Security Directory

The website www.shopuefa.com serves as the official UEFA National Team Football merchandise store, offering authentic UEFA and National Team kits, apparel, and related products to football fans. The site is professionally designed with consistent branding and targets football enthusiasts seeking official UEFA merchandise. Technically, the site employs modern web fonts, SVG graphics, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and has good SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, impacting overall trust. No adult or questionable content is present, making the site safe for general audiences.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for football fans, media, and stakeholders, offering news, live scores, video content, and detailed information about UEFA's competitions and initiatives. UEFA holds a leading position in European and global football, organizing prestigious tournaments such as the UEFA Champions League and UEFA EURO. The site targets a broad audience including football enthusiasts, clubs, and national associations. Technically, the website employs modern web technologies including React, integrates multiple analytics and marketing tools such as Google Analytics and OneTrust for cookie consent, and uses secure HTTPS protocols with strong security headers. The site is well-optimized for mobile devices and accessibility, providing a fast and user-friendly experience. From a security perspective, UEFA.com demonstrates good practices with HTTPS enforcement, security headers, and privacy compliance mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. The absence of WHOIS data for the domain is noted but does not detract from the site's legitimacy given the strong branding and official nature. Overall, UEFA.com presents a professional, secure, and trustworthy platform with excellent content quality and technical implementation. Strategic recommendations include enhancing transparency around security policies and incident response, publishing vulnerability disclosure details, and providing data protection officer contact information to further strengthen trust and compliance.

A

Accelerate Group Ltd t/a Webtrends Optimize

webtrends-optimize.com

65

Webtrends Optimize, operated by Accelerate Group Ltd, is a UK-based enterprise-grade SaaS platform specializing in website experimentation, AB testing, multivariate testing, and personalization to increase online conversions. The company positions itself as a market leader with a strong portfolio of services and a client base including major brands such as Microsoft, RS Components, Bupa, and Qantas. Their business model combines a powerful self-service platform with optional managed services and consulting, targeting businesses aiming to optimize digital experiences and conversion rates. The website content is professional, well-structured, and supported by strong trust signals including awards, case studies, and testimonials. Technically, the website uses modern JavaScript libraries including jQuery, integrates Google Analytics and Tag Manager, and employs secure HTTPS with enforced redirects. The site is mobile-optimized and SEO-friendly, hosted likely on a WordPress CMS platform. Security posture is good with HTTPS and no visible vulnerabilities, though HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The WHOIS data for the domain is missing, indicating either a non-registered domain or privacy protection, which slightly reduces trustworthiness. However, the professional presentation, external trust indicators, and consistent business information support the legitimacy of the site. Overall, the website demonstrates a mature digital presence with strong business credibility and technical implementation, though domain registration verification is recommended.

M

My Sport Session

mysportsession.com

56

My Sport Session is an online platform based in France that enables users to discover and book a wide variety of sports and leisure activities without subscription or commitment. The service emphasizes flexibility, local availability, and ease of booking, targeting a broad audience interested in physical activities and leisure. The website is professionally designed with a consistent brand presence and includes user testimonials and social media integration to build trust. Technically, the website leverages modern web technologies including React and Google Tag Manager, with asynchronous and deferred script loading to optimize performance. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses Google Tag Manager for analytics and marketing. There is a lack of visible security headers and no published privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which impacts trustworthiness. Overall, the platform presents a good user experience and a solid technical foundation but should enhance transparency around privacy, security policies, and contact information to improve compliance and user trust. Further verification of domain registration is recommended to confirm legitimacy.

M

Sign in - Matomo

monmatomo.com

53

The website monmatomo.com serves as a login portal for the Matomo analytics platform, an open-source, privacy-focused web analytics solution. The platform is hosted by Scaleway SAS, a French hosting provider, and the domain registration aligns with this hosting arrangement. The site primarily offers analytics services targeting website owners and administrators who require detailed visitor tracking and data analysis capabilities. The business model appears to be centered around providing analytics software either as a service or self-hosted solution, with a focus on privacy and data control. The platform is relatively new, with the domain registered in late 2022, indicating a growing or recently launched service. Technically, the site uses standard web technologies including JavaScript, PHP, and HTML5, with the Matomo platform as the core framework. The site enforces HTTPS, ensuring secure data transmission. However, the site lacks visible security headers and explicit privacy or cookie policies on the login page, which are important for compliance and user trust. The site’s performance and mobile optimization are basic but functional, suitable for its purpose as a login portal. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, support for two-factor authentication, and client-side DoNotTrack detection. However, the absence of security headers and public security policies reduces the overall security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent and transparent, with no privacy protection, which supports legitimacy. Overall, the site is functional and trustworthy as a login portal for an analytics platform but would benefit from enhanced privacy disclosures, security headers, and contact information to improve compliance and user confidence. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and implementing security headers to strengthen the security posture.

PlayHT is a mature and reputable SaaS company specializing in AI voice generation and text-to-speech technology. Founded in 2016, it offers a comprehensive platform with over 200 realistic AI voices across 30+ languages, targeting creators, enterprises, and developers. The company positions itself as a leader in the AI voice generation market, supported by strong branding and partnerships with well-known companies. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Cloudflare and AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers could be improved. Privacy compliance is good with clear privacy and terms of service pages, though cookie consent mechanisms are not evident. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

E

Eiffage Immobilier

eiffage-immobilier-corporate.fr

60

Eiffage Immobilier is a prominent French real estate developer specializing in low-carbon, sustainable urban development. The company operates as an integrated entity combining land development, promotion, and construction services, targeting mixed-use and multisector projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to a broad audience including investors, partners, and end-users. Technically, the site leverages modern web technologies such as the Jahia CMS, Typekit fonts, and integrates third-party services like YouTube and OneTrust for cookie consent, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is a notable concern, impacting domain legitimacy assessment. Overall, the site is professional, trustworthy, and compliant with GDPR, but domain registration details should be verified for full assurance.

P

Playmain

playmain.com

47

Playmain is a small web development duo based in Indonesia, operated by a married couple who focus on crafting quality websites with an emphasis on both aesthetic design and functional code. Their website serves as a personal portfolio and family playground for their creative web design and development projects. The site is simple, with limited content and no advanced interactive features. Technically, the site uses basic web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises concerns about domain legitimacy. Overall, the site is functional but lacks professional security and compliance features.

P

Programy na Programosy.pl - codzienna dawka programów

programosy.pl

34

Programosy.pl is a well-established Polish software download portal offering a large categorized database of installation programs, portable versions, and language localizations. The site features user comments, ratings, and an active forum, catering primarily to Polish-speaking users interested in software downloads and reviews. The business model revolves around content aggregation and advertising revenue, primarily through Google Adsense. Technically, the site uses classic web technologies including HTML5, CSS3, JavaScript with jQuery 1.7.1, and integrates Google Analytics and Google Custom Search Engine for enhanced user experience and tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is privacy protected, common for this type of portal, but the site claims a long operational history consistent with domain age expectations. Overall, the site is functional, content-rich, and moderately secure, serving a general audience without adult or questionable content.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible. No real website content, metadata, or business information is present. The page appears to be a browser-generated error page rather than a live website. Consequently, no privacy, cookie, or terms of service policies are found, and no contact or security information is available. The technical infrastructure is limited to Chromium open-source code for the offline dinosaur game, which is embedded in the error page. The security posture cannot be fully assessed due to lack of real content and headers. Overall, the site is inaccessible and cannot be properly evaluated for business credibility or compliance.

I

Irfan Skiljan

irfanview.info

49

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users worldwide. The website presents the software as fast, compact, and supporting multiple Windows versions with multi-language and Unicode support. The business model is freeware distribution with optional donations and support registrations. The site is small-scale, run by the author Irfan Skiljan, and hosted by domainunion in Austria. Technically, the website uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is domainunion, and the site performance is moderate with basic mobile optimization and accessibility. Security posture is moderate; no HTTPS status or security headers were confirmed from the data, and no forms collect sensitive data. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a generic email address. Overall, the site is trustworthy and professional but could improve security and privacy features.

I

Irfan Skiljan

irfanview.net

47

IrfanView.net is the official homepage for IrfanView, a widely recognized and popular freeware graphic viewer software primarily targeting Windows users. The website offers downloads for multiple versions of the software, including 32-bit, 64-bit, and ARM64, along with plugins, skins, and language packs. The business model is freeware for non-commercial use with options for donations and support registrations. The site is maintained by the author Irfan Skiljan, with a long domain history dating back to 2004, reinforcing its established market presence. Technically, the website is a straightforward static site using basic HTML, CSS, and JavaScript without modern frameworks or CMS. It is hosted by Hetzner Online GmbH, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website claims, showing a legitimate and long-standing domain registration. Overall, the website is trustworthy, professional, and safe for general audiences. However, improvements in security headers, privacy compliance, and transparency about data protection and incident response would enhance its security posture and user trust.

C

Office de Tourisme Cap d'Agde Méditerranée, Hérault, Occitanie

capdagde.com

57

The website www.capdagde.com serves as the official tourism office portal for the Cap d'Agde Mediterranean region in Hérault, Occitanie, France. It provides comprehensive information on local tourism services including accommodation, activities, events, and gastronomy, targeting tourists and visitors to the region. The site is built on WordPress and integrates Matomo analytics for visitor tracking. The technical infrastructure is modern with responsive design and good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

M

Meteored

tameteo.com

68

Tameteo.com, operated by Meteored, is a well-established online weather forecasting platform targeting French-speaking users primarily in France and its overseas territories. The site offers comprehensive 14-day weather forecasts, hourly updates, radar and satellite imagery, and weather-related news. It supports multiple platforms including web and mobile apps for Android, iOS, Huawei, and Windows, enhancing accessibility and user engagement. The business model relies on free content supported by advertising and additional services such as widgets and plugins for third-party integration. Technically, the website employs modern JavaScript frameworks and libraries, integrates Google Tag Manager and Google Ads for analytics and advertising, and uses a Consent Management Platform to comply with GDPR. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and GDPR compliance evident, though some security headers could be improved. Despite the professional appearance and comprehensive content, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No direct company contact emails or phone numbers are publicly available, which may impact business credibility. Overall, the site is trustworthy and functional but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include implementing additional security headers, enhancing accessibility features, and providing clearer business contact information to strengthen trust and compliance.

MyPopUps is a specialized SaaS platform founded in 2017 that offers website owners and marketers a comprehensive solution to create and deploy customizable pop-ups. The platform provides a marketplace of ready-made pop-up themes and an advanced builder tool to create pop-ups for email collection, discount codes, cookie notices, and adblocker detection. The business targets digital marketers and website owners seeking to enhance user engagement and conversion rates through pop-ups. Technically, the website leverages modern JavaScript frameworks (likely Vue.js), integrates with popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager, and uses Cloudflare DNS for domain management. The site is hosted with a reputable registrar and employs HTTPS for secure communications. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, functional, and trustworthy with moderate risk and room for security and compliance enhancements.

O

Orne Département

travaillerdanslorne.com

60

The website 'Travailler dans l'Orne' is a regional employment platform operated by the Orne Département, a local government entity in France. It serves as a centralized portal for job seekers and recruiters within the Orne department, offering job listings, training opportunities, internships, and alternance contracts. The platform also provides a CV analysis feature to better match candidates with relevant job offers. The site targets local residents and businesses, positioning itself as a key regional employment resource. Technically, the website employs modern JavaScript frameworks such as Turbo (Hotwire) and StimulusJS, and integrates analytics tools including Google Tag Manager and Piano Analytics. Hosting is provided by OVH sas, a reputable French hosting provider. The site is mobile-optimized with a good user experience and clear navigation. Security-wise, the site uses HTTPS and domain-level protections like clientDeleteProhibited and clientTransferProhibited statuses, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is primarily via forms, with no explicit emails or phone numbers listed. Overall, the website is professional, trustworthy, and well-aligned with its government mandate, but could improve security and privacy practices.

M

Mairie de Villeveyrac

villeveyrac.fr

54

The website www.villeveyrac.fr serves as the official digital presence of the Mairie de Villeveyrac, a local government entity in France. It provides residents and visitors with access to municipal news, upcoming events, public services, and citizen participation tools. The site is well-structured with multilingual support and integrates community-focused services such as urban planning, police municipal information, and youth services. The business model is centered on public service delivery and community engagement, positioning it as a key local government resource. Technically, the website employs modern web technologies including JavaScript frameworks, Matomo analytics for user tracking, and responsive design principles ensuring good mobile optimization. The site is built on the illiwap platform, which is specialized for municipal digital services. Performance is moderate with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure input validation for phone numbers. However, it lacks explicit security headers, a cookie consent mechanism, and a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this type of entity. Overall, the website is trustworthy, professional, and serves its intended audience effectively. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing a vulnerability disclosure policy to strengthen security posture and user trust.

M

Meteored

tiempo.com

68

Tiempo.com, operated by Meteored, is a well-established Spanish-language weather information portal offering detailed 14-day forecasts, meteorological news, videos, and weather alerts. The site targets a broad general audience interested in weather updates primarily in Spain and other Spanish-speaking regions. It maintains a strong digital presence with mobile applications across Android, iOS, Huawei, and Windows platforms, and integrates social media channels to engage users. Technically, the website employs modern web technologies including asynchronous JavaScript bundles, Google Tag Manager, header bidding for advertising, and Cloudflare for performance and security. The site is optimized for desktop and mobile devices, with good SEO and accessibility practices. Privacy compliance is robust, featuring GDPR-compliant cookie consent mechanisms and detailed privacy policies. From a security perspective, the site enforces HTTPS and uses standard security practices, though explicit security headers are not fully confirmed. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which could impact trustworthiness. Overall, Tiempo.com presents a professional and trustworthy weather service with strong content and technical maturity. The main risk lies in the lack of visible domain registration information, which should be addressed to enhance credibility and compliance.

O

Opéra national du Rhin

operanationaldurhin.eu

57

The Opéra national du Rhin website serves as the digital presence for a regional cultural institution specializing in opera and performing arts in France. It offers detailed event listings, ticketing options, and multimedia content to engage its audience. The site is built on modern web technologies including Roadiz CMS and Vue.js, providing a responsive and visually appealing user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not clearly presented. The absence of public WHOIS data is consistent with EURid's privacy policies and does not detract from the site's legitimacy. Overall, the website reflects a professional and trustworthy cultural organization with room for improvement in transparency and security documentation.

L

La Filature

lafilature.org

46

La Filature is a prominent cultural institution based in Mulhouse, France, hosting a variety of performing arts organizations including the Scène nationale, Orchestre symphonique de Mulhouse, Opéra national du Rhin, and a Médiathèque. It serves as a regional hub for theater, music, opera, dance, and library services, targeting a broad audience interested in cultural events. The website reflects a well-structured and professionally maintained digital presence with clear navigation and rich content showcasing upcoming events and organizational information. Technically, the website employs modern JavaScript frameworks such as StimulusJS and SwiperJS for interactive features and uses Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected in the provided HTML content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy, cookie, or incident response policies, which are important for compliance and user trust. The WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not directly impact the legitimacy of the site given its professional content and clear contact information. Overall, La Filature's website is a reliable and professional platform for cultural engagement, with recommendations to enhance privacy compliance, security headers, and incident response transparency to further strengthen its security posture and user trust.

M

Mulhouse

mulhousecestvous.fr

66

Mulhouse C'est Vous is a French local government participatory platform operated by the Ville de Mulhouse, designed to facilitate citizen engagement, project collaboration, and community participation. The platform offers a variety of services including project proposals, consultations, event calendars, and newsletters targeting citizens, associations, municipal agents, and institutions within Mulhouse. The website is well-established since 2015 and maintains a consistent brand and professional content quality. Technically, it leverages modern web technologies such as React, Bootstrap, and Google APIs, integrated within a Symfony-based backend and the Cap Collectif participatory platform framework. Security posture is solid with HTTPS enforcement, CAPTCHA protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with comprehensive GDPR-aligned policies and a named Data Protection Officer. Overall, the site is trustworthy, well-maintained, and serves its public sector mission effectively.

F

France Travail

pole-emploi.fr

57

France Travail is a French governmental employment platform providing a comprehensive range of services including job offer searches, allocation and aid estimations, online registration for job seekers, and dedicated employer services. The website is well-branded, professionally designed, and targets job seekers and employers across France. It serves as a national public employment service with a large user base and extensive content offerings. Technically, the site uses modern web technologies including JavaScript frameworks, Dynatrace monitoring, and Piano Analytics for performance and user behavior tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and secure form practices, though explicit security headers and incident response information are not visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and safe, with no suspicious or adult content detected.

S

Santé publique France

santepubliquefrance.fr

57

Santé publique France is the official French national public health agency, providing authoritative information, surveillance, and prevention services related to public health. The website serves a broad audience including the general public, healthcare professionals, and policymakers. It is positioned as a key government institution in the healthcare sector in France, offering publications, studies, and health data. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for bot protection, and New Relic for performance monitoring, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy policy documentation in the provided content. Security posture is good with no evident vulnerabilities, but could be improved with better security headers and published incident response information. Overall, the site is trustworthy and professional, with a strong business credibility as a government entity.

I

Institut national de l’information géographique et forestière

ign.fr

61

The Institut national de l’information géographique et forestière (IGN) is a French government entity specializing in the production and dissemination of geographic and forestry data. The website serves a diverse audience including individuals, professionals, public policy actors, educators, and students. It offers a comprehensive range of cartographic services, data access, and applications, positioning itself as the authoritative national geographic data provider in France. The business model is public service-oriented, focusing on data accessibility and support for various user needs. Technically, the website is built on Drupal 10, leveraging modern web technologies such as JavaScript and CSS, with good mobile optimization and accessibility features. The site demonstrates moderate performance and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of publicly available WHOIS data is typical for .fr domains and does not detract from the legitimacy of the site. The presence of official contact information, social media channels, and comprehensive policies further enhance credibility. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.

A

Assistance publique - Hôpitaux de Paris (AP-HP)

aphp.fr

66

Assistance publique - Hôpitaux de Paris (AP-HP) is the largest public healthcare institution in Europe, operating 38 hospitals and serving millions of patients annually. The website provides comprehensive information on patient care, research, education, and innovation, targeting patients, healthcare professionals, researchers, and partners. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. WHOIS data is missing, which is unusual but likely due to AFNIC policies or privacy protection, not indicating malicious intent. Overall, the website is professional, trustworthy, and compliant with GDPR.

The website 'Produire bio en Bretagne' serves as an informational and support platform dedicated to organic farming in the Brittany region of France. Operated by FRAB, it provides educational content, technical resources, testimonials, and event information to assist farmers considering or undergoing conversion to organic agriculture. The site is positioned as a regional authoritative resource with a clear focus on organic agriculture principles and practices. Technically, the website is built on WordPress using the Total theme and Visual Composer, with integrations such as Google Analytics and Revolution Slider. Hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business's history and location. Security posture is adequate with HTTPS enforced and some privacy considerations, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, targeting agricultural professionals and stakeholders in organic farming.

blackpills studio is a media production company specializing in the development, production, and international distribution of premium short-form series. The company positions itself as an international content producer with a focus on mobile and SVOD platforms, targeting a general audience interested in original series. The website reflects a small-sized media business founded in 2006, with consistent branding and a professional online presence hosted on the MyPortfolio platform and OVH infrastructure. Technically, the site uses modern web technologies including HTTPS, JavaScript, and Typekit fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy or security policies. No contact information or detailed compliance documentation is present, which limits transparency and user trust. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

Smulders is a well-established multidisciplinary construction company specializing in the engineering, production, delivery, and assembly of heavy, technically complex steel structures, with a strong focus on offshore wind farm integration. Operating primarily in Belgium and neighboring countries, it serves industrial and energy sectors as a comprehensive EPC contractor. The company benefits from a large workforce and a reputable market position supported by its parent company, Eiffage. The website reflects a professional corporate identity with clear messaging and comprehensive service descriptions. Technically, the site uses modern web technologies including Google Tag Manager and Matomo Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some advanced security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

Y

Home | YOTTABE

yottabe.com

57

The website www.yottabe.com is hosted on the Wix platform and appears to be a small or new business site with minimal content and no clear business description or contact information. The lack of WHOIS registration data raises concerns about the domain's legitimacy and ownership. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security configurations and privacy compliance features. The absence of privacy policies, cookie consent mechanisms, and contact details further diminishes trustworthiness. Overall, the site demonstrates a low level of digital maturity and security posture, with significant gaps in compliance and transparency.

S

Slovenská produkčná, a.s.

prezenu.sk

62

The website zenske.joj.sk is a Slovak lifestyle media portal targeting contemporary women with content focused on fashion, health, relationships, and entertainment. It is operated by Slovenská produkčná, a.s., a recognized media company in Slovakia. The site features a professional design, consistent branding, and a clear navigation structure that supports user engagement. The business model is primarily advertising-driven, leveraging multiple ad networks and analytics platforms integrated with a consent management system to comply with privacy regulations. Technically, the site uses modern JavaScript libraries and ad bidding frameworks, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not published. Privacy compliance is supported by a visible cookie consent mechanism, but a dedicated privacy policy page was not found in the analyzed content. Overall, the domain registration data aligns well with the website's business claims, supporting high legitimacy and trustworthiness.

M

Meteored

theweather.com

69

Theweather.com, operated under the Meteored brand, is a professional weather information service providing 14-day forecasts, hourly updates, meteorological news, and videos primarily targeting the US market and global users. The site offers extensive weather data for over 200,000 cities worldwide and supports multiple languages and regional partner sites. It also provides weather widgets and mobile applications across major platforms including Android, iOS, Huawei, and Windows. The business model is advertising-supported, leveraging multiple ad networks and tracking technologies integrated with a GDPR-compliant consent management platform. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, header bidding with Prebid.js, and integrates video content via Dailymotion. The site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility basics. Hosting appears to be managed via Meteored's own services or trusted CDNs. Privacy and cookie policies are comprehensive and prominently linked, with active consent mechanisms. Security posture is strong with HTTPS enforced, security headers implemented, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit published security policies or incident response contacts, and no vulnerability disclosure or security.txt files were found. The WHOIS data for the domain is unavailable, indicating privacy protection or recent registration, which slightly reduces trust but is mitigated by the professional site presentation and brand recognition. Overall, theweather.com is a credible and professionally managed weather information platform with good technical and security practices. Strategic recommendations include publishing explicit security policies and incident response contacts, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further improve trust and compliance.

S

Stadt Rheine

rheine.de

56

Stadt Rheine operates as the official municipal government website for the city of Rheine in Germany, providing a broad range of public services, cultural information, and tourism resources. The site targets residents, visitors, and businesses, offering online forms, event information, and administrative contacts. The website is well-structured with comprehensive navigation and modern design elements, reflecting a medium-sized government entity with a strong local presence. Technically, the site employs modern JavaScript libraries such as Swiper.js and ExtJS, uses a recognized CMS (Recon CMS), and implements cookie consent via Klaro, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and basic security headers present, though additional headers and a published incident response policy would enhance trust. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Przelewy24

przelewy24.pl

74

Przelewy24 is a well-established Polish online payment service provider offering a variety of payment methods including BLIK, Google Pay, and Apple Pay. The website targets businesses seeking to integrate efficient and diverse payment solutions into their e-commerce platforms. The company positions itself as a key player in the Polish online payments market, providing reliable and fast payment processing services. The website content is professional, well-structured, and localized in Polish, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a good level of digital maturity and compliance with privacy regulations. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks some advanced security headers and explicit security policies. No WHOIS data is available due to privacy protection, which is justified for a financial services provider. Overall, the site demonstrates a strong security posture and compliance with GDPR, with room for improvement in transparency and incident response readiness.

The website kulturnipecka.cz is currently a parked domain landing page primarily used for domain resale or parking purposes. It lacks any substantive business content, contact information, or privacy and security policies. The domain's WHOIS data is suspicious, showing a future creation date and registrar details consistent with domain parking services. Technically, the site relies on iframe embedding and external ad/tracking scripts from questionable domains, with no HTTPS enforcement or security headers, resulting in a poor security posture. Overall, the site does not represent an active or legitimate business presence and poses risks related to trust and security.

The website mairie-venoy.fr serves as the official online presence for the Mairie de Venoy, a local government entity in France. It provides residents and visitors with municipal information, administrative procedures, community news, and contact details. The site targets local citizens and those interested in the commune's affairs, offering a basic but functional information portal. The business model is typical of government websites, focusing on public service and information dissemination rather than commercial activities. From a technical perspective, the website employs traditional web technologies including HTML, CSS, and JavaScript libraries such as Prototype.js and Scriptaculous, alongside LightboxJS2 for image display. Hosting is provided by OVH, a reputable provider. However, the site lacks modern CMS frameworks and shows signs of aging technology, with limited mobile optimization and basic accessibility features. Performance is moderate, and SEO practices are minimal. Security posture is moderate but could be significantly improved. The site uses HTTPS and includes Google Analytics for visitor tracking but lacks critical security headers and modern security practices. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and trustworthy as a local government portal but requires updates to its security, privacy compliance, and technical infrastructure to meet modern standards and improve user experience. Strategic improvements in these areas will enhance trust, compliance, and operational resilience.

M

Mairie de Montigny la Resle

mairie-montigny-la-resle-89.fr

57

The website www.mairie-montigny-la-resle-89.fr serves as the official online presence for the town hall of Montigny la Resle, a small commune in the Bourgogne region of France. It provides residents and visitors with essential information about municipal services, local news, administrative procedures, health advisories, and community events. The site is well-structured and targets local citizens and stakeholders, offering a comprehensive resource for civic engagement and public service access. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. It is mobile-optimized and accessible, featuring responsive design and navigation aids. However, the technology stack is somewhat dated, notably with an older jQuery version, and lacks advanced security headers. Performance is moderate, with no evident tracking or analytics scripts, indicating a privacy-conscious approach. From a security standpoint, the site uses HTTPS, which is mandatory, but does not implement additional security headers that could enhance protection against common web threats. There is no visible privacy or cookie consent mechanism, which is a compliance gap under GDPR. The WHOIS data is unavailable, which slightly reduces trust but is not uncommon for .fr domains. No vulnerabilities or sensitive data exposures were detected. Overall, the website is a trustworthy and functional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and updating libraries would enhance its security posture and regulatory adherence.

M

Mairie de Gurgy

gurgy.net

58

The website www.gurgy.net serves as the official municipal portal for the town of Gurgy, France, providing residents and visitors with news, administrative information, community services, and event announcements. It targets local citizens and stakeholders, offering a centralized platform for municipal communication and public service access. The site maintains a consistent and professional presentation aligned with government standards, including clear navigation and relevant content. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and integrates third-party services like Google Analytics and Meteo France weather widgets. Cookie consent is managed via the tarteaucitron library, ensuring compliance with privacy regulations. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and manages user consent for cookies, but it does not implement several recommended security headers or provide incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, as it reduces trust in domain legitimacy despite the website's official appearance. Overall, the website is functional, trustworthy, and serves its purpose well, but improvements in security headers, WHOIS transparency, and incident response readiness are advised to enhance its security posture and trustworthiness.

B

Botnation AI

botnation.ai

63

Botnation AI is a well-established technology company specializing in no-code chatbot creation platforms enhanced with AI capabilities. Founded in 2017 and registered in Switzerland, the company offers a SaaS model targeting businesses and agencies seeking to deploy conversational AI solutions across multiple channels such as websites, social media, and messaging apps. Their platform emphasizes ease of use, integration with CRM and APIs, and includes live chat features for seamless human handover. The website demonstrates a mature digital presence with comprehensive content, strong branding, and multiple certifications including GDPR, PCI-DSS, and ISO standards, reinforcing their commitment to security and compliance. Technically, the website is hosted on AWS infrastructure with a modern tech stack including JavaScript and jQuery, optimized for performance and mobile responsiveness. SEO and accessibility are well addressed with structured data and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is mostly met, but the absence of a cookie consent mechanism and incident response contacts are notable gaps. Overall, Botnation AI presents a trustworthy and professional online presence with a clear business model and strong market positioning in the chatbot technology sector. The site is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing privacy controls, improving DNS security, and publishing incident response details to further strengthen trust and compliance.

B

Behavee

behavee.com

64

Behavee is a Czech digital marketing agency specializing in services for e-commerce shops and lead generation. The website presents a professional image with clear branding and a focus on online marketing services. The technical infrastructure is based on the Wix platform, leveraging Wix's Thunderbolt framework and standard polyfills for compatibility. Microsoft Clarity is used for analytics and user behavior tracking. Security posture is moderate with HTTPS usage implied, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and well-designed but would benefit from enhanced transparency and security practices.

Č

ČVIRO

cviro.sk

54

ČVIRO is a small Slovak vehicle rental company specializing in utility vehicles such as vans, pickups, buses, refrigerated trucks, and tractors. The website presents basic information about the business and its offerings, targeting individuals and businesses in need of utility vehicle rentals. The domain is well established since 2006, with consistent WHOIS data and DNSSEC enabled, indicating legitimacy and good domain security practices. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern web design features such as mobile responsiveness and accessibility enhancements. Security posture is weak with no visible security headers or HTTPS enforcement details, and privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to phone numbers and one email address, with no physical address or social media presence. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

The website www.canalplus.com is currently inaccessible due to a security mechanism or Web Application Firewall (WAF) that blocks content delivery, presenting an 'Access Denied' message with minimal page content. This prevents a full analysis of the website's business, technical, and security posture. The WHOIS lookup for the domain failed to return any registration data, which is unusual for a well-known brand, raising concerns about domain registration legitimacy or privacy protection usage. No privacy, cookie, or terms of service policies were detected on the page, and no contact or business information is available. The technical footprint is minimal, with only inline JavaScript and CSS present, and no external analytics or advertising scripts detected.

G

GoDaddy Operating Company, LLC

vakita.com

73

The website is a professionally designed domain aftermarket sales landing page operated by GoDaddy Operating Company, LLC. It offers the domain vakita.com for sale with options to buy outright or lease to own, supported by secure payment methods and transaction assistance. The site leverages modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, and demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS and secure payment integrations, though explicit security headers and terms of service pages are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and well-positioned in the domain aftermarket e-commerce sector.

T

telecentro.com

telecentro.com

51

The website telecentro.com currently serves as a parked domain with no active business content or services. It displays a sales banner indicating the domain may be for sale and contains advertising blocks powered by Google Adsense and Bodis. The site lacks any meaningful business description, contact information, or user engagement features. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting is managed by Bodis, a domain parking service provider. Security posture is minimal with no DNSSEC enabled and no security headers detected. Privacy compliance is weak, with a privacy policy page present but no cookie consent mechanism or GDPR indicators. Overall, the site is low trust and low content quality, suitable only as a placeholder or domain sale page.

M

Město Vítkov

kulturavitkov.cz

55

Kulturavitkov.cz is a municipal cultural event portal for the town of Vítkov in the Czech Republic. It provides residents and visitors with information about local cinema screenings, concerts, theater performances, exhibitions, and other cultural activities. The platform integrates online ticket sales through a partner e-commerce site, facilitating easy access to event participation. The website is well-branded with official municipal logos and links to verified social media pages, reinforcing its local government affiliation. Technically, the site is built using modern web technologies including React and Next.js, with Material UI for styling. It is mobile optimized and provides a good user experience with clear navigation and event information. Performance is moderate, and the site uses HTTPS with appropriate security headers, indicating a solid security posture. However, the absence of a cookie consent mechanism and lack of visible privacy or incident response policies suggest areas for compliance improvement. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit vulnerability disclosure or incident response information. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not contradict the site's municipal nature. Overall, the site is trustworthy and serves its purpose effectively, though it could enhance privacy compliance and transparency. The overall risk is low given the nature of the site and its content, but strategic improvements in privacy and security policy disclosures are recommended to strengthen user trust and regulatory compliance.

J

JitroDesign

jitrodesign.com

50

JitroDesign is a small, specialized graphic design studio showcasing a portfolio of projects focused on cultural heritage, music albums, and art publications. The website is hosted on the Cargo Collective platform and uses modern web technologies including jQuery and Handlebars.js. The site is accessible without any WAF or security challenges and uses HTTPS, ensuring basic transport security. However, it lacks privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The domain is well-established since 2011, registered through a reputable registrar, and aligns with the business's maturity. Overall, the site presents professional content with good design quality and moderate SEO and accessibility features.

N

NetCURD

netcurd.fr

40

NetCURD is a small French marketing and communication agency founded in 2015, serving clients primarily in the Rennes and Nantes regions. The company offers a comprehensive suite of services including marketing strategy consulting, graphic design for web and print, web development with WordPress and e-commerce solutions, and digital marketing services such as SEO, SEA, social media management, and email campaigns. Their market position is that of a regional agency providing 360° accompaniment to business growth. The website is professionally designed, mobile optimized, and uses modern technologies such as Next.js and SVG graphics. Hosting is provided by Infomaniak Network SA, a reputable provider.

P

Paris Saint-Germain

psg.fr

69

Paris Saint-Germain's official website serves as a comprehensive digital platform for fans and stakeholders to access the latest news, live match updates, and exclusive content related to the club's various sports activities including men's and women's football, handball, judo, and esports. The site is professionally designed with consistent branding and targets a global audience of sports enthusiasts and PSG supporters. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

E

E-BAAN,SE

hapra.cz

49

HAPRA Design is a Czech digital agency specializing in web design, e-commerce development, SEO, social media management, and online marketing services. With over 20 years of experience, the company offers comprehensive digital solutions aimed at businesses seeking to enhance their online presence. Their service portfolio includes website and e-shop creation, content management, PPC advertising, and technical maintenance, positioning them as a full-service digital partner. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site employs a modern technology stack including PHP, MySQL, JavaScript libraries such as jQuery, Bootstrap framework, and integrates marketing and analytics tools like Google Tag Manager and Facebook SDK. The site is mobile-optimized and uses a custom CMS named publishWEB. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish security policies, and improve accessibility compliance to further strengthen their security posture and trustworthiness.

Z

ZOO JH s.r.o.

zoonahradecku.cz

46

ZOO Na Hrádečku is a private zoological garden located in the Czech Republic, operating since 2014 with a focus on conservation, education, and public engagement. The zoo hosts over 200 animal species, including endangered ones, and offers various visitor experiences such as guided tours, animal adoptions, and educational programs. It operates without subsidies, relying on ticket sales, merchandise, and donations. The website reflects a well-established regional institution with strong community and conservation partnerships. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery libraries, hosted by a reputable Czech registrar and hosting provider. The site is mobile-optimized with good SEO practices and clear navigation, though some advanced security headers and explicit security policies are not evident. Cookie consent and privacy policies are implemented, indicating awareness of GDPR compliance. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers or incident response information. No vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site presents a trustworthy, professional online presence for a medium-sized private zoo with good content quality and privacy compliance. Strategic improvements in security policy transparency and technical security controls are recommended to enhance the security posture and trust further.

E

Eezy LLC

brusheezy.com

60

Brusheezy, operated by Eezy LLC, is a well-established online platform offering a vast collection of free and premium Photoshop brushes and related graphic design resources. The website targets graphic designers and digital artists seeking high-quality Photoshop assets. It operates a freemium business model, providing free downloads alongside premium subscription options for unlimited access. The site enjoys a strong market position within the digital media resource niche, supported by a vibrant community and a network of related sites such as Vecteezy and Videezy. Technically, Brusheezy employs a modern technology stack including JavaScript libraries, analytics tools like Google Analytics and Snowplow, and advertising frameworks such as Freestar and Google DoubleClick. The site is mobile-optimized with good SEO practices and uses HTTPS to secure user interactions. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. From a security perspective, the site demonstrates good practices including HTTPS enforcement and CSRF protection in forms. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Brusheezy presents a low-risk profile with a professional online presence and comprehensive content offerings. The main concern is the absence of WHOIS data transparency, which slightly impacts trust but does not detract significantly from the site's legitimacy. Strategic improvements in security policy publication and WHOIS transparency would enhance its credibility and compliance standing.