Other security reports

Běhy Zlín, z.s. is a small non-profit organization based in the Czech Republic focused on organizing running competitions and running school workshops primarily in the Zlín region. The website serves as a hub for event information, registration, news updates, and community engagement. It targets local runners and sports enthusiasts, providing event schedules, partner information, and educational content. The organization has been active since 2014, with a consistent domain registration and transparent business information. Technically, the website uses modern web technologies including JavaScript libraries like jQuery, Moment.js, and Swiper.js, and is built on the Nette PHP framework. It is mobile optimized and provides a good user experience with clear navigation and content relevance. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism with granular controls, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

P

Trouvez un paysagiste qualifié près de chez vous. Devis gratuit

paysagistes.pro

50

The website www.paysagistes.pro appears to be a professional service site related to landscaping, primarily targeting a French-speaking audience. The site is built on WordPress and utilizes common web technologies such as Font Awesome and Google Maps API for icons and location services. However, the content provided is minimal and mostly technical resources, with no visible business descriptions, contact information, or privacy policies. The WHOIS data is unavailable or protected, which limits the ability to fully verify the domain's legitimacy and ownership details. The site is accessible without any WAF or security challenge blocking access.

J

Julie Fuchs

juliefuchs.fr

51

Julie Fuchs is a professional artist photographer, accredited trainer in mental health first aid (PSSM), and facilitator in collective intelligence. The business focuses on supporting organizations with relational and mental health challenges at work, combining photography with consulting and facilitation services. The website is built on the Wix platform, leveraging modern web technologies and analytics tools, but lacks comprehensive privacy and cookie policies. Security posture is good with HTTPS and some security hardening scripts, though explicit security headers are missing. WHOIS data is unavailable, which limits domain trust verification. Overall, the site presents a professional image but could improve transparency and compliance aspects.

The website gabfirethemes.com is currently inaccessible, returning a 403 Forbidden error page. This prevents any meaningful extraction of business, technical, or security information. The site lacks visible content, metadata, contact information, or policies, which severely limits the ability to assess its business model, market position, or compliance posture. Technically, no scripts, frameworks, or hosting details are detectable due to the access restriction. Security posture cannot be evaluated as no headers or SSL details are available. Overall, the site is effectively blocked from analysis, resulting in a low trust and quality score.

The website at run.app is currently inaccessible, serving only a standard 404 Not Found error page with no business or security related content. There is no metadata, structured data, or contact information available to analyze. The lack of accessible content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site does not present any detectable technologies, scripts, or security headers, and no evidence of WAF or security blocking mechanisms was found. The security posture cannot be evaluated due to the absence of content and configuration data. Overall, the site appears inactive or misconfigured, resulting in a very low trust and credibility score.

M

Marsbahis

mars-giris3.com

55

Marsbahis is an online gambling and betting platform offering a variety of services including sports betting, live casino games, and slot games. The platform targets adult users interested in online gambling, primarily Turkish-speaking audiences. It emphasizes user security and privacy in its messaging but lacks published privacy and cookie policies. Technically, the website uses AMP technology for fast mobile performance and is hosted behind Cloudflare DNS, with a domain registered recently in 2024. Security posture is moderate with HTTPS enabled but lacks security headers and incident response contacts. Overall, the site is functional and professional but needs improvements in privacy compliance and security transparency.

S

Stella Tech BV

marsbahis.com

46

Marsbahis is an established online gambling platform licensed in Curacao, offering a broad range of betting and casino games primarily targeting Turkish-speaking users. The website provides comprehensive information about its services, bonuses, and operational procedures, supported by trust signals such as a Curacao gaming license and DMCA protection. Technically, the site uses modern web technologies including Google Tag Manager and AMP links, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and some trust badges, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism detected. Overall, the site is professional and functional but could improve transparency and compliance aspects.

Protecton HOLDING, a.s. is a well-established Czech security services company founded in 2017, offering a broad range of security-related services including personal protection, monitoring, technical solutions, and event security. The company operates with a large workforce and manages multiple subsidiaries, positioning itself as a significant player in the Czech security market. The website reflects a professional and consistent brand image targeting businesses and individuals seeking reliable security solutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and is hosted likely with WEDOS, a Czech hosting provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in security transparency and incident response readiness.

F

FIFA

fifa.com

60

The FIFA website represents the official online presence of the Fédération Internationale de Football Association, the global governing body for football. FIFA organizes major international football tournaments and serves a worldwide audience of football fans, players, officials, and media. The organization operates as a large non-profit entity with a global market position as the authoritative football institution. However, the provided HTML content is inaccessible, showing only a loading animation, indicating the presence of a Web Application Firewall or security mechanism blocking content access. This limits the ability to fully analyze the website's content, policies, and technical details. Technically, the website appears to use modern JavaScript frameworks such as React, with integrations of marketing and tracking tools like AppsFlyer, Adobe DTM, and OneTrust for cookie consent. Despite this, the lack of accessible content and absence of visible privacy or cookie policies in the provided data suggest gaps in privacy compliance and transparency. Security headers and SSL configuration details are not discernible from the content, and no contact or incident response information is available. From a security posture perspective, the site is protected by a WAF or similar mechanism, which is a positive security control but also restricts content visibility. The absence of WHOIS data reduces trust signals, though the domain is globally recognized. Overall, the site scores low on content quality and privacy compliance due to blocked content and missing policies. Strategically, FIFA should ensure that its website content is accessible to legitimate users and that privacy and security policies are clearly published and compliant with regulations such as GDPR. Enhancing transparency and contact availability would improve trust and user confidence.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for European football fans, stakeholders, and media, providing news, live scores, video content, and detailed information about UEFA's competitions and initiatives. It holds a strong market position as the authoritative source for European football, supported by consistent branding and extensive content offerings. Technically, the site employs modern web technologies including React, Google Analytics, and Microsoft Application Insights, ensuring a fast, responsive, and accessible user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though the absence of publicly available WHOIS data limits full domain registration verification. Overall, UEFA.com demonstrates a mature digital infrastructure with strong privacy compliance and business credibility, making it a trusted resource in the sports domain.

The website mahi-hosting.com is currently inaccessible, returning an HTTP 501 Not Implemented error indicating that the server does not support the GET method for the requested URL. This results in a complete lack of accessible content, metadata, or business information on the site. The domain is registered with OVH sas, a reputable hosting provider, since 2009, indicating a long-standing registration. However, the absence of any meaningful website content or contact information severely limits the ability to assess the business or its market position. Technically, the site lacks HTTPS information and security headers, which are critical for secure web operations. No privacy, cookie, or terms of service policies are present, indicating poor compliance with data protection regulations. Overall, the site appears inactive or misconfigured, posing a high risk for users and limiting trust and credibility.

Salon Permae is a French event organizer specializing in permaculture, agroecology, and natural gardening exhibitions held at the Parc Floral de Paris. The website serves as an information portal for visitors and exhibitors, offering event details, conference programs, and exhibitor portraits. The business targets gardening enthusiasts and professionals interested in sustainable agriculture and natural gardening practices. The company positions itself as the first dedicated salon in this niche in France, operating since 2019 with a small but focused market presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Google Analytics for tracking, and several plugins for content display and advertising management. Hosting is provided by Infomaniak, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, and there is no visible security policy or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, the website is professional and trustworthy for its business purpose but could improve in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and enhancing contact information clarity.

T

the new botanist

thenewbotanist.com

59

The New Botanist is a French ecological gardening initiative focused on promoting biodiversity by offering seed kits of local wildflowers to create pollinator refuges. The website is hosted on Squarespace, leveraging standard web technologies and security features such as HTTPS and HSTS. While the site is well-designed, mobile-optimized, and provides relevant content for environmentally conscious gardeners, it lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate small business. Security posture is strong with HTTPS and reCAPTCHA usage, but improvements in privacy compliance and contact transparency are recommended.

L

Les talentes

lestalentes.fr

43

Les Talentes is a French event organized by Fédération Cinov to promote and reward women excelling in consulting, engineering, and digital professions. The website serves as an information hub for the event editions, laureates, categories, and related news. It targets women professionals and stakeholders interested in gender diversity in these sectors. The business model revolves around event organization and community engagement. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Matomo for analytics, reflecting a moderate to good digital maturity. The site is mobile-optimized and well-structured, with good SEO practices and user experience. From a security perspective, the site uses HTTPS and employs privacy-conscious analytics. However, it lacks explicit security headers and a dedicated security policy or incident response contact. The absence of WHOIS data reduces transparency but does not significantly impact trust given the professional presentation and organizational backing. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, though it could improve security posture by adding security headers and incident response information.

D

Divadlo Husa na provázku

provazek.cz

62

Divadlo Husa na provázku is a well-established cultural theatre organization based in Brno, Czech Republic, with a history dating back to 1967. The institution focuses on contemporary theatrical performances and cultural projects, serving a general audience interested in arts and culture. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and privacy policy documentation are missing. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong partner ecosystem and content quality.

G

Galio marketing s.r.o.

galio.cz

30

Galio marketing s.r.o. is a Czech Republic based small marketing and advertising agency established in 1999. The company offers services including graphic design, advertising, website development, e-commerce solutions, printing, and marketing. The website is professionally designed using WordPress with the Divi theme and integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The content is primarily in Czech, targeting local businesses and individuals seeking marketing services. The domain registration data aligns well with the business information, indicating legitimacy and a long-standing presence in the market. However, the website lacks explicit privacy and terms of service pages, which are important for compliance and user trust.

The domain www.paris-saclay.com currently serves a security challenge page indicating anti-DDoS flood protection and firewall measures, effectively blocking normal access to website content. No business-related content, contact information, or policies are available, making it impossible to assess the company's operations or services. The domain WHOIS data is missing or unregistered, further reducing trust and legitimacy. Technically, the site uses minimal JavaScript and Google Fonts but lacks modern CMS or frameworks. Security posture is weak due to absence of HTTPS and security headers, although the presence of a WAF indicates some level of protection. Overall, the site is inaccessible for meaningful analysis and scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

R

Resallience

resallience.com

70

Resallience is a specialized consulting and engineering firm focused on climate change adaptation and resilience, operating as part of the VINCI group. The company offers innovative technical solutions, integrated engineering, and economic models tailored to climate challenges, serving a diverse international client base including public institutions, finance, infrastructure operators, and industrial sectors. Their market position is strong within the climate adaptation niche, with over 100 projects across more than 90 countries since 2019. Technically, the website is built on WordPress with modern SEO and performance optimizations, including cookie consent management and analytics tools. Security posture is good with HTTPS and privacy compliance, though explicit security policies and incident response contacts are absent. The domain WHOIS data is missing, which raises transparency concerns but the website content and branding strongly indicate legitimacy. Overall, the site is professional, well-structured, and trustworthy, with room for improvement in security disclosures and domain registration transparency.

The website tourisme-argentan-intercom.fr is currently inaccessible, serving a 403 Forbidden error page with no accessible content. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and legitimacy. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business details available on the site. The technical infrastructure shows hosting via Hosting Concepts B.V. with Cloudflare nameservers, indicating some level of protection but no visible security headers or scripts. Overall, the site lacks digital maturity and business credibility, with minimal SEO or accessibility features.

P

Portobello Communication

portobello-communication.fr

62

Portobello Communication is a small, established communication agency based in Laval, Mayenne, France, operating since 2009. The company offers a broad range of marketing and communication services including brand strategy, web design, video production, graphic design, and social media marketing. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and WP Rocket, and integrates Matomo for analytics, indicating a focus on performance and privacy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-positioned in its local market segment.

The website vostickets.net currently serves only the default Apache2 Debian welcome page, indicating that the web server is installed but no active website or business content is present. The domain is registered with OVH sas since 2018 and uses Cloudflare DNS servers, but the lack of any business or contact information on the site suggests it is either under construction or abandoned. Technically, the site runs on Apache2 on Debian, but no modern web technologies, CMS, or analytics tools are detected. Security posture is weak due to the absence of HTTPS enforcement, security headers, and privacy policies. Overall, the site is not operational as a business or service platform.

L

Accueil | Lecture en tête

lecture-en-tete.fr

50

Lecture-en-tete.fr is a French cultural or literary website associated with an organization and a literary festival. The site is minimalistic, primarily serving as a portal linking to related association and festival websites. The domain is well-established since 2010 and registered with a reputable registrar, indicating legitimacy. The technical infrastructure is basic, using standard CSS and Typekit fonts, hosted by IONOS SE. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. No contact information or forms are present, limiting user engagement and compliance with privacy regulations. Overall, the site is functional but lacks modern security and privacy features, which should be addressed to improve trust and compliance.

S

Symetri

symetri.fr

54

Symetri is a French company specializing in digital SaaS solutions aimed at optimizing waste management operations, particularly for waste disposal sites (déchèteries). Their offerings include access control, real-time activity monitoring, waste traceability, and cost reduction tools tailored for public entities such as communities, exploitants, and mixed syndicates. The company positions itself as a niche player with strong partnerships and certifications like UGAP-SCC and France 2030, indicating credibility and alignment with public sector standards. Technically, the website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly, but the active website and business signals support legitimacy. Overall, Symetri demonstrates a mature digital presence with room for enhanced security and transparency.

A

Audiotec

audiotec.fr

49

Audiotec is a well-established French company specializing in audiovisual equipment rental, sales, integration, and event services. Founded in 1988, it has a strong market position as a leading supplier for both professionals and individuals in France. The company offers a comprehensive range of services including sound, video, lighting, and stage structure solutions, supported by a competent technical team and a dedicated design office. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the website is built on WordPress with WooCommerce and uses modern technologies such as Google Tag Manager, Matomo, Microsoft Clarity, and reCAPTCHA for analytics and security. Hosting is provided by PLANETHOSTER, a reputable provider. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience and discoverability. From a security perspective, the site enforces HTTPS, uses secure login forms with nonce tokens, and integrates reCAPTCHA v3 to mitigate automated abuse. However, it lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Audiotec's digital presence is robust, trustworthy, and professionally managed. The domain registration data aligns with the business history, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

The website restosducoeur31.org is currently a parked domain with no active business content. It displays a domain sale banner in Finnish and loads an iframe pointing to an unrelated external URL. There is no privacy policy, cookie policy, terms of service, or contact information available on the site. The WHOIS data is unavailable due to a malformed query and privacy protection, which limits transparency and trust. Technically, the site uses basic JavaScript and iframe embedding, hosted behind AWS Cloudfront CDN, but lacks HTTPS enforcement and security headers. The presence of multiple suspicious external domains related to ads and tracking further reduces trustworthiness. Overall, the site does not represent an active or legitimate business presence.

The website at aptum.com is currently inaccessible due to a Vercel Security Checkpoint page that blocks access to the actual content. This security mechanism prevents analysis of the site's business, security, and compliance posture. The domain is registered since 2002 with GoDaddy and uses Cloudflare DNS, indicating a legitimate and established domain. However, no business or contact information, privacy policies, or security headers are visible due to the content block. The site appears to be hosted on the Vercel platform with Astro framework usage indicated by scripts. Without access to the real content, the security posture cannot be fully assessed, but the presence of a security checkpoint suggests some level of protection against automated or malicious access. Overall, the site is currently not analyzable beyond domain registration and hosting details.

A

Agence de communication Periwinkle

periwinkle.fr

44

Periwinkle is a small French communication agency based in Montauban, established in 2015. The company specializes in supporting businesses with communication and digital solutions, including web and print services. The website reflects a professional and consistent brand image, targeting businesses seeking digital communication expertise. The agency maintains an active social media presence on Facebook, Instagram, and LinkedIn, enhancing its market visibility. Technically, the website is built on WordPress using the Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable infrastructure. The site employs HTTPS with good SSL configuration and includes a cookie consent mechanism with blocking enabled, demonstrating awareness of privacy compliance. Google Analytics is integrated with IP anonymization, reflecting moderate user tracking practices. From a security perspective, the site lacks some advanced security headers and does not provide a security.txt or incident response contact information, which are areas for improvement. The absence of a published privacy policy and terms of service represents a compliance gap under GDPR and related regulations. The WHOIS data is not publicly available, suggesting privacy protection for the domain registration, which is typical for small agencies. Overall, Periwinkle's website is professional and trustworthy with moderate technical and security maturity. Strategic enhancements in privacy disclosures, security policies, and incident response readiness would strengthen its compliance posture and trustworthiness.

T

Table de massage : usage, types, avantages, prix

tabledemassage.fr

38

The website tabledemassage.fr is a newly registered French informational site focused on massage tables, their usage, types, advantages, and pricing. It targets professionals in massage therapy, physiotherapy, wellness centers, and individuals interested in massage equipment. The site provides detailed, well-structured content but lacks business contact information and formal policies. Technically, it uses a modern frontend stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization. However, no CMS or backend technologies are detected, and performance is moderate. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and contact details for incident response. The domain is very new (registered in late 2024) but WHOIS data is transparent and consistent with the website content, indicating legitimacy. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences with no adult or explicit material. Overall, the website scores moderately on content quality and business credibility but scores low on privacy compliance and security posture due to missing policies and headers. There are no critical security issues detected, but improvements are needed to enhance trust and compliance. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies, providing clear contact information, and enhancing security headers to improve the security posture and user trust.

P

premiers-secours.com

premiers-secours.com

45

The website premiers-secours.com is a newly created French-language educational platform focused on first aid guidance and emergency response techniques. It provides detailed textual content and multimedia resources to educate the general public on how to act in case of accidents or medical emergencies. The site positions itself as a niche informational resource with links to related first aid training services, targeting individuals seeking knowledge on lifesaving procedures. Technically, the site employs modern front-end technologies including Bootstrap 5, Google Fonts, and JavaScript libraries such as Swiper and Glightbox. It is hosted on AwardSpace servers with DNS managed via AwardSpace nameservers. The site is mobile optimized and has moderate performance but lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or static site build. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies present, and no explicit contact emails or phone numbers are provided, limiting transparency and compliance with GDPR. Analytics are implemented via Statcounter with minimal tracking. The domain registration is transparent and consistent with the website content, registered recently in 2024 with a reputable registrar. Overall, the site is a functional and informative resource with good content quality but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence.

W

WSN Community

wsn.community

57

The website at https://wsn.community/fr/pro/login is currently inaccessible beyond a minimal loading spinner, indicating that a Web Application Firewall (WAF) or other security mechanism is blocking full content access. Due to this, no meaningful business information, contact details, or policies are available for analysis. The site uses modern JavaScript frameworks such as Vue.js and Vuetify, but no metadata or structured data is present. The WHOIS data is restricted and does not provide registrant or domain creation details, limiting trust assessment. Overall, the site appears to be in a blocked or pre-load state, preventing comprehensive evaluation.

E

European Association of Independent Performing Arts

eaipa.eu

50

The European Association of Independent Performing Arts (EAIPA) is a small, pan-European umbrella organization founded in 2018 that represents independent performing arts groups and professionals across 17 countries. It operates primarily as a B2B membership association advocating for the sector, providing policy input, and raising visibility for independent performing arts communities. The website is built on WordPress using Elementor and integrates GDPR compliance tools such as Complianz and Mailjet for marketing. The technical infrastructure is modern and adequate, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the site is professional, trustworthy, and compliant with European privacy regulations.

G

Graphic Solutions s.r.o.

grslt.sk

48

Graphic Solutions s.r.o. is a small Slovak company specializing in graphic design, web development, and online marketing services. Their website presents a professional image with a focus on creative solutions for local businesses, offering services such as logo creation, web presentations, and printed materials. The company emphasizes customer care and flexibility, targeting Slovak enterprises and entrepreneurs seeking tailored digital and graphic solutions. Technically, the website uses common web technologies including jQuery, Google reCAPTCHA v3, and responsive design elements, providing a moderate performance and good mobile optimization. Security measures include the use of reCAPTCHA to protect the contact form and a cookie consent banner, but lack advanced HTTP security headers and explicit security policies. The absence of a privacy policy and terms of service pages indicates room for improvement in compliance. Overall, the website is functional, trustworthy, and suitable for its business purpose but would benefit from enhanced security and privacy practices.

V

Vodácká navigace a kilometráž

vodackanavigace.cz

53

Vodáckanavigace.cz is a specialized Czech website providing detailed navigation, maps, and guides for water sports enthusiasts, particularly canoeists and kayakers navigating Czech rivers. The site offers comprehensive river kilometrage, information about rapids, campsites, rental services, and related amenities. It also supports a mobile Android application for offline use, enhancing user convenience. The business operates in a niche market with a focus on outdoor recreation and tourism within the Czech Republic. The website is well-branded and consistent, with partnerships evident through linked rental and sales companies. Technically, the site is built on ASP.NET Web Forms with Telerik UI components and uses older jQuery libraries. It integrates Google Analytics and Facebook SDK for tracking and social engagement. The site is mobile-optimized and provides a good user experience, though some technical debt is noted due to outdated libraries and lack of modern security headers. From a security perspective, the site uses HTTPS but lacks several security headers and explicit cookie consent mechanisms. No WHOIS data is available, which reduces domain trustworthiness, though the website content and partner links suggest legitimacy. No explicit security or incident response policies are published, indicating room for improvement in compliance and transparency. Overall, vodackanavigace.cz is a functional, content-rich site serving a specialized audience with good business credibility but could enhance its security posture and privacy compliance to align with best practices.

L

Letní kina v ČR - Letňáky.cz

letnaky.cz

54

Letnaky.cz is a Czech Republic-based online portal providing the largest comprehensive overview of summer outdoor cinemas across the country, listing 494 venues with detailed programming information. The website targets cinema enthusiasts and the general public interested in outdoor cultural events. The business model is informational, focusing on content aggregation and event promotion without direct transactional services. The domain has been active since 2015, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Facebook SDK for social media features. Hosting is provided by a Czech hosting provider (Forpsi). The site shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data, but accessibility features are minimal. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. There are no forms or data collection mechanisms on the homepage, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, Letnaky.cz is a trustworthy and legitimate informational website with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

K

Kredance

kredance.cz

56

Kredance is a Czech cultural organization specializing in dance and movement arts, providing a variety of courses, workshops, artistic residencies, and cultural events. The website reflects a niche market position focused on arts education and community engagement within the Czech Republic. The digital infrastructure is built on WordPress with WooCommerce integration, indicating e-commerce capabilities for event ticketing or course registration. The site uses modern web technologies including jQuery, Swiper.js for sliders, and Google reCAPTCHA for bot protection, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with privacy and terms pages present, though cookie consent mechanisms are absent. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

P

PracevRegionu.cz - nabídky práce ve vašem regionu

pracevregionu.cz

43

PracevRegionu.cz is a Czech Republic regional job portal established in 2016, offering extensive job listings across multiple regions and municipalities. The platform targets both job seekers and employers, providing a marketplace for employment opportunities with over 155,000 job offers. The website is professionally designed with clear navigation and regional segmentation, supporting a focused business model of online job advertisement and regional employment facilitation. The business operates primarily in the Other industry sector, serving a small-sized market niche within the Czech Republic.

F

Accueil - Festival Salamandre

festival-salamandre.org

60

The Festival Salamandre website represents a nature festival event held in Switzerland, targeting a general audience interested in environmental and outdoor activities. The site is built on WordPress and uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, with tracking via Facebook Pixel and Plausible Analytics. The website is well-designed, mobile-optimized, and provides a good user experience with clear event information. However, the absence of visible contact information, privacy policy, and terms of service pages limits its compliance and trustworthiness. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and incident response contacts. WHOIS data is unavailable due to a malformed request, which reduces domain trust and legitimacy assessment. Overall, the site is functional and professional but could improve in compliance and security transparency.

L

Conseils pour aménager et entretenir le grenier

le-grenier.fr

32

Le-Grenier.fr is a small French informational website dedicated to providing detailed advice and guidance on attic (grenier) renovation, insulation, ventilation, structural assessment, pest prevention, and storage optimization. The site targets homeowners and individuals interested in improving or converting their attic spaces. The business model appears to be content-driven with external links to related health and domain services, likely for SEO or partnership purposes. Technically, the website uses a modern front-end stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization and clear navigation. However, there is no evidence of a CMS or advanced backend platform, suggesting a static or custom-built site. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie policies, which also impacts privacy compliance. The WHOIS data is unavailable, limiting trust and legitimacy verification. Overall, the site is functional and content-rich but requires improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

A

AVERIA LTD.

zdravi-lide.cz

64

Zdraví-lidé.cz is a Czech language health and lifestyle information portal operated by AVERIA LTD., a UK-based company. The website provides articles on health, fitness, technology related to health, and lifestyle tips targeting a general audience interested in wellness and related topics. The site is part of a broader network of news and information portals managed by AVERIA LTD., indicating a niche content publishing business model focused on specialized verticals. Technically, the website is built on WordPress using the Elementor page builder, with modern web technologies such as jQuery and Google Tag Manager integrated for analytics and marketing. The site demonstrates good digital maturity with SEO optimization, structured data, and mobile responsiveness. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit incident response information. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and business information appear professional and trustworthy. Overall, the site presents a moderate risk profile with room for improvement in security and transparency.

C

CAB

biopaysdelaloire.fr

10

CAB (Coordination Agrobiologique des Pays de la Loire) is a regional non-profit organization dedicated to supporting and developing organic agriculture in the Pays de la Loire region of France. The organization provides technical assistance to organic farms, develops organic production sectors, and supports local authorities in their organic initiatives. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on organic agriculture and related activities. Technically, the site is built on WordPress with Elementor, uses modern JavaScript libraries like Swiper.js, and integrates Matomo for analytics, indicating a moderate to advanced digital infrastructure. Security-wise, the site enforces HTTPS, implements standard security headers, and provides cookie consent mechanisms, demonstrating good security hygiene. However, there is no explicit security policy or vulnerability disclosure page, which could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though WHOIS data is privacy-protected, limiting domain registration transparency.

B

Bio en Normandie

bio-normandie.org

39

Bio en Normandie is a well-established non-profit association founded in 2003, dedicated to supporting and promoting organic agriculture in the Normandy region of France. The website serves as an information hub for organic producers, consumers, and local actors, offering resources such as a directory of producers, events, training, and advocacy. The organization positions itself as a regional leader in organic agriculture with a focus on local, autonomous, and equitable bio practices. Technically, the website is built on WordPress using popular plugins like Elementor and Yoast SEO, hosted on Infomaniak servers, and demonstrates good digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and serves its community effectively.

R

Réseau GAB - FRAB

agrobio-bretagne.org

53

Réseau GAB - FRAB is a well-established regional network dedicated to promoting and supporting organic agriculture in Brittany, France. With nearly 40 years of experience, it serves as a key reference for organic farmers, offering technical advice, training, advocacy, and development of organic farming sectors. The website reflects a professional and consistent brand presence, targeting organic farmers, local communities, and stakeholders in the organic agriculture sector. Technically, the site is built on WordPress with modern libraries and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and no obvious vulnerabilities, though some security headers could be improved. WHOIS data is unavailable, which slightly reduces trust but the overall site content and structure support legitimacy.

The website www.jadopteunprojet.com/challenge is currently inaccessible due to a bot detection challenge page that blocks direct content access. This page is designed to verify human visitors and prevent automated access, likely implemented via a third-party service (BunkerWeb). Due to this, no meaningful business content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain returned no registration data, indicating either a privacy-protected registration or an unregistered domain, which raises concerns about legitimacy and trustworthiness. The technical infrastructure appears minimal with basic JavaScript and CSS used solely for the challenge page. No security headers or SSL configuration details are available from the provided data. Overall, the site’s security posture cannot be fully assessed, and the lack of accessible business information limits credibility assessment.

The website gestmax.fr is currently inaccessible, returning a 503 Service Unavailable error indicating no server is available to handle requests. This prevents any meaningful content, metadata, or security analysis. The domain is registered since 2007 with GANDI, showing a long-term registration and active status, which supports legitimacy. However, the lack of accessible content and absence of privacy, cookie, or terms policies limits trust and compliance evaluation. No contact information or business details are available from the site content. The technical infrastructure cannot be assessed beyond the registrar data. Security posture is unknown due to lack of accessible content and security headers. Overall, the site appears inactive or down, resulting in a very low AI score and high risk for users seeking information or services.

S

salon NATURALLY Paris

salon-naturally.fr

44

Salon NATURALLY Paris is an established event organizer specializing in organic and wellness trade shows held in Paris. The website promotes the 21st edition of the event scheduled for June 6-9, 2025, at Paris Expo Porte de Versailles. The business targets consumers and professionals interested in eco-friendly, organic, and well-being products and services. The site offers exhibitor information, conference programs, and practical visitor details, positioning itself as a key player in the organic event market in France. Technically, the website is built on WordPress using Elementor, with integrations for Google Analytics, Facebook Pixel, and advertising networks like Google Adsense. Hosting is provided by Infomaniak, a reputable French hosting provider. The site demonstrates good SEO practices with structured data and Open Graph metadata, and it is mobile-optimized with a responsive design. From a security perspective, the site enforces HTTPS, includes standard security headers, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy or incident response contact information. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's business claims, indicating legitimacy. Overall, the website presents a professional and trustworthy online presence for the Salon NATURALLY event, with moderate to good technical and security maturity. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance trust and compliance.

S

SPAS Organisation

salon-vivreautrement.com

48

Salon Vivre Autrement is a well-established French event organizer specializing in ethical and bio trade fairs, with a history dating back to 2007. The website promotes the upcoming 37th edition of their event, targeting consumers interested in sustainable, organic, and eco-friendly products. The business model centers on organizing exhibitions, providing exhibitor services, and offering visitor programming including workshops and conferences. The site demonstrates a solid market position with a large expected visitor and exhibitor base. Technically, the website is built on WordPress with modern plugins and frameworks, hosted on Infomaniak, and optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site is professional, trustworthy, and safe for general audiences.

S

SPAS Organisation

salon-medecinedouce.com

46

The website www.salon-medecinedouce.com serves as an event platform for wellness and natural medicine salons organized by SPAS Organisation in France. It promotes two major events scheduled in Paris and Lyon in early 2026, targeting individuals interested in natural health, complementary medicine, and wellness. The site provides event information, links to city-specific pages, and a program of conferences aligned with current wellness trends. The business operates as a niche event organizer with a focus on natural health sectors, leveraging its association with SPAS Organisation and industry bodies like UNIMEV to establish credibility. Technically, the website is built on WordPress with Elementor and uses modern SEO and analytics tools such as Yoast SEO, Google Analytics via MonsterInsights, and Facebook Pixel. It employs cookie consent management through Axeptio SDK, indicating GDPR compliance. The site is mobile-optimized with good design quality and moderate performance. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced. From a security and compliance perspective, the site lacks explicit security policies or incident response information, and no direct contact details are provided on the main page, which could impact user trust. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy, although the professional site and association with SPAS Organisation mitigate this risk somewhat. Overall, the website is a well-maintained, professional platform for wellness event promotion with good technical and privacy compliance. Strategic improvements in security transparency, contact information availability, and WHOIS data clarity would enhance trust and compliance.

B

Bon Plan Bio

bonplanbio.fr

38

Bon Plan Bio is a French regional non-profit project providing an interactive map to locate local organic products and producers across several French regions. The website serves consumers seeking bio local products and supports organic farmers by promoting their points of sale. The project is supported by multiple regional organic agriculture groups, enhancing its credibility and regional reach. Technically, the site is built on WordPress using common plugins for sliders, cookie consent, and popups, hosted by OVH, a reputable provider. The site is mobile-optimized and uses Matomo analytics for privacy-friendly tracking. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and well-aligned with its mission.

S

Salon Respire La Vie

respirelavie.fr

45

Salon Respire La Vie is a French event organizer specializing in eco-friendly, organic, wellness, and healthy habitat exhibitions, primarily active in Rennes. The website promotes upcoming events with significant exhibitor and visitor numbers, targeting environmentally conscious consumers. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and advertising tools while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS and no evident vulnerabilities, though additional security headers and policies could enhance protection. The absence of WHOIS data is a concern for domain legitimacy verification but does not currently impact the operational business presence. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

The domain tplj.si is registered since 2019 under the registrar Arnes and currently points to Sedo Parking name servers, indicating it is a parked domain rather than an active business website. The website content is inaccessible, displaying only a placeholder message with no metadata, forms, or business information. This limits the ability to assess the business operations, technical infrastructure, or security posture. The lack of HTTPS, security headers, privacy policies, and contact information further reduces the trustworthiness and credibility of the site. Overall, the domain appears inactive or reserved without an operational website presence.