Security Directory

N

News and Media Holding a.s.

novycas.sk

56

Nový Čas is a leading Slovak online daily newspaper operated by News and Media Holding a.s., providing current news from domestic and international sources including scandals, crime, and sports. The website is professionally designed with a consistent brand presence and targets a general audience interested in news media. Technically, the site uses modern web technologies such as Next.js, Google Tag Manager, and integrates multiple third-party advertising and analytics services. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the website is a credible and professional news platform with room for improvement in privacy and security transparency.

U

UPSA

upsa.com

47

UPSA is a well-established French pharmaceutical company founded in 1935, specializing in self-medication products, medical devices, and nutritional supplements. It operates one of the largest pharmaceutical industrial sites in Europe and holds a strong market position as the leading manufacturer of paracetamol-based medicines in France. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive content targeting patients, pharmacists, and healthcare professionals. Technically, the site is built on WordPress with modern frameworks and analytics tools, optimized for performance and mobile devices. Security posture is strong with HTTPS, bot protection, and secure forms, though explicit security headers and incident response information could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the WHOIS data is missing or privacy protected, which is unusual for a company of this stature and warrants further verification. Overall, UPSA's website demonstrates a high level of professionalism, trustworthiness, and digital maturity.

Chaumet is a prestigious French luxury jeweller and watchmaker with a heritage dating back to 1780. The company operates a sophisticated e-commerce platform alongside its physical boutiques, targeting affluent consumers seeking high-end jewellery and watches. The website reflects the brand's luxury positioning with professional design, internationalization, and rich product offerings. Technically, the site leverages Magento as its CMS, enhanced with RequireJS, Algolia search, and advanced analytics tools such as Google Tag Manager and New Relic for performance monitoring. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and privacy policies suggests room for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for luxury brands. Overall, the site is well-positioned in its market with a solid digital presence but should enhance transparency and security practices to further strengthen user trust and compliance.

Hubbub is a specialized WordPress plugin provider focused on audience growth and website customization tools. Their flagship product offers features such as personalized email sign-up forms, social sharing buttons for over 18 networks, Pinterest sharing options, and integration with the Fediverse. The company positions itself as a niche player in the WordPress plugin market, targeting bloggers, marketers, and website owners seeking to convert visitors into engaged subscribers. The business is relatively new, founded in 2023, and operated by NerdPress, a certified B Corp, indicating a commitment to social and environmental standards. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Easy Digital Downloads for e-commerce, Affiliate WP for affiliate marketing, and analytics tools like Google Tag Manager and Microsoft Clarity. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, DNSSEC is not enabled, and several security headers are not explicitly detected, representing areas for improvement. No privacy or cookie policies were found, which is a compliance gap, especially for GDPR. No explicit contact information or incident response policies are publicly available, limiting transparency in security and privacy matters. Overall, the website is professional, trustworthy, and well-designed but would benefit from enhanced privacy compliance and security policy disclosures to improve user trust and regulatory adherence.

T

Tabidoo

tabidoo.cloud

64

Tabidoo is a SaaS low-code platform founded in 2016, offering a comprehensive suite of business applications including task management, CRM, project tracking, and document management. The platform targets businesses and teams seeking efficient data management and app creation without extensive coding. Positioned as a competitive alternative to platforms like Notion and Airtable, Tabidoo emphasizes ease of use, affordability, and rapid deployment. The website reflects a mature digital presence with multi-language support and strong branding consistency. Technically, the site leverages modern cloud infrastructure, including Cloudflare DNS and CDN, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, ensuring good performance and compliance. Security posture is strong with HTTPS enforcement, domain transfer protections, and a dedicated security page, though DNSSEC is not enabled and no explicit incident response contacts or security.txt file were found. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility.

C

CULLINAN.CZ s.r.o.

cullinan.cz

58

Cullinan.cz is a Czech company specializing in the manufacturing of commemorative medals and vending machines with a 15-year tradition. Their products are distributed primarily through unmanned vending machines located in zoological gardens and Dino parks across the Czech Republic, Slovakia, Poland, and Russia. The company emphasizes artistic quality, collaborating with notable sculptors and using certified materials such as Nordic Gold. The website is professionally designed, mobile-optimized, and provides detailed business and product information, although it lacks privacy and cookie policies. Technically, the site uses modern JavaScript modules and image galleries but does not show advanced security headers or analytics integrations. The security posture is moderate with no critical vulnerabilities detected, but improvements in privacy compliance and security headers are recommended. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the company.

S

Species360

species360.org

61

Species360 is a reputable non-profit organization specializing in providing a global database and information system for zoos, aquariums, and wildlife conservation entities. Their platform supports animal data management and conservation efforts worldwide, positioning them as a leader in zoological data services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to their specialized audience. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and maintaining good performance and mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration details align well with the organization's history and legitimacy, supporting a high trust score.

U

Unie českých a slovenských zoologických zahrad

ucszoo.com

56

The Unie českých a slovenských zoologických zahrad (UCSZOO) website serves as the official online presence for a recently established non-profit organization representing 18 zoological gardens across Czechia and Slovakia. The organization focuses on coordinating conservation efforts, animal exchange programs, educational campaigns, and professional development among member zoos. The website is built on WordPress using the Divi theme and includes several plugins for enhanced functionality, including translation services. The site is well-branded and professionally designed, targeting zoo professionals and the general public interested in nature conservation. However, it lacks explicit privacy and cookie policies, which are important for compliance with data protection regulations.

C

Chráníme mořské želvy z.s.

morskezelvy.cz

9

Chráníme mořské želvy z.s. is a Czech Republic based non-profit organization dedicated to the protection and conservation of marine turtles, primarily in Indonesia and Sri Lanka, with educational outreach in the Czech Republic. The organization focuses on protecting turtle nesting sites, relocating eggs to safety, releasing hatchlings, and educating local communities and children about environmental stewardship. Their market position is niche within marine conservation, supported by partnerships with governments, universities, and volunteers. The website demonstrates a good level of content quality and user engagement through social media and donation transparency. Technically, the site uses common web technologies such as jQuery, Google Analytics, and MailChimp, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and some privacy consent mechanisms, but lacks advanced security headers and detailed privacy policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Overall, the site is professional and trustworthy for its non-profit mission, though improvements in security and compliance documentation are recommended.

K

KAO.cz

kao.cz

10

KAO.cz is a Czech-based small business specializing in comprehensive digital solutions including web design, graphic design, media production (photo and video), and custom internet systems such as reservation and e-commerce platforms. The company targets small businesses, sports clubs, cultural organizations, and individual entrepreneurs, positioning itself as a one-stop provider for digital and media services. Founded in 2007, KAO.cz demonstrates a stable market presence with a focus on local and regional clients. Technically, the website employs a custom or proprietary CMS with a technology stack that includes jQuery, Owl Carousel, and Google Fonts. The site is moderately performant, mobile-optimized, and uses standard web technologies with custom scripts for UI and cookie management. Hosting is provided through a Czech registrar and hosting provider, consistent with the business location. From a security perspective, the site uses HTTPS (assumed from domain and modern standards), implements a detailed cookie consent mechanism compliant with GDPR, and avoids exposing sensitive data. However, no explicit security policies or incident response information is published, and security headers are not detected in the provided data. Tracking technologies include Google Analytics and Facebook pixels, indicating moderate user tracking. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of adult or questionable content. The domain registration data aligns well with the website's claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular security audits to improve the security posture further.

I

International Zoo Educators Association

izea.net

69

The International Zoo Educators Association (IZEA) is a well-established non-profit organization founded in 2000, focused on conservation education within zoos and aquariums globally. The website serves as a resource hub offering training, educational materials, and networking opportunities for professionals in the field. The organization positions itself as a global leader in conservation education, targeting educators and conservation professionals. Technically, the website is built on WordPress, leveraging plugins such as Jetpack and Akismet for analytics and spam protection, respectively. The site demonstrates good digital maturity with a professional design, mobile optimization, and clear privacy compliance mechanisms including GDPR-aligned cookie consent. Security posture is solid with HTTPS enforced and domain registration consistent with the organization's profile, though some improvements like enabling DNSSEC and adding security headers could enhance protection. Overall, the site is trustworthy, safe, and professionally maintained, supporting the organization's mission effectively.

M

Meteored

theweather.com

69

Theweather.com, operated under the Meteored brand, is a professional weather information service providing 14-day forecasts, hourly updates, meteorological news, and videos primarily targeting the US market and global users. The site offers extensive weather data for over 200,000 cities worldwide and supports multiple languages and regional partner sites. It also provides weather widgets and mobile applications across major platforms including Android, iOS, Huawei, and Windows. The business model is advertising-supported, leveraging multiple ad networks and tracking technologies integrated with a GDPR-compliant consent management platform. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, header bidding with Prebid.js, and integrates video content via Dailymotion. The site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility basics. Hosting appears to be managed via Meteored's own services or trusted CDNs. Privacy and cookie policies are comprehensive and prominently linked, with active consent mechanisms. Security posture is strong with HTTPS enforced, security headers implemented, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit published security policies or incident response contacts, and no vulnerability disclosure or security.txt files were found. The WHOIS data for the domain is unavailable, indicating privacy protection or recent registration, which slightly reduces trust but is mitigated by the professional site presentation and brand recognition. Overall, theweather.com is a credible and professionally managed weather information platform with good technical and security practices. Strategic recommendations include publishing explicit security policies and incident response contacts, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further improve trust and compliance.

The website www.zoobistro-rheine.de is currently under construction and contains only minimal placeholder content indicating that it will be online soon. The business details, contact information, and service descriptions are not yet provided, limiting the ability to assess the company's market position or business model. The site is hosted on the Jimdo platform, as evidenced by the use of Jimdo name servers and assets. Technical infrastructure is basic with no visible security headers or HTTPS status available from the provided data. No forms, analytics, or advertising scripts are present, indicating a very early stage of website development. Security posture is weak due to lack of HTTPS and absence of privacy or cookie policies. Overall, the site currently offers minimal business or security information, resulting in a low trust and credibility score.

S

Stadt Rheine

rheine.de

56

Stadt Rheine operates as the official municipal government website for the city of Rheine in Germany, providing a broad range of public services, cultural information, and tourism resources. The site targets residents, visitors, and businesses, offering online forms, event information, and administrative contacts. The website is well-structured with comprehensive navigation and modern design elements, reflecting a medium-sized government entity with a strong local presence. Technically, the site employs modern JavaScript libraries such as Swiper.js and ExtJS, uses a recognized CMS (Recon CMS), and implements cookie consent via Klaro, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and basic security headers present, though additional headers and a published incident response policy would enhance trust. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and safe for general audiences.

NRW Partner Zoo is a consortium of 12 major zoos and animal parks in North Rhine-Westphalia, Germany, focused on conservation, education, and providing visitor benefits such as discounted entry. The website is well-structured, informative, and targets families, zoo visitors, and conservation enthusiasts. Technically, it uses modern front-end frameworks like Bootstrap and jQuery, with responsive design and conditional Google Analytics tracking respecting user consent. Security posture is moderate with cookie consent implemented and anonymized analytics, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and strong partner representation.

E

European Association of Zoos and Aquaria (EAZA)

eaza.net

68

The European Association of Zoos and Aquaria (EAZA) operates a professional and comprehensive website serving as a hub for over 400 member zoos and aquariums across Europe and Western Asia. The organization focuses on species conservation, animal welfare, education, research, and advocacy. The website is built on modern technologies including Gatsby and React, with a headless CMS (Strapi) backend, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are present and indicate GDPR compliance, though direct contact emails and phone numbers are not publicly listed, relying instead on contact forms. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding strongly indicate a legitimate and established non-profit entity. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with recommendations to improve security headers and domain registration transparency.

The website at waza.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is long-established, created in 2000, and registered with a reputable registrar, Network Solutions, LLC. Hosting appears to be provided by SiteGround based on the nameservers. No business information, contact details, or policies are available on the accessible page, limiting the ability to assess the organization's operations or services. The lack of content and metadata prevents evaluation of the website's technical maturity or SEO optimization. Security posture cannot be fully assessed due to the blocked content, but the absence of DNSSEC and security headers is noted as areas for improvement. Overall, the site appears legitimate based on domain registration data but is currently inaccessible, resulting in a very low AI score and limited insights.

V

VdZ - Verband der Zoologischen Gärten e.V.

vdz-zoos.org

51

The Verband der Zoologischen Gärten (VdZ) is a reputable non-profit association representing 71 scientifically managed zoos across Germany, Austria, Switzerland, and Spain. The organization focuses on species conservation, animal welfare, education, scientific research, and advocacy. The website reflects a professional and consistent brand presence with comprehensive content targeting zoo visitors, conservationists, researchers, and policymakers. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious patterns were detected. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

F

FaniMani

fanimani.pl

72

FaniMani.pl is a well-established Polish platform founded in 2014 that enables users to support social organizations through their online shopping activities. The website acts as an affiliate donation platform, partnering with over 1800 online stores and more than 12,500 charitable organizations. It offers browser extensions and mobile applications to facilitate user participation seamlessly. The platform enjoys a strong market position in Poland's charitable e-commerce niche, supported by a professional, well-designed website and extensive partner network. Technically, the site leverages a modern technology stack including Django backend, WordPress CMS, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Facebook Pixel. Cookie consent is managed via CookieYes, ensuring GDPR compliance with granular user consent options. Hosting is provided by OVH SAS, a reputable provider, and the site uses HTTPS with good SSL configuration. From a security perspective, the platform demonstrates good practices including CSRF protection, secure cookies, and use of reCAPTCHA. However, some security headers are not explicitly detected and DNSSEC is not enabled, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent mechanisms. Overall, FaniMani.pl presents a low-risk profile with a high level of professionalism, compliance, and technical maturity. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and resilience.

F

Fundacja FaniMani

fanipay.pl

35

FaniPay.pl is a specialized online payment platform tailored for foundations and associations in Poland, enabling them to collect donations securely and efficiently. Operated by Fundacja FaniMani since 2016, it integrates with the FaniMani platform and offers features such as simple registration, transparent fees, daily payouts, and donor data access. The platform enjoys trust from over 12,500 NGOs and partners with reputable payment processors like Autopay and Tpay. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are needed in DNSSEC and security headers. Privacy compliance is partial due to the absence of a privacy policy page, but cookie consent is implemented. Overall, the site demonstrates a mature business model with strong credibility in the non-profit sector.

K

Krajowy Integrator Płatności S.A.

tpay.com

70

Tpay is a well-established Polish payment service provider specializing in online payments and fast bank transfers, serving primarily e-commerce businesses in Poland. The company is legally registered as Krajowy Integrator Płatności S.A., founded in 2009, and operates with a strong market position supported by a partnership with Bank Pekao and PCI DSS level 1 certification. Their website reflects a mature digital presence with comprehensive service offerings including payment gateways, marketplace settlements, and integration modules for popular e-commerce platforms. Technically, the site uses modern analytics, tracking, and accessibility tools, hosted on OVH with Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS, cookie consent, and bank-grade standards, though DNSSEC is not enabled and explicit security headers are not evident. Privacy compliance is basic but includes a cookie policy with consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

P

Przelewy24

przelewy24.pl

74

Przelewy24 is a well-established Polish online payment service provider offering a variety of payment methods including BLIK, Google Pay, and Apple Pay. The website targets businesses seeking to integrate efficient and diverse payment solutions into their e-commerce platforms. The company positions itself as a key player in the Polish online payments market, providing reliable and fast payment processing services. The website content is professional, well-structured, and localized in Polish, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a good level of digital maturity and compliance with privacy regulations. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks some advanced security headers and explicit security policies. No WHOIS data is available due to privacy protection, which is justified for a financial services provider. Overall, the site demonstrates a strong security posture and compliance with GDPR, with room for improvement in transparency and incident response readiness.

media4free.cz is a small independent publishing company focused on cultural, artistic, and social topics, primarily publishing the printed cultural monthly magazine Artikl since 2014. The website content is minimal but clearly communicates the company's niche in cultural media. Technically, the site runs on an outdated WordPress version (2.8.4) and uses Google Analytics for visitor tracking. The site lacks modern security headers and privacy policies, which indicates a low maturity level in security and compliance. The absence of WHOIS data limits the ability to verify domain legitimacy and ownership, which is a concern for trustworthiness. Overall, the website is functional but basic, with moderate performance and poor mobile optimization.

N

National Theatre

narodni-divadlo.cz

51

The National Theatre in Prague is a prestigious cultural institution representing the Czech Republic's national identity and European cultural heritage. The website provides comprehensive information about upcoming theatre performances across various genres including drama, ballet, opera, and multimedia shows. It offers ticket sales, subscriptions, and an e-shop for related merchandise. The institution maintains partnerships with prominent companies and media outlets, reinforcing its market position as a leading national theatre. Technically, the website is built using modern web technologies such as React and Next.js, with integration of Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some areas such as explicit privacy policy and security headers could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the presence of official partners and professional content supports trustworthiness. Overall, the website is a well-maintained digital presence for a major cultural institution, with moderate to good security posture and privacy compliance. Strategic improvements in transparency, security headers, and contact information would enhance trust and compliance.

Gočárova Galerie is a regional cultural institution based in Pardubice, Czech Republic, focused on art and architecture exhibitions, educational programs, and community engagement. The gallery operates under the auspices of the Pardubice regional government and offers a variety of exhibitions, workshops for children and adults, and event space rentals. The website is professionally designed, primarily in Czech, with clear navigation and a modern technical stack including jQuery, Foundation, and Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are not evident. The domain registration aligns well with the gallery's founding date, supporting legitimacy. Overall, the site presents a trustworthy and well-maintained digital presence for a government-supported cultural entity.

The website kulturnipecka.cz is currently a parked domain landing page primarily used for domain resale or parking purposes. It lacks any substantive business content, contact information, or privacy and security policies. The domain's WHOIS data is suspicious, showing a future creation date and registrar details consistent with domain parking services. Technically, the site relies on iframe embedding and external ad/tracking scripts from questionable domains, with no HTTPS enforcement or security headers, resulting in a poor security posture. Overall, the site does not represent an active or legitimate business presence and poses risks related to trust and security.

C

Commune de Vincelles

vincelles.fr

63

The website www.vincelles.fr serves as the official municipal portal for the Commune de Vincelles, a small local government entity in the Yonne department of France. It provides residents and visitors with information about municipal services, local news, events, and community resources. The site is well-structured and targets local citizens and tourists interested in the region. The business model is typical of a government website, focusing on public service and community engagement rather than commercial activities. Technically, the site uses a WebSee CMS platform with common JavaScript libraries such as jQuery, jssor slider, and fancybox for UI enhancements. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data and security policies reduces overall trustworthiness. The site does not appear to use analytics or tracking services, which aligns with privacy-conscious public sector practices. Overall, the website is a functional and trustworthy municipal portal but would benefit from enhanced privacy compliance, security hardening, and transparency regarding domain registration and data protection policies.

C

Commune de Villefargeau

villefargeau.fr

63

The website www.villefargeau.fr serves as the official online presence for the commune of Villefargeau in the Yonne department of France. It provides municipal information, local news, event calendars, administrative procedures, and contact details aimed primarily at residents and visitors. The site is positioned as a local government portal with a focus on community engagement and public service. Technically, the site uses a variety of JavaScript libraries including jQuery, Leaflet for mapping, and Jssor Slider for image slideshows, all managed via the WebSee CMS platform. The site is mobile-optimized and accessible, with a clear navigation structure and cookie consent mechanisms in place. Security-wise, the site enforces HTTPS but lacks visible HTTP security headers and formal incident response or vulnerability disclosure information. The absence of WHOIS data reduces domain trustworthiness, though the official nature of the site and consistent branding mitigate concerns. Overall, the site is functional and professional but could improve security posture and transparency.

The website mairie-venoy.fr serves as the official online presence for the Mairie de Venoy, a local government entity in France. It provides residents and visitors with municipal information, administrative procedures, community news, and contact details. The site targets local citizens and those interested in the commune's affairs, offering a basic but functional information portal. The business model is typical of government websites, focusing on public service and information dissemination rather than commercial activities. From a technical perspective, the website employs traditional web technologies including HTML, CSS, and JavaScript libraries such as Prototype.js and Scriptaculous, alongside LightboxJS2 for image display. Hosting is provided by OVH, a reputable provider. However, the site lacks modern CMS frameworks and shows signs of aging technology, with limited mobile optimization and basic accessibility features. Performance is moderate, and SEO practices are minimal. Security posture is moderate but could be significantly improved. The site uses HTTPS and includes Google Analytics for visitor tracking but lacks critical security headers and modern security practices. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and trustworthy as a local government portal but requires updates to its security, privacy compliance, and technical infrastructure to meet modern standards and improve user experience. Strategic improvements in these areas will enhance trust, compliance, and operational resilience.

The website www.mairie-vallan.fr serves as the official online presence for the commune of Vallan, located in the Yonne department of Bourgogne-Franche-Comté, France. It provides residents and visitors with municipal news, administrative procedures, community services, and contact information. The site targets local citizens and stakeholders seeking information about the commune's governance and services. The business model is public service-oriented, focusing on transparency and community engagement. Technically, the website is built on a CMS solution provided by Citopia (WeeCity), utilizing technologies such as jQuery 1.10.2, Bootstrap, and FlexSlider. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS but lacks visible security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. There are no privacy or cookie policies present, indicating compliance gaps with GDPR. The WHOIS data is unavailable, which limits domain trust verification, though the site content and official contact details suggest legitimacy. Overall, the website is functional and professional but would benefit from updating its technical stack, enhancing security headers, and adding privacy compliance documentation to improve trust and security posture.

The website for Mairie de Saint-Bris-le-Vineux serves as the official digital presence of the local government of Saint-Bris-le-Vineux, France. It provides comprehensive information about municipal services, local news, cultural events, and viticulture, targeting residents and visitors. The site is built on WordPress and leverages common plugins such as Yoast SEO, Contact Form 7, and WP Cloudy for weather information. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is minimal, with no visible cookie consent or detailed privacy policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy measures.

C

Commune de Perrigny

perrigny.fr

45

The website www.perrigny.fr serves as the official online presence for the Commune de Perrigny, a small local government entity in France. It provides residents and visitors with essential information about municipal services, local news, contact details, and community events. The site is designed to facilitate communication between the municipality and its citizens, featuring practical resources such as opening hours, downloadable documents, and a photo gallery. The integration of the PanneauPocket application enhances real-time information dissemination. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery for interactivity, FontAwesome for icons, and Google Analytics for visitor tracking. Cookie consent is managed through the Tarteaucitron framework, indicating attention to privacy compliance. The site is mobile-optimized and structured for good SEO performance, although accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a published security policy or incident response information. The absence of WHOIS data limits domain trust assessment, but the website content and official contact information strongly indicate legitimacy. No vulnerabilities or malicious content were detected. Overall, www.perrigny.fr is a well-maintained municipal website with good content quality and user experience. Strategic improvements in security headers, transparency on security policies, and WHOIS data availability would enhance trust and compliance.

M

Mairie de Montigny la Resle

mairie-montigny-la-resle-89.fr

57

The website www.mairie-montigny-la-resle-89.fr serves as the official online presence for the town hall of Montigny la Resle, a small commune in the Bourgogne region of France. It provides residents and visitors with essential information about municipal services, local news, administrative procedures, health advisories, and community events. The site is well-structured and targets local citizens and stakeholders, offering a comprehensive resource for civic engagement and public service access. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. It is mobile-optimized and accessible, featuring responsive design and navigation aids. However, the technology stack is somewhat dated, notably with an older jQuery version, and lacks advanced security headers. Performance is moderate, with no evident tracking or analytics scripts, indicating a privacy-conscious approach. From a security standpoint, the site uses HTTPS, which is mandatory, but does not implement additional security headers that could enhance protection against common web threats. There is no visible privacy or cookie consent mechanism, which is a compliance gap under GDPR. The WHOIS data is unavailable, which slightly reduces trust but is not uncommon for .fr domains. No vulnerabilities or sensitive data exposures were detected. Overall, the website is a trustworthy and functional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and updating libraries would enhance its security posture and regulatory adherence.

V

Ville de Monéteau

moneteau.fr

44

Ville de Monéteau operates an official municipal website serving the local community in France, providing comprehensive information on municipal governance, daily life services, youth and cultural activities, and event agendas. The website targets residents and visitors seeking local government resources and community engagement. Technically, the site is built on a modern WordPress CMS with Elementor page builder and integrates SEO and accessibility tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security headers are absent, representing areas for improvement. Overall, the site is trustworthy and professional, with a low risk profile but could enhance compliance and security transparency.

M

Mairie de LINDRY

mairie-lindry.fr

55

The website for Mairie de Lindry serves as the official digital presence for the local government of Lindry, France. It provides residents and visitors with municipal news, administrative information, community services, and practical resources. The site is well-structured and targets local citizens seeking information about municipal operations, family services, and community life. The business model is public service oriented, focusing on transparency and accessibility of local government information. Technically, the site is built using modern web technologies including React and Gatsby, ensuring a performant and responsive user experience. It integrates third-party tools such as Leaflet for maps and Matomo for analytics, alongside a robust cookie consent mechanism (tarteaucitron) that respects user privacy and GDPR compliance. Hosting and DNS infrastructure appear stable and professional, with no signs of technical debt or outdated components. From a security perspective, the site enforces HTTPS and respects Do Not Track signals, with cookie consent implemented in high privacy mode. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its purpose as a municipal information portal with good technical and security hygiene. Strategic improvements could focus on enhancing security headers, publishing security policies, and expanding transparency around incident response.

S

Saint-Georges-sur-Baulche

saint-georges-sur-baulche.fr

44

Saint-Georges-sur-Baulche is a French municipal government website providing comprehensive information and services to local residents, including administrative procedures, urban planning, family portals, and community news. The site serves as the official digital presence of the commune, targeting residents, families, seniors, youth, and local associations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Bootstrap framework, and Leaflet.js for mapping, ensuring good mobile responsiveness and SEO optimization. The site employs cookie consent mechanisms and Google Analytics with user consent, reflecting a good privacy compliance posture. Security-wise, the site uses HTTPS with an excellent SSL configuration but lacks some HTTP security headers and formal security policies, indicating room for improvement. The WHOIS data is unavailable, likely due to privacy protection or registry policies, but the website content and branding strongly indicate legitimacy as an official municipal site. Overall, the site is professional, trustworthy, and well-maintained, with moderate technical performance and good user experience.

M

Mairie de Gurgy

gurgy.net

58

The website www.gurgy.net serves as the official municipal portal for the town of Gurgy, France, providing residents and visitors with news, administrative information, community services, and event announcements. It targets local citizens and stakeholders, offering a centralized platform for municipal communication and public service access. The site maintains a consistent and professional presentation aligned with government standards, including clear navigation and relevant content. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and integrates third-party services like Google Analytics and Meteo France weather widgets. Cookie consent is managed via the tarteaucitron library, ensuring compliance with privacy regulations. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and manages user consent for cookies, but it does not implement several recommended security headers or provide incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, as it reduces trust in domain legitimacy despite the website's official appearance. Overall, the website is functional, trustworthy, and serves its purpose well, but improvements in security headers, WHOIS transparency, and incident response readiness are advised to enhance its security posture and trustworthiness.

C

Commune d'Escolives-Sainte-Camille

escolivesstecamille.fr

58

The website escolivesstecamille.fr serves as the official digital presence of the commune of Escolives-Sainte-Camille, a small municipality in France. It provides comprehensive information about local governance, cultural heritage, community services, and tourism. The site targets residents and visitors, offering event updates, municipal contacts, and historical insights. The business model is typical of a local government entity focused on public service and community engagement. Technically, the site is built using modern web technologies including React and Gatsby, ensuring fast performance and good mobile optimization. It integrates privacy-respecting analytics (Matomo) and a robust cookie consent mechanism (Tarteaucitron) aligned with GDPR requirements. The site is hosted with secure HTTPS and uses reputable DNS providers. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with high privacy settings. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. Overall, escolivesstecamille.fr is a well-maintained, trustworthy municipal website with strong content quality and technical implementation. Strategic improvements in security documentation and incident response readiness would further strengthen its posture.

C

Commune d'Escamps

escamps.fr

55

The website escamps.fr serves as the official digital presence for the Commune d'Escamps, a small local government entity in France. It provides residents and visitors with comprehensive information about municipal services, local news, events, community associations, and tourism. The site is well-positioned as a trusted source for local administrative and community information, targeting residents and stakeholders within the commune. Technically, the site is built using modern web technologies including React and Gatsby, ensuring good performance, mobile optimization, and accessibility. Privacy is respected through the use of a cookie consent mechanism and Matomo analytics configured for high privacy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and fulfills its role effectively as a municipal information portal.

M

Mairie de Chevannes

chevannes-yonne.fr

56

The website chevannes-yonne.fr serves as the official municipal portal for the commune of Chevannes in the Yonne department of France. It provides residents and visitors with practical information about local government services, council members, community events, and administrative procedures. The site is positioned as a local government resource with a focus on community engagement and transparency. Technically, the site is built on WordPress using the Elementor page builder and Astra theme, hosted by OVH, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented via Yoast SEO. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit privacy policies indicates room for improvement. No WAF or blocking mechanisms interfere with content accessibility. Overall, the site is trustworthy and professionally maintained, but could enhance compliance and security by adding privacy policies, security headers, and clearer contact information.

M

Mairie de Charbuy

charbuy.fr

61

The website charbuy.fr serves as the official digital presence of the Mairie de Charbuy, a small municipal government entity in France. It provides comprehensive information about local governance, community services, educational institutions, associative life, and administrative procedures. The site targets residents and visitors seeking municipal information and services. Technically, the site is built on a modern React/Gatsby framework, hosted by Scaleway, and incorporates privacy-conscious tools such as Matomo analytics and tarteaucitron for cookie consent. The website demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, reflecting a mature digital infrastructure for a local government entity.

C

Commune de Champs-sur-Yonne

champs-sur-yonne.fr

54

The website champs-sur-yonne.fr serves as the official digital portal for the municipal government of Champs-sur-Yonne, France. It provides residents and visitors with essential information including local news, administrative procedures, municipal services, and contact details. The site is positioned as a trusted local government resource, focusing on transparency and community engagement. The business model is public service oriented, with no commercial activities evident. The website is well-branded and consistent with the identity of a small municipal entity founded in 2014. Technically, the site employs a modern technology stack including Bootstrap, jQuery, and several carousel libraries for UI enhancement. It uses hCaptcha for form protection and a cookie consent management tool (tarteaucitron.js) to comply with privacy regulations. Hosting is provided by OVH, a reputable French hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses hCaptcha to mitigate spam on contact forms. However, it lacks visible HTTP security headers such as CSP or HSTS, and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid foundation for public sector communication. Strategic improvements include enhancing security headers, publishing incident response information, and expanding accessibility compliance. These steps would strengthen the site's security posture and trustworthiness further.

The website bleigny-le-carreau.fr currently returns a 404 Not Found error page, indicating that the site content is inaccessible. There is no metadata, structured data, or business information available on the site. The domain is registered since 2015 with WORLDLINE FRANCE, a reputable registrar, and is active with no privacy protection, suggesting legitimacy. However, the lack of accessible content severely limits the ability to assess the business, technical infrastructure, or security posture. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available. The site does not exhibit any security headers or HTTPS status from the provided data. Overall, the website quality and professionalism are poor due to the absence of content.

M

Mairie d'Appoigny

mairie-appoigny.fr

52

The website www.mairie-appoigny.fr serves as the official digital portal for the Mairie d'Appoigny, a local government entity in France. It provides residents and visitors with access to municipal news, administrative services, event information, and contact resources. The site is well-structured, featuring modern web technologies such as Joomla CMS, Bootstrap, jQuery, and Vue.js, ensuring a responsive and accessible user experience. The presence of GDPR-compliant cookie consent and clear contact details reflects a commitment to privacy and user rights. Security measures include HTTPS enforcement and CSRF tokens, though additional security headers could enhance protection. The absence of WHOIS data suggests privacy protection, which is reasonable for this type of entity. Overall, the site is trustworthy, professional, and serves its community effectively.

B

Botnation AI

botnation.ai

63

Botnation AI is a well-established technology company specializing in no-code chatbot creation platforms enhanced with AI capabilities. Founded in 2017 and registered in Switzerland, the company offers a SaaS model targeting businesses and agencies seeking to deploy conversational AI solutions across multiple channels such as websites, social media, and messaging apps. Their platform emphasizes ease of use, integration with CRM and APIs, and includes live chat features for seamless human handover. The website demonstrates a mature digital presence with comprehensive content, strong branding, and multiple certifications including GDPR, PCI-DSS, and ISO standards, reinforcing their commitment to security and compliance. Technically, the website is hosted on AWS infrastructure with a modern tech stack including JavaScript and jQuery, optimized for performance and mobile responsiveness. SEO and accessibility are well addressed with structured data and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is mostly met, but the absence of a cookie consent mechanism and incident response contacts are notable gaps. Overall, Botnation AI presents a trustworthy and professional online presence with a clear business model and strong market positioning in the chatbot technology sector. The site is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing privacy controls, improving DNS security, and publishing incident response details to further strengthen trust and compliance.

The website at otipass.net is currently inaccessible, returning a 403 Forbidden error page which prevents access to any meaningful content or business information. The domain is registered with OVH sas since 2010 and hosted on OVH servers, indicating a stable registration history. However, the lack of accessible content, metadata, or contact information severely limits the ability to assess the business or technical maturity of the site. No privacy, cookie, or security policies are present, and no security headers or HTTPS information is available from the provided data. This results in a very low security posture and poor privacy compliance. Overall, the site appears to be either restricted or under maintenance, and cannot be properly evaluated for business credibility or technical quality at this time.

The website otipass.cloud presents an extremely minimal online presence with only a brief textual phrase and no additional content or metadata. The domain is newly registered in January 2024 through OVH sas, indicating a very recent business or project launch. There is no visible business description, contact information, or policies, which limits the ability to assess the company's market position or services. Technically, the site lacks modern web features, SEO optimization, and accessibility enhancements, reflecting a low digital maturity level. Security posture is basic with no DNSSEC, no security headers, and minimal SSL configuration. No privacy or cookie policies are published, and no incident response or vulnerability disclosure information is available. Overall, the site appears to be in an early development or placeholder state, with significant improvements needed to establish trust, compliance, and professionalism.

O

Otipass

otipass.com

57

Otipass is a French company specializing in the digitization of territorial and cultural passes, including tourist and multiservice passes. The company positions itself as a market leader in France with a strong presence in public procurement catalogs and a network of city clients. The website is built on Joomla CMS using modern frameworks and includes integrations with analytics and marketing tools such as Matomo and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy policies and terms of service are not clearly found. WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and client testimonials support a credible business presence. Overall, the site is professional, well-branded, and targets local governments and tourism sectors.

B

Behavee

behavee.com

64

Behavee is a Czech digital marketing agency specializing in services for e-commerce shops and lead generation. The website presents a professional image with clear branding and a focus on online marketing services. The technical infrastructure is based on the Wix platform, leveraging Wix's Thunderbolt framework and standard polyfills for compatibility. Microsoft Clarity is used for analytics and user behavior tracking. Security posture is moderate with HTTPS usage implied, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and well-designed but would benefit from enhanced transparency and security practices.