Overall, the website is professional and trustworthy for its business scope but would benefit from technical and security enhancements to improve resilience and compliance.

K

Kozlovna Alfa

kozlovnaalfa.cz

46

Kozlovna Alfa is a small hospitality business located in Třebíč, Czechia, specializing in traditional Czech cuisine, quality tank beer, and accommodation services. The website presents a professional image with clear descriptions of their offerings, including food, beverages, and lodging. The business targets local residents and tourists seeking authentic Czech pub experiences. Technically, the site is built on WordPress with modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy policies, which could be improved to enhance compliance and trust. The absence of WHOIS data is a notable gap in domain legitimacy verification. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

B

BIGGEST

biggestpujcovna.cz

47

BIGGEST is a Czech Republic based company specializing in the rental of construction machinery and related accessories. With over 21 years of experience, they offer a wide range of equipment including excavators, loaders, dozers, dumpers, rollers, and more, targeting both specialists and the general public. Their business model includes rental with optional operator service and own transport capabilities, positioning them as a reliable medium-sized player in the construction equipment rental market. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Sentry for error monitoring. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. However, no CMS or hosting provider information is explicitly detected, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and business presence appear professional and trustworthy. Overall, the website presents a solid business presence with good content quality and privacy compliance, but would benefit from enhanced security practices and domain registration transparency to improve trust and reduce risk.

S

Slinger.cz

slinger.cz

46

Slinger.cz operates as a specialized retailer offering a unique multi-functional tennis bag that doubles as a ball launcher, targeting tennis players of all skill levels from beginners to professionals. The website presents a clear market position emphasizing product uniqueness, affordability, and portability. The business model centers on direct sales supported by informational resources such as FAQs, test centers, and maintenance guides. The company appears to be a small-sized entity founded in 2020, operating primarily within the Czech Republic retail sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and Nette Framework components, ensuring responsive design and moderate performance. The site integrates Google Analytics and Tag Manager for user tracking and marketing insights but lacks a visible cookie consent mechanism. Hosting is managed by a Czech registrar and hosting provider, consistent with the domain's WHOIS data. From a security perspective, the site uses HTTPS but lacks explicit security headers in the provided data, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy and terms of service present, though cookie consent and incident response information are missing. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is professional, content-rich, and trustworthy with moderate security posture. Strategic improvements in security headers, cookie consent, and incident response disclosures would enhance compliance and user trust.

M

Město Plzeň

plzen28rijen.eu

58

The website www.plzen28rijen.eu is an official municipal event site dedicated to the annual celebrations of the founding of the Czechoslovak Republic in Plzeň, Czech Republic. It provides detailed information about the event program, venues, accompanying activities, and photo galleries. The site targets local residents and visitors interested in cultural and historical events, positioning itself as a trusted source for event-related information organized by the city government. The business model is focused on public cultural engagement and event promotion without commercial sales or e-commerce components. Technically, the website uses modern web technologies including HTML5, CSS, JavaScript, and Google Analytics for visitor tracking. It is mobile optimized with good navigation and SEO practices. The site employs HTTPS with a valid SSL certificate ensuring secure communications. Cookie consent mechanisms are implemented to comply with EU regulations, although no explicit privacy policy or terms of service pages were found. No CMS or hosting provider details were identified from the content. From a security perspective, the site demonstrates a good baseline with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of a privacy policy and incident response contact points are notable gaps. WHOIS data is unavailable due to EURid privacy protection, which is common and justified for this type of municipal website. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is professionally designed, trustworthy, and serves its purpose well. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, providing clear contact information for security incidents, and enhancing accessibility compliance to improve user experience and regulatory adherence.

N

NTC Hosting

ntchosting.com

59

NTC Hosting is an established web hosting and domain registration provider with over 21 years of experience. The company offers a range of services including domain registration, web hosting, VPS solutions, and a website builder, supported by 24/7/365 technical support. The website reflects a professional business presence targeting individuals and businesses seeking reliable hosting solutions. Technically, the site employs modern web technologies such as the Foundation framework and jQuery, with integration of Google Tag Manager for analytics. While HTTPS is enabled, the site lacks advanced security headers and DNSSEC, which could enhance its security posture. Privacy and cookie policies are not evident, indicating potential compliance gaps. Overall, the site is functional, professional, and trustworthy but would benefit from improved security and privacy disclosures.

The website deslivresencommuns.org serves as a digital archive and publishing platform for the non-profit association Framasoft, focusing on open access books under the project "Des Livres en Communs". It provides access to previous publications under the "Framabook" label and aims to progressively release new editions. The site targets French-speaking audiences interested in libre culture and digital commons. Technically, the site is built using the Hugo static site generator, styled with Bootstrap and Fork Awesome, and hosted by OVH sas. It employs Matomo analytics for user tracking, favoring privacy over commercial trackers. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

E

Evolution Host

evolution-host.com

72

Evolution Host is a specialized hosting provider established in 2015, offering VPS hosting, game servers, and advanced DDoS protection services. The company targets a broad audience from startups to enterprise clients, emphasizing reliability, security, and performance. Their market position is strengthened by multiple awards and positive customer testimonials, reflecting a strong reputation in the hosting industry. Technically, the website is well-implemented with modern web standards, mobile optimization, and integrated analytics, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and published security policies could enhance trust further. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

Y

Your Hosting s.r.o.

vas-hosting.com

68

Your Hosting s.r.o. operates the website www.vas-hosting.com, providing a comprehensive range of hosting services including virtual private servers, dedicated servers, managed servers, web hosting, and domain registration. The company targets small to medium businesses and web professionals, emphasizing secure, high-performance hosting solutions with 15+ years of experience and a strong customer base. The website features extensive customer testimonials and references, reinforcing its market position as a trusted regional hosting provider. Technically, the website is well-constructed using modern web technologies such as Bootstrap, Google Tag Manager, and supports mobile responsiveness and accessibility. The site employs HTTPS and cookie consent mechanisms, indicating a good level of digital maturity and privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is generally strong with HTTPS and some security best practices observed, but the absence of security headers and vulnerability disclosure mechanisms suggests room for enhancement. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency and slightly impacts trustworthiness. Overall, the website is professional, secure, and user-friendly, but the domain registration anomaly warrants further verification. Strategic recommendations include publishing security policies, improving WHOIS transparency, and enhancing security headers to strengthen trust and compliance.

L

LOCASTE s. r. o.

palacvina.cz

63

Palác vína, operated by LOCASTE s. r. o., is a specialized retailer focused on offering high-quality wines and delicacies primarily from small family wineries and farms across Europe and Chile. The company also supports charitable causes such as foster families through partnerships with non-profit organizations. The website presents a professional and well-structured digital presence with clear business information, contact details, and e-commerce capabilities. Technically, the site is built on the ByznysWeb.cz CMS platform, uses modern web technologies, and enforces HTTPS with basic security measures including captcha protection on forms and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trust. Privacy policies and cookie consent are well implemented and GDPR compliant. The site targets mature audiences due to alcohol sales but contains no explicit adult content.

L

Le Républicain Lorrain

republicain-lorrain.fr

67

Le Républicain Lorrain is a prominent regional news media organization based in France, delivering continuous news coverage focused on Lorraine, France, and global events. The website offers a variety of services including news articles, videos, digital editions, and subscription models, targeting a general audience interested in regional and national news. It operates under the parent company EBRA Groupe, indicating a strong market position within the media sector. Technically, the website employs modern web technologies such as JavaScript, Google Tag Manager, and a consent management platform (Didomi) to ensure compliance with privacy regulations. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS, uses secure cookies, integrates Google reCAPTCHA for form protection, and manages user consent effectively. However, it lacks explicit security headers and a public security policy or vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and compliant with GDPR, with a solid security posture and a clear business model based on advertising and subscriptions.

L

Le Bien Public

bienpublic.com

72

Le Bien Public is a regional French news media organization focused on delivering local news, videos, and services for Dijon and the Côte d'Or region. It operates under the EBRA Group umbrella and offers subscription-based access complemented by advertising revenue. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, Didomi for consent management, and reCAPTCHA for form security. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR adherence, including a named Data Protection Officer contact. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its professional presentation and known parent company. Overall, the site is trustworthy, well-maintained, and suitable for a general audience.

L

L'Est Républicain

estrepublicain.fr

63

L'Est Républicain is a well-established regional news media organization serving the Franche-Comté and Lorraine regions in France. The website offers continuous news updates, videos, digital editions, and subscription services, targeting a broad general audience interested in local and national news. It operates under the parent company EBRA Groupe, reflecting a strong market position in regional media. Technically, the website employs modern web technologies including Google Tag Manager, Didomi consent management, and Google reCAPTCHA to ensure user privacy and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and secure form handling, although some HTTP security headers could be improved. Privacy compliance is robust, with clear GDPR adherence and a visible Data Protection Officer contact. Overall, the website is trustworthy, professional, and safe for general audiences.

L

Les Dernières Nouvelles d'Alsace

dna.fr

67

Les Dernières Nouvelles d'Alsace (DNA) is a prominent regional news media organization serving Strasbourg, Alsace, and broader France. The website provides continuous live news updates covering local, national, and international events including politics, sports, economy, and environment. It holds a strong market position as a leading regional news source with a large audience base. The business model centers on digital news publishing supported by advertising revenue and mobile app distribution. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The infrastructure supports mobile optimization and integrates multiple advertising and analytics services for monetization and user insights. Security posture is robust with HTTPS enforcement, security headers, and privacy policies in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good content quality and compliance, suitable for its media industry role.

U

URW

urw.com

72

Unibail-Rodamco-Westfield (URW) is a leading European commercial real estate company specializing in owning, developing, and operating sustainable, high-quality real estate assets in major cities. The company focuses on creating destinations that foster community connections and meaningful experiences. Their website reflects a mature digital presence with comprehensive investor relations content, sustainability initiatives, and multimedia engagement. Technically, the site is built on modern frameworks such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and standard security headers, though public security policies and incident response contacts are not prominently disclosed. The absence of WHOIS data is unusual but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around vulnerability disclosures.

G

Groupe BPCE

groupebpce.com

77

Groupe BPCE is a major French banking and insurance group, operating through well-known brands such as Banque Populaire, Caisse d'Epargne, and Natixis. It holds the position of the second largest banking group in France, financing a significant portion of the national economy. The website reflects a mature digital presence with comprehensive content targeting customers, investors, journalists, and partners. The business model focuses on retail banking, insurance, investment management, and corporate banking services. The site is professionally designed, mobile-optimized, and SEO-friendly, indicating a high level of digital maturity. Technically, the website is built on WordPress, leveraging modern JavaScript libraries, SEO plugins, and tag management tools like Tealium. Security measures include HTTPS enforcement and bot protection via hCaptcha. Cookie consent and privacy policies are implemented in compliance with GDPR, demonstrating attention to privacy and regulatory requirements. However, explicit security policies and incident response contacts are not prominently available, which could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a notable anomaly but does not detract from the overall legitimacy given the extensive corporate branding and content. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Groupe BPCE's website is a robust, professional platform supporting its business operations and stakeholder communications. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.

S

SUEZ

suez.com

68

SUEZ is a global enterprise specializing in water and waste management, offering circular economy solutions to local authorities and businesses. The company positions itself as an expert in environmental services, supporting sustainable development and resource management. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to a corporate audience. Technically, the site employs modern web standards, including HTTPS, security headers, and optimized fonts, ensuring a secure and performant user experience. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the website is trustworthy and well-maintained, but the lack of WHOIS data raises questions that warrant further registrar-level verification.

F

Freie Universität Berlin

fu-berlin.de

50

Freie Universität Berlin is a leading German excellence university established in 1948, offering over 150 academic programs across twelve faculties and three central institutes. The website serves a diverse audience including students, researchers, staff, and international partners, providing comprehensive information on study programs, research, international cooperation, and campus services. The site is well-structured, professionally designed, and supports accessibility and mobile optimization. Technically, it is built on a Ruby on Rails framework with Infopark CMS Fiona, leveraging modern web standards and security best practices such as HTTPS and security headers. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website demonstrates a strong security posture with no detected vulnerabilities or suspicious content, reflecting the institution's credibility and trustworthiness.

G

Global Solar Council

globalsolarcouncil.org

10

The Global Solar Council is a non-profit organization serving as the global voice for the solar energy industry, representing associations and corporations worldwide. Their website demonstrates a strong market position as an advocacy and capacity-building entity within the renewable energy sector, particularly solar PV and battery storage. The site is professionally designed, mobile-optimized, and rich in relevant content including news, resources, events, and membership information. Technically, the website employs modern web technologies, integrates reputable analytics and marketing tools, and is hosted on a reliable platform with HTTPS enforced. Security posture is solid with cookie consent mechanisms aligned with GDPR and other privacy regulations, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is justified for this type of organization. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

R

Raketsport

raketsport.cz

45

Raketsport.cz is a specialized retailer and distributor of racket sports equipment, operating primarily in the Czech and Slovak markets. The company positions itself as an exclusive distributor for several well-known brands such as Tecnifibre, Victor, and Pro Kennex. The website reflects a professional and consistent brand image with clear business contact information and a focus on serving players of all ages and skill levels. The business model centers on B2B and retail distribution of sports equipment, supported by a dedicated team of representatives. Technically, the website employs a modern frontend stack including Bootstrap 4 and jQuery, hosted on Czech hosting infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced SEO and accessibility features, and no CMS or backend platform is explicitly detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable inputs. However, it lacks published privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. No tracking or analytics scripts were detected, indicating minimal user tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user trust.

H

Hitzerot Shop

hitzerot.com

72

Hitzerot Shop is a niche e-commerce business based in Berlin specializing in print publications related to graffiti and urban culture. The website offers a curated selection of books, zines, exhibition catalogues, and prints, targeting collectors and enthusiasts of this art form. The business has been active since 2015, aligning with the domain registration date, and maintains a focused market position within the retail and media sectors. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience.

A

Apaperbook

apaperbook.com

43

A Paper Book (apaperbook.com) is a niche publishing project focused on cataloging artistic paintings on red-brown steel freight wagons. The website presents a single product with descriptive content and a link to an external shop. The business operates in a specialized art publishing market with a small scale and limited digital footprint. Technically, the site is built with basic HTML, CSS, and JavaScript, hosted on a provider associated with the registrar NameWeb BVBA. The site lacks advanced CMS or frameworks and shows basic mobile optimization and SEO. Security posture is minimal with no detected security headers or privacy policies, and no forms or data collection mechanisms are present. The domain is well-registered and consistent with the business timeline, indicating legitimacy. Overall, the site is functional but lacks comprehensive compliance and security features.

B

Bureau DGC

bureaudgc.com

46

Bureau DGC is a small Paris-based graphic design studio founded in 2016, specializing in book design, visual identity, spatial design, website, and digital media. The company targets artists, publishers, architects, urbanists, and brands, positioning itself as a niche creative agency with a professional portfolio showcasing diverse projects. The website reflects a consistent brand identity and provides clear contact information, though it lacks social media presence and phone contact details. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Analytics and Google Tag Manager for tracking. The site is hosted by OVH sas, a reputable provider. Mobile optimization is good, but accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are important for enhancing security posture. There are no visible privacy or cookie policies, nor incident response contacts, indicating compliance gaps especially regarding GDPR. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is professional and functional but would benefit from improved security practices and privacy compliance measures to enhance trust and regulatory adherence.

O

Onestar Press

bookmachine.info

51

Book Machine is a niche website focused on typography and publishing resources, powered by Onestar Press. It offers downloadable font and typography PDFs, targeting designers and publishing professionals. The website is hosted on the Cargo Collective platform and uses modern web technologies including HTTPS and YouTube embeds. However, it lacks comprehensive privacy, cookie, and terms of service policies, which impacts its compliance posture. Security headers are absent, though no critical vulnerabilities were detected. The WHOIS data is privacy protected, which is common for small businesses, and the domain appears legitimate based on website content and contact information. Overall, the site is functional but could improve in privacy compliance and security best practices.

R

rozumne.sk

rozumne.sk

29

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) indicating that no actual website content is accessible at the provided URL or domain. This page is a static offline error page with embedded Chromium scripts, including the well-known offline dinosaur game. There is no business-related content, metadata, or contact information available. The page lacks privacy, cookie, or terms of service policies, and no security or incident response information is present. The technical infrastructure is minimal and specific to Chromium's offline error handling, with no hosting or CMS details. Security posture is basic due to the nature of the page, with no HTTPS or security headers applicable. Overall, this is not a public-facing website but a browser-generated error page, thus limiting any meaningful business or security analysis.

I

IQVIA Digital

meddatagroup.com

73

IQVIA Digital is a leading healthcare marketing solutions provider specializing in delivering personalized, data-driven omnichannel engagement for pharma companies, agencies, partners, and publishers. As a subsidiary of IQVIA, it leverages advanced clinical and behavioral data to empower healthcare marketers to create meaningful customer experiences that drive better outcomes. The company positions itself as a trusted partner in the healthcare marketing ecosystem with integrated platforms and analytics capabilities. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including Google Tag Manager for analytics, Brightcove for video content, and Swiper for interactive carousels. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and uses secure forms via HubSpot. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is notably missing or unavailable, which slightly reduces trustworthiness but does not outweigh the professional presentation and clear business legitimacy. Overall, IQVIA Digital demonstrates a strong business and technical profile with good security hygiene and privacy compliance. The main risk lies in the lack of WHOIS transparency, which should be investigated further to ensure domain registration legitimacy and continuity.

L

Site not installed - OVHcloud

lesgarconsfaciles.com

47

The domain lesgarconsfaciles.com is registered since 2011 with IONOS SE and hosted on OVHcloud. However, the website is currently not installed and only displays a default OVHcloud placeholder page indicating no active content. There is no metadata, business information, or contact details available on the site. The technical infrastructure is minimal, with no CMS or frameworks detected, and no security headers or HTTPS status provided. The absence of privacy, cookie, and terms of service policies indicates non-compliance with common data protection regulations. Overall, the website lacks any meaningful content or business presence, resulting in a low trust and credibility score.

A

Výrobní systém Alokace

alokace.cz

41

The website www.alokace.cz presents a manufacturing and production management software system targeted primarily at Czech manufacturing companies. It offers comprehensive features including order management, production tracking, cooperation handling, returns, employee and warehouse management, and integrated accounting with EET support. The business model appears to be SaaS or online system access, catering to small manufacturing businesses. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information suggest a legitimate business. Security posture is moderate with recommendations to improve SSL configuration, security headers, and privacy compliance. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

P

ppwork | employee management system

ppwork.cz

42

The website ppwork.cz presents a specialized employee management system tailored for personnel agencies, primarily targeting the Czech Republic market. The platform offers comprehensive workforce management features including attendance tracking, payroll calculation, and administrative support. The business model is SaaS-based, focusing on small to medium-sized personnel agencies, with customization options for client-specific needs. The website content is professional and well-structured, providing clear information about the system's capabilities and benefits. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various JavaScript libraries for animations and UI enhancements. The site is mobile-optimized and demonstrates good design quality and user experience. However, there is no evidence of advanced SEO or accessibility features, and no CMS or hosting provider information is discernible. Performance is moderate, with no major issues detected. From a security perspective, the site lacks visible security headers and published security policies. The absence of HTTPS verification data and WHOIS information raises concerns about domain legitimacy and security posture. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR or other data protection regulations. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and business-focused but would benefit from enhanced security measures, transparency in domain registration, and improved privacy compliance. Strategic recommendations include implementing HTTPS with strong SSL, publishing privacy and cookie policies, adding security headers, and providing clearer contact and incident response information to build trust and compliance.

S

SOMFY, SPOL. S R.O.

somfypro.cz

66

Somfy PRO CZ&SK is a professional B2B web portal serving Somfy brand resellers, manufacturers, and distributors in the Czech and Slovak markets. The portal provides comprehensive product catalogs, technical specifications, pricing, manuals, and training information, positioning itself as a key resource for Somfy's professional partners. The website reflects a medium-sized manufacturing business with a consistent brand presence and a focus on B2B engagement. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and YUI, and implements responsive design for mobile users. The infrastructure supports good performance and SEO practices, although some accessibility features could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract significantly from the overall legitimacy of the business. Overall, Somfy PRO CZ&SK presents a trustworthy, professional, and well-maintained digital presence suitable for its B2B audience. Strategic improvements in security headers, incident response transparency, and direct contact information visibility would further enhance its security posture and business credibility.

I

ij-t.cz

zabavne.online

46

Zábavně.online is a Czech Republic-based web application platform specializing in creating interactive educational games using QR codes and GPS navigation. The platform targets schools, families, and corporate teams, offering tools to build custom routes, questions, and competitions to engage users in a fun and informative manner. The business operates as a small entity with a clear focus on educational technology and marketing engagement. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and popular libraries like Modernizr and Owl Carousel, delivering a moderately performant and mobile-optimized experience. Security posture is moderate with HTTPS assumed but lacking explicit security headers and published privacy or cookie policies, which are critical for compliance and trust. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website razed.com is currently inaccessible due to a Cloudflare security challenge page that blocks access to any actual content. The domain is long-registered since 2004 with a stable registration status, indicating legitimacy. However, no business information, contact details, or policies are visible on the page. The technical infrastructure includes Cloudflare's Turnstile captcha for bot mitigation, but no further technologies or CMS are detectable. The security posture cannot be fully assessed due to the lack of accessible content, but the use of Cloudflare suggests a baseline security layer. Overall, the site cannot be properly evaluated for content quality, privacy compliance, or business credibility due to the blocking mechanism.

S

Home | The SPSRF

stiffperson.org

58

The website stiffperson.org serves as a support group platform dedicated to Stiff Person Syndrome, a rare neurological disorder. It provides informational resources and community support primarily targeting patients, their families, and caregivers. The site is built on the Wix platform, leveraging Wix's hosting and content management system, which offers moderate performance and good mobile optimization. However, the content quality and design are basic, reflecting a small non-profit organization's typical digital presence. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. No contact information or incident response details are provided, limiting transparency and responsiveness to security or privacy concerns. The site employs minimal tracking via Metricool analytics, indicating a low level of user tracking. Overall, the domain WHOIS data is unavailable or privacy protected, which is common for small non-profits but limits trust verification. The website content and structure do not raise suspicion and align with a legitimate support group. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site's trustworthiness and security posture.

Chicago MS Alliance is a specialized non-profit organization focused on uniting multiple sclerosis (MS) specialists to improve access, equity, and outcomes through collaboration, education, and advocacy for neuroimmunologic conditions. The website presents a professional and consistent brand image, targeting healthcare professionals and specialists in the neuroimmunology field. The business model centers on alliance-building and educational initiatives rather than commercial transactions. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and Google Fonts, with a moderate performance profile and good mobile optimization. The site uses HTTPS with HSTS enabled, indicating a strong baseline security posture. However, there is room for improvement in security headers and privacy compliance features. Security-wise, the site enforces HTTPS and HSTS, with no visible vulnerabilities or exposed sensitive data. The lack of privacy and cookie policies, as well as absence of contact information for security incidents, represents compliance and operational gaps. The WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

F

Fundación CAMINEMOS.mx

caminemos.mx

43

Fundación CAMINEMOS.mx is a Mexican non-profit organization dedicated to supporting individuals affected by demyelinating diseases such as Multiple Sclerosis and Neuromyelitis Optica. The website serves as an educational and community platform offering verified medical information, events, and a directory of specialists and resources. The organization targets Spanish-speaking patients, caregivers, and medical professionals, positioning itself as a trusted source within its niche healthcare segment. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with Google Fonts and Google Analytics integrated. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no advanced security headers or policies are detected, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to an email and a contact form, with no phone or physical address disclosed. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

The Brain Health Center of the Rockies is a small non-profit organization focused on brain health education, community engagement, and support for patients with neurological conditions such as Multiple Sclerosis and Neuromyelitis Optica. Their website is professionally designed using Squarespace, featuring event information, educational resources, and connections to healthcare providers. The technical infrastructure is modern and mobile-optimized, leveraging common web technologies and APIs. Security posture is adequate with HTTPS enforced, but lacks important security headers and privacy compliance documentation, which are areas for improvement. The domain WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the website is trustworthy and serves its community well but should enhance privacy and security transparency.

Librezo is a French digital artisan collective specializing in providing self-hosting solutions and free software services to organizations and individuals seeking data sovereignty and privacy. The company emphasizes ecological and resilient digital infrastructures, offering tailored support and maintenance for client servers. Their market position is niche but well-defined, focusing on privacy-conscious and open-source oriented clients. Technically, the website is built with standard web technologies, hosted on ScaleWay, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protections, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and aligns well with the business claims, with no blocking or WAF interference detected.