Security Directory

P

Playmain

playmain.com

47

Playmain is a small web development duo based in Indonesia, operated by a married couple who focus on crafting quality websites with an emphasis on both aesthetic design and functional code. Their website serves as a personal portfolio and family playground for their creative web design and development projects. The site is simple, with limited content and no advanced interactive features. Technically, the site uses basic web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises concerns about domain legitimacy. Overall, the site is functional but lacks professional security and compliance features.

Domain Union AG operates as a small-sized domain registration and web hosting provider primarily serving German-speaking customers. The company offers affordable .de domain registrations with additional services such as email hosting, FTP access, and SSL certificates. Their market position is focused on cost-effective solutions with quick domain registration turnaround times, supported by customer testimonials emphasizing speed and service quality. Technically, the website is built on basic HTML and CSS without modern frameworks or CMS, showing moderate performance but lacking mobile optimization and accessibility features. Security posture is limited with no visible HTTPS enforcement or security headers, and privacy compliance is minimal despite the presence of a privacy policy page. Overall, the website is functional but could benefit from modernization and enhanced security practices.

C

Clay Global

clay.global

69

Clay Global is a professional UX/UI design and branding agency based in San Francisco, serving clients worldwide. They specialize in creating digital products, websites, design systems, and brand experiences, with a strong portfolio including major clients such as Coinbase, Uber, Slack, and Amazon. Their business model focuses on service delivery in design and development, supported by an in-house content production studio and expertise in generative AI-powered UX design. Technically, the website is built on modern frameworks like Next.js and React, uses Sanity CMS, and integrates analytics tools such as Google Tag Manager and Ahrefs Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with excellent design and user experience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and publicly available security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website presents a high level of professionalism and trustworthiness, with minor areas for improvement in privacy and security transparency.

S

stempelservice.de

stempelservice.de

52

Stempelservice.de is a well-established German e-commerce retailer specializing in custom stamps and related accessories, boasting over 25 years of industry experience. The website offers a user-friendly online configurator for personalized stamps including text, logos, and various stamp types such as date, wood, and motivational stamps. Their market position is strengthened by strong customer trust signals including Trusted Shops and eKomi certifications, as well as positive customer reviews. The target audience includes businesses, schools, and private customers seeking quality stamp products.

P

Programy na Programosy.pl - codzienna dawka programów

programosy.pl

34

Programosy.pl is a well-established Polish software download portal offering a large categorized database of installation programs, portable versions, and language localizations. The site features user comments, ratings, and an active forum, catering primarily to Polish-speaking users interested in software downloads and reviews. The business model revolves around content aggregation and advertising revenue, primarily through Google Adsense. Technically, the site uses classic web technologies including HTML5, CSS3, JavaScript with jQuery 1.7.1, and integrates Google Analytics and Google Custom Search Engine for enhanced user experience and tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is privacy protected, common for this type of portal, but the site claims a long operational history consistent with domain age expectations. Overall, the site is functional, content-rich, and moderately secure, serving a general audience without adult or questionable content.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible. No real website content, metadata, or business information is present. The page appears to be a browser-generated error page rather than a live website. Consequently, no privacy, cookie, or terms of service policies are found, and no contact or security information is available. The technical infrastructure is limited to Chromium open-source code for the offline dinosaur game, which is embedded in the error page. The security posture cannot be fully assessed due to lack of real content and headers. Overall, the site is inaccessible and cannot be properly evaluated for business credibility or compliance.

I

Irfan Skiljan

irfanview.info

49

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users worldwide. The website presents the software as fast, compact, and supporting multiple Windows versions with multi-language and Unicode support. The business model is freeware distribution with optional donations and support registrations. The site is small-scale, run by the author Irfan Skiljan, and hosted by domainunion in Austria. Technically, the website uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is domainunion, and the site performance is moderate with basic mobile optimization and accessibility. Security posture is moderate; no HTTPS status or security headers were confirmed from the data, and no forms collect sensitive data. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a generic email address. Overall, the site is trustworthy and professional but could improve security and privacy features.

I

Irfan Skiljan

irfanview.net

47

IrfanView.net is the official homepage for IrfanView, a widely recognized and popular freeware graphic viewer software primarily targeting Windows users. The website offers downloads for multiple versions of the software, including 32-bit, 64-bit, and ARM64, along with plugins, skins, and language packs. The business model is freeware for non-commercial use with options for donations and support registrations. The site is maintained by the author Irfan Skiljan, with a long domain history dating back to 2004, reinforcing its established market presence. Technically, the website is a straightforward static site using basic HTML, CSS, and JavaScript without modern frameworks or CMS. It is hosted by Hetzner Online GmbH, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website claims, showing a legitimate and long-standing domain registration. Overall, the website is trustworthy, professional, and safe for general audiences. However, improvements in security headers, privacy compliance, and transparency about data protection and incident response would enhance its security posture and user trust.

O

Office de Tourisme de La Grande Motte

lagrandemotte.com

42

La Grande Motte's official tourism website provides comprehensive information and services for visitors including accommodation booking, activity reservations, and event details. The site targets tourists and business travelers, positioning itself as a key local tourism authority with a strong digital presence. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for tracking. The site is well-designed, mobile-optimized, and offers a good user experience. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and a published privacy policy. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

O

Office de Tourisme Béziers Méditerranée

beziers-mediterranee.uk

60

The website represents the official Office de Tourisme Béziers Méditerranée, providing comprehensive tourist information, event promotion, and ticketing services for the Béziers region in France. It targets tourists and visitors seeking cultural, leisure, and practical information about the Mediterranean area. The site is well-branded, professionally designed, and offers multilingual support, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. Cookie consent is managed via Axeptio, indicating attention to privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of HTTP security headers and lack of published security policies or incident response contacts are areas for improvement. The WHOIS data is missing or invalid due to domain naming rules violation, which slightly reduces trust from a domain registration perspective but does not detract from the site's legitimacy based on content and certifications. Overall, the site is low risk with strong business credibility and privacy compliance, but should address domain registration clarity and enhance security headers and policies to improve trust and resilience.

M

Montpellier Tourism

montpellier-france.com

53

Montpellier Tourism operates a professional and content-rich website promoting tourism in Montpellier, France. The site offers comprehensive visitor information including accommodation, events, guided tours, and local attractions, targeting international tourists with multi-language support. Technically, the website uses a modern JavaScript stack with modular ES scripts, integrates third-party services for maps, booking, and analytics, and is built on WordPress with a custom theme. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS data is a notable concern, reducing domain registration transparency and trust. Overall, the site is well-designed and functional but would benefit from enhanced privacy disclosures and domain registration clarity.

C

Office de Tourisme Cap d'Agde Méditerranée, Hérault, Occitanie

capdagde.com

57

The website www.capdagde.com serves as the official tourism office portal for the Cap d'Agde Mediterranean region in Hérault, Occitanie, France. It provides comprehensive information on local tourism services including accommodation, activities, events, and gastronomy, targeting tourists and visitors to the region. The site is built on WordPress and integrates Matomo analytics for visitor tracking. The technical infrastructure is modern with responsive design and good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

L

La Ramoneta

laramoneta.com

47

La Ramoneta is a small, niche travel and lifestyle blog focused on promoting tourism and cultural experiences in the South of France. The website offers curated content including guides on activities, places to see, local food, accommodations, and cultural insights. The business model centers around content publishing and local food tours, targeting tourists and visitors interested in authentic regional experiences. The site maintains a consistent brand presence with active social media channels and a professional design. Technically, the website is built on WordPress with Yoast SEO and integrates Google Analytics and CookieControl for analytics and cookie consent management. The site is mobile optimized and has good SEO practices, though performance is moderate. Hosting is provided by Vautron Rechenzentrum AG, and the domain is registered since 2017, consistent with the business age. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks advanced security headers and does not enable DNSSEC. There is no visible privacy policy, terms of service, or incident response information, which are gaps in compliance and security transparency. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the data provided. Overall, La Ramoneta presents a trustworthy and professional online presence for a small travel blog, but should improve privacy and security disclosures to enhance compliance and user trust.

T

The Good Life France

thegoodlifefrance.com

57

The Good Life France is a niche lifestyle and travel website dedicated to providing comprehensive information about France, its culture, holidays, and lifestyle. Established in 2011, it targets enthusiasts of French culture and travel, offering rich content that appeals to a general audience interested in France. The website leverages WordPress CMS with Elementor and Astra theme, indicating a modern and maintainable technical infrastructure. Hosting is managed via OpenHostingService, and the site uses HTTPS with domain protections in place, though DNSSEC is not enabled. Security headers are minimal, and no explicit privacy or cookie policies are present, which are areas for improvement. Social media integration is strong, enhancing the site's reach and trustworthiness.

L

Laëtis

laetis.fr

44

Laëtis is a French digital agency specializing in creating interactive and user-friendly digital solutions tailored to sectors such as tourism, local development, agriculture, environment, and e-commerce. The company targets clients focused on efficiency and sustainable territorial development, offering custom web and online collaborative applications. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in French. Technically, the website is built on Drupal CMS with modern JavaScript libraries including jQuery, RequireJS, and Modernizr. It employs HTTPS with good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no detailed security or incident response policies are published. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent but lacks visible advanced security headers and incident response information. The absence of WHOIS data limits domain trust assessment, though the site content and structure suggest a legitimate business. No vulnerabilities or exposed sensitive data were identified in the provided content. Overall, Laëtis presents a professional and trustworthy digital presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

M

Meteored

tameteo.com

68

Tameteo.com, operated by Meteored, is a well-established online weather forecasting platform targeting French-speaking users primarily in France and its overseas territories. The site offers comprehensive 14-day weather forecasts, hourly updates, radar and satellite imagery, and weather-related news. It supports multiple platforms including web and mobile apps for Android, iOS, Huawei, and Windows, enhancing accessibility and user engagement. The business model relies on free content supported by advertising and additional services such as widgets and plugins for third-party integration. Technically, the website employs modern JavaScript frameworks and libraries, integrates Google Tag Manager and Google Ads for analytics and advertising, and uses a Consent Management Platform to comply with GDPR. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and GDPR compliance evident, though some security headers could be improved. Despite the professional appearance and comprehensive content, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No direct company contact emails or phone numbers are publicly available, which may impact business credibility. Overall, the site is trustworthy and functional but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include implementing additional security headers, enhancing accessibility features, and providing clearer business contact information to strengthen trust and compliance.

The website at inchev.com currently presents no accessible content, with an empty HTML body and no metadata, forms, or visible information. The domain is registered since 2014 with a stable registrar and uses Cloudflare DNS, indicating a legitimate registration. However, the lack of content and absence of security or privacy policies severely limit the ability to assess the business or security posture. The technical infrastructure appears minimal, with no detected CMS or frameworks, and no security headers or SSL configuration data available. This results in a low security posture and poor privacy compliance. Overall, the site is either under development, misconfigured, or intentionally blocked by security mechanisms, leading to a critical risk of poor user trust and compliance issues.

P

Plerdy

plerdy.com

69

Plerdy is a technology company specializing in conversion rate optimization (CRO) and SEO tools designed to help businesses improve website usability, track user behavior, and increase sales conversions. Their platform offers a comprehensive suite of products including heatmaps, session replay, pop-up software, ecommerce analytics, and AI-powered UX assistance. The company targets digital marketers, UX specialists, and e-commerce businesses seeking data-driven insights to optimize their online presence. The website is professionally designed, mobile-optimized, and rich in content, featuring client testimonials and endorsements from global enterprises, which positions Plerdy as a credible player in the CRO and SEO market. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, along with integrations for Google Analytics 4, Bing UET, and LinkedIn Insight for analytics and marketing. The site employs SSL encryption and has a cookie consent mechanism, indicating a good level of privacy compliance. However, some security headers are not explicitly detected, and there is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture. From a security perspective, the site demonstrates solid fundamentals with HTTPS and published privacy and security policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and comprehensive policies mitigate concerns. No critical vulnerabilities or suspicious content were detected. Overall, Plerdy maintains a strong security and privacy stance suitable for its business model. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and consider a security.txt file for vulnerability reporting. These steps would further strengthen trust and compliance. The website’s technical infrastructure is modern and well-maintained, supporting a positive user experience and effective marketing analytics.

S

Sellcodes

sellcodes.com

67

Sellcodes is an online marketplace specializing in the buying and selling of software codes, including themes, plugins, scripts, and software licenses. Founded in 2016, the platform currently operates in a limited capacity, processing payments exclusively for digital products licensed by its partner Inisev. The website targets software developers and digital product creators seeking a marketplace to monetize or acquire code assets. Technically, Sellcodes employs a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, with integrations for payment processing via Paddle and analytics through Google services. The site is hosted with a reputable registrar and uses Cloudflare DNS, ensuring stable domain management and HTTPS security. Security posture is moderate, with HTTPS enforced and CSRF protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is basic, with privacy and terms pages present but no cookie consent mechanism or detailed GDPR indicators. Overall, the website is professionally designed, user-friendly, and safe for general audiences, though improvements in security policies and privacy compliance are recommended.

MyPopUps is a specialized SaaS platform founded in 2017 that offers website owners and marketers a comprehensive solution to create and deploy customizable pop-ups. The platform provides a marketplace of ready-made pop-up themes and an advanced builder tool to create pop-ups for email collection, discount codes, cookie notices, and adblocker detection. The business targets digital marketers and website owners seeking to enhance user engagement and conversion rates through pop-ups. Technically, the website leverages modern JavaScript frameworks (likely Vue.js), integrates with popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager, and uses Cloudflare DNS for domain management. The site is hosted with a reputable registrar and employs HTTPS for secure communications. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, functional, and trustworthy with moderate risk and room for security and compliance enhancements.

O

Orne Département

travaillerdanslorne.com

60

The website 'Travailler dans l'Orne' is a regional employment platform operated by the Orne Département, a local government entity in France. It serves as a centralized portal for job seekers and recruiters within the Orne department, offering job listings, training opportunities, internships, and alternance contracts. The platform also provides a CV analysis feature to better match candidates with relevant job offers. The site targets local residents and businesses, positioning itself as a key regional employment resource. Technically, the website employs modern JavaScript frameworks such as Turbo (Hotwire) and StimulusJS, and integrates analytics tools including Google Tag Manager and Piano Analytics. Hosting is provided by OVH sas, a reputable French hosting provider. The site is mobile-optimized with a good user experience and clear navigation. Security-wise, the site uses HTTPS and domain-level protections like clientDeleteProhibited and clientTransferProhibited statuses, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is primarily via forms, with no explicit emails or phone numbers listed. Overall, the website is professional, trustworthy, and well-aligned with its government mandate, but could improve security and privacy practices.

M

Mairie de Villeveyrac

villeveyrac.fr

54

The website www.villeveyrac.fr serves as the official digital presence of the Mairie de Villeveyrac, a local government entity in France. It provides residents and visitors with access to municipal news, upcoming events, public services, and citizen participation tools. The site is well-structured with multilingual support and integrates community-focused services such as urban planning, police municipal information, and youth services. The business model is centered on public service delivery and community engagement, positioning it as a key local government resource. Technically, the website employs modern web technologies including JavaScript frameworks, Matomo analytics for user tracking, and responsive design principles ensuring good mobile optimization. The site is built on the illiwap platform, which is specialized for municipal digital services. Performance is moderate with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure input validation for phone numbers. However, it lacks explicit security headers, a cookie consent mechanism, and a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this type of entity. Overall, the website is trustworthy, professional, and serves its intended audience effectively. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing a vulnerability disclosure policy to strengthen security posture and user trust.

The website ville-poussan.fr serves as the official online presence for the municipal government of Poussan, France. It provides residents and visitors with news, practical information, and community updates. The site is positioned as a small government entity's digital portal, focusing on local public service and information dissemination. The business model is typical of municipal websites, offering free access to public information and services. The website is well-branded and consistent with government standards, reflecting a trustworthy and official source.

The website www.ville-marseillan.fr serves as the official digital portal for the municipal government of Marseillan, France. It provides residents and visitors with access to municipal news, public service notifications, beach weather updates, and live webcam feeds. The site targets local citizens and tourists, offering essential government services and information. The business model is that of a government entity providing public information and services online. Technically, the site is built on WordPress CMS with a custom theme and uses modern web technologies including jQuery and Matomo for analytics. It incorporates accessibility features and multilingual support via Google Translate. The site is well-optimized for SEO and mobile devices, with good performance and structured data markup enhancing search visibility. From a security perspective, the site enforces HTTPS, includes standard security headers, and does not expose sensitive data. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the website demonstrates a solid security posture and professional digital presence appropriate for a municipal government. The lack of WHOIS data is likely due to privacy protection, which is reasonable for this type of entity. Strategic recommendations include publishing a dedicated security policy, enhancing incident response transparency, and maintaining regular security audits to ensure ongoing protection.

S

Site de la commune de Loupian

loupian.fr

42

The website www.loupian.fr serves as the official online portal for the commune of Loupian, France. It provides residents and visitors with access to municipal information, administrative procedures, cultural events, and local services. The site is positioned as a trusted government resource with a clear focus on community engagement and transparency. The content is primarily in French and targets local citizens and stakeholders. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Colibri Page Builder Pro, ensuring good SEO and responsive design. The presence of a cookie consent banner and GDPR-compliant privacy policy reflects adherence to European data protection regulations. Security-wise, the site uses HTTPS but lacks visible advanced security headers, indicating room for improvement in hardening. No WHOIS data is available due to privacy protection, which is common for municipal domains. Overall, the site is legitimate, professional, and well-maintained, with moderate technical maturity and good privacy compliance.

M

Mairie de Gigean

ville-gigean.fr

54

The website ville-gigean.fr is the official online presence of the municipal government of Gigean, a commune in the Hérault department of France. It provides residents and visitors with municipal information, local news, event calendars, administrative procedures, and contact options. The site targets local citizens and stakeholders interested in community services and updates. The business model is public service oriented, with no commercial intent, focusing on transparency and community engagement. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap 5, jQuery, Vue.js, and popular UI libraries like Font Awesome and Slick Carousel. Hosting is provided by OVH, a reputable French hosting provider. The site demonstrates good mobile optimization, accessibility features, and SEO practices, though performance is moderate likely due to rich media and scripts. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms with high privacy settings. It uses reCAPTCHA for form protection and social sharing tools with minimal tracking. However, explicit security headers like CSP and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It serves its purpose as a municipal information portal effectively. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to improve transparency and resilience.

V

Ville de Balaruc-les-Bains

ville-balaruc-les-bains.com

62

The website ville-balaruc-les-bains.com serves as the official municipal portal for the town of Balaruc-les-Bains in France. It provides comprehensive information about the town's thermal spa services, cultural events, public services, urban planning, and social programs. The site targets residents, tourists, and local citizens, positioning itself as a key information hub for the community. The business model is that of a government entity providing public services and information. The website is well-branded and consistent with municipal identity. Technically, the site is built on Drupal 9 CMS with Bootstrap Barrio theme and uses modern web technologies including Font Awesome and Leaflet.js for maps. Google Tag Manager and reCAPTCHA are integrated for analytics and form security. The site is mobile optimized and accessible with good SEO practices. Hosting appears stable with a domain age since 2003, indicating maturity. From a security perspective, HTTPS is enabled and forms are protected with reCAPTCHA. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy found. Social media presence is strong, enhancing trust. Overall, the website is safe, professional, and trustworthy with moderate security posture and good business credibility. Recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and improving privacy compliance documentation.

S

Sencyb

miniurl.be

45

MiniUrl.be is a French-language URL shortening service operated by Online sas since 2010, providing users with a free and simple way to shorten and share URLs. The website is well-established with a consistent brand presence and offers additional features such as QR code generation and an API for webmasters. The business model relies on advertising revenue and voluntary donations via PayPal. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, integrates Google Analytics and Adsense for tracking and monetization, and implements a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enforced, but could be improved by adding advanced security headers and publishing explicit security policies. No direct contact information is provided, which may impact user trust. Overall, the site is functional, compliant with privacy regulations, and serves a niche audience effectively.

M

Mairie de Saint-Hilaire-de-Brethmas

shb-bota.fr

52

The website shb-rando.fr serves as an informational and community resource for the commune of Saint-Hilaire-de-Brethmas in France, focusing on heritage, sports, biodiversity, and geology trails. It targets families, hikers, cyclists, and nature enthusiasts, providing detailed trail information, interactive maps, and local cultural content. The site is positioned as a local government or community service platform, supported by municipal and regional partners. Technically, the site is built on WordPress with common plugins such as WooCommerce, Yoast SEO, and WPBakery, hosted by OVH. It uses modern web technologies and is mobile-optimized with embedded OpenStreetMap maps for enhanced user experience. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks explicit security headers and privacy/cookie policies, which are compliance gaps. Analytics usage includes Google Analytics via Site Kit, with moderate user tracking. Overall, the site is professional, trustworthy, and serves its community well but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

P

Place du Village

place-du-village.fr

44

Place du Village is a French SaaS provider specializing in communication solutions for local governments and municipalities. Their platform offers a unified interface to manage multi-channel communication and citizen engagement, targeting public administrations with a subscription model starting at 68 €HT per month. The website reflects a niche market positioning with a professional and consistent brand presence. Technically, the site is built on WordPress and leverages modern libraries such as Bootstrap 5, jQuery, and Mapbox GL JS, hosted behind Cloudflare for performance and security. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

M

Meteored

tiempo.com

68

Tiempo.com, operated by Meteored, is a well-established Spanish-language weather information portal offering detailed 14-day forecasts, meteorological news, videos, and weather alerts. The site targets a broad general audience interested in weather updates primarily in Spain and other Spanish-speaking regions. It maintains a strong digital presence with mobile applications across Android, iOS, Huawei, and Windows platforms, and integrates social media channels to engage users. Technically, the website employs modern web technologies including asynchronous JavaScript bundles, Google Tag Manager, header bidding for advertising, and Cloudflare for performance and security. The site is optimized for desktop and mobile devices, with good SEO and accessibility practices. Privacy compliance is robust, featuring GDPR-compliant cookie consent mechanisms and detailed privacy policies. From a security perspective, the site enforces HTTPS and uses standard security practices, though explicit security headers are not fully confirmed. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which could impact trustworthiness. Overall, Tiempo.com presents a professional and trustworthy weather service with strong content and technical maturity. The main risk lies in the lack of visible domain registration information, which should be addressed to enhance credibility and compliance.

O

Opéra national du Rhin

operanationaldurhin.eu

57

The Opéra national du Rhin website serves as the digital presence for a regional cultural institution specializing in opera and performing arts in France. It offers detailed event listings, ticketing options, and multimedia content to engage its audience. The site is built on modern web technologies including Roadiz CMS and Vue.js, providing a responsive and visually appealing user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not clearly presented. The absence of public WHOIS data is consistent with EURid's privacy policies and does not detract from the site's legitimacy. Overall, the website reflects a professional and trustworthy cultural organization with room for improvement in transparency and security documentation.

M

Mulhouse Expo SAEML

parcexpo.fr

57

Parc Expo de Mulhouse is a well-established event venue and exhibition center located in Mulhouse, France, founded in 1996. The company operates as Mulhouse Expo SAEML and offers modular, functional spaces for hosting salons, congresses, fairs, and cultural events. The website reflects a regional market position targeting event organizers and visitors in the Mulhouse area and surrounding regions. The business model centers on venue rental and event hosting services, supported by a comprehensive event agenda and partnerships with various event organizers. The site content is professionally presented in French, with clear navigation and consistent branding.

F

Fédération Hiéro Mulhouse

noumatrouff.fr

55

Noumatrouff is a cultural organization and music venue based in Mulhouse, France, operating as Fédération Hiéro Mulhouse. The website serves as a portal for concerts, rehearsal studio bookings, workshops, and membership subscriptions, targeting musicians and local music enthusiasts. The business model relies on event ticketing, studio rentals, and community engagement. The site links to partner platforms for ticket sales and studio reservations, indicating a collaborative ecosystem. Technically, the website is built on WordPress with common plugins for galleries, forms, and cookie management, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy policies. The absence of WHOIS data limits domain trust verification, though the website content and external references suggest legitimacy. Overall, Noumatrouff presents as a professional cultural entity with room for improvement in privacy and security transparency.

L

Le Squart Mulhouse

le-squart.fr

49

Le Squart Mulhouse is a small non-profit cultural association founded in 2016, focused on supporting artists in the Mulhouse region through professionalization of artistic projects, pedagogical workshops, and event organization. The website serves as an informational platform showcasing their services and mission to the local artistic community. Technically, the site is built on WordPress with common plugins such as Yoast SEO and SiteOrigin widgets, hosted by OVH, and demonstrates moderate performance and good mobile optimization. Security posture is basic with HTTPS assumed but lacking explicit security headers and privacy compliance documentation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

L

La Kunsthalle, Centre d’Art Contemporain d’Intérêt National

kunsthallemulhouse.com

53

La Kunsthalle is a French contemporary art center operated by the city of Mulhouse, established since 2008. It serves as a cultural institution offering exhibitions, artist residencies, mediation programs, and publishing activities. The website targets the general public interested in contemporary art and is positioned as a nationally recognized center supported by public and regional cultural bodies. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Google Analytics for visitor tracking. The site is moderately optimized for mobile and SEO, with a good content structure and navigation. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is weak, with no cookie consent mechanism despite tracking scripts. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

L

La Filature

lafilature.org

46

La Filature is a prominent cultural institution based in Mulhouse, France, hosting a variety of performing arts organizations including the Scène nationale, Orchestre symphonique de Mulhouse, Opéra national du Rhin, and a Médiathèque. It serves as a regional hub for theater, music, opera, dance, and library services, targeting a broad audience interested in cultural events. The website reflects a well-structured and professionally maintained digital presence with clear navigation and rich content showcasing upcoming events and organizational information. Technically, the website employs modern JavaScript frameworks such as StimulusJS and SwiperJS for interactive features and uses Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected in the provided HTML content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy, cookie, or incident response policies, which are important for compliance and user trust. The WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not directly impact the legitimacy of the site given its professional content and clear contact information. Overall, La Filature's website is a reliable and professional platform for cultural engagement, with recommendations to enhance privacy compliance, security headers, and incident response transparency to further strengthen its security posture and user trust.

M

Mulhouse

mulhousecestvous.fr

66

Mulhouse C'est Vous is a French local government participatory platform operated by the Ville de Mulhouse, designed to facilitate citizen engagement, project collaboration, and community participation. The platform offers a variety of services including project proposals, consultations, event calendars, and newsletters targeting citizens, associations, municipal agents, and institutions within Mulhouse. The website is well-established since 2015 and maintains a consistent brand and professional content quality. Technically, it leverages modern web technologies such as React, Bootstrap, and Google APIs, integrated within a Symfony-based backend and the Cap Collectif participatory platform framework. Security posture is solid with HTTPS enforcement, CAPTCHA protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with comprehensive GDPR-aligned policies and a named Data Protection Officer. Overall, the site is trustworthy, well-maintained, and serves its public sector mission effectively.