Security Directory

M

Mega levné pneu

megalevnepneu.cz

48

Mega levné pneu is a Czech Republic-based retailer specializing in the sale of tires and wheels for a wide range of vehicles including motorcycles, cars, trucks, and agricultural machinery. The company also offers onsite tire services (pneuservis) near Prague, emphasizing fast service and ecological tire disposal. The website presents a professional and content-rich platform targeting vehicle owners and fleet operators in the region. Technically, the site uses legacy technologies such as windows-1250 charset and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is functional and credible but would benefit from enhanced security and compliance transparency.

U

Université de Technologie Belfort-Montbéliard

utbm.fr

56

Université de Technologie Belfort-Montbéliard (UTBM) is a recognized French public higher education institution specializing in engineering, master, and doctoral programs. It maintains accreditations such as CTI and the EUR-ACE label, emphasizing quality education and research. The website targets students, researchers, companies, and alumni, offering comprehensive academic and continuing education services. The institution has a solid market position within the French and international education sectors, supported by active social media presence and international partnerships. Technically, the website is built on WordPress with modern plugins and frameworks including Bootstrap, jQuery, and WPBakery. It employs GDPR-compliant cookie consent mechanisms and supports multilingual content via Weglot. Performance and mobile optimization are good, with accessibility features implemented. Analytics are primarily handled via Matomo, with Google Analytics configured but inactive. Security posture is good with HTTPS enforced and no exposed sensitive data. However, the absence of a published security policy and incident response contacts is a gap. The WHOIS data is unavailable, which slightly reduces trustworthiness but is mitigated by the institution's established reputation and accreditation. Overall, UTBM's website is professional, secure, and compliant, serving its educational mission effectively. Strategic improvements include publishing security policies and incident response information to enhance transparency and trust.

B

Brain Behind Ltd

brain-behind.com

53

Brain Behind Ltd is a UK-based medium-sized company founded in 2005, specializing in high-volume loyalty and mission-critical loyalty solutions integrated with existing payment terminals. The company serves a diverse B2B audience including financial institutions, retailers, tourism operators, and urban mobility planners. Their product suite includes enterprise vouchers, loyalty programs for banks, tourism solutions, and contract farming administration systems. The website reflects a mature business with a consistent brand and strong partner ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, hosted on UKFast infrastructure. Security posture is moderate with room for improvement in DNSSEC and HTTP security headers. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reliable provider of payment and loyalty solutions.

N

NaKoncerty.cz

nakoncerty.cz

29

NaKoncerty.cz is a Czech language media portal dedicated to providing news, updates, and information about concerts, festivals, and the music scene in the Czech Republic. The website offers a variety of articles covering upcoming events, festival news, and concert reviews, targeting music enthusiasts and festival goers primarily in the Czech region. The business model revolves around content publication and advertising revenue, leveraging Google AdSense and Jetpack analytics for monetization and user insights. Technically, the website is built on the WordPress CMS platform, utilizing common web technologies such as jQuery, Slick Carousel, and FontAwesome for UI enhancements. The site is served over HTTPS with a good SSL configuration, ensuring secure data transmission. However, it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The website is mobile optimized with a responsive design and moderate performance. From a security perspective, the site demonstrates basic good practices such as HTTPS usage but misses critical security headers and formalized privacy compliance mechanisms. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is not publicly available, indicating privacy protection or registry restrictions, but the website content and structure suggest a legitimate and professional media portal. Overall, NaKoncerty.cz presents a well-structured and content-rich platform for music event information in the Czech Republic. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance. These steps will strengthen the site's security posture and business credibility while maintaining its role as a valuable resource for its audience.

N

Nadační fond Eduzměna

cpv-kh.cz

55

The website cpv-kh.cz represents the Nadační fond Eduzměna, a regional educational support center focused on the Kutnohorsko region in the Czech Republic. It provides information about the Eduzměna project, aiming to enhance educational opportunities and wellbeing for children, parents, teachers, and school leadership. The site offers resources such as workshops, mental health initiatives, and community support, positioning itself as a key regional educational partner. Technically, the site is built on WordPress using Elementor, with modern libraries like Bootstrap and FontAwesome, and integrates marketing and analytics tools including Google Analytics and Facebook Pixel. The site is hosted likely by WEDOS, a Czech hosting provider, and uses HTTPS with a good SSL configuration. Security posture is solid with no visible vulnerabilities, though explicit security headers and policies are not fully implemented. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information includes a clear phone number and social media links, but no verified company email was found. Overall, the site is professional, well-branded, and trustworthy, serving a non-profit educational mission. Strategic improvements include publishing privacy and security policies, adding incident response contacts, and enhancing security headers to strengthen trust and compliance.

V

vaClavinek s.r.o.

imrvere.com

43

Imrvére is a small hospitality business based in Frýdlant nad Ostravicí, Czech Republic, offering restaurant dining, catering, and food delivery services. The company operates a professionally designed WordPress website using the Divi theme and WooCommerce for e-commerce capabilities. The site is well-structured with good SEO practices and mobile optimization, targeting a general audience interested in unique gastronomic experiences. Technically, the website leverages modern web technologies and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though it lacks some security headers and published security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website presents a credible and professional business presence with room for improvement in privacy compliance and security transparency.

C

CENTROPOL ENERGY, a.s.

centropol.cz

56

CENTROPOL ENERGY, a.s. operates as a reliable energy supplier in the Czech Republic, providing gas and electricity to households and businesses for over two decades. The company emphasizes fair pricing and additional customer benefits, positioning itself as a trusted player in the energy sector. The website reflects a professional digital presence with clear branding and relevant content tailored to its target audience. Technically, the site is built on WordPress with a modern technology stack including Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for bot protection. While the site is mobile-optimized and SEO-friendly, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts overall trust. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve credibility and compliance.

S

STEILMANN PRAHA spol. s r.o.

steilmann.cz

45

Steilmann Praha spol. s r.o. is a well-established fashion retail company operating since 1999, offering a portfolio of recognized fashion brands for men and women. The company operates both physical stores and an e-commerce platform, targeting fashion-conscious consumers primarily in the Czech Republic. The website reflects a professional and consistent brand image with clear navigation and relevant content about their products, loyalty programs, and corporate offerings. Technically, the site uses a combination of jQuery, Skel framework, and other JavaScript libraries to deliver a responsive and user-friendly experience, although the CMS is custom or not explicitly identified. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks advanced security headers and published security policies. Privacy compliance is partial due to absence of a privacy policy and terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Vinofol, s.r.o.

vinofol.cz

52

Vinofol, s.r.o. is a well-established family winery based in the Czech Republic, operating since 1992. The company specializes in producing and selling high-quality wines from the Mikulov and Novosedly regions, leveraging modern technology and traditional winemaking methods. Their market position is strong within the Czech wine retail sector, supported by a broad product range, including award-winning wines, and a multi-channel sales approach via e-shop and physical vinoték stores. The website reflects a mature digital presence with integrated marketing and analytics tools, providing a professional user experience and clear business information. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content. The site targets adult consumers, implementing age verification due to alcohol sales regulations.

L

LED MULTIMEDIA s.r.o.

ledmultimedia.cz

47

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

MEDIA MARKETING SERVICES a.s.

hitradiocity.cz

54

Hitrádio City 93,7 FM is a well-established regional radio station based in Prague, Czech Republic, operating since 2005. The website offers multiple live internet radio streams, podcasts, program schedules, contests, and a listener club, targeting a broad audience in the Prague region. The business model centers on media broadcasting and advertising, supported by a professional online presence and active social media channels. The company behind the site is MEDIA MARKETING SERVICES a.s., indicating a medium-sized media entity with a stable market position. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and CSS frameworks like Foundation. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility could be made. Hosting is managed via Dial Telecom, with secure HTTPS enforced and CSRF protection tokens present, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for enhancement. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and accessible, supporting regulatory compliance. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content. The domain registration data aligns well with the business history and operations, reinforcing legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and publishing a formal security policy and incident response information to further strengthen trust and compliance.

Můj první gól is a Czech grassroots football project focused on supporting young beginner football players and clubs, operated under the Football Association of the Czech Republic (FAČR) and 2Score, s.r.o. The project offers recruitment events, training videos, school physical activity programs, and nutrition education, positioning itself as a recognized leader in youth football development in the Czech Republic, evidenced by its UEFA award. The website is professionally designed with consistent branding and clear navigation, targeting young athletes, their parents, and football clubs. Technically, the site uses modern JavaScript libraries and the Nette framework, hosted by Active24, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers could be improved. No blocking or WAF interference was detected, allowing full content access. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

T

TCL

tcl.com

70

TCL is a global technology company specializing in consumer electronics including TVs, mobile devices, and home appliances. The Finnish localized website showcases a broad product portfolio with clear navigation and professional branding, targeting general consumers interested in innovative technology products. The site is built on Adobe Experience Manager CMS and hosted likely on AWS infrastructure, utilizing modern JavaScript libraries and Google Tag Manager for analytics. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. The absence of WHOIS data reduces transparency but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and providing direct contact information to improve trust and compliance.

C

Carrefour Culturel Arnaud-Bernard

declaration-langues-langage.net

54

The website www.declaration-langues-langage.net is a French non-profit cultural platform dedicated to promoting a Declaration on Duties towards Languages and Language. It serves as a hub for linguistic rights advocacy, multilingual translations, and cultural discourse primarily linked to the Carrefour Culturel Arnaud-Bernard and the Forom des Langues du Monde. The site targets linguists, cultural activists, and language communities with academic and ethical-political content. Technically, it is built on WordPress using Elementor and OceanWP theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is missing, which raises transparency concerns but the site content and affiliations suggest legitimacy. Overall, the site is content-rich and professionally presented but would benefit from improved privacy compliance and domain registration transparency.

Č

Český ráj outdoor s.r.o.

sportparadise.sk

71

Český ráj outdoor s.r.o. operates a well-established e-commerce platform specializing in outdoor equipment such as cycling, hiking, camping, and climbing gear. With over 30 years of market presence, the company maintains a strong brand reputation supported by a large physical store and a comprehensive online catalog. The website is professionally designed, localized in Slovak, and offers a seamless user experience with clear navigation and rich content including customer reviews and blog articles. Technically, the site uses a proprietary e-commerce CMS (BSSHOP) with modern JavaScript frameworks and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

Salon Permae is a French event organizer specializing in permaculture, agroecology, and natural gardening exhibitions held at the Parc Floral de Paris. The website serves as an information portal for visitors and exhibitors, offering event details, conference programs, and exhibitor portraits. The business targets gardening enthusiasts and professionals interested in sustainable agriculture and natural gardening practices. The company positions itself as the first dedicated salon in this niche in France, operating since 2019 with a small but focused market presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Google Analytics for tracking, and several plugins for content display and advertising management. Hosting is provided by Infomaniak, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, and there is no visible security policy or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, the website is professional and trustworthy for its business purpose but could improve in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and enhancing contact information clarity.

W

WICONA

wicona.com

65

WICONA is a well-established company specializing in architectural aluminum systems, serving primarily the construction and architectural sectors. The website reflects a professional B2B business model with a focus on product offerings such as facades, windows, doors, and sliding systems. The company is a subsidiary of Hydro, a global aluminum company, which supports its market position and credibility. The website is targeted at architects, builders, and construction professionals, providing detailed product information and resources. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Microsoft Azure services for hosting and telemetry, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured cookie consent mechanisms. Security-wise, the website enforces HTTPS and includes a Content Security Policy header, but lacks some additional security headers and explicit privacy and terms of service pages. The cookie consent mechanism is comprehensive and GDPR compliant, with detailed cookie categorization and user control. However, the absence of visible contact information and WHOIS data inconsistency slightly reduce trustworthiness. Overall, the website is professional, secure, and compliant, but could improve transparency and contact accessibility to enhance user trust and compliance posture.

L

Le Grand Ouest Toulousain Agglomération

save-touch.org

59

Le Grand Ouest Toulousain Agglomération operates as a local government community entity serving multiple communes in the Toulouse region of France. The website provides comprehensive information on public services including waste management, social services, territorial planning, mobility, and economic development. It targets residents and stakeholders within the community, offering access to administrative resources, news, and contact channels. The business model is that of a public service provider with a medium-sized organizational footprint, founded in 2021. Technically, the website is built on Joomla CMS with a modern front-end stack including Bootstrap, jQuery, and Font Awesome. It is hosted by OVH, a reputable provider, and employs HTTPS with a valid SSL certificate. The site includes a cookie consent mechanism compliant with GDPR principles, though it lacks a dedicated privacy policy page. Performance and mobile optimization are moderate to good, with room for improvement in accessibility and SEO. From a security perspective, the site benefits from HTTPS and cookie consent but lacks published security policies, incident response information, and advanced security headers. No vulnerabilities or suspicious content were detected in the analysis. The WHOIS data aligns well with the website's public government role, supporting legitimacy and trustworthiness. Overall, the site is professional, trustworthy, and serves its community well but would benefit from enhanced privacy disclosures, security policies, and accessibility improvements to strengthen compliance and user trust.

Democratie Active, operated by MICROPULSE, provides specialized digital solutions for public inquiries and citizen engagement in France. Their offerings include dematerialized registers for public inquiries, digital debates, and private consultations, targeting government authorities and public officials. The website demonstrates a professional presence with user testimonials and a clear service portfolio, positioning them as a niche player in government digital services. Technically, the site uses modern JavaScript libraries such as jQuery, bxSlider, and AOS, with responsive design and Google Analytics integration, indicating a moderate to good digital maturity. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit incident response or security policy pages were found. The absence of WHOIS registration data is a concern for domain legitimacy, but the website content and trust signals mitigate this risk somewhat. Overall, the site is well-structured, privacy compliant, and trustworthy for its intended audience.

P

PanneauPocket

panneaupocket.com

52

PanneauPocket is a French-based company providing a leading mobile application designed for local governments such as municipalities and intercommunal entities (EPCI) to communicate real-time information and alerts to residents. Established in 2017, the company has positioned itself as the number one mobile alert and information app in France, serving over 13,500 local entities including gendarmeries and covering approximately 8 million residents. Their key services include push notifications, RSS feeds, legal postings, directories, and event calendars, all aimed at enhancing local communication efficiency and citizen engagement. Technically, the website is built on WordPress with Elementor and leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and analytics. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Analytics tools such as Matomo and Microsoft Clarity are used for user behavior tracking, complemented by Google reCAPTCHA for form security. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable, which slightly reduces trust but is mitigated by strong business signals such as media coverage, partnerships with official organizations, and transparent contact information. Overall, PanneauPocket presents a professional, trustworthy, and well-maintained digital presence with a strong market position in the French local government communication sector. Strategic improvements in security headers and publishing a dedicated security policy would further enhance their security posture and trustworthiness.

H

Haute-Garonne Ingénierie - Agence Technique Départementale (HGI-ATD)

atd31.fr

62

Haute-Garonne Ingénierie - Agence Technique Départementale (HGI-ATD) is a regional government technical agency serving the Haute-Garonne department in France. The organization provides a range of services including technical engineering support, legal and financial advisory, training for local elected officials, and information dissemination. The website targets local government officials and public sector entities, positioning itself as a trusted regional partner. The business model is public service oriented, focusing on supporting territorial communities with expertise and resources. Technically, the website is built on the Ametys CMS platform and employs modern JavaScript libraries such as jQuery and Slick Carousel. It uses Matomo analytics configured for privacy by design and implements a comprehensive cookie consent mechanism via tarteaucitron.js. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. From a security perspective, the website enforces HTTPS and uses privacy-respecting analytics. However, it lacks visible security headers and does not publicly provide a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is not publicly available due to AFNIC policies, but the domain and website content appear legitimate and consistent with a government entity. Overall, the website presents a professional and trustworthy digital presence for a regional government agency. Strategic recommendations include publishing a security policy, adding security headers, and providing incident response information to enhance transparency and security posture.

A

Agence Gardeners

agencegardeners.com

45

Agence Gardeners is a creative and digital communication agency operating primarily in France and Switzerland. It offers a comprehensive suite of services including branding, communication strategy, web and e-commerce development, advertising, SEO, social media management, and influencer marketing. The agency positions itself as a one-stop shop, merging creative and technical expertise to deliver seamless communication strategies. The company is part of Groupe Gardeners and was formed from the merger of two agencies in 2019, indicating a medium-sized, well-established business with a strong regional presence. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager, Google Analytics, Matomo, Vimeo, and Google reCAPTCHA. The site is well-optimized for mobile devices and SEO, with good accessibility features. Privacy compliance is addressed through cookie consent mechanisms and a privacy policy page. However, some security best practices like explicit security headers and published security policies are missing. The security posture is solid with HTTPS enforced and anti-bot protections in place, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Despite this, the professional website, social media presence, and multiple industry awards support the agency's credibility. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices, though domain registration transparency should be verified. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to improve trust and compliance.

M

Městské informační centrum Havířov

havirov-info.cz

49

Městské informační centrum Havířov operates as the official city information center for Havířov, Czech Republic, providing residents and visitors with comprehensive information on cultural events, tourism, municipal services, and local activities. The website serves as a public service portal, offering event calendars, ticket pre-sales, and contact details, positioning itself as a trusted local government resource. The business model is focused on community engagement and information dissemination rather than commercial activities. Technically, the website is built on WordPress 6.8.3 with Elementor and several plugins such as Modern Events Calendar Lite, ensuring a modern and responsive user experience. Hosting and domain registration are consistent with the Czech Republic location, and the site uses HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and no formal security or incident response policies are published on the site. No vulnerabilities or exposed sensitive data were detected, indicating a generally secure posture for a government information portal. Overall, the website is trustworthy, professionally maintained, and compliant with EU privacy regulations. It lacks some advanced security disclosures and incident response information but otherwise meets expectations for a local government information site. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to mitigate risks.

K

KV-Media studio s.r.o.

kvmediastudio.cz

49

KV-Media studio s.r.o. is a Czech Republic based multimedia and creative marketing studio founded in 2021, specializing in UX/UI design, web development, branding, video production, podcasting, graphic design, photography, and AV equipment rental. The company targets businesses seeking comprehensive multimedia marketing solutions and maintains a professional online presence with a well-structured and content-rich website. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and optimized for SEO and mobile devices. Security posture is good with HTTPS and cookie consent implemented, though lacking explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

T

The Kukang Rescue Program, z.s.

kukang.org

52

The Kukang Rescue Program is a small non-profit organization founded in 2014 focused on the conservation of endangered slow lorises in Sumatra, Indonesia. The organization operates through community engagement, education, anti-poaching efforts, and sustainable farming projects such as the Kukang Coffee initiative. It maintains partnerships with multiple zoos and conservation groups, enhancing its credibility and reach. The website reflects a professional and consistent brand image with clear messaging targeted at conservationists, donors, and local communities. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries like jQuery and Bootstrap. It features multimedia content including embedded YouTube videos and responsive design optimized for mobile devices. While performance is moderate, the site lacks some advanced accessibility features and security headers, which could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and security posture. The WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's content quality and partner ecosystem provide strong trust signals. Overall, the site is a credible and well-maintained platform for wildlife conservation awareness, though it would benefit from improved privacy compliance and security best practices to strengthen its risk profile and user trust.

T

Terén

jasuteren.cz

45

Terén is a Czech cultural platform dedicated to contemporary live art and new forms of audience engagement, operating primarily in the Czech Republic. Founded in 2019, it organizes performative art events, artistic projects, and open calls for artists, supported by the Centrum experimentálního divadla (CED) Brno. The website serves as an information hub for events, projects, and newsletters targeting a general audience interested in the arts. Technically, the site employs modern JavaScript libraries such as jQuery, GreenSock, and ScrollMagic, with asynchronous loading of Google Analytics and Tag Manager scripts, indicating a moderate level of digital maturity. Hosting and domain registration are consistent with the Czech location and cultural focus, enhancing trustworthiness. Security posture is adequate with HTTPS enforced, but lacks security headers and visible privacy or cookie policies, representing compliance and security improvement opportunities. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

M

Magazín O webu

owebu.cz

59

Magazín O webu is a Czech-language online magazine specializing in web development, SEO, internet marketing, copywriting, social media, and e-commerce topics. It targets web developers, marketers, and small business owners seeking practical advice and tutorials. The website is hosted by BANAN.CZ and uses a custom CMS called Web Bez starosti. The technical infrastructure includes modern JavaScript libraries and frameworks such as jQuery, Bootstrap (modal only), and Google Tag Manager for analytics and marketing. The site is mobile responsive and well-structured, providing a good user experience with clear navigation and regularly updated content. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces transparency and trust slightly, but the website content and contact information appear professional and legitimate. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable resource in its niche.

M

Mulhouse Alsace Agglomération - m2A

m2a.fr

56

Mulhouse Alsace Agglomération (m2A) is a regional government entity serving 39 communes in the Mulhouse Alsace region of France. The website acts as the official portal for territorial development, public services, environmental initiatives, culture, tourism, and economic activities. It targets residents, local businesses, and stakeholders within the region, providing comprehensive information and access to services. The site is well-branded and professionally designed, reflecting its official status. Technically, the website is built on WordPress with a variety of plugins including Yoast SEO Premium, Elementor, and AngularJS for dynamic content. It integrates Google Analytics and Google Tag Manager for analytics and uses WP Rocket for performance optimization. The site is mobile-optimized and includes accessibility features, though some improvements could be made. The use of AngularJS 1.4.14 is outdated and may pose security risks. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are found. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, though the website content and social media presence strongly indicate legitimacy. Overall, the website presents a solid digital presence for a government entity with good content quality and privacy compliance. Strategic recommendations include updating legacy libraries, enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and security posture.

M

Mulhouse

mulhouse.fr

58

Mulhouse.fr is the official municipal website of the city of Mulhouse, France, providing comprehensive information and services to residents and visitors. The site covers a wide range of topics including employment, municipal administration, urban development projects, culture, education, health, and social services. It serves as a central hub for local government communication and citizen engagement, featuring news, interactive maps, and access to various public resources. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap for responsive design, jQuery, Swiper.js for interactive elements, and Matomo Analytics configured with privacy by design principles. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by Yoast SEO plugin and structured data in JSON-LD format. From a security perspective, the site enforces HTTPS and uses a cookie consent management tool (tarteaucitron) to comply with privacy regulations. However, no explicit security headers were detected, and there is no visible security policy or incident response information published. The WHOIS data is unavailable, likely due to registry restrictions or privacy protection, which limits domain registration trust verification but does not detract from the site's legitimacy given its official nature. Overall, Mulhouse.fr presents a professional, trustworthy, and user-friendly platform for municipal services and information. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen security posture and transparency.

C

Communauté de communes du Haut-Poitou

cc-hautpoitou.fr

48

The website cc-hautpoitou.fr represents the Communauté de communes du Haut-Poitou, a French local government entity established in 2017 serving 27 communes. The site provides information on community services including youth, social services, culture, sports, economy, and territorial planning. It targets residents and stakeholders of the Haut-Poitou region and operates as a public intercommunal cooperation body. The website is built on WordPress using the Enfold theme and several plugins such as Contact Form 7 and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could improve protection. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and professionally maintained, reflecting the legitimacy of the public institution it represents.

C

Communauté d'Agglomération Pays Basque

communaute-paysbasque.fr

63

The website www.communaute-paysbasque.fr serves as the official portal for the Communauté d'Agglomération Pays Basque, a regional government entity in France. It provides comprehensive information and services related to public utilities, environmental initiatives, transport, waste management, housing, agriculture, culture, and social services tailored for residents, businesses, and associations within the Pays Basque region. The site is multilingual, primarily in French, with Basque and Gascon language options, reflecting the local cultural context. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Matomo analytics with privacy by design, and a robust cookie consent mechanism via tarteaucitron.js. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Performance is moderate, with room for optimization. From a security standpoint, the site enforces HTTPS and uses privacy-focused analytics. However, explicit security headers are not clearly detected, and no public security policy or incident response contacts are provided. The absence of WHOIS registration data for the domain reduces trust from a domain legitimacy perspective, though the content and domain suffix strongly indicate a legitimate government site. Overall, the website is professional, trustworthy, and privacy-conscious, serving its public sector mission effectively. Strategic improvements in transparency around security policies, incident response, and domain registration details would enhance trust and compliance further.

V

Ville de Saint-Germain-en-Laye

saintgermainenlaye.fr

73

The website www.saintgermainenlaye.fr is the official municipal portal for the city of Saint-Germain-en-Laye, France. It serves as a comprehensive information hub for residents and visitors, offering news, event agendas, e-services, urban planning details, and contact resources. The site is well-branded with official logos and consistent messaging, targeting local citizens and stakeholders. The business model is that of a government entity providing public services and digital access to municipal resources. Technically, the site is built on TYPO3 CMS with Bootstrap framework, incorporating modern web technologies such as Matomo analytics for privacy-respecting tracking and Facil-iti for accessibility enhancements. The site is mobile-optimized and includes SEO and accessibility best practices, though some security headers are not explicitly detected. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were found. However, the absence of explicit security policies or incident response contacts is noted. The WHOIS data is unavailable, which slightly reduces trust signals but is mitigated by the official nature and content quality of the site. Overall, the site presents a low-risk profile with strong content quality and good technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain trust and compliance.

S

Sète agglopôle méditerranée

agglopole.fr

51

Sète agglopôle méditerranée is a French public sector regional government entity serving the Sète agglopôle méditerranée area, encompassing 14 communes. The website provides comprehensive information about local government services, territorial development, economic initiatives, environmental management, housing, culture, and transport. It targets residents, businesses, and stakeholders within the region. The site is well-branded and professionally maintained, reflecting its role as an official government portal. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, and several plugins for enhanced user experience such as live search and cookie consent. The site is mobile-optimized and has good SEO practices, though performance is moderate. Security is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit security policies. From a security perspective, the site shows no signs of vulnerabilities or blocking by WAFs. However, it lacks a security.txt file and incident response contact information, which are recommended best practices. Privacy compliance is basic with a cookie banner present but no explicit privacy policy page detected on the homepage. Contact information is abundant and credible, including multiple official emails, phone numbers, and physical addresses. Overall, the website is a trustworthy and professional government portal with good content quality and technical implementation. Strategic improvements in security headers, privacy policy visibility, and incident response documentation would enhance its security posture and compliance. The domain WHOIS data is unavailable, likely due to privacy protection, which is typical for such entities and does not detract from the site's legitimacy.

Lorient Agglomération operates as a French local government entity providing a broad range of public services to its 25 member communes. The website serves as an information hub for residents and businesses, covering topics such as waste management, water services, urban planning, transport, economic development, and cultural activities. The site is well-structured and targets local citizens and stakeholders within the Lorient region. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, integrating analytics tools like Google Analytics and Matomo, and implements a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enforced and privacy-focused cookie management, though some HTTP security headers are missing. The WHOIS data confirms the domain's legitimacy and consistency with the website's governmental nature. Overall, the site is professional, trustworthy, and serves its community effectively.

R

Resallience

resallience.com

70

Resallience is a specialized consulting and engineering firm focused on climate change adaptation and resilience, operating as part of the VINCI group. The company offers innovative technical solutions, integrated engineering, and economic models tailored to climate challenges, serving a diverse international client base including public institutions, finance, infrastructure operators, and industrial sectors. Their market position is strong within the climate adaptation niche, with over 100 projects across more than 90 countries since 2019. Technically, the website is built on WordPress with modern SEO and performance optimizations, including cookie consent management and analytics tools. Security posture is good with HTTPS and privacy compliance, though explicit security policies and incident response contacts are absent. The domain WHOIS data is missing, which raises transparency concerns but the website content and branding strongly indicate legitimacy. Overall, the site is professional, well-structured, and trustworthy, with room for improvement in security disclosures and domain registration transparency.

S

Setec

setec.fr

62

Setec is a French multidisciplinary engineering group specializing in complex and innovative construction projects worldwide. The company targets professional clients in sectors such as energy, transport, and telecommunications. Their website reflects a mature digital presence built on WordPress, enhanced with SEO tools and privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism, demonstrating compliance with privacy regulations. However, explicit privacy policy and terms of service pages were not detected in the provided content, which could be improved for better compliance and transparency. The absence of WHOIS data limits domain trust assessment, but the professional presentation and content quality support the company's legitimacy.

T

TPF Ingénierie

tpf-i.fr

43

TPF Ingénierie is a well-established French engineering consultancy specializing in building, infrastructure, environmental, and energy sectors. The company positions itself as an independent international group with over 30 years of experience, offering multidisciplinary and innovative project management and engineering services. Their website reflects a professional and consistent brand image, targeting architects, urban planners, engineers, and enterprises seeking integrated and sustainable engineering solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery, and Slider Revolution, ensuring good SEO and user experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks some security headers and explicit security policies. Overall, the site is accessible, professional, and trustworthy, though improvements in privacy compliance and security posture are recommended.

P

Paris-Est Sup

paris-est-sup.fr

55

Paris-Est Sup is a consortium of 17 higher education and research institutions located in the Paris-Est region of France. It serves a large academic community including 60,000 students and 1,380 doctoral candidates, offering doctoral education, research collaboration, innovation project support, and student entrepreneurship programs. The website reflects a well-structured academic institution with a focus on research and education. Technically, the site is built on TYPO3 CMS with modern web technologies and includes cookie consent and analytics tracking. Security posture is adequate with HTTPS and some security headers but could be improved with additional headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly but does not detract from the professional presentation and trustworthiness of the site content. Overall, the site is safe, professional, and well-targeted to its academic audience.

ESIEE Paris is a well-established French engineering school specializing in technological innovation, digital, energy, and environmental transitions. It holds prestigious accreditations such as CTI and CGE and offers a broad range of engineering programs including apprenticeships and international degrees. The website reflects a professional and modern educational institution with clear navigation, comprehensive content, and strong trust indicators including certifications and alumni references. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes robust cookie consent mechanisms ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie management but lacks explicit security policies and visible security headers. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the overall legitimacy supported by external partnerships and certifications.

The website 'Médiathèques Argentan' serves as a regional informational media platform providing news and educational content primarily in French. It targets a general audience interested in cultural, educational, and societal topics. The site is built on WordPress with common optimization plugins such as WP Rocket and uses technologies like jQuery and FontAwesome. The technical infrastructure is modern and optimized for performance and mobile devices. Security posture is adequate with HTTPS and a Content Security Policy header, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and structure appear professional and trustworthy. No contact information or social media links are provided, which reduces business credibility and user trust. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and clearer business transparency.

C

Conseil départemental de l'Orne

orne.fr

63

The Conseil départemental de l'Orne operates as the official government body for the Orne department in Normandy, France. The website serves as a comprehensive portal for residents and stakeholders, offering news, public services, administrative procedures, and cultural information. It holds a strong market position as the authoritative source for regional government information and services. The digital infrastructure is built on Drupal 10, integrating modern web technologies and privacy-conscious analytics (Matomo). The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital presence. Security measures include HTTPS enforcement, reCAPTCHA v3 on forms, and cookie consent management, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but is likely due to AFNIC policies or privacy protections. Overall, the site is trustworthy, professional, and safe for general audiences.

V

Ville d'Argentan

argentan.fr

10

The website argentan.fr serves as the official digital presence for the city of Argentan, France, providing municipal information, citizen services, event updates, and tourism resources. It targets residents and visitors, positioning itself as a trusted government portal with a medium-sized operational scope. The site leverages a modern WordPress CMS infrastructure with popular plugins and frameworks such as Elementor, Bootstrap, and Leaflet.js, indicating a mature and maintainable technical foundation. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and GDPR-compliant cookie consent management, though there is room for improvement in implementing comprehensive security headers. Overall, the site demonstrates a good balance of usability, compliance, and security for a government entity.

P

Portobello Communication

portobello-communication.fr

62

Portobello Communication is a small, established communication agency based in Laval, Mayenne, France, operating since 2009. The company offers a broad range of marketing and communication services including brand strategy, web design, video production, graphic design, and social media marketing. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and WP Rocket, and integrates Matomo for analytics, indicating a focus on performance and privacy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-positioned in its local market segment.

U

Ultimately Social

ultimatelysocial.com

56

Ultimately Social is a small technology company specializing in a WordPress plugin that enables website owners to easily add and customize social media icons and sharing buttons. The company has established a strong market position with over one million downloads and excellent user ratings, targeting WordPress users and small to medium businesses seeking social media integration. Their business model relies on direct sales and third-party platform licensing with subscription options and a referral program. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various analytics and marketing tools. Hosting and domain registration are stable and consistent with the business profile. Security posture is good with HTTPS enforced and secure checkout, though improvements such as enabling DNSSEC and implementing Content Security Policy headers are recommended. Privacy compliance is basic with policies present but lacking explicit GDPR statements. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

M

Mairie de Mérenvielle

mairie-merenvielle.fr

54

The website www.mairie-merenvielle.fr serves as the official online presence for the municipal government of Mérenvielle, France. It provides residents and visitors with comprehensive information about local government services, administrative procedures, urban planning, community events, and contact options. The site targets local citizens and stakeholders interested in municipal affairs and community engagement. The business model is public service-oriented, focusing on information dissemination and citizen interaction. Technically, the site is built on the Ametys CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and FontAwesome. It incorporates GDPR-compliant cookie consent mechanisms via tarteaucitron and uses Matomo for privacy-focused analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms to mitigate spam. However, it lacks some advanced HTTP security headers like CSP and X-Frame-Options, which could enhance protection against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the official contact information and content quality support its authenticity. Overall, the website presents a trustworthy and professional municipal portal with solid privacy compliance and user experience. Strategic improvements in security headers and domain registration transparency would further strengthen its security posture and trustworthiness.

M

Mairie de Lasserre-Pradère

mairie-lasserrepradere.fr

49

The website www.mairie-lasserrepradere.fr serves as the official online presence for the municipal government of Lasserre-Pradère, France. It provides residents and visitors with comprehensive information about local administration, community services, urban planning, social programs, and municipal news. The site targets local citizens and stakeholders, offering essential public service information and facilitating administrative procedures. The business model is centered on public service and community engagement, positioning the site as a trusted local government resource. Technically, the website is built on the Ametys CMS platform, utilizing jQuery and the tarteaucitron cookie consent framework to ensure GDPR compliance. It integrates Matomo analytics configured for privacy by design, reflecting a mature approach to user data protection. The site is mobile-optimized, accessible, and well-structured, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no explicit security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data indicates privacy protection for the domain registration, which is appropriate for a municipal website. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional presentation. It is a reliable and trustworthy source of municipal information with minimal risk exposure. Strategic recommendations include enhancing security headers, adding incident response information, and maintaining regular CMS updates to sustain security and compliance.

M

Mairie de Léguevin

ville-leguevin.fr

51

The website www.ville-leguevin.fr serves as the official online presence for the municipal government of Léguevin, France. It provides residents and visitors with access to local government information, administrative services, cultural activities, and community engagement resources. The site is positioned as a trusted source for municipal news and services, targeting local citizens and stakeholders. Technically, the site is built on WordPress, leveraging modern plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The site demonstrates good mobile responsiveness, accessibility, and user experience, with a clear navigation structure and professional design. Security-wise, the site uses HTTPS and implements a cookie consent mechanism with granular user control, but lacks some advanced security headers and a published security or privacy policy. The absence of WHOIS data is a notable anomaly, potentially indicating a recent registration or a WHOIS server issue, which slightly impacts trust. Overall, the site is functional, professional, and safe for general audiences, with room for improvement in privacy transparency and security hardening.

M

Mairie de La Salvetat Saint-Gilles

lasalvetat31.fr

58

The website www.lasalvetat31.fr serves as the official digital presence of the municipal government of La Salvetat Saint-Gilles, France. It provides residents and visitors with comprehensive local information, including news, administrative procedures, municipal services, cultural events, and social support resources. The site targets local citizens and stakeholders, positioning itself as a key communication channel for the municipality. The business model is typical of government entities, focusing on public service rather than commercial revenue. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The site demonstrates good mobile responsiveness, accessibility features, and SEO practices. Performance is moderate, with caching and lazy loading implemented via WP Rocket. Cookie consent is managed through Tarteaucitron, ensuring compliance with European privacy regulations. From a security perspective, the site enforces HTTPS and employs privacy-friendly analytics that do not set cookies by default. However, the absence of explicit security headers and lack of published privacy policy or terms of service pages represent areas for improvement. The WHOIS data for the domain is unavailable, which is unusual for an official municipal domain and slightly reduces trustworthiness. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a well-structured, professional municipal portal with a strong focus on user experience and privacy. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and resolving WHOIS data inconsistencies to improve trust and compliance.

V

Ville de Plaisance du Touch

plaisancedutouch.fr

59

The website www.plaisancedutouch.fr serves as the official digital presence of the municipal government of Plaisance du Touch, France. It provides residents and visitors with comprehensive information about local governance, public services, community news, and administrative procedures. The site targets local citizens and stakeholders, offering a user-friendly platform to access municipal resources and engage with the community. The business model is centered on public service delivery and community engagement, positioning itself as a trusted local government authority. Technically, the website is built on the WordPress CMS platform, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-respecting analytics. The infrastructure includes modern JavaScript libraries and frameworks like jQuery and Bootstrap, ensuring responsive design and accessibility. The site demonstrates good mobile optimization and accessibility features, enhancing user experience across devices. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. While some advanced security headers are not explicitly detected, the overall security posture is solid with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data slightly reduces domain transparency but does not detract significantly from the site's legitimacy given its official nature. Overall, the site presents a professional, trustworthy, and well-maintained digital platform for municipal services. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to further strengthen trust and compliance.