Security Directory

K

K-TEL Communications GmbH

ktel.de

49

K-TEL Communications GmbH is a German telecommunications consulting and service company with over 20 years of experience. They specialize in providing independent advice and transparent brokerage for business IT and telecommunications infrastructure, targeting a broad range of clients from global enterprises to regional startups. Their key services include strategic consulting, contract management, cloud solutions, mobile services, and smart IoT and 5G network deployments. The company positions itself as a trusted partner for modern, secure, and scalable communication solutions. Technically, the website is built on WordPress with a modern tech stack including jQuery and various plugins for user interaction, cookie compliance, and content management. Hosting appears to be with a German provider, and the site demonstrates good mobile optimization and SEO practices. The site uses HTTPS with strong SSL configuration and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a public incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the business claims, and no privacy protection obscures registrant information, supporting legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy digital presence for K-TEL Communications GmbH. Strategic improvements could include adding security headers, publishing an incident response contact, and establishing a vulnerability disclosure policy to enhance security posture further.

P

Plose Ski AG

plose.org

50

Plose Ski AG operates a professional tourism website focused on the Plose mountain area in South Tyrol, Italy, offering winter and summer mountain activities such as skiing, hiking, and mountain biking. The website targets families and tourists seeking leisure and sports in the Dolomites region. It holds a strong regional market position with key services including ski lifts, accommodation, equipment rental, and guided tours. The digital presence is supported by a modern WordPress CMS with Divi theme and multiple plugins, ensuring good user experience and mobile optimization. The site integrates GDPR-compliant cookie consent via Usercentrics but lacks a clearly accessible privacy policy and contact information, which are areas for improvement. Security posture is solid with HTTPS and standard security practices, though explicit security headers and vulnerability disclosure mechanisms are absent. WHOIS data is unavailable or malformed, limiting domain trust verification, but the website's content and social media presence support its legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

T

Texas A&M University

tamu.edu

72

Texas A&M University is a large, established public research university founded in 1876, serving students and researchers primarily in the United States. The website reflects a professional and comprehensive digital presence with a focus on education and research. The technical infrastructure includes modern JavaScript libraries and analytics tools such as Google Tag Manager and Microsoft Clarity, indicating a mature digital strategy. Security posture is moderate with HTTPS usage and deferred script loading, but lacks visible security headers in the provided content. Privacy and cookie policies were not detected, suggesting room for improvement in compliance transparency. Overall, the site is trustworthy and well-maintained, consistent with a major educational institution.

N

NatureServe

natureserve.org

62

NatureServe is a well-established nonprofit organization specializing in biodiversity data and conservation science across North America. With a 50-year history, it collaborates with a broad network of scientists and organizations to provide authoritative data that supports conservation efforts. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its mission. Technically, the site is built on Drupal 10 with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Mailchimp. The site is mobile-optimized and accessible, though performance is moderate. Security posture is solid with HTTPS and some security headers, but could be enhanced with additional headers and explicit cookie consent mechanisms. Overall, the security and privacy compliance is good, with a comprehensive privacy policy and clear contact information. The WHOIS data is limited due to privacy protection, but the domain and website content align well with the organization's claims, supporting legitimacy. No critical vulnerabilities or suspicious indicators were found. Strategically, NatureServe should focus on enhancing security headers, implementing explicit cookie consent, and maintaining transparency to further strengthen trust and compliance.

B

Botanic Gardens Conservation International

bgci.org

54

Botanic Gardens Conservation International (BGCI) is a non-profit organization dedicated to promoting and developing efficient, cost-effective plant conservation strategies through botanic gardens worldwide. The website serves as a professional platform to support conservationists, researchers, and the general public interested in plant conservation. BGCI positions itself as a global leader in this niche environmental sector, offering key services such as conservation promotion, networking, and resource development for botanic gardens. Technically, the website is built on WordPress 6.4.3 with modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good SEO practices with comprehensive metadata and structured data, and it is mobile-optimized with a moderate performance profile. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, security headers are not explicitly detected, and there is no visible security or incident response policy, which are areas for improvement. Overall, the website is trustworthy and professional, with a strong focus on its mission. The lack of explicit privacy and terms of service pages, as well as contact information, slightly reduces privacy compliance and business credibility scores. The WHOIS data is privacy protected or unavailable, which is typical for non-profit organizations and does not raise immediate concerns. Strategic recommendations include adding explicit privacy and terms pages, enhancing security headers, and providing clear contact channels for security incidents.

T

Teatro Ristori

teatroristori.org

68

Teatro Ristori is a well-established cultural venue located in Verona, Italy, offering a diverse range of events including jazz, dance, baroque music, educational programs, and family-oriented shows. Supported by Fondazione Cariverona, it serves as a hub for cultural aggregation and artistic expression, targeting a broad audience from local residents to international visitors. The website reflects a professional and comprehensive digital presence with clear navigation, rich multimedia content, and up-to-date event information. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and public security policies. WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the site demonstrates high trustworthiness and business credibility.

V

VamTam Themes

vamtam.com

64

VamTam Themes is a specialized WordPress theme development company founded in 2011, focusing on creating niche themes tailored for small businesses. They have established a strong market presence with over 100,000 WordPress sites enhanced by their products and hold a Power Elite Author status on Envato Market, indicating high sales and customer trust. Their business model revolves around premium theme sales, customization services, and dedicated customer support. Technically, the website is built on a modern WordPress stack utilizing Elementor Pro and WooCommerce, ensuring a high-quality user experience with fast performance and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Overall, the website is professional, trustworthy, and well-positioned in the WordPress theme market.

A

Anketa Žebřík – Hlasování, vyhlášení, redakční tipy!

anketazebrik.cz

40

Anketa Žebřík is a Czech music awards website with over thirty years of tradition, providing information about voting, nominations, results, and event announcements related to the Žebřík music awards. The site targets Czech-speaking music fans and operates as an informational and promotional platform for the awards. Technically, the website is built on WordPress with Elementor and Astra theme, integrating modern web technologies and third-party services such as Google Analytics and Seznam advertising. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and social media presence suggest an established entity. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

L

Lille Grand Palais

lillegrandpalais.com

56

Lille Grand Palais is a professional event venue located in France, offering modular spaces for a wide range of events including conferences, shows, exhibitions, and cultural programming. The website is well-structured, visually appealing, and provides detailed information about upcoming events, venue spaces, and services. The technical infrastructure is based on WordPress with modern JavaScript libraries and analytics tools such as Piwik PRO and Google Tag Manager, indicating a mature digital presence. Security posture is generally good with HTTPS enabled and deferred script loading, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and external ticketing partnerships suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

S

SISTEC

sistec.fr

48

SISTEC is a French software company specializing in providing seven distinct online management solutions tailored for local government entities and public sector organizations. Their offerings cover critical administrative areas such as childhood services, tax collection, cemetery management, cadastre data, urban planning, and technical services. The company has positioned itself as a niche provider with a focus on web-based platforms and maintains a network of partners across France to ensure local presence and support. Recently, SISTEC joined the JVS group, indicating strategic growth and collaboration. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, leveraging Bootstrap for responsive design and Google Fonts for typography. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR principles. Analytics are implemented via Google Analytics, providing moderate user tracking. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, but lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear professional and credible. Overall, SISTEC presents a solid digital presence with room for improvement in privacy transparency and security hardening. The risk level is moderate, with recommendations to enhance compliance documentation and security headers to strengthen trust and resilience.

P

Politik in Wuppertal

politik-in-wuppertal.de

10

Politik in Wuppertal is a German civic engagement and informational website focused on local politics in the city of Wuppertal. It provides educational content, guides on political participation, and links to official city and partner organizations. The platform is positioned as a local government-related resource aimed at residents interested in municipal governance and civic involvement. Technically, the site runs on WordPress 6.8.3, uses jQuery, and includes accessibility enhancements via a dedicated plugin. Hosting is provided by the German company manitu, ensuring regional compliance and reliability. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. Privacy compliance is supported by a GDPR-compliant privacy policy, but cookie consent is missing. No contact emails or phone numbers are explicitly provided, which may affect user trust and engagement. Overall, the website is professional, accessible, and trustworthy, serving its purpose as a local government information portal effectively.

W

wer denkt was GmbH

werdenktwas.de

10

Wer denkt was GmbH operates a professional digital platform focused on facilitating citizen participation and engagement for municipalities and government entities in Germany. The company offers software tools, consulting, and facilitation services to enable effective public dialogue and participation in local governance. The website is well-structured, with clear navigation and relevant content targeting its audience. The business is positioned as an established provider in the government sector with a focus on digital engagement solutions. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting good digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses privacy plugins but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

Tierparkfreunde Chemnitz is a small non-profit organization dedicated to supporting the Tierpark Chemnitz and Wildgatter Oberrabenstein through various projects focused on animal welfare, environmental education, and community engagement. The website serves as an information hub for members, donors, and visitors, offering news, event calendars, and project details. The organization has a regional presence with a history of over fifteen years, indicating established community trust and involvement. Technically, the website is built on WordPress with a modern version and uses common plugins such as Complianz for GDPR cookie consent and WPFront Scroll Top for usability. The site is hosted on rzone.de nameservers and uses HTTPS, ensuring secure communication. The design is responsive and accessible with good navigation and content relevance, though some technical improvements like security headers could enhance the security posture. From a security perspective, the site enforces HTTPS and cookie consent mechanisms, reflecting good privacy compliance. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, which could be improved to strengthen trust and readiness. No vulnerabilities or suspicious indicators were detected in the content or WHOIS data. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic enhancements in security headers, incident response transparency, and contact information visibility would further improve the site's security and credibility.

S

Spock Gestion

spock.fr

43

Spock Gestion is a French software company specializing in chantier (construction site) management software, serving primarily companies in green spaces and public works sectors. Established in 2007, it has positioned itself as a reference solution for over 15 years, offering a collaborative and secure web-based platform. The website reflects a mature digital presence built on WordPress with Elementor and TheGem theme, integrating SEO and analytics tools such as Rank Math and Google Tag Manager. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact information and business details consistent with WHOIS data.

L

Letterbox Filmproduktion GmbH

letterbox-filmproduktion.de

50

Letterbox Filmproduktion GmbH is a German film production company specializing in high-quality fictional content including crime, drama, mystery, and comedy for TV and cinema. As a member of the Studio Hamburg Production Group, it holds a solid market position with a diverse portfolio of productions. The website is professionally designed, mobile-optimized, and uses WordPress CMS with common industry-standard technologies. Security posture is good with HTTPS and cookie consent mechanisms in place, though additional security headers and formal security policies could enhance protection. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site reflects a credible and professional media production business with moderate technical sophistication and good user experience.

A

Artribune srl

artribune.com

68

Artribune srl operates a well-established Italian digital media platform focused on contemporary art and culture since 2011. The website offers a rich array of editorial content, including news, interviews, event calendars, podcasts, and a freepress magazine distributed nationally. Its target audience includes art enthusiasts, professionals, and cultural consumers interested in diverse creative fields such as architecture, design, music, and literature. The business model combines digital publishing, newsletter subscriptions, and event promotion, positioning Artribune as a key player in Italy's cultural media landscape. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, integrating modern advertising and analytics technologies such as Google Tag Manager, Google Analytics, and multiple ad networks. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and consent management in place, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. The absence of WHOIS data for the domain www.artribune.com is a notable anomaly, reducing domain trustworthiness despite the professional and consistent web presence. No blocking or WAF challenges were detected, allowing full content access. Privacy and cookie policies are not explicitly found in the provided content, indicating room for compliance improvement. Overall, Artribune presents a credible and professional digital media presence with strong content quality and business credibility. Strategic enhancements in security headers, privacy disclosures, and domain registration transparency would further strengthen its trust and compliance posture.

B

Bundesarbeitsgemeinschaft für Sicherheit und Gesundheit bei der Arbeit

basi.de

56

The Bundesarbeitsgemeinschaft für Sicherheit und Gesundheit bei der Arbeit (Basi) is a German non-profit association comprising 86 organizations dedicated to improving workplace safety and health. The website serves as a professional platform to promote their activities, including the organization of the prominent A+A Congress, a key event in occupational safety and health. The site targets professionals and organizations involved in workplace safety in Germany and internationally. Technically, the website is built on WordPress using Elementor and Yoast SEO, ensuring a modern and SEO-optimized infrastructure. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

L

LWS (Ligne Web Services)

lws.info

50

LWS (Ligne Web Services) is a well-established French web hosting and domain registrar company founded in 1999. It offers a comprehensive range of services including shared hosting, VPS/cloud servers, domain registration with over 400 extensions, professional email services, website creation tools, e-commerce hosting, SMS sending platforms, and cloud storage solutions. The company operates multiple brands and subsidiaries, positioning itself as a leading player in the French web hosting market with a strong focus on customer satisfaction and technical innovation. Technically, the website is built on a modern WordPress CMS with Elementor and uses various contemporary web technologies such as Bootstrap and Slider Revolution. The hosting infrastructure is based in French datacenters with ISO 9001 and ISO 27001 certifications (the latter pending official certification). The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. From a security perspective, LWS enforces HTTPS, employs ModSecurity WAF for hosting protection, and is progressing towards ISO 27001 certification. However, explicit security headers and public incident response policies are not clearly published. Privacy compliance is moderate due to the absence of visible privacy and cookie policies on the main site. The WHOIS data is privacy protected but consistent with the company’s claims and hosting location. Overall, LWS demonstrates a strong business and technical foundation with good security practices. Strategic improvements in privacy transparency, incident response disclosure, and security header implementation would further enhance trust and compliance.

A

Allianz der Kultur

allianzderkultur.it

56

The Allianz der Kultur website represents a recently established cultural network in South Tyrol, Italy, focused on uniting various cultural initiatives and actors. The site is built on WordPress using the Lay theme and includes modern web technologies such as jQuery and Swiper.js. The content is well-structured and targets cultural organizations and individuals interested in cultural activities in the region. However, the website lacks critical privacy and cookie policies, which impacts compliance with GDPR and general privacy best practices. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No explicit contact emails or phone numbers were found, which may affect user trust and communication. Overall, the site is functional and professionally designed but requires improvements in privacy, security, and contact transparency.

A

Avenue-Web Systèmes

aws-france.com

63

Avenue-Web Systèmes (AWS) is a French company specializing in the dematerialization of public procurement processes, operating since 2002 as a subsidiary of the Ach@t Solutions group. The company offers a comprehensive suite of digital services including buyer profiles, teletransmission of official documents, sourcing, and business intelligence solutions tailored for public sector buyers and private companies. AWS holds a leading national position in France with a strong client base and positive customer reviews. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. The absence of WHOIS data for the domain raises concerns about domain legitimacy, but the website content and business information appear professional and credible. Overall, AWS presents a solid business offering with room for improvement in transparency and security practices.

Ukraine Fringe is a small-scale cultural theatre festival based in Ukraine, focusing on bringing international fringe theatre culture to Ukrainian audiences and raising global awareness about Ukraine. The festival operates both live in Kyiv and online via the SceneSaver platform, featuring diverse international performances and workshops. The website is built on WordPress with Elementor and related plugins, presenting a professional and well-structured event site with good design and navigation. However, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its compliance and security posture. The domain uses privacy protection, which is common for small cultural organizations, and no suspicious indicators were found. Overall, the site is functional and credible but requires improvements in privacy, security, and transparency to enhance trust and compliance.

F

FAQMob

faqmob.fr

55

FAQMob is a French-language online platform focused on delivering news, tutorials, buying guides, and deals related to high-tech, geek culture, computing, and video games. The website targets technology enthusiasts and general consumers interested in smartphones, digital products, and gaming. It operates as a content publishing site with a niche market position in the French tech media space. Technically, the site is built on WordPress with modern web technologies including jQuery, Google Fonts, Font Awesome, and optimization plugins like WP Rocket. It also integrates OneSignal for push notifications, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies such as privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and technical setup appear professional and legitimate. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security best practices.

N

noTube

notube.lol

59

noTube is a small technology-focused business providing a free, fast, and ad-free online video conversion service primarily targeting general users who want to convert videos from platforms like YouTube, TikTok, and Twitter into various audio and video formats. The service offers multi-language support and an optional subscription for enhanced features, positioning itself as a leading free converter in its niche. Technically, the website uses a custom-built platform with modern JavaScript libraries such as jQuery and analytics tools like Matomo and RealTimely. Hosting and DNS are managed via 1API GmbH and Cloudflare respectively, but DNSSEC is not enabled. Security posture is moderate with HTTPS enforced but lacks advanced security headers and published incident response policies. Privacy compliance is basic but includes cookie consent and privacy policies aligned with GDPR. Overall, the website is professional, user-friendly, and trustworthy with room for security and compliance improvements.

H

Home Instead GmbH & Co.

homeinstead.de

51

Home Instead GmbH & Co. operates Germany's largest private home care and support service network, offering individualized and compassionate care for elderly and dependent individuals. With over 179 locations across 15 federal states, the company provides a broad range of services including senior care, dementia support, 24-hour care, and assistance for people with special needs. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technical infrastructure is based on WordPress with modern plugins for SEO and cookie consent, hosted on UI-DNS servers. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

G

Gastronomie Delic Zoo Gastronomie Zoo Krefeld

zoogastronomie-krefeld.de

46

Gastronomie Delic Zoo Gastronomie Zoo Krefeld is a small hospitality business operating within the Krefeld Zoo in Germany, offering food and beverage services in a family-friendly environment. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, providing a good user experience and SEO optimization. The site includes a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and published security policies. Contact is primarily via a contact form, and social media presence is limited to Facebook. Overall, the website is professional and trustworthy for its business scope but could improve in privacy and security transparency.

The website info.wizid.com presents a professional and well-structured online presence for a business offering an all-in-one booking system tailored for leisure facilities such as zoos, museums, and parks. The platform integrates ticket sales, resource management, event handling, and cash register management into a single intelligent system with AI capabilities and full online integration. The site is built on WordPress using popular page builders and includes a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. Technically, the site uses modern web technologies and is mobile optimized, but lacks visible security headers and detailed security policies. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but reduces domain trustworthiness slightly. Overall, the site is functional, business-focused, and safe for general audiences.

G

Gemeinschaft der Zooförderer e.V.

zoofoerderer.de

53

Gemeinschaft der Zooförderer e.V. is a German non-profit association dedicated to supporting zoos and zoo friends through organizing events, publishing reports, and promoting animal conservation. The website serves as a community hub for members and interested parties, providing information on meetings, projects, and the 'Zootier des Jahres' initiative. Technically, the site is built on WordPress with a modern theme and uses HTTPS, ensuring a secure browsing experience. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of explicit contact information and terms of service pages slightly reduces business transparency. Overall, the site is well-structured, content-rich, and trustworthy for its target audience.

E

What to do today - Eventland

eventland.eu

57

Eventland.eu is a European event discovery platform that provides users with up-to-date information on concerts, festivals, parties, sporting events, and other activities across multiple European cities. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. SEO optimization is evident through the use of the Yoast SEO plugin and comprehensive meta tags. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, though the absence of explicit privacy policies and terms of service indicates room for improvement in compliance and transparency. No blocking or WAF mechanisms were detected, allowing full content accessibility.

I

Ivibet

palacgorzanow.pl

53

Ivibet Kasyno is an online gambling platform targeting Polish-speaking users, offering a wide range of casino games and sports betting services. The website claims to operate since 2019 and holds a Curaçao license, which is a common licensing jurisdiction for online gambling sites. The platform is built on WordPress with standard plugins for SEO and design, providing a professional and mobile-optimized user experience. However, the absence of verifiable WHOIS data and lack of contact or compliance documentation raises concerns about the legitimacy and transparency of the business. Security posture is weak due to missing security headers and lack of disclosed policies, which could expose users to risks. Overall, the site appears functional but lacks critical trust and compliance elements necessary for a high-trust gambling platform.

Č

Čtyři dny, z.s.

ctyridny.cz

46

Čtyři dny, z.s. operates a well-established international contemporary art festival in Prague, focusing on theater, dance, and exhibitions. The organization targets a broad audience interested in cultural and artistic events, maintaining a strong presence in the Czech cultural scene with over two decades of history. The website reflects a professional and consistent brand image, with comprehensive content and active event promotion. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced plugins for GDPR compliance and cryptographic security. The security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good digital maturity and compliance with privacy regulations. No critical vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the organization's profile, indicating high legitimacy.

C

Collectivité Territoriale de Martinique

collectivitedemartinique.mq

52

The Collectivité Territoriale de Martinique website serves as the official digital presence of the regional government authority of Martinique. It provides residents and stakeholders with access to administrative acts, aid programs, calls for candidatures, cultural events, and satellite information. The site is designed primarily for the French-speaking population of Martinique and aims to facilitate public service information dissemination. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as Bootstrap, FontAwesome, and jQuery. It employs Matomo analytics configured for privacy and Cookiebot for cookie consent management, indicating a commitment to GDPR compliance. The site is mobile-optimized and presents a professional and consistent branding aligned with government standards. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks several advanced security headers and a public vulnerability disclosure policy. The absence of WHOIS data reduces domain registration transparency, but the official branding and social media presence support its legitimacy. Overall, the site maintains a moderate security posture with room for improvement in security headers and incident response readiness. The overall risk assessment is low, with recommendations to enhance security headers, implement a security.txt file, and improve accessibility features to strengthen compliance and trust. The website is suitable for its public service role and demonstrates a good balance between usability, privacy, and security.

The website 'Bezpečné Brandýsko' serves as an official local government portal for public safety information in Brandýs nad Labem - Stará Boleslav, Czech Republic. It provides residents and visitors with updates and resources related to municipal police, Czech Police, fire brigade, social prevention, and traffic safety. The site is positioned as a trusted source for local safety news and community alerts. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, and it employs Google reCAPTCHA for form security. While the site uses HTTPS and has a professional design, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces domain registration transparency, but the presence of official contact phone numbers and local government branding supports legitimacy. Overall, the site is functional and serves its public service purpose effectively but could improve in security and compliance areas.

S

Sport studio prima

sportstudioprima.cz

46

Sport Studio Prima is a well-established fitness center located in Karlovy Vary, Czech Republic, with over 22 years of operation. The business offers a modern gym facility equipped with a wide range of machines, a spacious cardio zone, group classes, and personal training services. The website reflects a professional and consistent brand image targeting fitness enthusiasts in the local region. Technically, the site is built on WordPress using Oxygen Builder and integrates modern SEO and cookie consent tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, although there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, user-friendly, and compliant with GDPR requirements.

Svět kulturistiky is a Czech media website operated by Watch Star Media s.r.o., focusing on bodybuilding, fitness, nutrition, and health content. The site offers articles, training advice, and nutrition tips targeting fitness enthusiasts and bodybuilders primarily in the Czech Republic. The business operates as a niche media outlet with a small company size and a long-established domain since 1998. Technically, the website is built on WordPress with modern libraries such as jQuery and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and presents content professionally with good navigation and SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

Z

Zenith Lille

zenithdelille.com

56

Zénith de Lille is a regional entertainment venue in Lille, France, offering a diverse program of concerts, shows, and corporate events for the 2024/2025 season. The website is built on WordPress and integrates modern technologies such as jQuery, Slick Carousel, and analytics tools like Piwik PRO and Google Tag Manager. The site presents a professional design with good navigation and mobile optimization, targeting general public and event organizers. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and external partnerships suggest a legitimate business. Strategic recommendations include improving security headers, adding cookie consent, publishing clear privacy and terms pages, and verifying domain registration details.

T

Tourcoing Jazz Festival

tourcoing-jazz-festival.com

57

Tourcoing Jazz Festival is a well-established cultural event organizer specializing in jazz and related music genres in the Hauts-de-France region of France. Founded in 1986, it has a strong regional presence and offers a variety of concerts, masterclasses, and cultural activities. The website is professionally designed using WordPress and integrates modern marketing and analytics tools such as Sendinblue and Google Analytics. The festival maintains active social media channels and provides clear contact information for ticketing and programming inquiries. Security posture is adequate with HTTPS enabled, though improvements are recommended in DNSSEC and security headers. Privacy and cookie policies are present, supporting GDPR compliance, but cookie consent mechanisms could be enhanced. Overall, the website reflects a credible and trustworthy organization with a solid digital presence.

S

Seniorêva

senioreva.com

43

Seniorêva is a French event organizer specializing in senior-focused events, notably the Seniorêva Salon scheduled for October 2025 in Lille. The website presents a professional and consistent brand image, targeting seniors with a clear event program and partner ecosystem. The business operates primarily in event organization and communication within the regional market of Lille, France. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and Helix Ultimate, hosted by OVH sas, a reputable provider. The site is mobile-optimized and includes essential privacy and cookie compliance features, reflecting moderate digital maturity. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and DNSSEC, which are recommended for enhancement. Overall, the site is trustworthy, with clear contact channels and social media presence, but could improve in security and compliance transparency.

H

Hello Lille Site officiel de l'Agence d'attractivité de la MEL

hellolille.eu

59

Hello Lille is the official agency promoting the attractiveness of the Métropole Européenne de Lille, targeting businesses, event organizers, and students. The website serves as a comprehensive portal to discover opportunities for implantation, events, and education in Lille. The technical infrastructure is modern, leveraging WordPress with a custom Woody theme and multiple JavaScript libraries for interactive and responsive user experience. The site supports multiple languages, enhancing its international reach. Security posture is solid with HTTPS and consent management implemented, though improvements are needed in security headers and explicit privacy policies. Overall, the website is professional, trustworthy, and well-positioned to serve its audience effectively.

P

Pesticide Action Network UK

pan-uk.org

64

Pesticide Action Network UK (PAN UK) is a non-profit organization dedicated to eliminating hazardous pesticides, reducing pesticide dependence, and promoting ecologically sound alternatives to chemical pest control. The organization targets environmental advocates, policymakers, and the general public interested in sustainable agriculture and environmental health. The website reflects a focused mission with clear messaging and consistent branding, positioning PAN UK as a credible environmental advocacy group within the UK. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, ConvertKit, and Instagram Feed, indicating a moderate level of digital maturity. The site employs HTTPS and includes analytics tools like Google Analytics and Hotjar for user behavior insights. Mobile optimization and SEO practices are good, though accessibility features could be enhanced. From a security perspective, the site uses HTTPS but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found in the provided data. WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness but does not negate the legitimacy suggested by the website content. Overall, PAN UK presents a professional and trustworthy online presence with room for improvement in privacy transparency, security headers, and WHOIS data clarity. Strategic enhancements in these areas would strengthen their security posture and compliance standing.

A

Api Restauration

api-restauration.com

65

Api Restauration is a French catering company emphasizing responsible cooking, culinary excellence, and corporate social responsibility. The website showcases their commitment to ethical practices, nutrition, training, and sustainable development within the hospitality sector. Their market position is that of an established large company with a strong focus on culinary talent and apprenticeship programs. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses privacy-conscious analytics tools such as Matomo alongside Google Analytics. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the site projects professionalism and trustworthiness with consistent branding and clear business focus.

O

Office de tourisme d'Auxerre et de l'Auxerrois

ot-auxerre.fr

59

The website www.ot-auxerre.fr represents the official tourism office for Auxerre and the Auxerrois region in Bourgogne, France. It provides comprehensive tourism information including guided tours, accommodation, dining, leisure activities, and event agendas. The site targets tourists and visitors interested in cultural, historical, and natural attractions in the region. The business model focuses on promoting regional tourism and supporting local hospitality services. The website is professionally designed with multi-language support and rich multimedia content, reflecting a mature digital presence for a regional tourism office. Technically, the site is built on WordPress using the Woody theme and incorporates modern JavaScript libraries such as jQuery, Swiper.js, Flatpickr, and Leaflet for maps. It integrates Google Tag Manager for analytics and employs a cookie consent framework, indicating awareness of privacy regulations. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. No WHOIS registrant data was found, which reduces trustworthiness from a domain registration perspective. However, the professional content and consistent branding suggest legitimacy. There are no signs of malware or phishing. Overall, the website is a well-constructed regional tourism portal with strong content and technical implementation but would benefit from enhanced privacy disclosures, security headers, and transparent domain registration information to improve trust and compliance.

N

NDD Camp Paris

nddcamp.paris

50

NDDCamp Paris is a specialized annual conference focused on the domain name industry, bringing together professionals such as registrars, registries, lawyers, SEO experts, and investors. The event emphasizes knowledge sharing, networking, and discussion of current trends and challenges in domain names, including legal, marketing, and technical aspects. Supported by reputable partners like AFNIC and Sedo, it holds a recognized position within its niche market. The website presents a professional and content-rich platform, primarily in French, targeting domain industry stakeholders. Technically, the website uses modern front-end technologies including Bootstrap 5.3.3, jQuery, and various UI libraries for animations and interactivity. The site is moderately optimized for performance and mobile responsiveness but lacks advanced accessibility features and SEO optimizations. The backend uses PHP for form handling, though some minor PHP notices are visible, indicating room for backend code improvements. From a security perspective, the site uses HTTPS but lacks visible security headers and has minor backend errors that could leak information. No privacy or cookie policies are published, which is a compliance gap. Forms collect user data but lack visible advanced protections. Overall, the security posture is moderate but could be significantly improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, backend error handling, and security headers would enhance trust and reduce risk. The site is safe for general audiences and does not contain any adult or questionable content.

A

Arcus Foundation

arcusfoundation.org

65

Arcus Foundation is a well-established non-profit organization focused on advancing LGBT social justice and the conservation of great apes and gibbons. The website reflects a mature digital presence with comprehensive content, including grants, educational resources, and advocacy materials targeting activists, conservationists, and social justice communities. The foundation positions itself as a key player in its niche with a consistent brand and professional presentation. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and integrates third-party services like Google Tag Manager and CookieYes for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the site demonstrates a strong commitment to privacy, accessibility, and user experience, making it a trustworthy platform for its audience.

M

Milan Chudoba

kennymax.sk

44

Kennymax.sk is the professional portfolio website of Milan Chudoba, a Slovak UI & UX freelance designer based in Prague, Czech Republic. The site showcases creative and unique digital design services, emphasizing originality and usability. The business operates as a small freelance entity, targeting clients seeking bespoke UI/UX design and photography services. The website is built on WordPress with modern SEO practices and integrates social media channels for broader engagement. Technically, the site uses a contemporary tech stack including WordPress 6.7.4, Yoast SEO, and Semplice theme, hosted likely by Websupport with DNSSEC and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS and DNSSEC, but could be improved with additional security headers and vulnerability disclosures. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact details.

E

Eiffage

eiffageconcessions.com

58

Eiffage Concessions operates as a key division within the Eiffage group, focusing on infrastructure concessions such as roads, railways, ports, and airports. The company positions itself as a strategic partner for transition projects and infrastructure management, serving public and private sector clients. The website reflects a mature enterprise with consistent branding and a professional digital presence. Technically, the site employs modern JavaScript libraries and analytics tools, with a cookie consent mechanism indicating GDPR awareness. However, the absence of WHOIS data and explicit contact information slightly detracts from transparency and trust. Security measures like reCAPTCHA are in place, but the lack of visible security headers and incident response information suggests room for improvement. Overall, the site is accessible, well-structured, and aligned with corporate standards, but enhancing security disclosures and registrant transparency would strengthen its risk posture.

E

Eiffage

eiffageenergiesystemes.com

65

Eiffage Énergie Systèmes is a French enterprise specializing in the design, realization, operation, and maintenance of electrical, industrial, climatic, and energy engineering systems. As part of the larger Eiffage group, it serves key markets including industry, infrastructure, cities, and the tertiary sector, offering tailored solutions. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations, including GDPR. The technical infrastructure leverages modern JavaScript libraries, analytics tools, and cookie consent frameworks, indicating a well-maintained platform. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and user alerts about fraud attempts, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data is a notable anomaly, suggesting either privacy protection or recent registration, which slightly impacts trust but is mitigated by consistent branding and linked official domains. Overall, the site demonstrates a solid business and technical foundation with room for enhanced transparency in security policies.

E

Eiffage

eiffagerail.com

58

Eiffage Rail is a large French company specializing in the design, construction, maintenance, and management of railway infrastructure both in France and internationally. It operates as a key partner to public and private railway transport operators, offering a comprehensive range of services including track construction, renewal, catenary systems, safety, and equipment maintenance. The company is part of the larger Eiffage group, a well-established construction and infrastructure conglomerate with multiple subsidiaries. The website reflects a professional and consistent corporate identity, emphasizing certifications and trustworthiness. Technically, the website uses a modern tech stack including jQuery, video APIs, Google reCAPTCHA, and consent management tools, built on the Jahia CMS platform. It is mobile-optimized with good SEO and basic accessibility features. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent, though explicit security headers and incident response information are lacking. The WHOIS data is unavailable, which raises some concerns about domain registration transparency; however, the website content and branding strongly align with the legitimate Eiffage Rail business. No blocking or WAF challenges were detected, and the site is fully accessible. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and professionally maintained, with room for improvement in security policy transparency and accessibility. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, improving accessibility compliance, and providing explicit data protection officer contact details to strengthen trust and compliance.

E

Eiffage

eiffagemetal.com

56

Eiffage Métal is a leading French industrial construction company specializing in turnkey metal construction projects, including offshore wind energy, buildings, hydraulic and industrial works. It operates as a subsidiary of the Eiffage group with a strong market position supported by prestigious projects and a comprehensive service offering. The website demonstrates a mature digital presence with modern technologies, good content quality, and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and CAPTCHA protections, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, but the overall branding and ecosystem affiliation support the company's credibility. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details.

E

Eiffage

eiffagegeniecivil.com

58

Eiffage Génie Civil is a division of the Eiffage Group specializing in the design, construction, and maintenance of civil engineering infrastructures both terrestrial and maritime across France, Europe, and internationally. The company offers a broad range of services including demolition, depollution, deep foundations, nuclear industrial civil engineering, water and environmental engineering, pipelines, and maritime works. It targets business and public sector clients requiring large-scale infrastructure projects. The website reflects a large enterprise with consistent branding and multiple subsidiaries, indicating a strong market position in the transportation and construction sectors. Technically, the website employs modern JavaScript libraries such as jQuery, YouTube and Vimeo APIs, Google reCAPTCHA, and analytics tools like Piano Analytics and TagCommander. It is built on the Jahia CMS platform, optimized for mobile, and includes accessibility features. SEO and metadata are well implemented, with Open Graph and JSON-LD structured data present. Cookie consent and privacy policies are implemented, indicating compliance with GDPR. From a security perspective, the site uses HTTPS with good SSL configuration and includes reCAPTCHA for form protection. However, explicit security headers like Content-Security-Policy and X-Content-Type-Options are not detected. No explicit security or incident response policies or vulnerability disclosure mechanisms are found. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and branding suggest a legitimate enterprise. Overall, the website is professional and trustworthy with good technical and privacy compliance. The lack of WHOIS data and explicit security policies are areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and clarifying domain registration information.