Security Directory

F

Fondation Lemarchand

fondationlemarchand.org

55

Fondation Lemarchand is a French non-profit foundation dedicated to supporting associative projects focused on nature preservation and social aid, particularly for children in social care. Established in 2017, it has supported over 874 projects and 364 associations, positioning itself as a reputable actor in the non-profit environmental and social sector. The website provides comprehensive information about its mission, projects, and partner associations, targeting donors, associations, and the general public interested in environmental and social causes. Technically, the site uses a moderate tech stack including jQuery, Modernizr, Google Maps API, and YouTube embeds, hosted by OVH sas. The site is mobile-optimized with good navigation and content quality.

R

Réseau Canopé / eTwinning France

etwinning.fr

62

eTwinning.fr is a professionally maintained educational support website operated under the auspices of Réseau Canopé and linked to the French Ministry of Education and Erasmus+. It serves as a community and resource hub for European schools and teachers to collaborate on educational projects. The site offers training, project management tools, and recognition programs to enhance educational collaboration across Europe. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the site’s official affiliations and professional presentation indicate legitimacy. Overall, the site is a high-quality, trustworthy resource for its target audience.

E

E-commerce + Print on Demand

tpopsite.com

69

TPOP is a French-based e-commerce platform specializing in print-on-demand services with a strong emphasis on eco-friendly and local production. The platform enables entrepreneurs and small to medium-sized businesses to quickly create online stores without upfront inventory costs, integrating easily with popular marketplaces and CMS platforms like Shopify, Etsy, and WooCommerce. The website demonstrates a mature digital presence with multilingual support, rich multimedia content, and a user-friendly interface designed for rapid store setup and product customization. Technically, the site employs modern web technologies including Bootstrap, Weglot for translations, and analytics tools such as Google Analytics and Gleap for user feedback. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit HTTP security headers are not evident in the provided data. The absence of WHOIS registration details is a notable gap, reducing domain trustworthiness, but the presence of customer testimonials, Trustpilot ratings, and active social media accounts support the legitimacy of the business. Overall, TPOP presents as a professional and trustworthy e-commerce solution with room for improvement in transparency of security policies and contact information.

B

Bureau of Reclamation

usbr.gov

69

The Bureau of Reclamation is a longstanding U.S. government agency under the Department of the Interior, responsible for managing water and power resources primarily in the Western United States. The website serves as a comprehensive portal for information on dams, powerplants, water projects, environmental resources, and public recreation. It targets government entities, water resource managers, researchers, and the general public. The agency operates with an enterprise-level scale and maintains a strong market position as the primary federal water management authority in its region. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript, jQuery, and analytics tools such as Google Tag Manager and DigitalGov Universal-Federated-Analytics. The site is mobile-optimized, accessible, and well-structured with clear navigation and good SEO practices. Hosting appears to be government-managed, ensuring reliability and compliance with federal standards. From a security perspective, the site enforces HTTPS and publishes a vulnerability disclosure policy, indicating a proactive security posture. However, explicit security headers are not clearly present, and there is no cookie consent mechanism, which could be improved for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration information. Overall, the website is professional, trustworthy, and provides valuable public services. Strategic improvements in privacy compliance and security header implementation would enhance its security posture and regulatory adherence.

D

Département de la Charente-Maritime

charente-maritime.fr

65

The website la.charente-maritime.fr serves as the official online presence for the Département de la Charente-Maritime, a governmental entity in France. It provides extensive information about departmental services, elected officials, public projects, social services, tourism, and cultural activities. The site targets residents, visitors, and stakeholders within the Charente-Maritime region, offering a broad range of public sector services and information. The business model is that of a public sector government service provider, with a large scope and audience. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Google Fonts, Google Maps API, and Matomo Analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of cookie consent mechanisms indicates attention to privacy compliance, though an explicit privacy policy page was not detected in the provided content. From a security perspective, the site enforces HTTPS and uses modern JavaScript libraries, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual but may be due to AFNIC registry policies or privacy protections. Overall, the site appears trustworthy and professional, consistent with an official government entity. The overall risk is low, but improvements are recommended in publishing comprehensive privacy and security policies, implementing security headers, and providing clear contact information for security incidents to enhance trust and compliance.

Tendre & Plus is a French brand specializing in quality meat products and providing consumers with easy and quick meal ideas. The brand operates under the Elivia group, itself a subsidiary of the Terrena cooperative, positioning it well within the regional meat retail sector. The website offers a variety of recipes, product information, and customer engagement through a club offering discounts. Technically, the site is built on Drupal 8 with modern JavaScript libraries and includes cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, while HTTPS and cookie consent are implemented, the absence of explicit security headers and incident response contacts suggests room for improvement. The missing WHOIS data for the domain is a concern for domain legitimacy but does not detract from the overall trustworthiness given the brand's established presence and parent company backing. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration status to improve trust and compliance.

T

Technické služby města Litoměřice

tsmlt.cz

60

Technické služby města Litoměřice is a municipal contributory organization established to provide essential technical and communal services to the city of Litoměřice, Czech Republic. Founded in 1995, the organization focuses on maintaining city cleanliness, public green spaces, infrastructure repairs, and other city maintenance tasks. The website reflects a well-established local government service provider with a clear mission and target audience consisting primarily of city residents and local stakeholders. The digital presence is professional, with good content quality and clear navigation, supporting the organization's public service role. From a technical perspective, the website employs a traditional tech stack including jQuery, Google Fonts, and Google Tag Manager for analytics. While the site is mobile-optimized and performs moderately well, the use of an outdated jQuery version suggests some technical debt and potential security risks. The hosting is managed through WEDOS, a Czech hosting provider, consistent with the domain registration data. Security posture is moderate; the site uses HTTPS and has implemented cookie consent mechanisms in compliance with GDPR. However, no explicit security headers or vulnerability disclosure policies are present, and the older JavaScript libraries could expose the site to known vulnerabilities. Contact information and a data protection officer are clearly provided, indicating some compliance with data protection regulations. Overall, the site is trustworthy but could benefit from enhanced security measures and updated technical components. The overall risk assessment is low to moderate, with no critical security issues detected. Strategic recommendations include updating JavaScript libraries, implementing security headers, formalizing security policies, and enhancing privacy documentation to improve compliance and trust. These steps will strengthen the organization's digital security posture and better protect user data while maintaining a professional and accessible web presence.

G

GLOBDATA a.s.

parksimply.cz

52

ParkSimply is a Czech Republic-based mobile and online parking payment service operated by GLOBDATA a.s. The platform enables users to conveniently pay for parking via smartphone applications, eliminating the need for physical parking meters and tickets. The service is well established with presence in multiple Czech cities and municipalities, supported by official app store listings and a dedicated website. The business targets drivers and vehicle owners seeking a streamlined parking payment experience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly interface. However, some modernization opportunities exist, such as updating jQuery and enhancing accessibility. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy and terms of service present, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and functional with room for security and compliance improvements.

S

Společnost bratří Čapků

bratri-capkove.cz

48

Společnost bratří Čapků is a well-established Czech non-profit cultural society dedicated to promoting the legacy and works of the Čapek brothers. Founded in 1947, it serves a niche audience of literary enthusiasts, researchers, and the general public interested in Czech literature and culture. The website provides information about the society's history, membership, events, and contact details, reflecting a focused cultural mission. Technically, the site is built on Joomla CMS with common JavaScript libraries, offering a moderate performance and good mobile responsiveness. However, it lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but does not implement security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security measures.

Galerie Cesty ke světlu is a Czech art gallery founded in 1994 by PhDr. Ing. Zdeněk Hajný, focusing on psychological and spiritual art. The website provides detailed information about exhibitions, events, and sales of art-related merchandise such as calendars and diaries. The target audience includes art enthusiasts and those interested in spiritual and psychological themes. The gallery maintains a niche position in the cultural sector within the Czech Republic. Technically, the website uses a combination of older and modern web technologies including Foundation CSS and jQuery 1.8, with multimedia features like jPlayer for audio. While the site is accessible and well-structured, it lacks modern security headers and uses outdated libraries, which could pose risks. No privacy or cookie policies are present, indicating compliance gaps. The domain WHOIS data is missing, raising concerns about domain legitimacy. Contact information is clearly provided, including email, phone, and physical address, along with social media presence on Facebook.

M

MĚSTO TŘEBÍČ

trebiczije.cz

47

The website trebiczije.cz serves as an official informational portal for the city of Třebíč, Czech Republic, targeting citizens, entrepreneurs, and tourists. It provides comprehensive information about living, business opportunities, tourism, and community events, supported by a dedicated incoming team. The site positions itself as a regional hub for local development and engagement, reflecting a medium-sized government entity with a focus on sustainable urban growth and community well-being. Technically, the site employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and integrates analytics tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. It features responsive design and basic accessibility, with cookie consent mechanisms aligned with GDPR requirements. However, the absence of detected security headers and incomplete WHOIS data indicate areas for improvement in security and domain transparency. From a security perspective, the site benefits from HTTPS encryption and client-side form validation but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The missing WHOIS data raises concerns about domain registration legitimacy, although the website content and contact information strongly suggest it is an official municipal resource. Overall, the website is professionally designed and functional, with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and resolving WHOIS data visibility to improve trust and compliance. These steps will strengthen the site's security posture and business credibility while maintaining its role as a vital community resource.

P

Provence Energie Citoyenne

provence-energie-citoyenne.fr

43

Provence Energie Citoyenne is a small French citizen cooperative focused on renewable energy, particularly hydroelectric power generation at the Marie-Thérèse micro-plant. The organization emphasizes community involvement, ecological preservation, and sustainable energy production. The website serves as an information hub with news, events, and educational content targeted at local citizens and environmental advocates. Technically, the site is built on WordPress with modern plugins for SEO, social sharing, and event management, showing moderate to good performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and active content. Overall, the site is trustworthy and well-positioned as a local energy cooperative.

Elephant Orchestra, a.s. is a Czech Republic-based digital marketing company specializing in lead generation, email marketing, mobile marketing, telemarketing, affiliate programs, and discount portals. With over 12 years of market presence and recognition such as Deloitte's Technology Fast 50 CE Rising Star in 2011, the company serves a broad range of business clients aiming to enhance their online customer acquisition and marketing effectiveness. The company operates multiple projects and is part of the Klik.cz & ePojisteni.cz s.r.o group, indicating a strong partnership ecosystem. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Bootstrap, and various JavaScript libraries for UI and performance enhancements. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some security headers are missing, and WHOIS data is unavailable, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enabled and no visible vulnerabilities in the content. Privacy compliance is good with clear policies and consent banners. The absence of WHOIS registration data is a notable risk factor, but the website content and business information suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from improved security headers and domain registration transparency. Strategic recommendations include enhancing security headers, conducting regular security audits of third-party scripts, improving accessibility, and verifying domain registration details to strengthen trust and compliance.

C

Commerce Équitable France

commercequitable.org

59

Commerce Équitable France is a French non-profit collective representing actors in the fair trade sector. The organization focuses on advocacy, education, campaigns, and member services to promote fair trade practices nationally. The website is well-structured, professionally designed, and targets both fair trade stakeholders and the general public interested in ethical commerce. The digital infrastructure is based on WordPress with modern plugins and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, some security headers are missing and WHOIS data is privacy-protected, which slightly reduces transparency. Overall, the website is trustworthy and professionally maintained, supporting the organization's mission effectively.

U

Urbense

urbense.fr

51

Urbense is a Paris-based company specializing in urban planning, architecture, real estate development, and engineering consulting. The company operates through multiple subsidiaries, each focusing on specific aspects such as urban development, architecture, and engineering. The website presents a professional image with clear descriptions of services and a focus on quality and expertise. The target audience includes urban planners, real estate developers, public sector entities, and architects. The business model is service-oriented, providing consulting and project management across various sectors including offices, hospitality, housing, commerce, schools, and public facilities. Technically, the website is built on WordPress and uses modern web technologies including Modernizr and Google Analytics. The site is mobile optimized with good design quality and navigation clarity. Performance is moderate, and SEO is basic but adequate. Security posture is good with HTTPS enforced and no visible vulnerabilities, although security headers are missing and no explicit security policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. The WHOIS data is missing, which raises concerns about domain registration legitimacy. However, the professional presentation, multiple related company sites, and social media presence support the business credibility. No adult or questionable content is present, making the site safe for general audiences. Overall, the website scores well on business credibility and security but should improve privacy compliance and domain registration transparency.

K

KPMG Česká republika, s.r.o.

kpmg-eventy.cz

60

KPMG Česká republika, s.r.o. operates a professional website dedicated to conferences, seminars, and training events primarily in finance, tax, law, and HR sectors. The site serves as an event portal for KPMG's Czech branch, a subsidiary of the global KPMG International Limited. The business model focuses on professional services and educational offerings targeting corporate clients and professionals in the Czech Republic. The website content is well-structured, professionally branded, and provides clear event information and links to related KPMG resources. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight Tag, alongside a cookie consent management system ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details are explicitly detectable. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is due to CZ domain registry privacy policies and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen the security posture and user trust.

C

Contexte Architecture

contexte-archi.fr

51

Contexte Architecture is a small architecture agency based in Versailles, France, specializing in the design and supervision of various construction projects including residential, commercial, hospitality, and public facilities. The company is recognized for its high standards and quality of work, targeting clients seeking ambitious and harmonious urban projects. The website is built on WordPress with modern front-end technologies and includes Google Analytics for visitor tracking. While the site is professionally designed and mobile-optimized, it lacks some security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and social media presence support its legitimacy. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices.

SAFE Architecture Urbanisme is a small French architecture and urbanism agency founded in 2020 by Alexandre Sfintesco and Kévin-Antoine Eloy. It operates as part of the Urbense group, focusing on integrated urban planning and real estate development projects. The website presents a professional image with detailed descriptions of the agency, its projects, and team members, targeting clients and professionals in the real estate and urban planning sectors. Technically, the site is built on WordPress, uses modern web technologies, and includes Google Analytics for visitor tracking. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security-wise, HTTPS is enforced, but the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data limits domain legitimacy verification, but the overall professional presentation suggests a legitimate business. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, and publishing a comprehensive privacy policy.

A

AMALA Partners

amala-partners.com

59

AMALA Partners is an independent French advisory firm specializing in mergers and acquisitions, financing, and consulting for private equity investors and entrepreneurs. The company positions itself as a trusted partner to help clients achieve strategic growth, financing, and liquidity objectives. The website content is professionally presented in French, targeting a medium-sized business audience primarily in the finance and technology sectors. The firm showcases recent transactions and press releases, reinforcing its market presence and expertise. Technically, the website is built on WordPress with common libraries such as jQuery and Modernizr, and it employs Google Analytics for visitor tracking. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, indicating a modern and secure infrastructure. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, no major vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a notable anomaly that raises questions about domain registration legitimacy. Despite this, the website's professional appearance and active content suggest legitimate business operations. Overall, the security posture is good but could benefit from additional policies and technical controls. The overall risk assessment is moderate with recommendations to verify domain registration status, implement security headers, add cookie consent for GDPR compliance, and publish clear security and incident response policies to strengthen trust and compliance.

L

Little Stories

littlestories.fr

45

Little Stories is a French creative agency focused on reimagining corporate storytelling and brand design with an emphasis on sustainability, equity, and social impact. The agency targets businesses seeking to enhance their brand image and societal contribution through innovative design and narrative techniques. The website is professionally designed, content-rich, and well-branded, reflecting a small but focused agency presence. Technically, the website is built on WordPress with modern frontend technologies such as Modernizr and lazy loading for images. It uses Google Analytics for user tracking and is served over HTTPS with good SSL configuration. However, some security best practices like security headers and privacy/cookie policies are missing or not easily discoverable, which could be improved to enhance compliance and security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional contact information and active social media presence support the site's credibility. Overall, the site scores well on content quality and business credibility but could improve in privacy compliance and security headers. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response and vulnerability disclosure information, and enhancing accessibility features to improve compliance and user trust.

The website territoires-emplois.org represents a collaborative initiative by ADEME and Réseau Action Climat France to provide a specialized tool (TETE) for estimating job creation through ecological transition policies at various territorial levels in France. The site offers the tool as a downloadable Excel file accompanied by guides and training resources, targeting local authorities, associations, and other stakeholders involved in climate-energy planning. The business model is primarily non-commercial, focusing on free tool distribution with optional paid training. Technically, the site is built on WordPress, using standard web technologies and hosted by OVH. While the site is accessible and professionally designed with good content relevance and navigation, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Tracking is implemented via Google Analytics and Tag Manager with moderate user tracking. Overall, the domain registration is consistent and legitimate, supporting the site's credibility.

É

Énergie Solidaire

energie-solidaire.org

59

Énergie Solidaire is a French non-profit organization dedicated to combating energy poverty through innovative fundraising and support for local projects. The website presents a clear mission focused on social impact, with multiple donation options and project showcases. The organization targets a broad audience including citizens, professionals, and energy consumers. Technically, the site is built on WordPress with performance optimizations such as WP Rocket and lazy loading, and it uses common libraries like jQuery and Modernizr. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which slightly reduces trust but the website's content and social media presence support legitimacy.

R

Réseau Action Climat

reseauactionclimat.org

59

Réseau Action Climat is a French non-profit federation of 27 associations dedicated to combating climate change and promoting ecological transition. The organization provides advocacy, educational resources, and networking services to its members and the public. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and GDPR-compliant cookie management. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust. Overall, the domain registration and hosting details support the legitimacy and stability of the organization. The site is safe for general audiences and does not contain any adult or questionable content.

The Observatoire Europe Climat website is a non-profit transparency platform operated by Réseau Action Climat, focused on monitoring and evaluating the climate commitments of European elected officials and the French government in Europe. The site provides legislative tracking and ratings to promote accountability in climate policy. The business operates primarily in the energy and transportation sectors within the non-profit industry, targeting citizens interested in European climate governance. The domain is registered since 2019, consistent with the organization's timeline. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as Vue.js and Axios, with Google Analytics and Google Tag Manager for tracking. The site is hosted by OVH and enforces HTTPS with redirects, indicating a baseline of security. Performance and mobile optimization are moderate to good, though accessibility features are basic. SEO is adequately addressed with meta tags and structured data. From a security perspective, the site enforces HTTPS but lacks important security headers like Content-Security-Policy and X-Frame-Options. No forms or input fields were detected, reducing attack surface, but no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No contact information or vulnerability disclosure policies are provided, limiting transparency. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in security posture and privacy compliance. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving accessibility and contact transparency.

C

Collectif Transition Citoyenne

pactetransition-legislatives.org

46

The website pactetransition-legislatives.org is a French non-profit civic engagement platform operated by the Collectif Transition Citoyenne. It focuses on ecological and social transition issues relevant to the 2022 legislative elections in France. The platform provides detailed information on seven key transition challenges, maps interpellations of legislative candidates by citizens and associations, and encourages voter engagement. The site is well-structured, content-rich, and targets French citizens interested in environmental and social policy. Technically, it is built on WordPress, hosted by OVH sas, and uses modern web technologies including Leaflet.js for mapping and Google Analytics for tracking. Security posture is adequate with HTTPS enabled and domain registration consistent and transparent, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No direct contact information or incident response policies are visible. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Eolise

eolise.fr

52

Eolise is a French independent company specializing in the development of local wind and photovoltaic energy projects primarily in the Poitou region. Founded in 2016, it operates with a small team of 12 employees possessing complementary skills in energy, environment, agriculture, and communication. The company emphasizes local partnerships and sustainable development, positioning itself as a regional leader in renewable energy project development. The website reflects a professional and consistent brand image with clear information about projects, team, and local engagement. Technically, the website is built on WordPress and hosted by OVH, utilizing modern web technologies including HTML5, CSS3, JavaScript, and libraries such as Modernizr and Axios. It incorporates Google Analytics for visitor tracking with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and includes cookie consent for privacy compliance. However, it lacks published formal security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection masking, indicating legitimacy. Overall, the website presents a trustworthy and professional digital presence with moderate to good technical and security posture. Strategic improvements could include publishing detailed security and incident response policies, enhancing accessibility, and adding terms of service to strengthen compliance and user trust.

M

McRAI s.r.o.

mcrai.eu

54

McRAI s.r.o. is a Czech digital agency specializing in custom web development, e-commerce platforms, digital marketing campaigns, and AI integrations. With over 16 years of experience and more than 500 completed projects, they serve businesses primarily in the Czech Republic, focusing on helping brands grow their online presence. Their services include programming, marketing, and ongoing support, positioning them as a comprehensive digital partner. Technically, the website uses modern JavaScript libraries such as jQuery and Modernizr, integrates live chat via Smartsupp, and employs cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of WHOIS data and security headers suggests areas for improvement in transparency and security posture. Overall, the website is professional and trustworthy, but the lack of domain registration details and explicit security policies introduces some risk. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

The website www.trebicnakole.cz serves as a comprehensive cycling portal for the city of Třebíč, Czech Republic. It provides valuable information for cyclists including transport safety, tourism routes, equipment advice, and local cycling services. The site is supported by regional government and partner organizations, positioning it as a trusted local resource for cycling enthusiasts and commuters. The content is well-structured, professionally designed, and targeted primarily at local cyclists and tourists interested in exploring Třebíč by bike. From a technical perspective, the site employs a traditional web stack with jQuery, Modernizr, and various UI libraries such as Fancybox and Remodal. Google Tag Manager and CookieScript are used for analytics and cookie consent management, indicating a moderate level of digital maturity. The site is mobile optimized and SEO-friendly, though some technologies like jQuery are outdated and could benefit from modernization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. The cookie consent mechanism is robust and GDPR compliant, with detailed cookie categorization and user controls. However, the absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were found, but updating libraries and adding security headers would improve security. Overall, the website is a valuable community resource with good content quality and privacy compliance. The main risk lies in the lack of domain registration transparency and some technical debt. Strategic recommendations include verifying domain registration, upgrading outdated libraries, implementing security headers, and enhancing contact information availability to strengthen trust and security posture.

Městské kulturní středisko Třebíč operates as a municipal cultural center providing comprehensive information on cultural events such as cinema, theater, concerts, and exhibitions in the city of Třebíč. The website serves as a centralized platform for residents and visitors to access event schedules, ticket sales, and cultural news, positioning itself as a key local cultural institution. The business model focuses on event promotion and community engagement through digital channels. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Fancybox, alongside Google Analytics and Tag Manager for tracking. Cookie consent is managed via CookieScript, ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain legitimacy verification, though the website content and external references suggest a legitimate municipal entity. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

Thibaut Caroli is a freelance digital designer and front-end developer specializing in website conception, design, and development, primarily serving environmental protection and climate change awareness associations. The website serves as a professional portfolio showcasing projects and providing contact information. The business model is focused on freelance services with a niche market position in non-profit environmental sectors. The technical infrastructure is based on WordPress CMS with custom themes, leveraging standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and FontAwesome. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The website demonstrates good design quality, mobile optimization, and user experience, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy measures.

České modelky s.r.o. operates a well-established modeling and hostess agency website primarily serving Slovakia and the Czech Republic. The company offers a wide range of services including hostesses, photo modeling, fashion shows, casting organization, and advertising services. The website targets models, event organizers, and advertisers, positioning itself as a regional leader with a large database of models and extensive service offerings. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Fresco.js, and Google Analytics for tracking. Hosting is provided by Wedos, a reputable provider. Security posture is moderate with HTTPS enabled but lacking several important security headers. Privacy compliance is limited due to missing explicit privacy and terms of service pages, though a cookie consent mechanism is present. Contact information is clearly provided, and social media presence is active on Facebook, LinkedIn, and YouTube. Overall, the website is professional and functional but could improve in security and compliance areas.

V

Varhan

varhan.cz

43

Varhan.cz is a small-scale artist portfolio website dedicated to Varhan O. Bauer, a composer and conductor based in the Czech Republic. The site showcases his concerts, projects including movies, advertisements, and compositions, as well as information about the orchestra he is associated with. The business model is focused on artist promotion and audience engagement within a niche cultural segment. The website is built on WordPress, leveraging common plugins such as WPML for multilingual support and MetaSlider for image slideshows. The technical infrastructure is moderate with standard performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and CAPTCHA protection on forms, but lacks advanced security headers and complete analytics configuration. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is safe for general audiences and presents a professional but modest online presence.

B

bnt attorneys in CEE

bnt.eu

60

bnt attorneys in CEE is a leading international business law firm specializing in providing comprehensive legal services across Central and Eastern Europe. Their expertise spans insolvency, taxes, mergers and acquisitions, real estate law, compliance, and other key business law areas. The firm operates multiple offices in the region's capital cities, managed by local partners, emphasizing a strong regional presence combined with international experience. Their website reflects a professional and consistent brand image, targeting international businesses seeking legal guidance in the CEE region. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and enhanced by SEO tools like Yoast. It integrates Google Analytics and Tag Manager for analytics and marketing purposes. The site is mobile-optimized and demonstrates good performance and accessibility standards, though some accessibility features could be improved. Hosting is provided by Webglobe, a reputable registrar and hosting provider. From a security perspective, the site employs HTTPS with good SSL configuration and secure form handling. Cookie consent mechanisms are in place, and privacy policies comply with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility to further strengthen trust and compliance.

České modelky s.r.o. is a Czech Republic based modeling and hostess agency established in 2006, offering a wide range of services including hostesses, photo modeling, fashion shows, casting organization, and photo competitions. The company maintains a large database of over 22,000 models and operates multiple partner sites across Europe. The website is professionally designed with good content quality and moderate technical implementation, leveraging technologies such as jQuery, Google Analytics, and Google reCAPTCHA. Security posture is adequate with HTTPS enabled but lacks several important security headers. Privacy compliance is limited due to absence of explicit privacy and terms of service pages, though cookie consent is implemented. Overall, the business appears legitimate and well-established with a moderate risk profile.

Pražská vodohospodářská společnost a.s. is a Czech water utility company serving the Prague region, providing water supply and water management services. The company has an established market presence since 1999 and targets both general consumers and municipal customers. The website reflects a professional and consistent brand image with clear contact information and relevant business content. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Modernizr, providing a responsive and user-friendly experience. However, the site lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No signs of tracking or analytics tools were detected, indicating minimal user data collection. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices.

G

Gérontopôle Autonomie Longévité des Pays de la Loire

gerontopole-paysdelaloire.fr

57

The Gérontopôle Autonomie Longévité des Pays de la Loire is a regional non-profit organization dedicated to improving the quality of life for elderly people in the Pays de la Loire region of France. It acts as a network of stakeholders focused on aging well, offering services such as training, research, economic development in the silver economy, and support for territorial policies. The website is professionally designed using Drupal CMS and integrates modern technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. However, the absence of WHOIS data raises concerns about domain registration status, which should be verified to ensure legitimacy. Security posture is generally good with HTTPS and secure forms, but could be improved by adding security headers and publishing incident response policies. Overall, the site presents a trustworthy and professional digital presence for a specialized healthcare non-profit.

L

Lymphatic Education & Research Network

lymphaticnetwork.org

50

The Lymphatic Education & Research Network (LE&RN) is a well-established nonprofit organization dedicated to fighting lymphedema and lymphatic diseases through education, research funding, advocacy, and community support. The website serves as a comprehensive resource hub for patients, researchers, and healthcare professionals, offering access to educational materials, research grants, clinical trial information, and community engagement opportunities. LE&RN holds a strong market position as a trusted leader in lymphatic disease awareness and research advocacy within the healthcare nonprofit sector. Technically, the website employs a mature technology stack including jQuery, Modernizr, Font Awesome, Google Analytics, and Google Tag Manager, hosted via GoDaddy with domain control nameservers. The site is mobile optimized with good SEO practices and moderate performance. However, it lacks some modern security headers and a cookie consent mechanism, which are recommended for enhanced privacy compliance and security. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It integrates third-party analytics and fundraising tools responsibly but could improve by implementing additional security headers and publishing formal security policies. The WHOIS data confirms domain legitimacy and consistency with the organization's history, supporting a high trustworthiness rating. Overall, LE&RN's website is professional, content-rich, and trustworthy, serving its audience effectively. Strategic improvements in privacy compliance and security posture would further strengthen its digital maturity and user trust.

Nartes.cz is the official website for Nartes, a brand of high-quality artesian spring water sourced from a protected underground source in the Nízký Jeseník foothills of the Czech Republic. The company, NUTREND D.S., a.s., markets this water as suitable for infant nutrition and offers various packaging options. The website positions Nartes as a premium water brand with exclusive access to a rare artesian source, supported by hydrogeologist endorsements and distribution partnerships with major retailers. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, Foundation, Owl Carousel, and Google Analytics for tracking. The site is mobile-optimized and well-structured, though it lacks a CMS and some advanced accessibility features. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and improving GDPR compliance to enhance trust and security posture.

ClubDomCash.com is a niche adult entertainment website specializing in FemDom video content, operated by a female lifestyle Dominatrix. The business model centers around producing exclusive adult videos and affiliate marketing programs targeting a mature adult audience interested in FemDom themes. The website has been operational since 2006, indicating a stable market presence within its niche. Technically, the site uses legacy JavaScript libraries and basic web technologies with moderate mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks modern security headers and DNSSEC, and uses outdated libraries that could pose risks. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

G

Global Higher Education Alliance for the 21st Century

ghea21.org

62

The Global Higher Education Alliance for the 21st Century (GHEA21) is a recently established educational network focused on advancing access to liberal arts and sciences education globally, particularly for displaced and refugee learners. It builds on the legacy of the Open Society University Network and offers degree programs, certificates, fellowships, and global learning opportunities. The organization targets students, faculty, and academic institutions with a mission to prepare engaged global citizens. Technically, the website is built on a TerminalFour CMS platform, uses standard web technologies including jQuery, Modernizr, and Google Analytics, and is hosted and registered via Cloudflare. The site is moderately optimized for performance and mobile use, with good design and navigation clarity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy practices.

B

BoursoBank (ex-Boursorama Banque)

boursobank.com

70

BoursoBank, formerly known as Boursorama Banque, is a French online bank positioned as the least expensive bank for 17 years, offering a range of financial services including free bank cards, mortgage loans, life insurance, stock market services, and savings products. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Technically, the site uses modern JavaScript frameworks and fonts, ensuring a good user experience and accessibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be further investigated. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response information. Overall, the site presents a trustworthy and professional banking service with room for improvement in transparency and security disclosures.

S

STORMWARE s.r.o.

pohodove-erp.cz

53

STORMWARE s.r.o. operates the Pohodové ERP website promoting their POHODA E1 ERP system, a comprehensive business management software tailored for Czech SMEs. The company has a strong market presence with over 30 years of experience and a Microsoft partnership, offering a range of extensions and hosting services. Technically, the website is built on ASP.NET with modern JavaScript libraries and integrates Google Analytics and Maps APIs, reflecting a mature digital infrastructure. Security-wise, the site implements cookie consent and error logging but lacks visible HTTP security headers and published security policies, indicating room for improvement. Overall, the website is professional and trustworthy, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

S

STORMWARE s.r.o.

stormware.sk

67

STORMWARE s.r.o. is a well-established Slovak technology company specializing in economic and accounting software solutions, primarily through its flagship product POHODA. The company targets a broad audience ranging from individual entrepreneurs to large enterprises, offering software, mobile invoicing, business intelligence add-ons, and comprehensive customer support including training and e-commerce services. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to its market segment. Technically, the site is built on ASP.NET with modern JavaScript libraries and integrates major analytics and marketing tools while maintaining GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, CSP headers, and no evident vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent, indicating a legitimate and trustworthy business entity.

A

Andomark, LLC

brattyfootgirls.com

29

XBrats Femdom Videos operates as a niche adult entertainment platform specializing in femdom fetish video content. Founded in 2021, the company offers subscription-based and pay-per-view access to original HD videos, targeting an adult-only audience. The business leverages a third-party payment processor, Segpay.com, ensuring secure transactions and compliance with industry standards. The website presents a consistent brand image with clear navigation and mobile optimization, catering to its specialized market segment.

S

STORMWARE s.r.o.

stormware.cz

11

STORMWARE s.r.o. is a well-established Czech software company specializing in economic and accounting software solutions, primarily through its flagship product POHODA. The company targets entrepreneurs and medium to large enterprises, offering a comprehensive suite of products including payroll, tax, and mobile invoicing software. Their market position is strong within the Czech Republic, supported by extensive customer support, training, and a professional online presence. Technically, the website is built on ASP.NET with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, reflecting a mature security posture. However, the absence of WHOIS data limits domain trust verification. Overall, the site is professional, secure, and compliant with GDPR, making it a trustworthy platform for its users.

R

Regiontourist.cz

regiontourist.cz

50

Regiontourist.cz is a Czech Republic-based online tourism platform established in 2009, offering curated accommodation listings, travel experiences, and regional travel tips. The platform targets tourists and service providers in the hospitality sector, providing a marketplace and content hub for travel planning within the Czech Republic. The website demonstrates a good level of content quality, with clear navigation, structured data for SEO, and active social media integration. Technically, it uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Google Tag Manager, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which impacts trust and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

A

Výrobní systém Alokace

alokace.cz

41

The website www.alokace.cz presents a manufacturing and production management software system targeted primarily at Czech manufacturing companies. It offers comprehensive features including order management, production tracking, cooperation handling, returns, employee and warehouse management, and integrated accounting with EET support. The business model appears to be SaaS or online system access, catering to small manufacturing businesses. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information suggest a legitimate business. Security posture is moderate with recommendations to improve SSL configuration, security headers, and privacy compliance. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

D

Del Monte Foods Corporation II Inc.

delmontefoodservice.com

65

Del Monte Foodservice is a well-established B2B foodservice supplier offering a wide range of produce, broths, and snacks to professional foodservice customers. The company leverages its long history and brand recognition to maintain a strong market position. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to its target audience. Technically, the site is built on Drupal 9 with integrations of HubSpot forms and Google Analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence, though WHOIS data absence warrants further verification.

I

ij-t.cz

zabavne.online

46

Zábavně.online is a Czech Republic-based web application platform specializing in creating interactive educational games using QR codes and GPS navigation. The platform targets schools, families, and corporate teams, offering tools to build custom routes, questions, and competitions to engage users in a fun and informative manner. The business operates as a small entity with a clear focus on educational technology and marketing engagement. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and popular libraries like Modernizr and Owl Carousel, delivering a moderately performant and mobile-optimized experience. Security posture is moderate with HTTPS assumed but lacking explicit security headers and published privacy or cookie policies, which are critical for compliance and trust. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

P

PAN Foundation

panfoundation.org

61

PAN Foundation is a well-established non-profit organization dedicated to providing financial assistance, advocacy, and education to patients with life-threatening, chronic, and rare diseases. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization leverages modern web technologies including WordPress CMS, Google Tag Manager, Facebook Pixel, and Fundraise Up for fundraising, indicating a robust technical infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be enhanced for improved protection. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR considerations. Overall, the website demonstrates high professionalism and trustworthiness, supporting the organization's mission effectively.