Security Directory

P

Pustit k vodě

pustitkvode.cz

9

Pustit k vodě is a regional tourism website focused on promoting water-related activities and attractions in Central Bohemia, Czech Republic. The site offers comprehensive information on recreational boating, water sports, tourist destinations, cultural events, accommodation, and dining options. It targets tourists and recreational visitors interested in exploring the region from the water perspective. The website is well-branded and supported by partnerships with regional authorities and tourism organizations, enhancing its credibility and market position. Technically, the website is built on WordPress with modern web technologies including Yoast SEO for optimization, Google Tag Manager for analytics, and Lottie animations for enhanced user experience. The site is mobile-optimized and features good navigation and content structure. Security is adequately addressed with HTTPS, security headers, and cookie consent mechanisms, although no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a notable concern, limiting the ability to verify domain legitimacy and ownership details. Despite this, the website's content quality, partnerships, and compliance with GDPR through privacy and cookie policies suggest a legitimate and professional operation. Overall, the site presents a moderate risk profile with recommendations to improve transparency around security policies and contact information.

The website redteatrosalternativos.org currently serves a 403 Forbidden error page, indicating that access to the content is restricted or blocked. Due to this, no meaningful business or service information is available from the site itself. The domain is registered since 2009 with Tucows Domains Inc., a reputable registrar, and uses SiteGround hosting as inferred from the nameservers. However, the lack of accessible content and absence of privacy, cookie, or contact information severely limits the ability to assess the business or security posture. No security headers or SSL details are observable, and no analytics or tracking technologies are detected. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access.

P

Perfas - Performing Artists Association South Tyrol

perfas.org

10

Perfas - Performing Artists Association South Tyrol is a non-profit organization founded in 2021 that represents professional performing artists across all language groups in South Tyrol, Italy. The association advocates for the interests of its members, supports cultural and socio-political development, and offers networking and informational services. The website is well-structured, professionally designed, and optimized for SEO and accessibility, leveraging WordPress with modern plugins such as Elementor and Yoast SEO. Security posture is good with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though additional security headers and policies could enhance protection. WHOIS data is unavailable or malformed, limiting domain legitimacy verification, but the website content and partner affiliations suggest a trustworthy entity. Overall, the site presents a professional and credible digital presence for a regional cultural association.

P

ProEnglish Theatre

proenglishtheatre.com

9

ProEnglish Theatre is a specialized English-speaking theatre organization based in Kyiv, Ukraine, operating since 2013. It offers theatrical performances, drama school courses, workshops, and cultural projects aimed at English-speaking audiences and theatre practitioners. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. The technical infrastructure includes modern web technologies and integration with marketing tools like Mailchimp. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces domain trust slightly, but the active and consistent online presence supports legitimacy. Overall, the website is a credible cultural platform with moderate risk and opportunities for enhanced security and privacy compliance.

T

t. Theaterschaffen Schweiz

tpunkt.ch

10

t. Theaterschaffen Schweiz is a Swiss non-profit organization representing the interests of professional independent theater actors across Switzerland. The website serves as an information and service portal offering consultations, services, funding, and discounts to its members. It is supported by the Swiss Federal Office of Culture and maintains a presence through various regional groups. The organization targets professional theater practitioners and cultural stakeholders within Switzerland. Technically, the website is built on Craft CMS, uses jQuery and Underscore.js, and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

T

Teatercentrum

teatercentrum.se

10

Teatercentrum is a Swedish non-profit organization representing free professional theaters. It provides networking, advocacy, event organization, and theatrical content distribution services primarily targeting theater professionals, cultural organizers, and audiences including children and integration participants. The organization co-owns the Bibu Scenkonstbiennal for children and youth and produces cultural projects such as documentary series. The website is built on WordPress with a modern theme and plugins, featuring good design, navigation, and mobile optimization. Security posture is solid with HTTPS and tracking opt-out, but lacks some security headers and cookie consent mechanisms. WHOIS data for the queried subdomain is missing, but this is normal as WHOIS is domain-based. Overall, the site is trustworthy and professionally maintained.

D

Danscentrum Sverige

danscentrum.se

7

Danscentrum Sverige is a specialized expert organization focused on the professional dance sector in Sweden. The organization engages in national and international projects, collaborations, and networks to improve working conditions, infrastructure, and understanding of the art form. The website is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard polyfills for compatibility. The technical infrastructure is moderate in performance and mobile optimization, but lacks advanced SEO and accessibility features. Security posture is weak due to missing security headers, absence of privacy and cookie policies, and no visible contact information for security incidents. The domain WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website presents professional content but requires improvements in security, privacy compliance, and business credibility to enhance trust and compliance.

C

Cirkuscentrum

manegen.org

9

The website represents Cirkuscentrum, a cultural center focused on circus, variety, and street performance arts in Sweden. It serves a niche audience interested in these art forms and operates likely as a small non-profit or cultural organization. The website is built on WordPress using Elementor and the JupiterX theme, hosted by One.com, and employs modern web technologies such as jQuery and Font Awesome. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled but lacks important security headers and DNSSEC, and no privacy or cookie policies are present. No contact information or incident response details are provided, which limits trust and compliance. Overall, the domain registration is consistent and legitimate, matching the organization's profile and history.

A

Asocijacija Kulturanova

kulturanova.org

10

Kulturanova is a Serbian non-profit cultural association established in 2009, focused on promoting intercultural dialogue and youth creativity through artistic education, cultural production, and public policy advocacy. The organization operates multiple cultural programs and events, including the TAKT festival, targeting youth and cultural professionals primarily in Novi Sad. The website is built on WordPress with WooCommerce integration, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, though lacking advanced security headers and formal privacy or cookie policies. Overall, the site presents a professional and trustworthy image consistent with its cultural mission.

The website progettocresco.it currently displays a 403 Forbidden error page, indicating that access to the content is blocked or restricted. There is no accessible business information, contact details, or policy documents available on the site. The domain is registered since 2011 and appears legitimate in terms of registration age and status, but the lack of accessible content severely limits the ability to assess the business or technical maturity. The technical infrastructure is minimal, using basic HTML and CSS with Google Fonts, and no advanced frameworks or CMS are detected. Security posture is weak due to absence of HTTPS information and security headers. Privacy compliance is non-existent as no privacy or cookie policies are found. Overall, the site is currently non-functional for end users and lacks critical trust and security indicators.

The website etreassociazione.it is currently inaccessible beyond a security challenge page that performs browser integrity checks and automatic redirects. The domain is registered since 2009 with DNSSEC enabled, indicating a legitimate registration. However, the website content is minimal and outdated, referencing legacy CMS versions Joomla 1.5 and WordPress 2.5, which are known to have multiple security vulnerabilities. No business, contact, or policy information is visible, limiting the ability to assess the company's operations or compliance posture. The presence of a BitNinja.IO security check suggests some level of protection against attacks, but the lack of updated software and visible policies is a concern. Overall, the website's technical infrastructure appears dated and the user experience is poor due to the blocking mechanism.

P

Performing Arts Forum

performingartsforum.ie

38

Performing Arts Forum is a well-established non-profit organization dedicated to strengthening and advocating for the performing arts community in Ireland. With a history dating back to the late 1990s, it serves over 300 members including theatre, dance, opera production companies, venues, festivals, and individual artists. The organization offers a comprehensive range of services including advocacy, resource provision, job and opportunity listings, networking events, and a Green Arts initiative focused on sustainability. The website reflects a professional and consistent brand image, targeting performing arts professionals and organizations in Ireland.

B

Bandalag sjálfstæðra leikhópa

leikhopar.is

45

The website represents Bandalag sjálfstæðra leikhópa, an Icelandic non-profit association for independent theatre groups. It provides cultural and organizational information, news, and event announcements primarily targeting Icelandic theatre professionals and enthusiasts. The site is built on WordPress with a moderate technical infrastructure using common JavaScript libraries and CSS frameworks. While the content quality and business credibility are good, the site lacks critical privacy and security policies, and no advanced security headers or DNSSEC are implemented. The presence of a suspicious external domain embedded in the HTML raises minor concerns. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protection.

F

Független előadó‑művészeti szövetség

fesz.org

50

The Független Előadó-művészeti Szövetség (FESZ) is a Hungarian non-profit organization dedicated to supporting independent performing arts creators and groups. The website serves as a professional platform to communicate their mission, activities, membership, and projects. The site is built on Drupal 11 and integrates modern analytics and tracking tools such as Google Tag Manager and Barion Pixel. While the website is well-structured and content-rich, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. The security posture is adequate with HTTPS enforced, but could be improved by adding security headers and publishing security policies. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection.

B

Bundesverband Freie Darstellende Künste e.V.

darstellende-kuenste.de

58

The Bundesverband Freie Darstellende Künste e.V. (BFDK) is a prominent non-profit umbrella organization representing approximately 27,000 free performing arts professionals in Germany. The website serves as a comprehensive platform offering news, projects, advocacy information, and resources tailored to artists, cultural policymakers, and networks within the free performing arts sector. The organization is well-positioned nationally, supported by the German Federal Government's cultural office, and actively engages its community through multiple projects and social media channels. Technically, the website is built on Drupal 10, leveraging modern web technologies including Alpine.js and Matomo for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs a robust cookie consent mechanism ensuring GDPR compliance, reflecting a mature approach to privacy and user data protection. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns with the website's claims, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a cultural non-profit organization. Strategic improvements could include enhancing security headers and publishing a formal security policy to further strengthen trust and compliance.

E

Esittävän taiteen vapaat yhteisöt ry

teatterikeskus.fi

59

Esittävän taiteen vapaat yhteisöt ry is a Finnish national non-profit organization representing professional communities in the performing arts sector, including circus, dance, and theatre. The website serves as an information and service portal for its approximately 50 member communities, focusing on advocacy, events, and member services. The organization positions itself as a key actor in the Finnish performing arts landscape, providing support and representation for independent performing arts groups. Technically, the website is built on the Squarespace platform, leveraging standard web technologies such as jQuery and Typekit fonts, with integration of Mailchimp for marketing and communication. The site is well-structured, mobile-optimized, and uses HTTPS with HSTS for secure communications. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Contact information is primarily via social media channels, with no direct email or phone contacts visible. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Overall, the site is professional and trustworthy but could improve compliance and transparency aspects.

A

ACT

actassociation.eu

58

ACT (Асоциация за свободен театър) is a Bulgarian non-profit association of independent performing arts professionals focused on supporting and promoting free theater. The organization operates through networks, projects, festivals, and informational resources, targeting professionals in the independent theater sector. The website is professionally designed, content-rich, and clearly structured, reflecting a niche cultural entity with moderate market presence in Bulgaria. Technically, the site uses a proprietary CMS platform with modern JavaScript frameworks and integrates Google reCAPTCHA Enterprise for form security. The hosting is likely provided by SuperHosting.BG. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy/cookie consent mechanisms. WHOIS data is privacy protected, which is typical for .eu domains and justified for this type of organization. Overall, the site is trustworthy and serves its target audience effectively.

I

Interessengemeinschaft Freie Theaterarbeit

freietheater.at

53

Interessengemeinschaft Freie Theaterarbeit is a non-profit organization based in Austria dedicated to supporting independent theater artists and cultural workers. The website serves as a hub for information, advocacy, and community engagement, offering news, newsletters, workshops, and social insurance subsidy programs. It holds a reputable position within the Austrian and European independent performing arts sector, with affiliations such as the European Association of Independent Performing Arts (EAIPA). The target audience includes artists, theater groups, and cultural professionals seeking resources and support in the independent theater domain. Technically, the website is built on WordPress with modern plugins like Elementor, Contact Form 7, and GDPR compliance tools such as Complianz. It uses HTTPS with a good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design that supports user experience and accessibility at a basic level. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's Austrian cultural focus, showing consistent registration details and no privacy protection, which is appropriate for this type of organization. Overall, the website presents a trustworthy, professional, and compliant digital presence for a small non-profit cultural entity. Strategic improvements could include enhancing security headers, publishing a security policy, and formalizing vulnerability disclosure processes to further strengthen security posture and trust.

H

Huwise

huwise.com

73

Huwise is a technology company specializing in providing a SaaS data product marketplace solution that enables organizations to centralize, manage, and share their data assets securely and interactively. The company targets data leaders, business teams, IT leaders, and CSR/ESG leaders across sectors such as energy, transport, banking, and government. Their market position is strong, supported by Gartner citations, a high NPS score, and a client base of over 350 organizations. The website reflects a mature digital presence with comprehensive content, multimedia, and customer testimonials. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various JavaScript libraries for enhanced user experience. It integrates Matomo for analytics and Axeptio for cookie consent, indicating attention to privacy compliance. The site is mobile-optimized, fast-loading, and SEO-friendly. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern and should be investigated to confirm domain registration legitimacy. Overall, Huwise presents a professional and trustworthy online presence with strong business credibility. The main risk lies in the missing WHOIS information, which impacts domain trustworthiness. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and verifying domain registration status.

N

Nedeo : sondages d'anime et jeux vidéo

nedeo.fr

48

Nedeo.fr is a French niche website dedicated to community polls and rankings focused on anime and video games. It offers users the ability to vote and debate on popular characters and topics within these entertainment sectors. The site targets fans of anime and gaming, providing real-time updated rankings and interactive content. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Ionicons, Swiper.js, and the Bulma CSS framework, with backend indications of Laravel Livewire usage. Hosting is provided by o2switch, a French hosting provider, and the site is served over HTTPS with basic security measures such as CSRF tokens and reCAPTCHA integration. However, the site lacks explicit privacy and cookie policies, contact information, and security headers, which are important for GDPR compliance and user trust. The WHOIS data shows the domain is registered since 2018 with a reputable registrar and consistent hosting, indicating legitimacy. Overall, the site is functional and well-designed for its niche but would benefit from enhanced privacy, security, and compliance features.

Refdomaine.com is a French independent website dedicated to domain name information, offering news, guides, resources, and consulting services primarily targeting French-speaking domain professionals and enthusiasts. The site positions itself as a niche leader in the French domain name information space, with a consistent brand and good content quality. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted on o2switch.net, with moderate performance and good mobile optimization. Security posture is moderate with no detected HTTPS enforcement or security headers, and no cookie consent mechanism, indicating room for improvement in compliance and security best practices. The domain is registered since 2017 with no privacy protection, consistent with the business profile. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Domstocks is a small Spanish-based technology company specializing in the sale of expired quality domains for SEO and branding purposes. Their website offers a professional and user-friendly platform targeting SEO professionals, domain investors, and digital marketers. The business model focuses on providing fixed-price expired domains with clean histories and SEO metrics, supported by alert services and domain selection assistance. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.3 and Owl Carousel, with moderate performance and good mobile optimization. Security posture is limited due to lack of security headers, outdated libraries, and absence of privacy and cookie policies. Analytics is minimal, relying on Statcounter. Overall, the site is professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

Domstocks is a small technology-focused business specializing in the sale of expired quality domains with SEO value, brandable domains, and exact match domains. The company targets SEO professionals, domain investors, and digital marketers, offering fixed-price domain sales and domain selection services. The website is hosted on DreamHost and uses a basic technology stack including jQuery and Owl Carousel. While the site is accessible and well-structured with good content quality, it lacks key privacy and cookie policies and uses outdated JavaScript libraries, which may pose security risks. No security headers or incident response information are present, and SSL configuration details are not confirmed. Overall, the domain registration data is consistent and legitimate, supporting the business claims. The site uses minimal tracking via Statcounter and does not contain adult or questionable content.

Domstocks.es is a Spanish-based small business specializing in the sale of expired domains with strong SEO metrics, brandable names, and exact match domains (EMD). The company targets digital marketers, SEO professionals, and domain investors seeking quality domains for website creation, PBNs, or link selling. The business model focuses on fixed-price sales without auctions, providing alerts and personalized domain selection services. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technical infrastructure includes legacy JavaScript libraries such as jQuery 1.8.3 and Owl Carousel, with Google Fonts for typography. While the site is mobile-optimized and SEO-friendly, some modernization is recommended.

A

Api Restauration

api-restauration.com

65

Api Restauration is a French catering company emphasizing responsible cooking, culinary excellence, and corporate social responsibility. The website showcases their commitment to ethical practices, nutrition, training, and sustainable development within the hospitality sector. Their market position is that of an established large company with a strong focus on culinary talent and apprenticeship programs. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses privacy-conscious analytics tools such as Matomo alongside Google Analytics. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the site projects professionalism and trustworthiness with consistent branding and clear business focus.

S

SUEZ

suez.fr

63

SUEZ is a well-established enterprise operating in France, specializing in water and waste management services with a focus on circular economy solutions. The website presents a professional and consistent brand image, targeting clients in France seeking resilient and innovative environmental services. The company appears to have a strong market position within the energy and environmental sectors. Technically, the website uses modern web standards with good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is moderate, with no explicit security headers or policies detected, and the absence of WHOIS data slightly reduces trustworthiness. Privacy compliance indicators such as privacy and cookie policies are not evident, which is a gap for GDPR compliance. Overall, the site is safe and suitable for a general audience, with no adult or questionable content detected.

D

Département de l'Yonne

yonne.fr

49

The website www.yonne.fr serves as the official digital portal for the Département de l'Yonne, a regional government entity in France. It provides residents and visitors with access to public services, administrative procedures, news, events, and digital publications. The site is well-positioned as a trusted government resource with a clear focus on serving the local population. Technically, the site is built on WordPress, leveraging popular plugins such as Yoast SEO and LayerSlider, and integrates Matomo for analytics, indicating a modern and privacy-conscious infrastructure. Security measures include HTTPS enforcement, security headers, and the use of Google reCAPTCHA to protect forms. However, the absence of WHOIS data limits external verification of domain registration details, though the website's content and branding strongly support its legitimacy. Overall, the site demonstrates a strong security posture and compliance with GDPR, with comprehensive privacy and cookie policies in place.

The website at e-neos.com currently serves only a 404 error page, indicating that the content is not accessible or the site is not operational. The domain is registered with Gandi SAS since 2012 and is valid until 2026, suggesting a legitimate registration history. However, the lack of any visible content, metadata, or contact information severely limits the ability to assess the business or its services. The technical infrastructure appears minimal with no detectable technologies or security configurations. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with common data protection standards. Overall, the site presents a high risk from a user trust and security perspective due to its inaccessibility and lack of transparency.

S

Skeneteau

skeneteau.fr

43

Skeneteau is a French cultural venue located in Monéteau, specializing in live performances including theatre, music, dance, and educational shows for schools. The website presents a well-structured event calendar and ticketing information, targeting local and regional audiences interested in cultural activities. The business operates primarily as a community-focused event venue with a small organizational size and a history dating back to 2015. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by o2switch, and employs modern web technologies such as HTTPS, jQuery, and Font Awesome. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS correctly and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present. The WHOIS data is consistent with the website's identity, showing a legitimate and stable domain registration. Overall, Skeneteau's website is professional and trustworthy but would benefit from enhanced privacy compliance and security header implementation to improve its security posture and regulatory adherence.

B

Berger-Levrault

berger-levrault.fr

71

Berger-Levrault is a reputable international software publisher headquartered in France, specializing in software solutions for public administrations, healthcare, education, and industry sectors. The company positions itself as a trusted provider with a focus on reliability and compliance. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager, complemented by a robust consent management system via Didomi, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, secure, and trustworthy, supporting the company's market position effectively.

I

Imago Numeris

imago-numeris.fr

56

Imago Numeris is a small French technology company specializing in website conception, realization, and SEO referencing services primarily targeted at municipalities and local communes. Established since 2005, the company emphasizes accessibility and multi-device compatibility in its offerings, aiming to provide tailored web solutions that meet the evolving needs of internet users across various devices. The website content reflects a professional and consistent branding approach with clear business information such as the SIRET registration number, enhancing credibility. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and Bootstrap framework for responsive design. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation. However, there is no evidence of advanced CMS usage or modern hosting details. Performance is moderate with basic SEO and accessibility features implemented. From a security perspective, the site lacks visible HTTPS/SSL confirmation and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The absence of WHOIS data limits domain trust verification, although the displayed business registration details support legitimacy. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website is functional and professional but requires improvements in security best practices, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

C

Conseil National des Villes et Villages Fleuris (CNVVF)

villes-et-villages-fleuris.com

52

The website represents the Conseil National des Villes et Villages Fleuris (CNVVF), a well-established French national label promoting sustainable urban development and quality of life in municipalities. It supports nearly 4,700 communes with certification and expert guidance, emphasizing environmental preservation and citizen well-being. The site is professionally designed, mobile-optimized, and uses a modern technology stack including Bootstrap, jQuery, and various UI libraries. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and published policies. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. Overall, the domain is legitimate and stable, hosted by OVH with consistent WHOIS data.

C

Citopia

citopia.fr

52

Citopia is a French company specializing in digital solutions tailored for local governments and municipalities, focusing on citizen relationship management and digital transformation. The company offers a suite of products including citizen request management, communication tools, portals, mobile applications, and appointment management, positioning itself as a niche provider within the government technology sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the website is built on Drupal CMS, uses Matomo for analytics, and integrates a cookie consent management platform (tarteaucitron.io). The site demonstrates good technical implementation with modern web standards, responsive design, and SEO optimization. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is privacy-protected, which is common and justified for this business type. Overall, the security posture is good but could be improved with additional headers and documented policies. The overall risk assessment is low, with a trustworthy and professional online presence. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

N

Net15

websee-mairie.fr

60

Websee Mairie, operated by Net15, is a specialized service provider offering turnkey website creation solutions for French local governments including town halls, collectivités, EPCI, and syndicates. With nearly 30 years of experience and over 700 sites delivered, they provide custom design, SEO optimization, accessibility compliance, and comprehensive training for autonomous site management. The company positions itself as a trusted partner for public sector digital presence, emphasizing proximity and personalized support from their base in Aurillac, France. Technically, the website is powered by the WebSee CMS platform, leveraging jQuery and Fancybox libraries, and hosted by Net15. The site is well-optimized for mobile and accessibility standards, with good SEO practices and a moderate performance profile. Security posture is strong, featuring SSL certificates with A+ ratings, robust security headers, and regular third-party audits. However, the absence of a publicly accessible privacy policy page and WHOIS data transparency slightly reduce trust scores. Overall, the website is professional, secure, and compliant with cookie consent regulations, serving a clear government sector niche.

N

Net15

net15.fr

57

Net15 is a well-established French web agency based in Cantal since 1997, specializing in website creation, hosting, SEO, and digital communication services. The company targets SMEs, artisans, local authorities, and associations, offering tailored digital solutions including websites, e-commerce platforms, and collaborative tools. Their market position is that of a trusted regional digital partner with over 25 years of experience. Technically, the website is powered by the WebSee CMS platform and uses stable JavaScript libraries such as jQuery and Fancybox. The site is mobile-optimized, accessible, and SEO-friendly, though some modernization of libraries and addition of security headers could improve the technical posture. Performance is moderate with good user experience and navigation clarity. Security-wise, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. However, the absence of HTTP security headers and public security policies indicates room for improvement. The WHOIS data is missing, which raises some concerns about domain registration transparency, though the website content and business presence suggest legitimacy. Overall, the website presents a professional and trustworthy digital presence with solid business credibility but would benefit from enhanced security practices and verification of domain registration details.

The website centrefrance.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. The domain is registered with OVH sas since 1997, indicating a mature and legitimate domain. However, no business details, contact information, or policies are accessible for analysis. The technical infrastructure includes Cloudflare WAF protection, which is a positive security measure but limits content visibility. Due to the blocked content, a full security and compliance assessment cannot be performed, resulting in a low overall AI score.

O

Office de tourisme d'Auxerre et de l'Auxerrois

ot-auxerre.fr

59

The website www.ot-auxerre.fr represents the official tourism office for Auxerre and the Auxerrois region in Bourgogne, France. It provides comprehensive tourism information including guided tours, accommodation, dining, leisure activities, and event agendas. The site targets tourists and visitors interested in cultural, historical, and natural attractions in the region. The business model focuses on promoting regional tourism and supporting local hospitality services. The website is professionally designed with multi-language support and rich multimedia content, reflecting a mature digital presence for a regional tourism office. Technically, the site is built on WordPress using the Woody theme and incorporates modern JavaScript libraries such as jQuery, Swiper.js, Flatpickr, and Leaflet for maps. It integrates Google Tag Manager for analytics and employs a cookie consent framework, indicating awareness of privacy regulations. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. No WHOIS registrant data was found, which reduces trustworthiness from a domain registration perspective. However, the professional content and consistent branding suggest legitimacy. There are no signs of malware or phishing. Overall, the website is a well-constructed regional tourism portal with strong content and technical implementation but would benefit from enhanced privacy disclosures, security headers, and transparent domain registration information to improve trust and compliance.

S

SPL du Pays Coulangeois

spl-payscoulangeois.fr

44

SPL du Pays Coulangeois is a French local government public entity established to maintain and provide continuity of public services to eight communes in the Pays Coulangeois region following a regional administrative merger. The website serves as an information portal for residents, offering details about community services, events, and local governance. The business model is focused on public service delivery and community engagement within a defined geographic area. Technically, the website is built on WordPress with standard plugins and uses Google Analytics for visitor tracking. The site is hosted on French infrastructure consistent with its local government nature. Security posture is moderate with HTTPS enabled but lacks visible advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences but would benefit from improved privacy and security disclosures.

W

WEDOS Internet, a.s.

automatickemlyny.eu

49

Automatické mlýny is a cultural and educational complex located in Pardubice, Czech Republic, integrating multiple institutions and contemporary architectural projects. The website serves as a portal for event information, venue details, and cultural programming aimed at a broad audience including families, children, seniors, and cultural enthusiasts. The business model revolves around managing cultural venues, hosting events, educational workshops, and providing rental spaces. The site is positioned as a regional cultural hub with a strong community focus. Technically, the website is built on WordPress 6.3.2, utilizing common plugins for event management and GDPR compliance. It employs modern web technologies including jQuery, Google Tag Manager, and Google Analytics for tracking and performance. The site is mobile-optimized with a responsive design and good SEO practices, although some lazy loading images show errors which could impact user experience. From a security perspective, the website enforces HTTPS and uses Google reCAPTCHA to mitigate bot activity. Cookie consent mechanisms are implemented in compliance with GDPR. However, some security headers are missing or not explicitly detected, and no formal security policy or incident response information is published. No critical vulnerabilities or suspicious patterns were identified in the content or domain registration. Overall, the website demonstrates a good level of professionalism, security posture, and privacy compliance suitable for a cultural institution. Recommendations include enhancing security headers, fixing image loading issues, and publishing clearer contact and security policies to improve trust and user experience.

E

Empik S.A.

empik.com

75

Empik.com is a major Polish e-commerce platform specializing in retail sales of books, music, films, electronics, toys, and home goods. It operates a marketplace and offers subscription services such as Empik Premium. The website is professionally designed with a comprehensive product catalog and clear navigation, targeting general consumers in Poland. Technically, the site uses AngularJS, Google Tag Manager, and various analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. Overall, the site presents a trustworthy and professional retail presence with minor gaps in transparency around security and WHOIS data.

S

Smyk

smyk.com

57

Smyk.com is a professional e-commerce website specializing in children's products including toys, clothing, footwear, and school supplies, primarily targeting parents and families in Poland. The site presents a well-structured and visually consistent platform with clear navigation and promotional content, positioning itself as a leading retailer in its sector. Technically, the website leverages modern web technologies such as React, Google Analytics, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not evident. The absence of WHOIS data is a notable anomaly that impacts trustworthiness, but the overall professional presentation and compliance with privacy regulations mitigate this concern. Strategic recommendations include enhancing security header implementation, publishing security policies, and improving transparency around domain registration.

C

card complete

completeworld.at

69

complete WORLD is a loyalty and benefits platform associated with card complete, offering exclusive offers in hospitality, culture, and lifestyle sectors primarily targeting card complete customers in Austria. The website integrates with the complete Control app and customer portal, providing a seamless user experience for members to access benefits. The platform demonstrates a moderate to good level of digital maturity, utilizing modern web technologies, CDN hosting, and accessibility tools to enhance user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data slightly impacts trust but the overall branding and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to strengthen trust and compliance.

P

Phishen Impossible Initiative

phishen-impossible.at

52

Phishen Impossible is a well-established Austrian initiative focused on educating the public about phishing and cybercrime prevention. Supported by government entities such as the Austrian Federal Ministry of the Interior and major corporations like Österreichische Post and A1 Telekom Austria, it provides comprehensive educational content including videos, phishing rules, news updates, quizzes, and contact resources. The website is professionally designed, mobile-optimized, and offers clear navigation in German, targeting a broad audience of internet users in Austria. Technically, the site uses modern web technologies including jQuery and Matomo analytics, hosted on PSA Services infrastructure. Security posture is strong with HTTPS enforced and a cookie consent mechanism in place, although explicit security headers and incident response contacts are not present. Privacy compliance is well addressed with a detailed privacy policy and cookie management. Overall, the site is trustworthy, safe, and serves as a valuable resource for phishing awareness.

I

Iron Velvet

ironvelvet.studio

57

Iron Velvet is a small multidisciplinary digital studio focused on crafting innovative digital experiences. The website presents a professional and modern design using the Astro framework, targeting businesses seeking creative digital services. The content is relevant and well-structured, though limited in explicit business details such as company founding year or location. Technically, the site uses modern technologies and is mobile optimized with moderate performance. Security posture is basic with HTTPS implied but lacks explicit security headers and policies. Privacy and cookie policies are absent, and no direct contact emails or phone numbers are provided, only a contact form. WHOIS data is incomplete and malformed, reducing domain trustworthiness, but the website content itself appears legitimate and professional.

N

NH Hotels & Resorts

nh-hotels.net

76

NH Hotels & Resorts operates a large international hotel chain with over 350 properties across 36 countries, targeting leisure and business travelers. The website serves as a comprehensive online booking platform offering hotel reservations, loyalty programs, and travel inspiration. The brand is part of the Minor Hotels group, indicating a strong market position in the hospitality sector. Technically, the website employs modern web technologies including Google reCAPTCHA, Akamai service workers, and third-party analytics tools, ensuring a performant and secure user experience. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not published. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The absence of WHOIS data is a concern but likely due to privacy protection; however, the website's professional presentation and affiliation with a known hotel group support its legitimacy. Overall, the site demonstrates a mature digital presence with good security and privacy practices, suitable for its enterprise hospitality business model.

A

Association www.bzh

nddcamp.bzh

46

NDDCamp Rennes is a specialized event organized by Association www.bzh focusing on domain name security, combining technical, legal, and economic perspectives. The event targets professionals in the domain name and cybersecurity sectors, offering conferences, roundtables, and networking opportunities. The website is professionally designed using modern web technologies and provides clear information about the event, speakers, sponsors, and registration. The technical infrastructure is solid with Bootstrap and other frontend libraries, hosted on archive-host.org. Security posture is moderate with HTTPS assumed but lacking DNSSEC and security headers; visible PHP warnings indicate backend maintenance needs. Privacy compliance is weak due to missing privacy and cookie policies despite data collection forms. Overall, the site is trustworthy but could improve security and compliance aspects.

N

NDDCamp Alsace

nddcamp.alsace

46

NDDCamp Alsace is a specialized conference event focused on domain names, legal, SEO, marketing, and IT topics, targeting professionals in the domain industry and related fields. The event is organized by recognized experts and supported by reputable sponsors and partners, positioning it as a credible regional event with national and international reach. The website provides detailed information about speakers, program, location, and sponsors, facilitating networking and knowledge sharing. Technically, the site uses modern web technologies such as Bootstrap and jQuery, hosted on o2switch, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

N

NDD Camp Paris

nddcamp.paris

50

NDDCamp Paris is a specialized annual conference focused on the domain name industry, bringing together professionals such as registrars, registries, lawyers, SEO experts, and investors. The event emphasizes knowledge sharing, networking, and discussion of current trends and challenges in domain names, including legal, marketing, and technical aspects. Supported by reputable partners like AFNIC and Sedo, it holds a recognized position within its niche market. The website presents a professional and content-rich platform, primarily in French, targeting domain industry stakeholders. Technically, the website uses modern front-end technologies including Bootstrap 5.3.3, jQuery, and various UI libraries for animations and interactivity. The site is moderately optimized for performance and mobile responsiveness but lacks advanced accessibility features and SEO optimizations. The backend uses PHP for form handling, though some minor PHP notices are visible, indicating room for backend code improvements. From a security perspective, the site uses HTTPS but lacks visible security headers and has minor backend errors that could leak information. No privacy or cookie policies are published, which is a compliance gap. Forms collect user data but lack visible advanced protections. Overall, the security posture is moderate but could be significantly improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, backend error handling, and security headers would enhance trust and reduce risk. The site is safe for general audiences and does not contain any adult or questionable content.

T

TemplatesNext

templatesnext.org

54

TemplatesNext is a small startup media development studio specializing in WordPress themes and plugins. The company emphasizes handcrafted design and clean code, targeting WordPress users and developers seeking quality themes and plugins. Their business model revolves around offering both free and premium WordPress products with lifetime support. The website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder, indicating a modern and maintainable technical infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is moderate with HTTPS enabled and spam protection on forms, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, though WHOIS data is unavailable, which slightly reduces transparency.

O

Oriental Bird Club

orientalbirdclub.org

66

The Oriental Bird Club is a small, established non-profit organization dedicated to the conservation of birds in the Oriental region of Asia. It supports conservation projects primarily through grants and publications, targeting birders, ornithologists, and conservationists worldwide. The website is professionally designed using Squarespace, featuring rich content including news, events, and educational resources. The organization maintains an active social media presence and collaborates with reputable partners such as the Natural History Museum in London. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, but could improve security headers and privacy policies. WHOIS data is unavailable or malformed, which slightly impacts domain trust but does not detract from the organization's legitimacy based on content and branding.