Medium-risk security reports

swissporTON is a reputable manufacturer and distributor of roofing materials, specializing in ceramic and cement roof tiles, roofing accessories, and integrated photovoltaic systems. The company targets professional builders, distributors, architects, and individual investors primarily in Poland and Europe. The website reflects a mature digital presence with comprehensive product information, professional design, and clear navigation. Technically, the site uses modern web technologies and integrates popular analytics and marketing tools while maintaining good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable publicly, consistent with .pl domain privacy norms, and does not raise legitimacy concerns. Overall, swissporTON presents a trustworthy and professional business with a solid online presence.

CREATON South-East Europe Kft. is a medium-sized manufacturing company specializing in clay roof tiles and roofing accessories, serving primarily the South-East European market. The company offers a broad product range, technical consulting, and downloadable resources, targeting private investors, contractors, architects, and agricultural users. The website is professionally designed, multilingual, and provides clear navigation and relevant content. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, hosted by Neosoft in Hungary, and integrates modern technologies such as Google Maps API and Facebook Pixel for marketing and analytics. Security posture is solid with HTTPS enforced and nonce usage in scripts, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a trustworthy and established business with good digital maturity.

CREATON South-East Europe Kft. is a well-established manufacturer specializing in ceramic roof tiles with over 130 years of industry experience. As part of the French TERREAL group, it holds a strong market position in the manufacturing sector, offering a wide range of roofing products and technical support services. The website targets a broad audience including investors, architects, contractors, and agricultural users, providing comprehensive product information and reference projects. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern technologies such as Google Maps API and Facebook Pixel for marketing and analytics. The website demonstrates good mobile optimization, SEO practices, and a consistent branding approach. Security-wise, the site enforces HTTPS and uses nonce attributes for scripts, but lacks explicit security headers and published incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the business's legitimacy and market presence.

CREATON Romania operates as a key supplier of roofing solutions, specializing in ceramic and concrete roof tiles with a broad product range and professional consulting services. The company positions itself as a leading European brand with over two centuries of brand heritage, targeting builders, architects, roof installers, and agricultural users. The website is well-structured, professionally designed, and offers multi-language support, reflecting a mature digital presence. Technically, the site is built on the Neos CMS platform using PHP and JavaScript, with integration of Google Maps API for location services. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is privacy protected under ROTLD, which is typical for Romanian domains, and does not detract from the business legitimacy given the professional site content and contact information. Overall, the site demonstrates a strong business credibility and a secure, compliant digital footprint.

CREATON South-East Europe Kft. is a medium-sized manufacturing company based in Hungary specializing in ceramic roofing materials and related accessories. The company targets builders, roofers, architects, and agricultural users, offering a broad product range and technical support services. The website reflects a well-established regional presence with multilingual support and a clear focus on product quality and customer service. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, providing clear contact information and social media engagement.

CREATON Benelux nv operates as a specialized manufacturer and distributor of high-quality clay and concrete roof tiles along with system accessories, targeting private individuals, building owners, and professional stakeholders such as roofers, architects, and project developers. The company maintains a strong market position in the Benelux region with a professional and content-rich website that supports multiple languages and regional partner sites. The website infrastructure is built on the Neos CMS platform using the Flow PHP framework, incorporating modern technologies such as Google Tag Manager and Cookiebot for analytics and consent management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility, supporting a trustworthy online presence for the company.

CREATON Benelux nv is a specialized manufacturer and distributor of high-quality clay and concrete roof tiles along with roofing system accessories. The company targets both private individuals and professional roofing partners, positioning itself as an expert in pitched-roof solutions within Belgium and internationally through multiple localized websites. The website is professionally designed using the Neos CMS platform, featuring multi-language support and clear navigation tailored to different user groups such as homeowners and professionals. The business model focuses on manufacturing and supplying roofing materials with additional professional services and tools.

CREATON is a well-established manufacturer and supplier specializing in roofing products, including clay tiles and roofing accessories, targeting both professional and consumer markets primarily in Italy and other European countries. The website reflects a mature digital presence with multi-language support and a professional design consistent with its industry. The technical infrastructure leverages modern frameworks such as Neos CMS and Flow PHP, integrating third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though there is room for improvement in implementing additional security headers. Overall, the website demonstrates good compliance with GDPR and privacy standards, with transparent business information and a trustworthy online presence.

CREATON is a specialized manufacturer and distributor of high-quality pitched roof tiles, including clay and concrete options, along with system accessories. The company targets roofing professionals, architects, residential construction companies, dealers, and end customers interested in pitched roofs. Their market position is that of an established expert with a broad product range and professional services. The website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit privacy policies are missing. WHOIS data is unavailable, which slightly reduces domain trust but the professional website and active cookie compliance indicate legitimate business operations. Overall, the website scores well in content quality, technical implementation, security, privacy compliance, and business credibility.

Applepie is a well-established full-service digital agency based in the Netherlands, specializing in branding, digital marketing, campaign content, and web development services primarily for small and medium-sized enterprises (SMEs). The company positions itself as a growth partner with over 20 years of experience and a strong client portfolio exceeding 200 organizations. Their service offerings are comprehensive, covering branding and positioning, digital marketing and data analytics, campaign and content creation, and web development technologies. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Bing Ads, LinkedIn Insight Tag, and Leadinfo for analytics and marketing purposes. The site is built on a proprietary CMS (ApplepieCMS) and demonstrates good mobile optimization and SEO practices. Performance is moderate, with asynchronous loading of scripts to enhance speed. However, explicit security headers are not visibly implemented, though HTTPS is enforced, indicating a good SSL configuration. From a security standpoint, the website follows best practices such as HTTPS enforcement and cookie consent mechanisms compliant with GDPR. Certifications like Google Partner and Meta Certified, along with industry awards, enhance trustworthiness. However, the absence of a published security policy, incident response contacts, or a vulnerability disclosure mechanism suggests room for improvement in security transparency and readiness. Overall, Applepie presents a low-risk profile with a strong business credibility and digital maturity. Strategic recommendations include implementing explicit security headers, publishing a security policy and incident response information, and adding a security.txt file to facilitate vulnerability reporting. These steps would further strengthen their security posture and compliance stance.

W.A.G. payment solutions, a.s., operating under the Eurowag brand, is a leading European provider of integrated mobility and payment solutions focused on the transportation sector. The company offers a comprehensive suite of services including fleet management telematics, fuel cards, toll payment solutions, tax refund services, and eMobility options. Their recent integration of CVS Mobile enhances their fleet management capabilities with advanced real-time tracking and route planning, positioning them strongly in the European transport market. The website reflects a mature digital presence with multi-language support and country-specific offerings, targeting fleet operators and logistics managers across Europe. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager for analytics and tracking, and intl-tel-input for phone input handling. The site is well-optimized for mobile devices, accessible, and fast-loading, demonstrating a high level of digital maturity. The presence of comprehensive legal, privacy, and cookie policies indicates a strong commitment to compliance and user privacy. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation, regulatory disclosures, and trust signals support a strong security posture. Overall, the website presents a low-risk profile with robust business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing an incident response page, and adding a vulnerability disclosure policy to further strengthen security transparency and resilience.

W.A.G. payment solutions, a.s. operates as a leading European provider of integrated mobility and payment solutions, primarily serving the transportation and fleet management sectors. Their website promotes the GBox telematics platform, offering real-time vehicle tracking, driver monitoring, and data analytics to optimize fleet operations and reduce costs. The company targets transport companies, fleet managers, and logistics operators with a comprehensive suite of telematics and payment services, supported by multiple digital portals and mobile applications. Technically, the website is built on the Webflow CMS platform, leveraging modern JavaScript libraries such as jQuery and intl-tel-input, and integrates Google Tag Manager and LiveChat for analytics and customer support. The site is well-optimized for mobile devices, accessibility, and SEO, with a fast loading performance and structured navigation. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, uses CAPTCHA on forms, and avoids exposing sensitive data. However, explicit security headers like CSP and HSTS are not detected, and no public vulnerability disclosure or incident response contacts are provided. The WHOIS data is unavailable publicly, which slightly reduces transparency but is common for corporate domains. Overall, the security posture is solid but could be enhanced with additional headers and disclosure practices. The overall risk assessment indicates a trustworthy and professional online presence with moderate to high credibility. Strategic recommendations include improving security header implementation, publishing a security.txt file, and enhancing incident response transparency to further strengthen trust and compliance.

W.A.G. payment solutions, a.s. operates a professional website focused on providing integrated mobility and payment solutions for the European transport sector. The site highlights expert services in driver work time management, compliance, and financial settlements, targeting transport companies and fleet managers. The company positions itself as a leading provider with a broad portfolio including fuel cards, toll services, telematics, and financial services. The website is well-structured, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Webflow CMS, JavaScript libraries like jQuery and intl-tel-input, and integrates Google Tag Manager and LiveChat for analytics and customer support. The site is mobile-optimized and accessible, with cookie consent mechanisms and GDPR-compliant privacy policies. Security measures include HTTPS and CAPTCHA on forms, though explicit security headers and incident response information are not evident. The security posture is solid but could be improved by adding security headers and publishing vulnerability disclosure information. The absence of WHOIS data reduces trust slightly but the professional presentation and consistent business information mitigate concerns. Overall, the site demonstrates a strong business and technical foundation with room for enhanced security transparency. Strategic recommendations include implementing security headers, publishing a security.txt file, providing incident response contacts, and improving WHOIS transparency to enhance trust and compliance.

W.A.G. payment solutions, a.s., operating under the brand Eurowag, is a leading provider of integrated mobility and payment solutions tailored for the European transportation sector. The company offers a comprehensive suite of services including fleet management, toll payment solutions, fuel cards, tax refunds, and financial services, targeting commercial fleet operators and logistics companies. Their market position is strong, supported by a large-scale operation and a broad geographic presence across multiple European countries. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and Google Tag Manager, hosted on a performant CDN infrastructure. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital presence. The integration of multiple login portals and partner platforms indicates a complex and well-managed technical ecosystem. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, explicit security headers are not visibly configured, and there is no public incident response or vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a large enterprise in the transportation and payment services industry. The lack of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure policies to strengthen trust and compliance.

Wonderchat.io is a technology startup focused on providing no-code AI chatbot solutions for websites, leveraging ChatGPT-based automation to enhance customer support and sales analytics. The company targets businesses seeking to automate up to 70% of support queries with custom AI agents, positioning itself as an emerging player in the AI SaaS market. The website is built using modern frameworks like Framer and is hosted via Cloudflare, indicating a contemporary technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security features such as DNSSEC and does not publish security or privacy policies. The site integrates multiple analytics and marketing tools, reflecting a data-driven approach to user engagement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

TAB is a specialized Dutch company focused on building fire prevention services including compartmentalization, penetrations, emergency lighting, and maintenance. The website positions TAB as a niche expert in this field, targeting businesses and professionals requiring fire safety solutions. The site is built on WordPress with a modern tech stack including Google Tag Manager, Hotjar, and Cookiebot for analytics and compliance. Structured data and SEO metadata are well implemented, enhancing search visibility. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and published privacy or security policies, indicating room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

IPCOM is a leading European distributor specializing in energy-efficient insulation and HVAC-R solutions, operating through six dedicated business units across 21 countries. The company emphasizes sustainability, fast delivery, and customer service excellence, positioning itself as a market leader in its sector. The website is professionally designed using Drupal 11, incorporating modern tracking and consent management technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data is restricted, which is common for commercial entities in Europe, but the website's professionalism and trust indicators support its legitimacy. Overall, IPCOM presents a credible and well-established business with a strong online presence.

G2O Brand Builders is a specialized branding bureau based in Veenendaal, Utrecht, Netherlands, focusing on building strong brands through comprehensive brand strategy, design, and marketing services. The company positions itself as more than a traditional advertising agency, emphasizing brand building and strategic consultancy. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with a robust tech stack including Bootstrap, jQuery, and various marketing and analytics tools. The site is well-optimized for performance, mobile responsiveness, and SEO, providing a rich user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though there is room for improvement in security headers and explicit cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

MHB B.V. is a well-established Dutch manufacturer specializing in ultra-slim steel windows, doors, and facades, with a heritage dating back to 1667. The company positions itself as a global leader in innovative steel profile systems, offering handcrafted, thermally broken steel solutions tailored to both interior and exterior architectural projects. Their business model emphasizes co-creation and customization, targeting architects, builders, and high-end property developers. The website reflects a professional and consistent brand image, supported by certifications and a strong social media presence. Technically, the website is built on WordPress with modern frameworks and libraries such as Bootstrap, MDBootstrap, and AOS for animations. Performance optimizations are in place via WP Rocket, and SEO is enhanced using Yoast SEO Premium. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA v3 to protect forms from abuse. While no critical vulnerabilities were detected, the absence of certain security headers and a formal security policy page suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, MHB's digital presence is strong, trustworthy, and professionally managed, with minor recommendations to enhance security posture and transparency. The domain registration data corroborates the company's legitimacy and long-standing market presence.

MHB B.V. is a Dutch family-owned manufacturing company with a 350-year heritage specializing in ultra-slim steel windows, doors, and facade systems. The company positions itself as a niche leader offering high-quality, thermally broken steel profile systems tailored for both interior and exterior architectural projects. Their business model emphasizes craftsmanship, innovation, and full project lifecycle management from design to installation, targeting architects, builders, and discerning clients globally. The website reflects a strong brand identity consistent with their market position and heritage. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, MDBootstrap, and AOS for animations. Performance optimizations are in place via WP Rocket, and Google Tag Manager is used for analytics and marketing. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. Security measures include HTTPS enforcement and Google reCAPTCHA v3 integration, but additional security headers and explicit security policies are recommended. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response or vulnerability disclosure policies suggests room for improvement in security transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, MHB.eu is a professional, trustworthy website representing a reputable manufacturing business with a strong digital presence. Strategic recommendations include enhancing security headers, adding incident response information, and improving accessibility to further strengthen their security posture and compliance.

Webwonders is a Dutch digital agency specializing in helping businesses enhance their online presence through strategic digital solutions, technology implementation, and marketing campaigns. Positioned as a leading agency in the Brainport region, it holds prestigious partnerships such as Umbraco Platinum and HubSpot Gold, reflecting its expertise and market credibility. The company targets businesses seeking to improve their digital impact and online business operations. Technically, the website employs modern frontend technologies including Alpine.js and Tailwind CSS, integrates marketing and analytics tools like HubSpot and Facebook Pixel, and is optimized for performance and mobile responsiveness. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies, suggesting room for improvement in formal security posture documentation. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and strong branding. The risk profile is low, with no detected vulnerabilities or suspicious activities.

Tours City Pass is a small-sized tourism-focused business founded in 2020, offering digital city passes and related tourism packages for visitors to Tours, France. The website serves as an e-commerce platform enabling users to purchase passes, access interactive maps, and benefit from discounts and cultural offers. The business is positioned as a local tourism enabler with a clear target audience of tourists and visitors seeking cultural and leisure activities in the Tours metropolitan area. The parent company is Otipass, which provides the technological platform and payment processing services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, React, and various analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site demonstrates good practices such as encrypted communications, cookie consent, and no visible sensitive data exposure. There is no evidence of a published security policy or incident response plan, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, enabling DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

Arbeitskreis für Jugendliteratur e.V. is a German non-profit organization dedicated to promoting youth literature through awards such as the Deutscher Jugendliteraturpreis, publications, and various cultural activities. The website serves as an information hub for these initiatives, targeting educators, authors, publishers, and youth literature enthusiasts. The organization appears established within its niche, offering specialized services and community engagement opportunities. Technically, the website employs modern JavaScript libraries including Matomo for analytics and a cookie management system that respects user consent, particularly for marketing cookies. The site is mobile-optimized with good navigation and SEO practices, although no specific CMS or hosting provider was identified. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to manage tracking. However, no explicit security headers were detected, and there is no public incident response or vulnerability disclosure information. The absence of WHOIS data limits domain trust verification, but the website content and structure suggest legitimacy. No adult or inappropriate content is present, making the site safe for general audiences. Overall, the site scores well in content quality, privacy compliance, and business credibility but could improve in security best practices and transparency. Strategic recommendations include implementing security headers, publishing incident response details, and enhancing accessibility features to strengthen trust and compliance.

Gerstenberg Verlag GmbH & Co. KG is a reputable German publishing company specializing in children's literature, notably the internationally acclaimed 'Die kleine Raupe Nimmersatt' by Eric Carle. The website serves as a blog and information portal for their publications, events, and educational content, targeting parents, educators, and children. Their market position is that of an established niche publisher with a strong brand presence and consistent content quality. Technically, the website is built on WordPress with Bootstrap framework, enhanced by Matomo analytics for user tracking. The site is hosted likely by Deutsche Telekom, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks some advanced security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy standards. It provides a safe environment focused on children's educational content. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

ADAC Reisen is a well-established travel service provider affiliated with the reputable ADAC brand in Germany. The company offers a wide range of travel products including package holidays, member-exclusive trips, camper rentals, flights, and cruises. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks such as Next.js and React, hosted on DigitalOcean infrastructure, and integrates consent management and analytics tools responsibly. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement.

Nahverkehrsservice Sachsen-Anhalt GmbH operates the INSA platform, a regional public transportation service providing comprehensive timetable information and ticketing solutions for Sachsen-Anhalt and the Mitteldeutschen Verkehrsverbund (MDV). The website serves as a digital hub for users seeking mobility information, ticket purchases, and related services such as the INSA app and RufBus ordering. Positioned as a key regional mobility facilitator, INSA leverages modern web technologies and complies with GDPR regulations to ensure user privacy and data protection. Technically, the website is built on TYPO3 CMS, integrating JavaScript libraries such as ReadSpeaker for accessibility and Cookiebot for consent management. The infrastructure is hosted with professional DNS providers and employs HTTPS with good SSL configuration, ensuring secure communications. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a user-friendly experience. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit published security policies or incident response contacts, which could be improved to enhance trust and readiness. Analytics usage is moderate with Piwik (Matomo), respecting privacy with clear retention policies. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. Strategic recommendations include publishing a security.txt file, incident response contacts, and expanding security policy disclosures to strengthen the security posture and user trust.

SPL-XDEMAT is a French public local company established in 2012 by multiple departmental governments to provide digital dematerialization services tailored for local authorities. The company offers a suite of applications and services including administrative document management, electronic signatures, public procurement platforms, and citizen communication tools. The website reflects a mature regional service provider with a strong focus on government clients and compliance with French regulations. Technically, the site uses standard web technologies such as jQuery and JavaScript, with a responsive and accessible design optimized for mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. The absence of WHOIS data limits domain legitimacy verification but the professional presentation and official departmental partnerships support trustworthiness.

Maelis.info is the official website for the MAELIS application, a service provided by SPL-XDEMAT aimed at facilitating local community engagement through a smartphone app. The app offers practical information, alerts, incident reporting, and access to local public services and associations. The website is professionally designed with clear navigation and mobile optimization, targeting French local government citizens and community members. The business model focuses on providing a digital platform for local government communication and citizen participation. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery and AOS for animations. It supports mobile platforms with links to iOS and Android app stores. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common but reduces transparency. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with no signs of malicious content or suspicious behavior. Strategic recommendations include implementing security headers, adding cookie consent, improving privacy disclosures, and providing clear contact information for security incidents to enhance trust and compliance.

The domain park.g-ny.eu currently serves only a 404 Not Found error page, indicating the website is either inactive or misconfigured. No business information, metadata, or structured data is present to analyze the company's operations or services. The lack of accessible content prevents meaningful assessment of the business model, target audience, or market position. Technically, the site does not provide any detectable technologies, frameworks, or hosting details. Security posture cannot be evaluated due to absence of HTTPS, security headers, or policies. The WHOIS query failed to return any registrar or registration data, further limiting trust and legitimacy assessment. Overall, the domain appears inactive or abandoned, with no visible digital maturity or security measures in place.

The website www.tours-tourisme.fr serves as the official online presence of the Office de Tourisme de Tours Val de Loire, providing tourism-related services such as hotel reservations, activity bookings, guided tours, and holiday stays. It targets tourists and visitors interested in the Tours Val de Loire region in France. The site is built using modern web technologies including Gatsby and React, indicating a contemporary digital infrastructure. However, the technical implementation shows room for improvement in security and privacy compliance, as no privacy or cookie policies were detected, and security headers are absent. The WHOIS data is unavailable from the AFNIC database, which limits the ability to fully verify domain legitimacy and age. Overall, the site appears professional and trustworthy in content and design but would benefit from enhanced security and compliance measures.

Altimax is a French digital agency specializing in strategy, web development, social media, SEO, and audiovisual production. Based in Annecy, France, the company serves both BtoB and BtoC clients nationally and internationally. The website demonstrates a mature digital presence with a professional design, comprehensive service offerings, and active client case studies. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not outweigh the professional presentation and compliance indicators. Overall, Altimax presents as a credible and established digital agency with room for minor security enhancements.

Hurricane Electric is a well-established Internet backbone and colocation provider founded in 1995, offering global IP Transit, Layer 2 transport, colocation, dedicated servers, and IPv6 certification services. The company targets ISPs, enterprises, and network operators seeking reliable and scalable Internet infrastructure. Their market position is strong, supported by a large IPv6 deployment and global network presence. Technically, the website uses standard web technologies with Google Analytics and Google Ads integrated for tracking and marketing. The site is moderately optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is moderate; while HTTPS is implied, no DNSSEC or security headers are enabled, and no explicit security policies or incident response contacts are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the domain WHOIS data confirms legitimacy and long-term operation, enhancing trust. Strategic improvements in security headers, DNSSEC, and privacy compliance would strengthen the security and compliance posture.

The Instituto Interamericano de Cooperación para la Agricultura (IICA) is a well-established international organization focused on agricultural cooperation and development in the Americas. The website presents a professional and consistent brand image, targeting governments, agricultural institutions, and rural communities. It offers cooperation programs, strategic alliances, and technical assistance to promote innovation and sustainable agriculture. The domain age and WHOIS data align with the organization's history, supporting its legitimacy. Technically, the website is built on WordPress with Elementor and optimized for performance using WP Rocket and Cloudflare services. It employs modern web technologies and provides a good user experience with mobile optimization and clear navigation. However, accessibility features are basic, and explicit privacy and cookie policies are not evident in the provided content. From a security perspective, the site uses HTTPS and benefits from Cloudflare DNS, but lacks explicit security headers and visible incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency and compliance. The overall risk is low, with recommendations to enhance privacy disclosures, implement security headers, and provide clear contact information for security incidents to strengthen trust and compliance.

Unite Caribbean is a Caribbean-based consulting firm specializing in sustainable development and regional cooperation, with offices in Guadeloupe and Saint Lucia. The company offers consulting services and initiates cooperative projects in partnership with public, private, and philanthropic sectors in the Caribbean. The website is professionally designed using WordPress and Elementor, with multilingual support and SEO optimization. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled and domain transfer protection, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the website presents a trustworthy and professional image suitable for its target audience.

Les Gîtes d'Olive is a small hospitality business specializing in rural holiday rental accommodations in France. The website offers direct booking capabilities and targets tourists seeking vacation stays in a natural setting. The business has been established since 2011, with a consistent domain registration history and a professional online presence. The website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. Privacy and cookie compliance are managed through Iubenda, reflecting good adherence to GDPR requirements. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although DNSSEC is not enabled. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in explicit security and incident response disclosures.

Spoconline Ads is a technology company specializing in urban innovation and smart city solutions, focusing on sustainable, connected, and people-centered urban environments. Their offerings include solar-powered connected urban furniture, advertising LCD screens, mapping solutions, and a digital creative studio, targeting businesses and municipalities primarily in the Caribbean region. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information are not publicly detailed. WHOIS data is unavailable due to privacy protection, which is typical for this business type. Overall, the site presents a trustworthy and credible business presence.

Judyth Dressing is a French-based e-commerce retailer specializing in elegant, colorful, and modern women's fashion collections. The website offers a range of products including dresses, tops, pants, jewelry, and accessories, targeting women who want to express their femininity and character through fashion. The business appears to be newly founded in 2024, with a domain registration date consistent with this timeline. The company operates on a WordPress platform using WooCommerce for e-commerce functionality and Elementor for page building, indicating a modern and flexible technical infrastructure. Hosting is provided by OVH sas, a reputable European hosting provider. From a security perspective, the website uses HTTPS with a valid SSL certificate and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML source, which could be improved to enhance security posture. Privacy and cookie policies are not found on the site, and no consent mechanisms are implemented, which may pose compliance risks under GDPR. Google Analytics is used for tracking, integrated via the Site Kit plugin, indicating moderate user tracking. Overall, the website is professionally designed with good content quality, clear navigation, and mobile optimization. The business credibility is supported by consistent branding and transparent domain registration data. The security posture is moderate but could benefit from additional hardening measures. Privacy compliance is currently weak due to missing policies and consent mechanisms. Strategic improvements in these areas would enhance trust and regulatory compliance.

Experis France is a well-established IT talent and solutions provider operating primarily in France, with a business foundation dating back to 2011. The company offers a broad range of IT services including professional resourcing, managed services, consulting, project services, and academy services, targeting IT professionals and businesses seeking specialized IT expertise. As a subsidiary of ManpowerGroup, Experis France benefits from a strong market position and brand recognition in the technology sector. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern frontend frameworks and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Piano Analytics, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and maintains GDPR compliance with cookie consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Strategic recommendations include publishing explicit security policies, establishing incident response contacts, and enhancing accessibility features to further improve compliance and trust.

Manpower France operates as a leading recruitment and temporary staffing agency in France, providing a wide range of employment services including permanent and fixed-term contracts. The company is part of the global ManpowerGroup, which enhances its market position and credibility. The website is professionally designed, targeting job seekers and employers with clear navigation and comprehensive service offerings. The content is primarily in French, reflecting its local market focus. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. Security best practices are observed with HTTPS enforcement and appropriate security headers, although there is room for improvement in accessibility and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is readily available, including a dedicated Data Protection Officer email, enhancing trust and compliance. Overall, the website presents a low risk profile with a solid business credibility and technical foundation. The main limitation is the absence of WHOIS data, which is likely due to registry policies but should be monitored. Strategic recommendations include establishing a public vulnerability disclosure policy and enhancing accessibility features.

Montpellier Méditerranée Métropole and the city of Montpellier operate an official government website serving residents, visitors, and stakeholders with comprehensive information on local governance, public services, urban projects, and citizen participation. The website is well-structured, professionally designed, and targets a broad audience including citizens and businesses within the metropolitan area. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Matomo analytics with privacy considerations such as Do Not Track. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are not clearly present in the analyzed content. The absence of WHOIS data limits domain registration trust analysis, but the official .fr domain and consistent branding support legitimacy. Overall, the site demonstrates a mature digital presence appropriate for a large government entity.

The website at trace.plus/app is currently inaccessible or blocked, showing only a loading spinner with no substantive content. The domain WHOIS data is unavailable or privacy protected, providing no registrar, creation, or registrant information. The site uses modern web technologies such as React and Gatsby, and includes multiple third-party marketing and tracking scripts including Google Tag Manager, Facebook Pixel, AppsFlyer, and Gigz. However, no privacy, cookie, or terms of service policies are present, and no contact or business information is visible. This limits the ability to assess the business or security posture comprehensively. The security posture is weak due to lack of visible security headers and absence of HTTPS enforcement indicators in the content. Overall, the site appears to be under a WAF or security challenge that blocks full content access, resulting in a low trust and credibility score.

Rochexpo operates as a regional event venue and exhibition center located in Haute-Savoie, France, managed by the Association Foire Haute-Savoie Mont Blanc. The organization provides modular event spaces and comprehensive event management services, targeting businesses and event organizers in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins for SEO, social media integration, and performance optimization. While the site uses HTTPS and has cookie consent mechanisms in place, it lacks some security headers and has an unconfigured Google Analytics plugin, indicating room for improvement in security posture. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website is functional, secure enough for general use, and compliant with GDPR, but would benefit from enhanced security practices and WHOIS transparency.

Val de Loire TV is a regional French television channel focused on providing local news, entertainment, and event coverage for the Indre-et-Loire and Loir-et-Cher regions. The website offers live streaming and replay services, targeting a regional French-speaking audience interested in local content. The business model appears to be ad-supported media broadcasting with a digital presence. Technically, the site is built on WordPress with modern plugins for video delivery, consent management, and analytics integration. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy page found in the scanned content but a robust cookie consent mechanism is present. WHOIS data is privacy protected, which is common for media websites, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and serves its regional audience effectively.

The website www.tours.fr is the official digital presence of the city of Tours, France, serving as a comprehensive portal for municipal information, citizen services, news, and events. It targets residents, visitors, businesses, and community organizations, providing access to administrative procedures, cultural activities, and participatory governance platforms. The site is well-branded with official logos and consistent design, reflecting its government entity status. Technically, the site is built on WordPress 6.7.2, leveraging modern web technologies such as jQuery, Matomo analytics, and a cookie consent framework (Tarteaucitron). The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is robust with HTTPS enforced and privacy compliance evident through GDPR-aligned cookie consent and a detailed privacy policy. Security posture is strong, though the absence of explicit security headers and incident response contacts suggests areas for improvement. No vulnerabilities or suspicious content were detected. The lack of WHOIS data limits domain registration trust assessment, but the official nature and content quality strongly support legitimacy. Overall, the site presents a trustworthy, professional, and user-friendly government portal with minor technical and security enhancements recommended to further strengthen its posture.

Tours Métropole Val de Loire is the official metropolitan government entity serving the Tours metropolitan area in France. The website provides comprehensive information about local government services, urban projects, ecological initiatives, and citizen services. It targets residents and stakeholders within the metropolitan region, offering online access to administrative procedures and event information. The site is well-positioned as a regional authority with a clear public service mission. Technically, the website is built on Drupal 7 CMS with a modern JavaScript stack including jQuery, Slick carousel, and Matomo analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a cookie consent banner and privacy policy indicates compliance with EU data protection regulations. However, the site lacks some advanced security headers and explicit security or incident response policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The use of Matomo analytics with DoNotTrack enabled shows privacy-conscious tracking. The absence of WHOIS data is a concern but likely due to AFNIC or privacy settings rather than malicious intent. Overall, the site appears trustworthy and professionally maintained. Recommendations include adding security headers, publishing a security policy and incident response contact, and ensuring regular CMS and module updates to maintain security. Enhancing transparency with a vulnerability disclosure policy would further improve trust. The domain WHOIS gap should be investigated to confirm registration legitimacy.

Tours Événements is a professional event organization and venue management company based in Tours, France, specializing in congresses, salons, galas, and seminars. They operate key venues such as the Palais des Congrès de Tours and Parc Expo Tours, offering modular spaces and comprehensive event services including hospitality, audiovisual, and security. The company positions itself as a major regional player in the hospitality and event sector with a focus on sustainable event management, evidenced by their ISO 20121 certification. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrations such as Google Tag Manager, Hotjar, and Finsweet Cookie Consent for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete or unavailable, which slightly reduces trust but does not outweigh the professional presentation and contact transparency. Overall, the website demonstrates a strong digital presence and business credibility with minor areas for security and compliance improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and monitoring domain registration data for consistency.

The website www.mcdonalds.fr represents the French domain of McDonald's, a leading global fast-food restaurant chain. The business focuses on quick-service meals including burgers, fries, and beverages, operating primarily through a franchise model. The brand is well-known and holds a strong market position in the retail food sector in France and globally. However, the provided HTML content is minimal and blocked by a CAPTCHA security mechanism, preventing access to substantive website content or metadata. From a technical perspective, the site employs JavaScript and external CAPTCHA services for bot protection, but no further technology stack or CMS details are discernible. The lack of accessible content and metadata limits the ability to assess performance, SEO, or mobile optimization. Security posture cannot be fully evaluated due to absence of visible security headers or SSL information in the provided data. Security-wise, the presence of a CAPTCHA indicates an active WAF or bot mitigation strategy, which is positive for protection against automated threats. However, the absence of visible privacy policies, cookie consent mechanisms, or contact information reduces transparency and compliance visibility. WHOIS data is unavailable, which is common for domains protected by privacy services but limits trust verification. Overall, the site is likely legitimate given the brand but is currently inaccessible for detailed analysis due to security controls. Strategic recommendations include improving transparency by publishing privacy and cookie policies, enhancing contact and incident response information, and ensuring visible security headers and SSL configurations are in place.

The website www.centre-commercial.fr is a French portal dedicated to listing Carrefour shopping centers across France. It serves as an informational platform for users to locate and learn about various Carrefour commercial centers, providing addresses and links to individual center pages. The site targets general consumers in France interested in retail shopping locations affiliated with Carrefour. The business model is primarily informational, supporting Carrefour's retail presence by enhancing customer access to store locations. Technically, the website is built on WordPress using the Elementor page builder, integrating modern web technologies such as jQuery, Google Tag Manager for analytics, and Google Maps API for location services. The site includes a cookie consent mechanism compliant with GDPR norms, implemented via OneTrust. The design is responsive and optimized for mobile devices, with good SEO practices including structured data (JSON-LD) and Open Graph metadata. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of explicit privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, indicating privacy protection, which is common for commercial sites but slightly reduces transparency. Overall, the website presents a professional and trustworthy front for Carrefour shopping centers in France, with moderate technical maturity and a good security baseline. Strategic improvements include adding explicit privacy and security policies, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.

Digilor is a French technology company specializing in innovative interactive digital devices and custom tactile application development. The company targets businesses, public sector entities, and enterprises seeking advanced digital signage, interactive kiosks, and video conferencing solutions. Their market position is that of a specialized B2B provider with a strong focus on tactile and digital display technologies. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, including modern lazy loading and tracking technologies. Security posture is good with HTTPS and some security headers, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, supporting user trust. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, Digilor demonstrates a mature digital presence suitable for its business domain.

The website www.vandoeuvre.fr serves as the official digital presence for the city of Vandœuvre-les-Nancy in France, providing residents and visitors with access to municipal news, event agendas, and a variety of online administrative services. The site targets a broad audience including families, seniors, students, and local businesses, positioning itself as a comprehensive resource for community engagement and public service delivery. The business model is typical of government websites, focusing on information dissemination and facilitating citizen interactions with municipal services. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The inclusion of libraries like jQuery, PhotoSwipe, and Leaflet indicates a moderately modern tech stack aimed at enhancing user experience with interactive elements such as maps and image galleries. The site demonstrates good mobile optimization and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, allowing users granular control over tracking. However, the absence of explicit security headers and lack of visible privacy policy or terms of service pages represent areas for improvement. The WHOIS data is notably missing, which is unusual for an official municipal domain and slightly detracts from the domain's trustworthiness. Overall, the site is a well-structured, professional municipal portal with solid technical foundations and a focus on user privacy. Strategic enhancements in security policy transparency and domain registration clarity would further strengthen its credibility and compliance posture.