Security Directory

T

TFGpl sp. z o.o.

ebutik.pl

70

eButik.pl is a well-established Polish online boutique specializing in women's fashion, offering a broad range of clothing categories including plus size and seasonal collections. The company, TFGpl sp. z o.o., has been operating since 2003, positioning itself as a trusted retailer with a focus on quality, style, and affordability. The website demonstrates strong digital maturity with a modern e-commerce platform (IdoSell Shop), comprehensive privacy and cookie policies, and integration of advanced marketing and analytics tools such as Google Analytics, Facebook Pixel, and TrustMate reviews. Security posture is robust with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the site provides an excellent user experience with mobile optimization and clear navigation, supported by credible business information and positive customer feedback.

U

Penzion Švihák lázeňský - Ubytování v Jeseníkách - Velké Losiny

ubytovani-losiny.cz

47

The website www.ubytovani-losiny.cz represents a family-run pension located in the Jeseníky region of the Czech Republic, offering accommodation services with amenities such as a heated saltwater pool, sauna, and breakfast buffet. The business targets families, couples, individuals, and groups seeking comfortable lodging in a spa town environment. The site is well-structured with clear navigation and detailed service descriptions, supporting a positive user experience. Technically, the site employs modern frontend technologies including Bootstrap 4, jQuery, and Slick Carousel, and integrates Google Analytics and reCaptcha for tracking and security. However, the absence of visible security headers and privacy/cookie policies indicates room for improvement in security and compliance. The WHOIS data is unavailable, which limits domain legitimacy verification and slightly impacts trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

J

Jez Koncept

jezkoncept.cz

47

Jez Koncept is a Czech hospitality and catering company with a history dating back to the 1990s. The company operates multiple gastronomic outlets including restaurants, canteens, cafes, catering services, and fine dining concepts. Their market position is that of an established regional player offering a wide range of food services targeting both corporate clients and general consumers. The website presents a professional image with clear branding and multiple service brands linked from the main site. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup. Security measures include HTTPS enforcement and Google reCAPTCHA on the contact form, along with GDPR consent mechanisms. However, the absence of WHOIS data and some missing security headers slightly reduce the overall trust score. The site is fully accessible with no blocking or WAF challenges detected.

E

Eezy

eezy.com

67

Eezy is a digital creative services company focused on simplifying creativity by providing digital downloads, resources, and services such as stock photos, vector art, videos, an online template editor, and custom graphic design through its Design Studio. The company targets creative professionals including designers, photographers, and videographers. The website positions Eezy as a trusted provider with partnerships with major global brands. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, featuring Google Analytics and reCAPTCHA for analytics and security. Security posture is good with HTTPS and spam protection, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the business credibility given the professional site and external trust signals. Overall, Eezy presents a solid digital presence with room for improvement in privacy compliance and security best practices.

C

Calico

studio-calico.fr

47

Calico is a small, local communication agency based in Dijon, France, specializing in web and print services since 2009. Their offerings include website creation (both informational and e-commerce), graphic design, printing on various media, and promotional object marking. The company targets businesses and organizations seeking to enhance their digital and physical brand presence locally. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital infrastructure. Technically, the site runs on WordPress with modern plugins and integrates privacy-conscious analytics (Matomo) and security features like Google reCAPTCHA. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be added for improvement. The absence of WHOIS data limits domain trust analysis, but the professional presentation and clear contact information support legitimacy. Overall, Calico presents a trustworthy and competent digital presence suitable for its market niche.

C

Coqui Shoes Canada Ltd.

coqui.ca

63

Coqui Shoes Canada Ltd. operates an e-commerce platform specializing in footwear retail across Canada, offering products for children, men, and women. The website is built on WordPress with WooCommerce, providing a structured shopping experience with categorized products and customer engagement features such as product warranty and return policies. The company appears to be a small-sized business founded in 2016, targeting general consumers seeking footwear online. Technically, the website leverages a modern CMS and e-commerce stack with plugins enhancing product display and filtering. The hosting is provided by a Slovakian provider (websupport.sk), and the site uses HTTPS with Google reCAPTCHA for form security. However, DNSSEC is not enabled and security headers are absent, indicating room for improvement in security hardening. From a security perspective, the site demonstrates basic best practices but lacks advanced security policies and incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is evident. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, DNSSEC, and privacy consent mechanisms would enhance its security posture and compliance. The domain registration is privacy protected but consistent with a legitimate small business, supporting the site's credibility.

Jana Shoes is a German-based e-commerce retailer specializing in women's footwear, operating under the Wortmann Group umbrella. The website presents a professional and user-friendly shopping experience with a focus on comfort and fashion. The brand targets comfort-oriented female consumers with a broad product range and emphasizes quality and customer satisfaction. Technically, the site leverages Salesforce Commerce Cloud and integrates modern tracking and marketing tools, maintaining good performance and mobile optimization. Security posture is strong with HTTPS, secure payment options, and bot protection, though explicit incident response and vulnerability disclosure mechanisms are absent. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the retail footwear market.

A

ara shoes

ara-shoes.sk

49

ara shoes operates an official e-commerce platform specializing in premium women's footwear and accessories in the Czech Republic. The website showcases a well-structured product catalog with clear branding and a focus on quality and customer convenience, including free shipping and in-store pickup options. Technically, the site is built on PrestaShop with modern frontend technologies and includes structured data for SEO benefits. Security measures include HTTPS and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is addressed through a cookie consent banner and a basic cookie policy page. However, the absence of WHOIS data and explicit contact information limits full trust assessment. Overall, the site presents a professional and functional online retail experience with moderate technical and security maturity.

R

Rieker Holding AG

rieker.com

67

Rieker Holding AG is a well-established European footwear manufacturer with a history spanning approximately 150 years. The company operates globally under the brands Rieker and remonte, offering fashionable shoes that emphasize comfort and functionality. Their business model includes manufacturing, retail through online shops, and a dedicated B2B portal for dealers. The website reflects a mature digital presence with multilingual support and clear navigation, targeting consumers seeking quality leisure footwear. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Google reCAPTCHA for bot protection. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned policies. The extensive use of third-party analytics and advertising pixels indicates a comprehensive marketing strategy with good transparency. Overall, the website presents a professional, trustworthy, and secure digital front for Rieker Holding AG. The lack of WHOIS data for the subdomain limits domain registration verification but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and compliance.

D

Département de l'Yonne

yonne.fr

49

The website www.yonne.fr serves as the official digital portal for the Département de l'Yonne, a regional government entity in France. It provides residents and visitors with access to public services, administrative procedures, news, events, and digital publications. The site is well-positioned as a trusted government resource with a clear focus on serving the local population. Technically, the site is built on WordPress, leveraging popular plugins such as Yoast SEO and LayerSlider, and integrates Matomo for analytics, indicating a modern and privacy-conscious infrastructure. Security measures include HTTPS enforcement, security headers, and the use of Google reCAPTCHA to protect forms. However, the absence of WHOIS data limits external verification of domain registration details, though the website's content and branding strongly support its legitimacy. Overall, the site demonstrates a strong security posture and compliance with GDPR, with comprehensive privacy and cookie policies in place.

C

Conseil National des Villes et Villages Fleuris (CNVVF)

villes-et-villages-fleuris.com

52

The website represents the Conseil National des Villes et Villages Fleuris (CNVVF), a well-established French national label promoting sustainable urban development and quality of life in municipalities. It supports nearly 4,700 communes with certification and expert guidance, emphasizing environmental preservation and citizen well-being. The site is professionally designed, mobile-optimized, and uses a modern technology stack including Bootstrap, jQuery, and various UI libraries. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and published policies. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. Overall, the domain is legitimate and stable, hosted by OVH with consistent WHOIS data.

E

Empik S.A.

empik.com

75

Empik.com is a major Polish e-commerce platform specializing in retail sales of books, music, films, electronics, toys, and home goods. It operates a marketplace and offers subscription services such as Empik Premium. The website is professionally designed with a comprehensive product catalog and clear navigation, targeting general consumers in Poland. Technically, the site uses AngularJS, Google Tag Manager, and various analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. Overall, the site presents a trustworthy and professional retail presence with minor gaps in transparency around security and WHOIS data.

F

Fort Wayne Zoo

kidszoo.org

56

Fort Wayne Zoo is a well-established non-profit zoo attraction located in Indiana, positioning itself as a top summer destination for families and children. The website offers comprehensive information about zoo admissions, memberships, events, educational programs, and volunteer opportunities, reflecting a strong community and family-oriented business model. The organization leverages partnerships for ticketing and seasonal events to enhance visitor engagement. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, TikTok and Facebook pixels, and WPBakery Page Builder, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is basic, lacking explicit cookie consent mechanisms and GDPR indicators. Overall, the site is professional, trustworthy, and safe for general audiences.

E

exceet Card Group

exceet-card-group.com

61

The exceet Card Group is a leading European manufacturer specializing in chip and plastic cards, serving sectors such as banking, government, transportation, and retail. The company produces approximately 400 million cards annually across six locations, emphasizing high security and sustainability. Their offerings include physical cards, security documents, and a digital card management app called mobile-pocket. The website reflects a mature digital presence built on WordPress with modern plugins and strong SEO and accessibility features. Security posture is robust, with HTTPS, anti-spam measures, and ISO 14298:2021 certification for security printing processes. However, the absence of WHOIS registrant data introduces a minor trust concern. Overall, the site is professional, secure, and compliant with GDPR and cookie regulations.

S

Státní tiskárna cenin

stc.cz

51

Státní tiskárna cenin is a well-established Czech government entity specializing in the production of security printing products such as banknotes, official documents, and plastic cards, complemented by advanced digital services including Track&Trace and digital tachographs. With over 95 years of experience, the company holds a strong market position as a trusted partner for both state and commercial clients domestically and internationally. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is strong, leveraging HTTPS, ISO certifications, and reCAPTCHA protections, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

C

Cabinet Dreyfus

dreyfus.fr

61

Cabinet Dreyfus is a specialized consulting firm based in Paris, focusing on intellectual property, industrial property, and new technologies. The firm targets businesses and professionals seeking expert legal advice in these domains. Their website reflects a professional boutique consultancy with clear service offerings and a strong emphasis on privacy and compliance. Technically, the website is built on WordPress using Elementor, integrating modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Rank Math SEO. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections, though lacking a dedicated security policy or incident response information. Overall, the site is well-structured, GDPR compliant, and trustworthy, with no signs of blocking or malicious activity.

P

Point Alsace

mondomaine.alsace

44

Point Alsace operates the .alsace top-level domain (TLD) aimed at promoting the digital economy of the Alsace region in France. The website serves as an informational and promotional platform for registering .alsace domains through accredited registrars. It targets businesses and individuals with ties to Alsace, emphasizing regional identity and digital presence. The site maintains a niche market position as a regional domain registry with a clear focus on local culture and economy. Technically, the website is built on WordPress with Yoast SEO, uses modern JavaScript libraries like jQuery, and integrates Google Analytics and reCAPTCHA for analytics and spam protection. The site is mobile optimized and provides a good user experience with clear navigation and relevant content updates. Security posture is adequate with HTTPS enforced and spam protection on forms, but could be improved by adding security headers and formal security policies. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration since 2014. Overall, the website is professional, trustworthy, and well-positioned within its niche, though some security and privacy enhancements are recommended.

E

Eiffage

eiffageconcessions.com

58

Eiffage Concessions operates as a key division within the Eiffage group, focusing on infrastructure concessions such as roads, railways, ports, and airports. The company positions itself as a strategic partner for transition projects and infrastructure management, serving public and private sector clients. The website reflects a mature enterprise with consistent branding and a professional digital presence. Technically, the site employs modern JavaScript libraries and analytics tools, with a cookie consent mechanism indicating GDPR awareness. However, the absence of WHOIS data and explicit contact information slightly detracts from transparency and trust. Security measures like reCAPTCHA are in place, but the lack of visible security headers and incident response information suggests room for improvement. Overall, the site is accessible, well-structured, and aligned with corporate standards, but enhancing security disclosures and registrant transparency would strengthen its risk posture.

E

Eiffage

eiffageenergiesystemes.com

65

Eiffage Énergie Systèmes is a French enterprise specializing in the design, realization, operation, and maintenance of electrical, industrial, climatic, and energy engineering systems. As part of the larger Eiffage group, it serves key markets including industry, infrastructure, cities, and the tertiary sector, offering tailored solutions. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations, including GDPR. The technical infrastructure leverages modern JavaScript libraries, analytics tools, and cookie consent frameworks, indicating a well-maintained platform. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and user alerts about fraud attempts, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data is a notable anomaly, suggesting either privacy protection or recent registration, which slightly impacts trust but is mitigated by consistent branding and linked official domains. Overall, the site demonstrates a solid business and technical foundation with room for enhanced transparency in security policies.

E

Eiffage

eiffageroute.com

57

Eiffage Route is a prominent French road construction company specializing in sustainable and innovative infrastructure solutions. The website presents a professional and comprehensive overview of their services, subsidiaries, and commitment to ecological transition. The digital infrastructure uses modern JavaScript libraries and analytics tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and incident response information are lacking. The absence of WHOIS data is a concern but the website content and branding strongly indicate legitimacy. Overall, the site is well-structured, trustworthy, and aligned with corporate standards.

E

Eiffage

eiffageconstruction.com

54

Eiffage Construction is a major construction and real estate development company operating primarily in France and Europe. As a subsidiary of the Eiffage group, it offers expertise in construction, urban development, real estate promotion, and maintenance services. The website reflects a professional corporate presence with consistent branding and clear navigation aimed at business and public sector clients. Technically, the site uses modern JavaScript libraries and analytics tools, including jQuery, Google reCAPTCHA, and Piano Analytics, and appears to be built on the Jahia CMS platform. The site is mobile-optimized and includes accessibility features, although explicit security headers are not detected in the provided content. The WHOIS data for the domain is missing or unavailable, which is unusual for a corporate domain and warrants further investigation. Privacy compliance is supported by a cookie consent mechanism, but explicit privacy and terms of service pages were not found in the provided content. Overall, the website is professional and trustworthy, but the lack of WHOIS data and explicit contact/security policies are areas for improvement.

V

Ville de Balaruc-les-Bains

ville-balaruc-les-bains.com

62

The website ville-balaruc-les-bains.com serves as the official municipal portal for the town of Balaruc-les-Bains in France. It provides comprehensive information about the town's thermal spa services, cultural events, public services, urban planning, and social programs. The site targets residents, tourists, and local citizens, positioning itself as a key information hub for the community. The business model is that of a government entity providing public services and information. The website is well-branded and consistent with municipal identity. Technically, the site is built on Drupal 9 CMS with Bootstrap Barrio theme and uses modern web technologies including Font Awesome and Leaflet.js for maps. Google Tag Manager and reCAPTCHA are integrated for analytics and form security. The site is mobile optimized and accessible with good SEO practices. Hosting appears stable with a domain age since 2003, indicating maturity. From a security perspective, HTTPS is enabled and forms are protected with reCAPTCHA. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy found. Social media presence is strong, enhancing trust. Overall, the website is safe, professional, and trustworthy with moderate security posture and good business credibility. Recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving privacy compliance documentation.

S

Santé publique France

santepubliquefrance.fr

57

Santé publique France is the official French national public health agency, providing authoritative information, surveillance, and prevention services related to public health. The website serves a broad audience including the general public, healthcare professionals, and policymakers. It is positioned as a key government institution in the healthcare sector in France, offering publications, studies, and health data. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for bot protection, and New Relic for performance monitoring, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy policy documentation in the provided content. Security posture is good with no evident vulnerabilities, but could be improved with better security headers and published incident response information. Overall, the site is trustworthy and professional, with a strong business credibility as a government entity.

E

Eiffage

aprr.com

60

APRR is a major motorway concession operator in France, managing a 2,410 kilometer network focused on sustainable and efficient mobility solutions. It operates under the umbrella of the Eiffage group, a large construction and infrastructure conglomerate. The website reflects a mature digital presence with comprehensive content about their services, sustainability initiatives, and corporate governance. Technically, the site uses modern JavaScript libraries, integrates video APIs, and employs cookie consent management tools, indicating a good level of digital maturity. Security-wise, HTTPS is enforced and reCAPTCHA is used, but explicit security headers and policies are not evident, suggesting room for improvement. The absence of WHOIS data is unusual but the website's branding and social media presence support its legitimacy. Overall, APRR's website is professional, compliant with privacy regulations, and serves its audience effectively.

A

ANCV Cheque-Vacances

cheque-vacances.com

57

ANCV Cheque-Vacances operates a well-established French government-backed program providing holiday vouchers to individuals and organizations, facilitating access to tourism, leisure, and cultural activities. The website reflects a mature digital presence with a strong brand, extensive partner network, and multiple user segments including public agents, enterprises, and tourism professionals. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use, though some accessibility and security header improvements are recommended. Security posture is solid with HTTPS and bot protection, but lacks some advanced DNS and header configurations. Privacy compliance is minimal on the homepage, with no visible privacy or cookie policies, which should be addressed to meet GDPR standards. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims.

E

EUROSTYLE, spol. s r.o.

footwork.sk

61

FootWork, operated by EUROSTYLE, spol. s r.o., is a well-established Slovak retail footwear business founded in 1993. The company offers a broad range of footwear, leather goods, hosiery, and care products from both Slovak and international brands. It operates multiple physical stores in Bratislava and Pezinok and maintains an e-commerce platform to serve a wider audience. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. The business targets general consumers seeking quality footwear at competitive prices.

The website sorties-scolaires-loireatlantique.com is operated by Loire-Atlantique Développement and serves as a regional platform for organizing school outings and pedagogical stays in the Loire-Atlantique area of France. It targets schools, teachers, and parents of primary and college students, offering educational trips and classes de découvertes. The site is positioned as a trusted regional educational tourism service provider with a medium-sized organizational footprint, founded in 2019. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Google Analytics, and Complianz GDPR for cookie consent. The hosting registrar is Nuxit, and the site uses HTTPS with a good SSL configuration. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and reCAPTCHA on forms but lacks some security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include adding a comprehensive privacy policy, enabling DNSSEC, and enhancing security headers to strengthen the security posture and privacy compliance.

P

Play For Nature

playfornature.org

55

Play For Nature is a French non-profit organization dedicated to biodiversity conservation and environmental education. Founded in 2013, it operates by raising public awareness and collecting funds to support various conservation programs worldwide. The website serves as a platform to showcase supported projects, promote educational activities, and facilitate donations and sponsorships. The organization targets a general audience interested in environmental protection and biodiversity. Technically, the website is built on a modern WordPress CMS infrastructure using Elementor for page building and Yoast SEO for optimization. It employs standard web technologies including jQuery, Swiper.js for sliders, Google reCAPTCHA for form security, and CookieYes for cookie consent management. Hosting is provided by OVH sas, a reputable provider. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements Google reCAPTCHA to protect forms. However, it lacks DNSSEC and visible security headers, which are recommended to enhance security posture. No privacy policy or terms of service pages were detected, which may impact compliance with GDPR and other regulations. Incident response and vulnerability disclosure mechanisms are not evident. Overall, the website is professional, trustworthy, and well-positioned within its niche. To improve, it should implement comprehensive privacy and security policies, enable DNSSEC, and add security headers. These steps will enhance user trust and regulatory compliance.

R

Ready for Boarding - travel not only by plane

readyforboardingblog.com

47

Ready for Boarding is a multilingual travel blog primarily targeting travel enthusiasts interested in experiences beyond air travel. Established around 2013, it offers travel stories, tips, and guides with a focus on Poland and Central Europe. The website is built on WordPress and integrates multiple third-party services including WooCommerce for e-commerce, Google Analytics for traffic analysis, and Facebook Pixel for advertising effectiveness. It employs a comprehensive cookie consent mechanism and privacy policy compliant with GDPR, reflecting a mature approach to privacy and user consent. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks visible security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and consistent with a small professional travel blog. Overall, the site demonstrates good technical and content quality with room for improvement in security transparency and domain registration clarity.

G

Genesii

genesii.fr

52

Genesii is a French technology company specializing in bespoke web application development, custom websites, and AI integration services. Positioned as a small but innovative agency, it serves businesses seeking digital transformation solutions. The company holds the 'Jeune Entreprise Innovante' certification, highlighting its commitment to innovation and research, particularly in machine learning and e-learning platforms. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting its business credibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Owl Carousel, and Swiper. It integrates Google Analytics, Google Tag Manager, and Calendly for marketing and scheduling. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a GDPR-compliant cookie consent mechanism. However, additional security headers and a published security policy would enhance its security posture. The security evaluation shows a good baseline with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong with visible policies and consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the website content and certifications support legitimacy. Overall, the site is safe, professional, and trustworthy, with recommendations to improve security headers and incident response transparency. Strategically, Genesii should focus on enhancing its security documentation, expanding accessibility compliance, and maintaining transparency in data protection to strengthen trust and compliance in the evolving regulatory landscape.

B

Bwin Casino Oostende

casinooostende.be

40

Bwin Casino Oostende operates as a casino and entertainment venue in Belgium, offering casino gaming, events, jackpots, and restaurant services. The website is professionally designed using WordPress and Elementor, with modern web technologies and a cookie consent mechanism in place. Security posture is good with HTTPS and bot protection via Google reCAPTCHA, though explicit security headers and privacy policies are missing. The domain WHOIS data is restricted, which is common for privacy but reduces transparency. Overall, the site targets adult casino customers and maintains a moderate trust level.

C

CENTROPOL ENERGY, a.s.

centropol.cz

56

CENTROPOL ENERGY, a.s. operates as a reliable energy supplier in the Czech Republic, providing gas and electricity to households and businesses for over two decades. The company emphasizes fair pricing and additional customer benefits, positioning itself as a trusted player in the energy sector. The website reflects a professional digital presence with clear branding and relevant content tailored to its target audience. Technically, the site is built on WordPress with a modern technology stack including Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for bot protection. While the site is mobile-optimized and SEO-friendly, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts overall trust. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve credibility and compliance.

N

NH HOTEL GROUP, S.A.

nh-collection.com

77

NH Collection Hotels, operated by NH HOTEL GROUP, S.A., is a large international hospitality brand offering premium hotel accommodations across more than 100 hotels in 24 countries. The website targets travelers and business customers seeking quality lodging in major cities such as Madrid, Milan, and Barcelona. The business model focuses on direct online bookings, reservation management, and customer loyalty programs. The brand maintains consistent and professional digital presence with multilingual support and clear navigation.

V

Vinofol, s.r.o.

vinofol.cz

52

Vinofol, s.r.o. is a well-established family winery based in the Czech Republic, operating since 1992. The company specializes in producing and selling high-quality wines from the Mikulov and Novosedly regions, leveraging modern technology and traditional winemaking methods. Their market position is strong within the Czech wine retail sector, supported by a broad product range, including award-winning wines, and a multi-channel sales approach via e-shop and physical vinoték stores. The website reflects a mature digital presence with integrated marketing and analytics tools, providing a professional user experience and clear business information. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content. The site targets adult consumers, implementing age verification due to alcohol sales regulations.

R

Rebrandly

rebrand.ly

74

Rebrandly is a leading SaaS company specializing in branded link shortening, campaign analytics, and QR code generation. Positioned as a market leader, it serves marketing teams, developers, agencies, and creators with a comprehensive smart link platform. The company emphasizes boosting click-through rates and proving campaign ROI through its services. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, and integrates advanced analytics and consent management tools. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security-wise, Rebrandly demonstrates strong compliance with SOC 2, HIPAA, and GDPR standards, employs HTTPS with robust security headers, and uses CAPTCHA to protect forms. However, WHOIS data is unavailable, likely due to privacy protection, which is common for SaaS providers. Overall, the website is professional, trustworthy, and secure, with minor recommendations to improve transparency around vulnerability disclosure and incident response.

T

the new botanist

thenewbotanist.com

59

The New Botanist is a French ecological gardening initiative focused on promoting biodiversity by offering seed kits of local wildflowers to create pollinator refuges. The website is hosted on Squarespace, leveraging standard web technologies and security features such as HTTPS and HSTS. While the site is well-designed, mobile-optimized, and provides relevant content for environmentally conscious gardeners, it lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate small business. Security posture is strong with HTTPS and reCAPTCHA usage, but improvements in privacy compliance and contact transparency are recommended.

U

Université Bourgogne-Franche-Comté

ubfc.fr

43

Université Bourgogne-Franche-Comté (UBFC) is a prominent French higher education and research consortium offering a broad range of academic programs, research initiatives, and graduate schools. The institution targets students, researchers, academic staff, and enterprises, positioning itself as a key player in national education and research. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Matomo and Facebook Pixel. Security posture is strong with HTTPS and reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting trust and regulatory adherence. Overall, UBFC's website demonstrates professionalism, credibility, and a solid digital infrastructure.

P

PanneauPocket

panneaupocket.com

52

PanneauPocket is a French-based company providing a leading mobile application designed for local governments such as municipalities and intercommunal entities (EPCI) to communicate real-time information and alerts to residents. Established in 2017, the company has positioned itself as the number one mobile alert and information app in France, serving over 13,500 local entities including gendarmeries and covering approximately 8 million residents. Their key services include push notifications, RSS feeds, legal postings, directories, and event calendars, all aimed at enhancing local communication efficiency and citizen engagement. Technically, the website is built on WordPress with Elementor and leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and analytics. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Analytics tools such as Matomo and Microsoft Clarity are used for user behavior tracking, complemented by Google reCAPTCHA for form security. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable, which slightly reduces trust but is mitigated by strong business signals such as media coverage, partnerships with official organizations, and transparent contact information. Overall, PanneauPocket presents a professional, trustworthy, and well-maintained digital presence with a strong market position in the French local government communication sector. Strategic improvements in security headers and publishing a dedicated security policy would further enhance their security posture and trustworthiness.

A

Agence Gardeners

agencegardeners.com

45

Agence Gardeners is a creative and digital communication agency operating primarily in France and Switzerland. It offers a comprehensive suite of services including branding, communication strategy, web and e-commerce development, advertising, SEO, social media management, and influencer marketing. The agency positions itself as a one-stop shop, merging creative and technical expertise to deliver seamless communication strategies. The company is part of Groupe Gardeners and was formed from the merger of two agencies in 2019, indicating a medium-sized, well-established business with a strong regional presence. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager, Google Analytics, Matomo, Vimeo, and Google reCAPTCHA. The site is well-optimized for mobile devices and SEO, with good accessibility features. Privacy compliance is addressed through cookie consent mechanisms and a privacy policy page. However, some security best practices like explicit security headers and published security policies are missing. The security posture is solid with HTTPS enforced and anti-bot protections in place, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Despite this, the professional website, social media presence, and multiple industry awards support the agency's credibility. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices, though domain registration transparency should be verified. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to improve trust and compliance.

G

Galio marketing s.r.o.

galio.cz

30

Galio marketing s.r.o. is a Czech Republic based small marketing and advertising agency established in 1999. The company offers services including graphic design, advertising, website development, e-commerce solutions, printing, and marketing. The website is professionally designed using WordPress with the Divi theme and integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The content is primarily in Czech, targeting local businesses and individuals seeking marketing services. The domain registration data aligns well with the business information, indicating legitimacy and a long-standing presence in the market. However, the website lacks explicit privacy and terms of service pages, which are important for compliance and user trust.

E

Eiffage

eiffage.com

66

Eiffage is a leading European construction and concessions group specializing in infrastructure development, energy systems, and real estate. The company holds a strong market position as a major player in the construction sector, with a broad portfolio of subsidiaries covering various specialized domains such as construction, rail, metal works, and energy systems. The website reflects a professional corporate presence with consistent branding and comprehensive information about its group and subsidiaries. Technically, the website employs modern JavaScript libraries including jQuery, YouTube and Vimeo APIs, and integrates Google reCAPTCHA for form security. The use of OneTrust for cookie consent demonstrates compliance with GDPR and privacy regulations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is well-structured, accessible, and optimized for SEO and mobile devices, supporting a positive user experience and trustworthiness.

T

TPF Ingénierie

tpf-i.fr

43

TPF Ingénierie is a well-established French engineering consultancy specializing in building, infrastructure, environmental, and energy sectors. The company positions itself as an independent international group with over 30 years of experience, offering multidisciplinary and innovative project management and engineering services. Their website reflects a professional and consistent brand image, targeting architects, urban planners, engineers, and enterprises seeking integrated and sustainable engineering solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery, and Slider Revolution, ensuring good SEO and user experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks some security headers and explicit security policies. Overall, the site is accessible, professional, and trustworthy, though improvements in privacy compliance and security posture are recommended.

V

Ville d'Argentan

argentan.fr

10

The website argentan.fr serves as the official digital presence for the city of Argentan, France, providing municipal information, citizen services, event updates, and tourism resources. It targets residents and visitors, positioning itself as a trusted government portal with a medium-sized operational scope. The site leverages a modern WordPress CMS infrastructure with popular plugins and frameworks such as Elementor, Bootstrap, and Leaflet.js, indicating a mature and maintainable technical foundation. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and GDPR-compliant cookie consent management, though there is room for improvement in implementing comprehensive security headers. Overall, the site demonstrates a good balance of usability, compliance, and security for a government entity.

G

Générations Futures

victimes-pesticides.fr

54

Victimes-pesticides.fr is a French non-profit advocacy website operated by Générations Futures, dedicated to raising awareness about the health and environmental impacts of pesticide exposure. The platform primarily serves residents living near agricultural lands, professionals, and the general public concerned about pesticide risks. It collects and publishes detailed personal testimonies to support advocacy efforts and inform the public about pesticide-related health issues. The website is positioned as a niche player in environmental health advocacy within France. Technically, the site is built on WordPress, leveraging modern web technologies such as Yoast SEO for optimization, Leaflet.js for mapping, and Google reCAPTCHA for form security. Hosted by OVH, the site benefits from HTTPS encryption and standard security headers, ensuring a secure browsing experience. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website follows best practices with HTTPS, security headers, and anti-bot measures. However, it lacks explicit privacy and cookie policies, incident response contacts, and data protection officer information, indicating areas for compliance improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the site is a credible and professionally maintained platform with a clear mission. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing incident response contacts, enhancing accessibility, and maintaining transparency to strengthen trust and compliance.

G

Générations Futures

semaine-sans-pesticides.fr

46

The website 'Semaine pour les alternatives aux pesticides' is a professionally maintained platform promoting a non-profit event focused on alternatives to pesticides, organized by Générations Futures. It targets a general audience interested in environmental sustainability and agricultural alternatives, providing event information, news, and resources. The site is well-structured, multilingual, and uses modern web technologies including WordPress, Yoast SEO, and Leaflet.js for interactive maps. It integrates Google Analytics and Google reCAPTCHA for analytics and form security respectively. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is not publicly available, indicating privacy protection, which is justified for this non-profit entity. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience.

K

Kredance

kredance.cz

56

Kredance is a Czech cultural organization specializing in dance and movement arts, providing a variety of courses, workshops, artistic residencies, and cultural events. The website reflects a niche market position focused on arts education and community engagement within the Czech Republic. The digital infrastructure is built on WordPress with WooCommerce integration, indicating e-commerce capabilities for event ticketing or course registration. The site uses modern web technologies including jQuery, Swiper.js for sliders, and Google reCAPTCHA for bot protection, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with privacy and terms pages present, though cookie consent mechanisms are absent. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

L

LJ Studio, s.r.o.

lj.studio

59

LJ Studio, s.r.o. is a professional digital agency specializing in web design, branding, app development, ecommerce solutions, and AI-driven innovations. The company positions itself as a full-service creative and development studio powered by strategy and technology, targeting brands and companies seeking to enhance their digital presence. Their market position is supported by a portfolio of notable clients, case studies, and official partnerships such as with Shopify. Technically, the website is built on WordPress with modern plugins like Yoast SEO, Google Analytics, Facebook Pixel, and Smartsupp Live Chat, indicating a mature digital infrastructure. The site is well-optimized for mobile devices, uses HTTPS, and implements cookie consent mechanisms, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with cookie consent present but no explicit privacy policy page found in the provided content. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in security headers and privacy disclosures. The domain WHOIS data is limited due to privacy protection but shows no suspicious patterns. The risk level is low, and the site is suitable for business use with recommended enhancements in compliance and security transparency.

I

IAB Slovakia

iabslovakia.sk

51

IAB Slovakia is the largest Slovak digital association operating in the internet advertising sector. It provides market rules, standards, ethical codes, supports professional networking, educates digital marketing professionals, and measures the traffic of Slovak online media. The website is built on WordPress and integrates modern technologies such as Google Tag Manager, Cookiebot for cookie consent management, Hotjar for user behavior analytics, and Google reCAPTCHA for bot protection. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional content. Security posture is strong with HTTPS enforced and multiple security headers present. Cookie consent is comprehensive and GDPR compliant, with detailed cookie categorization and user control. However, no explicit terms of service or security policy pages were found, and direct contact emails or phone numbers are not exposed on the site, relying on contact forms instead. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website demonstrates a mature digital presence with good security and privacy practices, suitable for its role as a professional industry association.

C

CRESS

cress-na.org

44

CRESS Nouvelle-Aquitaine is a regional non-profit organization dedicated to the development of the Social and Solidarity Economy (ESS) in the Nouvelle-Aquitaine region of France. The website serves as an informational and engagement platform targeting regional stakeholders interested in economic transition and social economy initiatives. The organization positions itself as a key regional actor supporting a just economic transition through ESS development. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts, Matomo analytics for user tracking, and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with the presence of reCAPTCHA but absence of visible security headers and unknown SSL configuration. WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the website is professional and relevant to its audience but would benefit from enhanced privacy disclosures and security hardening.