Security Directory

E

Eiffage

eiffage-amenagement.fr

56

Eiffage Aménagement is a specialized urban development subsidiary of the large European construction and concessions group Eiffage. The company focuses on urban renewal, revitalization of city centers, and creation of sustainable eco-neighborhoods, targeting local authorities and urban planners primarily in France. The website reflects a mature corporate presence with consistent branding and clear business messaging aligned with the parent group. Technically, the site uses modern JavaScript libraries, integrates third-party analytics and consent management tools, and is built on the Jahia CMS platform. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is not publicly available, typical for AFNIC-managed French domains, but the domain and content align with a legitimate enterprise. Overall, the site is professional, secure, and compliant with basic privacy standards, though improvements in transparency and contact information are recommended.

E

Eiffage

eiffageconstruction.com

54

Eiffage Construction is a major construction and real estate development company operating primarily in France and Europe. As a subsidiary of the Eiffage group, it offers expertise in construction, urban development, real estate promotion, and maintenance services. The website reflects a professional corporate presence with consistent branding and clear navigation aimed at business and public sector clients. Technically, the site uses modern JavaScript libraries and analytics tools, including jQuery, Google reCAPTCHA, and Piano Analytics, and appears to be built on the Jahia CMS platform. The site is mobile-optimized and includes accessibility features, although explicit security headers are not detected in the provided content. The WHOIS data for the domain is missing or unavailable, which is unusual for a corporate domain and warrants further investigation. Privacy compliance is supported by a cookie consent mechanism, but explicit privacy and terms of service pages were not found in the provided content. Overall, the website is professional and trustworthy, but the lack of WHOIS data and explicit contact/security policies are areas for improvement.

M

Montpellier Tourism

montpellier-france.com

53

Montpellier Tourism operates a professional and content-rich website promoting tourism in Montpellier, France. The site offers comprehensive visitor information including accommodation, events, guided tours, and local attractions, targeting international tourists with multi-language support. Technically, the website uses a modern JavaScript stack with modular ES scripts, integrates third-party services for maps, booking, and analytics, and is built on WordPress with a custom theme. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS data is a notable concern, reducing domain registration transparency and trust. Overall, the site is well-designed and functional but would benefit from enhanced privacy disclosures and domain registration clarity.

M

Mairie de Gigean

ville-gigean.fr

54

The website ville-gigean.fr is the official online presence of the municipal government of Gigean, a commune in the Hérault department of France. It provides residents and visitors with municipal information, local news, event calendars, administrative procedures, and contact options. The site targets local citizens and stakeholders interested in community services and updates. The business model is public service oriented, with no commercial intent, focusing on transparency and community engagement. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap 5, jQuery, Vue.js, and popular UI libraries like Font Awesome and Slick Carousel. Hosting is provided by OVH, a reputable French hosting provider. The site demonstrates good mobile optimization, accessibility features, and SEO practices, though performance is moderate likely due to rich media and scripts. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms with high privacy settings. It uses reCAPTCHA for form protection and social sharing tools with minimal tracking. However, explicit security headers like CSP and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It serves its purpose as a municipal information portal effectively. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to improve transparency and resilience.

A

AD Normandie

adnormandie.fr

47

AD Normandie is a regional economic development agency serving the Normandy region in France. The agency acts as a single point of contact for economic development and provides tailored support and aid to local businesses. The website reflects a professional government entity with a clear mission to assist companies in project formalization and implantation within Normandy. The digital infrastructure is built on a modern WordPress platform with SEO and analytics tools, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. No critical vulnerabilities or suspicious elements were detected.

D

Descartes Développement & Innovation

descartes-devinnov.com

45

Descartes Développement & Innovation (DDI) is a French organization focused on fostering innovation in sustainable urban development within the Paris-Est region. It operates as a technopole, providing information, promotion, networking, and project engineering services, alongside managing a fablab and an incubator. The website reflects a professional and modern digital presence built on WordPress with WooCommerce and Elementor, indicating a mature technical infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though the absence of a public privacy policy and terms of service pages suggests room for compliance improvement. The lack of WHOIS data reduces domain trustworthiness, but the active social media presence and quality content support legitimacy. Overall, the site is well-positioned in its niche but should enhance transparency and compliance documentation.

M

Montpellier Tourisme

montpellier-tourisme.fr

56

Montpellier Tourisme operates as the official tourism promotion website for Montpellier, France, providing comprehensive information on local attractions, events, accommodations, and activities. The site targets tourists and visitors seeking to explore Montpellier and the surrounding region. It offers multi-language support and integrates booking and event management services to enhance user experience. Technically, the website employs a modern stack including WordPress CMS with a custom Woody theme, various JavaScript libraries, and third-party integrations such as Django Travel and touristic maps. The site is well-optimized for mobile devices and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of publicly available WHOIS data and privacy policy reduces transparency slightly but does not detract significantly from the site's legitimacy. Overall, Montpellier Tourisme presents a professional, trustworthy, and user-friendly platform for tourism promotion.

E

Eiffage

aprr.com

60

APRR is a major motorway concession operator in France, managing a 2,410 kilometer network focused on sustainable and efficient mobility solutions. It operates under the umbrella of the Eiffage group, a large construction and infrastructure conglomerate. The website reflects a mature digital presence with comprehensive content about their services, sustainability initiatives, and corporate governance. Technically, the site uses modern JavaScript libraries, integrates video APIs, and employs cookie consent management tools, indicating a good level of digital maturity. Security-wise, HTTPS is enforced and reCAPTCHA is used, but explicit security headers and policies are not evident, suggesting room for improvement. The absence of WHOIS data is unusual but the website's branding and social media presence support its legitimacy. Overall, APRR's website is professional, compliant with privacy regulations, and serves its audience effectively.

V

Ville de Monéteau

moneteau.fr

44

Ville de Monéteau operates an official municipal website serving the local community in France, providing comprehensive information on municipal governance, daily life services, youth and cultural activities, and event agendas. The website targets residents and visitors seeking local government resources and community engagement. Technically, the site is built on a modern WordPress CMS with Elementor page builder and integrates SEO and accessibility tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security headers are absent, representing areas for improvement. Overall, the site is trustworthy and professional, with a low risk profile but could enhance compliance and security transparency.

M

Mairie de Chevannes

chevannes-yonne.fr

56

The website chevannes-yonne.fr serves as the official municipal portal for the commune of Chevannes in the Yonne department of France. It provides residents and visitors with practical information about local government services, council members, community events, and administrative procedures. The site is positioned as a local government resource with a focus on community engagement and transparency. Technically, the site is built on WordPress using the Elementor page builder and Astra theme, hosted by OVH, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented via Yoast SEO. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit privacy policies indicates room for improvement. No WAF or blocking mechanisms interfere with content accessibility. Overall, the site is trustworthy and professionally maintained, but could enhance compliance and security by adding privacy policies, security headers, and clearer contact information.

V

Voala

voala.cz

41

Voala is a Czech graphic design studio specializing in custom graphic projects, visual identities, and printing services tailored for architects, designers, and corporate clients. The company operates a professional website with an integrated e-commerce platform, showcasing a portfolio and offering bespoke paper products and printing solutions. The business positions itself as a reliable partner with a focus on quality and tradition, targeting a niche market in the Czech Republic. Technically, the website is built on WordPress with WooCommerce, using modern libraries such as Bootstrap and jQuery, and integrates multiple analytics tools including Google Analytics, Smartlook, and Behavee Analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. WHOIS data is unavailable, which impacts domain trust assessment. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

O

Office de Tourisme de Lille

lilletourism.com

66

The website www.lilletourism.com serves as the official online presence of the Office de Tourisme de Lille, providing comprehensive tourism information, cultural insights, and online booking services for visitors to Lille, France. It targets tourists and visitors interested in exploring Lille's heritage, events, gastronomy, and shopping. The site is multilingual, supporting French, English, and Dutch, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a custom Woody theme and leverages modern JavaScript libraries and modules to deliver a rich, responsive user experience. Accessibility and SEO best practices are well implemented, contributing to excellent content quality and navigation clarity. Security-wise, the site enforces HTTPS and uses cookie consent frameworks but lacks explicit security headers and published privacy or incident response policies, which are areas for improvement. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its professional presentation and official branding. Overall, the website demonstrates a mature digital infrastructure suitable for its role in tourism promotion, with recommendations to enhance privacy transparency and security posture.

P

PYMAC

pymac.fr

56

PYMAC is a French web agency based in Aix-en-Provence, specializing in web development, e-commerce site creation, graphic design, web marketing, and hosting services. Established in 1998, the agency positions itself as a reliable partner for businesses seeking to enhance their online presence and digital communication. The website reflects a professional image with clear service descriptions and client references, targeting local and regional businesses. Technically, the site is built on WordPress with Elementor and Gravity Forms, indicating a modern and flexible infrastructure. The presence of GDPR-compliant contact forms and cookie consent mechanisms demonstrates awareness of privacy regulations. Security posture is good with HTTPS enabled, though some security headers could be improved. Overall, PYMAC presents a trustworthy and competent digital agency profile with a solid technical foundation and compliance awareness.

D

Dětský domov Korálky

ddsenozaty.cz

47

Dětský domov Korálky is a Czech non-profit organization formed in 2025 by merging two children's homes located in Senožaty and Humpolec. The organization provides care for children in family-like groups, focusing on healthy development and nurturing talents. The website reflects a professional and well-structured digital presence built on WordPress with Oxygen Builder and Yoast SEO, indicating a moderate level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data limits domain trust analysis, but the transparent business information and sponsorship network support legitimacy. Overall, the site is well-positioned to serve its audience and maintain compliance with privacy regulations.

R

Région Hauts-de-France

hautsdefrance.fr

67

The Région Hauts-de-France website serves as the official digital presence of the regional government of Hauts-de-France, France. It provides comprehensive information and services related to regional news, employment, aids, events, and public consultations. The site targets residents, businesses, and stakeholders within the region, positioning itself as a key resource for regional governance and community engagement. The business model is public sector-focused, delivering government services and information. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, enhanced by SEO and cookie consent plugins. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in accessibility and security headers could be made. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks visible advanced security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy, professional, and well-maintained, with a high legitimacy score despite the absence of public WHOIS data due to AFNIC policies. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the site's security posture and user trust.

E

Eiffage

eiffage.com

66

Eiffage is a leading European construction and concessions group specializing in infrastructure development, energy systems, and real estate. The company holds a strong market position as a major player in the construction sector, with a broad portfolio of subsidiaries covering various specialized domains such as construction, rail, metal works, and energy systems. The website reflects a professional corporate presence with consistent branding and comprehensive information about its group and subsidiaries. Technically, the website employs modern JavaScript libraries including jQuery, YouTube and Vimeo APIs, and integrates Google reCAPTCHA for form security. The use of OneTrust for cookie consent demonstrates compliance with GDPR and privacy regulations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is well-structured, accessible, and optimized for SEO and mobile devices, supporting a positive user experience and trustworthiness.

M

Mairie de Levignac

mairie-levignac.com

50

The website 'Mairie de Levignac' serves as the official online presence for the municipal government of Levignac, France. It provides residents and visitors with access to local news, administrative procedures, event calendars, and municipal council information. The site targets local citizens seeking government services and community updates. The business model is public service oriented, focusing on information dissemination and community engagement. The domain has been registered since 2002, reflecting a stable and established presence. Technically, the site is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The hosting and domain registration are managed by Gandi SAS, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and some advanced security headers. No security.txt or vulnerability disclosure mechanisms are found, which could be improved. No WAF or blocking mechanisms are detected, and no exposed sensitive data is visible. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional, suitable for its government role. However, improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

M

Matter and Shape

matterandshape.com

60

Matter and Shape is a specialized design salon and curated product retailer based in Paris, organizing events in the Jardin des Tuileries during Paris Fashion Week. The company targets design professionals, exhibitors, and buyers, offering both physical event experiences and an online shop featuring design products. The website is built on WordPress with modern technologies and integrates Google Tag Manager for analytics and Cloudflare Turnstile CAPTCHA for form security. The security posture is solid with HTTPS and anti-bot measures, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the website is professional, accessible, and trustworthy with clear contact information and active social media presence.

A

Asociace nezávislých divadel ČR

andcr.cz

9

Asociace nezávislých divadel ČR is a Czech non-profit association representing over 60 independent cultural theater organizations across the Czech Republic. The website serves as an advocacy platform promoting the interests of independent theater, facilitating communication among members, and liaising with public administration. The organization positions itself as a key cultural ambassador domestically and internationally. The website content is professionally presented in Czech, targeting cultural organizations and stakeholders in the independent arts sector. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and policies could be improved. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is trustworthy and professional but could enhance compliance and transparency aspects.

E

Engerio

engerio.sk

48

Engerio is a Slovak-based advertising platform specializing in native advertising formats across top Slovak media websites. Founded in 2020, it offers innovative ad formats such as pre-click ads, carousel ads, and video ads, targeting advertisers seeking quality traffic from over 120 Slovak media sources. The platform positions itself as the second largest reach in Slovak internet advertising, providing campaign performance analytics and a managed service model where clients submit links and Engerio handles campaign setup and optimization. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and analytics tools like Matomo and Google Tag Manager. The site is well-optimized for mobile and offers a professional user experience with clear navigation and rich content including client testimonials and partner logos. Security-wise, the site uses HTTPS and has a good SSL configuration but lacks explicit security headers and visible privacy or cookie policies, which are compliance gaps. No direct contact emails or phone numbers are publicly listed, relying instead on a contact form. Overall, Engerio presents a credible and professional business presence with room for improvement in privacy compliance and security best practices.

A

AVERIA LTD.

sm-nn.com

57

SOCIAL MEDIA NETWORK NEWS is a Czech language community website focused on providing comprehensive news and updates about social media platforms, with a particular emphasis on B2B applications. The site is operated by AVERIA LTD., a UK-registered company, and offers regularly updated articles covering industry trends, new features, and marketing insights related to social media. The website employs a modern WordPress CMS infrastructure with SEO and privacy compliance features, including GDPR-compliant cookie consent and a detailed privacy policy. The content is professionally presented, targeting businesses and social media professionals interested in the latest developments. Technically, the site uses WordPress 6.8.3 with popular plugins such as Elementor for page building, Complianz for cookie management, and AddToAny for social sharing. It leverages Google Fonts and Font Awesome for styling and icons. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured data (JSON-LD). Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, no advanced security headers were detected, and no explicit security or incident response policies are published. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, though the site content and business information appear legitimate and professional. Overall, the website presents a trustworthy and professional media outlet for social media news, with good privacy compliance and technical implementation. The main risk lies in the lack of WHOIS transparency and some minor security header omissions. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.

C

CLOUD & BACKUP NETWORK NEWS

cb-nn.com

66

CLOUD & BACKUP NETWORK NEWS is a Czech B2B community website focused on cloud computing, virtualization, and backup technologies. It serves as a niche media outlet providing up-to-date news and insights for professionals interested in these technology sectors. The website features regularly updated articles authored by industry experts and maintains an active presence on major social media platforms including Facebook, LinkedIn, Twitter, and YouTube. The business model centers on content publishing and community engagement within the technology domain. Technically, the site is built on WordPress CMS with a modern tech stack including jQuery, Elementor, and SEO and GDPR compliance plugins. The site is mobile-optimized, accessible, and SEO-friendly, with structured data markup enhancing search engine visibility. Performance is moderate, with room for optimization. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could improve resilience. From a security and compliance perspective, the site demonstrates GDPR compliance with a comprehensive privacy policy and cookie management. However, WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and safe for general audiences. Strategically, the site should enhance its security posture by implementing recommended HTTP security headers, publishing incident response and security policy pages, and providing clearer contact information for data protection officers or security contacts. These steps will strengthen trust and compliance, supporting long-term business credibility.

A

AVERIA LTD.

gamers-generation.com

66

Gamers Generation is an online community website focused on gaming, esports, and related hardware reviews, operated by AVERIA LTD., a UK-based company. The site targets gaming enthusiasts primarily in the Czech language market, offering news, reviews, and a magazine subscription service. The website uses a modern WordPress CMS with Elementor page builder and SEO plugins, indicating a mature digital infrastructure. It integrates Google Analytics and complies with GDPR through a comprehensive privacy policy and cookie consent mechanism. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. WHOIS data is missing or not publicly available, which slightly reduces trust but the presence of company registration details in the footer supports legitimacy. Overall, the site is professionally designed, well-structured, and safe for general audiences.

A

ATIS – Association territoires et Innovation Sociale

atis-asso.org

42

ATIS is a non-profit association dedicated to fostering social innovation and supporting social enterprises in the Nouvelle Aquitaine region of France. Established in 2014, it offers incubation programs, networking, and development support to projects with strong social impact and sustainable economic models. The association positions itself as a regional leader in social enterprise support, collaborating with local partners and public entities. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins to provide a professional and accessible user experience. Security practices include HTTPS enforcement, use of Google reCAPTCHA, and a comprehensive cookie consent mechanism, though some enhancements like DNSSEC and additional security headers could improve the posture. Overall, the website is trustworthy, well-branded, and compliant with GDPR requirements, with clear contact channels and partner affiliations.

S

SPAS Organisation

salon-medecinedouce.com

46

The website www.salon-medecinedouce.com serves as an event platform for wellness and natural medicine salons organized by SPAS Organisation in France. It promotes two major events scheduled in Paris and Lyon in early 2026, targeting individuals interested in natural health, complementary medicine, and wellness. The site provides event information, links to city-specific pages, and a program of conferences aligned with current wellness trends. The business operates as a niche event organizer with a focus on natural health sectors, leveraging its association with SPAS Organisation and industry bodies like UNIMEV to establish credibility. Technically, the website is built on WordPress with Elementor and uses modern SEO and analytics tools such as Yoast SEO, Google Analytics via MonsterInsights, and Facebook Pixel. It employs cookie consent management through Axeptio SDK, indicating GDPR compliance. The site is mobile-optimized with good design quality and moderate performance. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced. From a security and compliance perspective, the site lacks explicit security policies or incident response information, and no direct contact details are provided on the main page, which could impact user trust. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy, although the professional site and association with SPAS Organisation mitigate this risk somewhat. Overall, the website is a well-maintained, professional platform for wellness event promotion with good technical and privacy compliance. Strategic improvements in security transparency, contact information availability, and WHOIS data clarity would enhance trust and compliance.

A

AVERIA LTD.

averia.news

67

AVERIA LTD. operates the AVERIA.NEWS website, a professional publishing platform focused on B2B, IT, ICT, and government sector news. The company maintains a network of related media sites, positioning itself as a specialized news provider in technology and public sector domains. The website demonstrates a solid market presence with consistent branding and a clear target audience of business and IT professionals. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices to deliver a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although some security headers and incident response documentation are absent. Overall, the site is legitimate, professional, and well-maintained, with privacy-protected WHOIS data typical for media companies. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

N

NellMat Company, s. r. o.

vybavsenaparty.cz

43

vybavsenaparty.cz is a Czech-based small business specializing in party supplies, event decoration, and event organization services. Founded in 2020 and operated by NellMat Company, s. r. o., the company offers a variety of services including balloon decorations, mascot rentals, party equipment rental, and a dedicated e-commerce shop. The website presents a professional and consistent brand image targeting general consumers and event organizers across the Czech Republic. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Lottie animations, with analytics tools like Google Analytics and Smartlook integrated for user behavior tracking. The site is hosted likely by WEDOS, a reputable Czech hosting provider, and uses HTTPS with good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and cookie consent mechanisms. Privacy compliance is basic but present, with a privacy policy linked on the e-shop subdomain. Contact information is clearly displayed, enhancing business credibility. Overall, the website is functional, visually appealing, and trustworthy, though it lacks some compliance and security best practices.

B

Belgian Federal Public Service Policy and Support (BOSA)

bosa.be

65

The Belgian Federal Public Service Policy and Support (BOSA) website serves as an official government portal providing multilingual access to federal public service information. The site is positioned as a key government service platform, targeting Belgian citizens and government employees. It offers policy and support services, emphasizing accessibility and compliance with European data protection regulations. The website uses Drupal 10 CMS and integrates modern JavaScript libraries and Matomo analytics with user consent, reflecting a mature digital infrastructure. Security posture is moderate with room for improvement in security headers and transparency of security policies. The domain is a subdomain of belgium.be, indicating high legitimacy despite restricted WHOIS data. Overall, the site is professional, trustworthy, and compliant with GDPR, but could enhance security and transparency further.

M

Marsbahis

marsbahisegit.com

54

Marsbahis is an online gambling and betting platform launched in 2024, offering a variety of sports betting and live casino games. The platform targets betting enthusiasts seeking dynamic and live betting experiences, supported by bonus offers and live sports streaming via Marsbahis TV. Technically, the website is built on WordPress with modern SEO and AMP optimizations, hosted with reputable providers and using Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no formal privacy or security policies are published. The domain registration is recent but consistent with the business timeline, and no suspicious WHOIS data is present. Overall, the site provides a professional user experience but needs improvements in privacy compliance and security best practices.

K

Konference Eduzměna

konferenceeduzmeny.cz

43

Konference Eduzměna is a Czech-language educational conference website providing information about events and speakers. The site is built on WordPress with modern frontend technologies such as Bootstrap and Glide.js, indicating a moderate level of digital maturity. The website is mobile-optimized and has a good design quality, but lacks comprehensive privacy and terms of service documentation. Security posture is moderate with HTTPS enforced and a GDPR cookie consent mechanism in place, but no advanced security headers or incident response policies are evident. The domain WHOIS data shows inconsistencies, notably a creation date in the future, which raises concerns about registration legitimacy. Overall, the website is functional and professional but would benefit from improved compliance and security documentation.

N

Nadační fond Eduzměna

eduzmenaregion.cz

55

The website cpv-kh.cz represents the Nadační fond Eduzměna, a regional educational support center focused on the Kutnohorsko region in the Czech Republic. It provides information and resources related to the Eduzměna project, aiming to support children, parents, teachers, and school leadership with workshops, wellbeing initiatives, and community engagement. The organization operates as a non-profit entity with a clear regional focus and a mission to enhance educational opportunities and joy in learning for children. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern libraries such as Bootstrap, FontAwesome, and FullCalendar. It employs Google Analytics and Facebook Pixel for tracking, with a GDPR-compliant cookie consent mechanism in place. The site is hosted likely by Wedos, consistent with the domain registrar information. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and some security best practices but lacks explicit security headers and formal policies such as privacy policy, terms of service, and incident response contacts. No vulnerability disclosure or security.txt file is present. The WHOIS data is transparent and consistent with the website's regional and organizational claims, though the domain is recently registered, which may reflect a domain transfer or renewal. Overall, the website is professional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

S

SITER

siter.fr

35

SITER is a French company specializing in software solutions for management, evaluation, and decision-making, primarily serving public sector and environmental organizations. Their platforms such as QPILOTE and Enquêtes support data collection, monitoring, and reporting for clients including regional natural parks and government agencies. The company has a solid market position within its niche, supported by a professional website and client references. Technically, the website is built on WordPress with modern plugins and themes, hosted by OVH. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The site uses HTTPS with no mixed content, and integrates Google Tag Manager for analytics and marketing. Security posture is generally good with encrypted connections and no exposed sensitive data, but lacks some security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service pages. Contact information is available via a contact form and a company email address. Overall, the website is trustworthy and professional, with room for improvement in privacy documentation and security hardening. The domain registration data supports the legitimacy and longevity of the business.

A

Adapex Inc

adapex.io

66

Adapex Inc is a technology company specializing in advanced monetization solutions for digital publishers and advertisers. Leveraging AI technology developed in collaboration with Nasdaq AI suite contributors and allied with Datrix, Adapex offers a comprehensive suite of products and services including the M4 Tech Suite and data refinery solutions. The company positions itself as an industry leader with a strong focus on transparency, innovation, and partnership, supported by industry awards and a professional online presence. Technically, the website is built on WordPress with Elementor, integrates multiple analytics and consent management tools, and uses Cloudflare for DNS and CDN services. Security posture is good with HTTPS and consent mechanisms but could be enhanced by enabling DNSSEC and publishing security policies. Overall, the website is accessible, well-designed, and compliant with GDPR consent requirements, though explicit privacy and terms of service pages were not found in the provided content.

R

Resilient Cities Network

resilientcitiesnetwork.org

77

Resilient Cities Network is a globally recognized non-profit organization dedicated to fostering urban resilience by connecting cities worldwide. Their platform facilitates collaboration, knowledge sharing, and capacity building among city governments and resilience professionals to address urban challenges and promote safe, equitable urban environments. The organization operates primarily through a membership and network model, targeting city officials and stakeholders interested in sustainability and resilience. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies including jQuery, Google Analytics, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs reCAPTCHA on forms, but lacks DNSSEC and explicit security policies or vulnerability disclosure mechanisms. Security headers are partially implemented, and no critical vulnerabilities were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy digital presence with a solid security posture suitable for a non-profit organization. Recommendations include enabling DNSSEC, publishing a security policy, and enhancing HTTP security headers to further strengthen security and trust.

K

Kreativní Evropa

kreativnievropa.cz

52

Kreativní Evropa is an official European support program website focused on culture and audiovisual sectors, providing information, grant opportunities, and partnership facilitation primarily for Czech stakeholders. The site is well-branded, professionally designed, and offers comprehensive content including news, events, and resources. Technically, it is built on WordPress with modern web technologies and includes SEO and accessibility best practices. Security posture is good with HTTPS and cookie consent implemented, though additional security headers could enhance protection. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and external references indicate legitimacy. Overall, the site presents a trustworthy and professional digital presence for its target audience.

E

ERSTE Foundation

erstestiftung.org

74

ERSTE Foundation is a non-profit organization based in Vienna, Austria, focusing on financial health, democratic values, cultural initiatives, and social finance. The foundation supports a variety of projects including financial education, social finance ventures, cultural collections, and democracy-related policy initiatives. Their market position is that of a well-established regional foundation with a strong presence in Central and Eastern Europe. The website reflects a professional and consistent brand image with clear navigation and comprehensive content tailored to a general audience interested in social impact and education. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. The use of privacy-respecting analytics and a detailed cookie consent mechanism demonstrates a commitment to GDPR compliance and user privacy. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks visible security headers and a dedicated security or incident response policy page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profit organizations, and does not raise suspicion. Overall, ERSTE Foundation's website presents a trustworthy, professional, and privacy-conscious digital presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

W

WP Bullet

wp-bullet.com

60

WP Bullet is a specialized WordPress performance optimization company founded in 2016, offering plugins, services, and guides to improve website speed, stability, and search engine rankings. The company targets site owners, agencies, and corporations seeking to enhance their WordPress and WooCommerce sites' performance and revenue. Their market position is supported by detailed case studies and strong client testimonials, reflecting a niche expertise in WordPress optimization. Technically, the website is built on WordPress 6.8.3, uses modern JavaScript libraries like jQuery 3.7.1, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized, fast loading, and well-structured with good SEO practices. Hosting details are not explicit but DNS is managed via Cloudflare. Security posture is moderate with HTTPS enabled and domain transfer/update protections in place. However, the absence of DNSSEC, security headers, and published privacy or cookie policies indicates room for improvement. No incident response or vulnerability disclosure mechanisms are evident. Overall, WP Bullet presents a professional and trustworthy online presence with strong business credibility but should enhance privacy compliance and security best practices to reduce risk and improve user trust.

N

Nipos

mistnikultura.cz

62

Pro kulturu is a well-established Czech cultural news portal published by the National Institute for Culture (NIK), a government-affiliated organization. The website provides extensive articles, podcasts, and editorial cycles focused on cultural events and personalities across the Czech Republic. It targets the cultural community and general public interested in cultural affairs. The site demonstrates strong digital maturity with a modern WordPress CMS, Bootstrap framework, and SEO best practices including structured data and Open Graph metadata. Privacy compliance is robust, featuring GDPR-aligned policies and cookie consent management via Complianz. Security posture is good with HTTPS enforced and Matomo analytics configured to require consent, though the absence of security headers suggests room for improvement. The lack of WHOIS data is a notable anomaly that slightly reduces trustworthiness but does not detract from the site's professional presentation and government affiliation. Overall, Pro kulturu is a credible and authoritative source for cultural information in the Czech Republic.

Divadlo v Celetné is a cultural and theatrical venue based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as an information and ticketing portal for visitors and theatre enthusiasts, showcasing upcoming programs, news, and partner collaborations. The business operates primarily as a local cultural institution with a focus on community engagement and arts promotion. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery and FontAwesome. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers and publicly available privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data limits domain legitimacy verification, though the presence of official partner logos and active social media accounts supports its authenticity. Overall, the website presents a professional and trustworthy front for a small cultural institution but would benefit from enhanced privacy compliance, improved security headers, and transparency in domain registration to strengthen its security posture and user trust.

L

Les Enfoiros de l'INSA

enfoiros.org

52

Les Enfoiros de l'INSA is a well-established non-profit student club based in Toulouse, France, dedicated to supporting the Restos du Cœur charity through annual fundraising events and performances. The organization has a strong market position as the leading private donor to the Restos du Cœur in Haute-Garonne since 2007, leveraging community engagement and student participation. Their website reflects a professional and consistent brand image with clear calls to action for donations and event participation. Technically, the site uses modern web technologies including Bootstrap 5 and Google reCAPTCHA, hosted by Scaleway SAS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and spam protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking explicit cookie consent and detailed GDPR statements. Overall, the site is trustworthy and well-maintained, serving its non-profit mission effectively.

The website 'Náš Jih' serves as a digital platform for the Ostrava-Jih municipal district in the Czech Republic, facilitating participatory budgeting where residents can influence the allocation of local government funds. The site provides information about ongoing projects, community engagement opportunities, and a project submission portal. It targets local residents and community members interested in civic participation. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Analytics, and Facebook Pixel for analytics and marketing. The hosting is provided by a Czech hosting provider, aligning with the local focus. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. No security headers were detected in the provided data, suggesting room for improvement in security hardening. Overall, the site is professionally designed with good user experience and mobile optimization, but could enhance privacy and security transparency.

C

Confédération des Commerçants de France

commercants-de-france.org

47

The Confédération des Commerçants de France (CDF) is a well-established French organization dedicated to representing and defending independent retailers and small businesses in the commerce sector. Founded in 1906, it serves as a federation for various commercial associations and unions, providing lobbying, resources, and networking opportunities to its members. The website reflects a professional and consistent brand presence, targeting independent merchants and federations across France. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses common libraries like jQuery and Swiper.js, indicating a moderate level of digital maturity. The hosting and domain registration are consistent with the organization's profile, with no privacy protection on WHOIS data, supporting transparency. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional but could enhance security and privacy features to align with best practices.

P

Pour la Solidarité

pourlasolidarite.eu

51

Pour la Solidarité is an independent European think & do tank dedicated to promoting a solidary and sustainable Europe. The organization focuses on social affairs, sustainable development, diversity, social economy, and citizen participation. It operates through research, consultancy, local and European projects, and publishes various educational and analytical resources. The website is professionally designed, multilingual, and targets public and private actors engaged in solidarity and social economy sectors across Europe. Technically, the site is built on WordPress with Elementor and WPML, uses modern web technologies, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enabled, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and security practices.

F

Fondation Inserm

fondation-inserm.org

58

Fondation Inserm is a French non-profit foundation established in 2023 to support the medical research missions of Inserm by developing private funding from donors including individuals and companies. The foundation focuses on advancing health and biomedical research, promoting scientific knowledge dissemination, and supporting research teams through funding innovative programs, acquiring advanced equipment, and recruiting research talents. The website is professionally designed using WordPress and Elementor, with good mobile optimization and accessibility features. It includes a GDPR-compliant cookie consent mechanism and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and domain registration consistent with the organization's identity, though security headers and explicit privacy policies are not detected in the provided content. No direct contact emails or phone numbers are found, but social media presence is established on Instagram, LinkedIn, and Facebook. Overall, the site presents a trustworthy and professional image aligned with its mission as a healthcare non-profit foundation.

F

Fondation Léa Nature

fondation-mecenat-leanature.org

59

Fondation Léa Nature is a French non-profit organization dedicated to environmental philanthropy, supporting ecological agriculture, biodiversity, climate action, and health initiatives. The foundation operates under the umbrella of Compagnie Léa Nature and is affiliated with the global 1% for the Planet network, indicating a strong commitment to sustainability and environmental causes. Their website provides comprehensive information about their mission, funding axes, and project submission processes, targeting associations, citizens, and local actors engaged in environmental protection. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and GDPR Cookie Compliance, ensuring good SEO and privacy compliance. The site uses Google Analytics and Google Tag Manager for analytics and tracking, and implements Google reCAPTCHA v3 for form security. The site is mobile-optimized, accessible, and performs moderately well, with consistent branding and clear navigation. From a security perspective, the site enforces HTTPS and uses GDPR-compliant cookie consent mechanisms. While some security headers are not explicitly detected, the overall posture is good with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the foundation's age and business claims, enhancing trustworthiness. Overall, Fondation Léa Nature presents a professional, trustworthy, and well-maintained online presence that aligns with its mission and audience. Strategic improvements in security headers and ongoing maintenance are recommended to sustain and enhance their security posture.

E

Escambiar

escambiar.com

56

Escambiar is a small cultural association founded in 1981, focused on artist management, event organization, and cultural exchanges primarily through music. The organization targets a general audience interested in cultural and musical activities, operating mainly in the Arnaud Bernard neighborhood and broader cultural projects. The website is built on WordPress with Elementor and uses common web technologies such as jQuery and Swiper.js. It is accessible, mobile-optimized, and uses HTTPS with Google reCAPTCHA for form security. However, the absence of privacy and cookie policies and missing WHOIS registration data reduce trust and compliance levels. No explicit contact emails or phone numbers are provided, limiting direct communication channels.

C

Crowdtech

crowdtech.com

53

Crowdtech is a technology company established in 2003, operating primarily in the Netherlands. The company appears to offer technology-related services or solutions, targeting a professional audience. The website is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics, Google Ads, and Facebook Pixel. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled and domain transfer lock in place, but improvements are recommended such as enabling DNSSEC and implementing security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website presents a professional image but could enhance trust and compliance by publishing comprehensive policies and improving security configurations.

B

BLOOM Association

bloomassociation.org

61

BLOOM Association is a French non-profit organization dedicated to protecting the ocean, climate, and artisanal fishermen. Established in 2007, it operates as an advocacy NGO with a strong focus on scientific research, legal actions, citizen mobilization, and education. The website reflects a mature and professional digital presence with comprehensive content, including news, campaigns, events, and publications. The organization maintains active social media channels and provides donation and petition platforms through related domains. Technically, the site is built on WordPress with modern libraries and APIs, hosted by OVH sas, and optimized for SEO and mobile use. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with consent mechanisms present but no explicit privacy or cookie policy pages found. Overall, the site is trustworthy and well-positioned in its sector, with recommendations to enhance security headers, enable DNSSEC, and publish clear privacy and cookie policies.

8

82-4000 Solidaires

824000.org

44

82-4000 Solidaires is a French non-profit organization dedicated to providing access to high mountain leisure activities for people in situations of great precarity. The association organizes volunteer-led mountain stays in various French mountain regions, promoting solidarity, sharing, and human connection. The website is built on WordPress with a modern and responsive design, featuring rich content including event announcements, volunteer calls, and donation options. Technically, the site uses standard WordPress plugins and libraries, ensuring a stable and maintainable infrastructure. Security posture is good with HTTPS enforced, but lacks some security headers and formal policies such as privacy and cookie policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.