Security Directory

C

Comité régional du Tourisme de la région Centre-Val de Loire

tourisme-pro-centre-valdeloire.fr

10

The website 'Tourisme Pro' serves as the official digital platform for the Comité régional du Tourisme de la région Centre-Val de Loire, targeting tourism professionals within the region. It offers a comprehensive range of services including tourism data, professional training, innovation support, publications, and sustainable tourism initiatives. The site positions itself as a key regional resource and authority in tourism promotion. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for content management, GDPR compliance, and user engagement. Hosting is provided by Infomaniak Network SA, a reputable provider. The site demonstrates good mobile optimization, moderate performance, and solid SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully detected, no vulnerabilities or exposed sensitive data were found. The absence of direct contact emails or phone numbers suggests reliance on contact forms for communication. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It maintains good privacy compliance and provides a safe browsing experience. Strategic recommendations include enhancing security headers, expanding contact information transparency, and continuous security monitoring.

T

Tours Val de Loire Box

valdeloire-box.fr

41

Tours Val de Loire Box is a small French hospitality business specializing in selling curated experience gift boxes focused on the Val de Loire region. Their offerings include cultural passes, vintage vehicle rides, helicopter tours, gastronomy workshops, and weekend stays, targeting tourists and gift buyers interested in unique regional experiences. The website is professionally designed using WordPress with the Divi theme and WooCommerce platform, supported by modern web technologies such as jQuery and Snap.svg. The site is hosted by OVH, a reputable French provider, and includes SEO optimizations and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy policies and terms of service are present and accessible, indicating GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence for a niche tourism business.

T

Tours City Pass

tourscitypass.com

65

Tours City Pass is a small-sized tourism-focused business founded in 2020, offering digital city passes and related tourism packages for visitors to Tours, France. The website serves as an e-commerce platform enabling users to purchase passes, access interactive maps, and benefit from discounts and cultural offers. The business is positioned as a local tourism enabler with a clear target audience of tourists and visitors seeking cultural and leisure activities in the Tours metropolitan area. The parent company is Otipass, which provides the technological platform and payment processing services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, React, and various analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site demonstrates good practices such as encrypted communications, cookie consent, and no visible sensitive data exposure. There is no evidence of a published security policy or incident response plan, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, enabling DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

B

Bureau des Congrès Tours Val de Loire

bureaudescongres-tours.com

43

The Bureau des Congrès Tours Val de Loire is a regional convention bureau dedicated to supporting professional event organization in the Tours and Touraine region of France. The website presents a professional and well-structured digital presence, targeting event planners and corporate clients seeking local expertise and unique venues. The business model focuses on destination management and event facilitation, positioning itself as the official regional bureau with a strong local market presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support, hosted by OVH sas. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks advanced security headers and explicit security policies. WHOIS data shows some inconsistencies, notably a future domain creation date and minimal registrant information, which slightly reduces trust but does not undermine the professional nature of the site. Overall, the site is safe, compliant with GDPR, and suitable for its target audience.

A

Arbeitskreis für Jugendliteratur e.V.

jugendliteratur.org

58

Arbeitskreis für Jugendliteratur e.V. is a German non-profit organization dedicated to promoting youth literature through awards such as the Deutscher Jugendliteraturpreis, publications, and various cultural activities. The website serves as an information hub for these initiatives, targeting educators, authors, publishers, and youth literature enthusiasts. The organization appears established within its niche, offering specialized services and community engagement opportunities. Technically, the website employs modern JavaScript libraries including Matomo for analytics and a cookie management system that respects user consent, particularly for marketing cookies. The site is mobile-optimized with good navigation and SEO practices, although no specific CMS or hosting provider was identified. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to manage tracking. However, no explicit security headers were detected, and there is no public incident response or vulnerability disclosure information. The absence of WHOIS data limits domain trust verification, but the website content and structure suggest legitimacy. No adult or inappropriate content is present, making the site safe for general audiences. Overall, the site scores well in content quality, privacy compliance, and business credibility but could improve in security best practices and transparency. Strategic recommendations include implementing security headers, publishing incident response details, and enhancing accessibility features to strengthen trust and compliance.

G

Gerstenberg Verlag GmbH & Co. KG

die-kleine-raupe-nimmersatt.de

61

Gerstenberg Verlag GmbH & Co. KG is a reputable German publishing company specializing in children's literature, notably the internationally acclaimed 'Die kleine Raupe Nimmersatt' by Eric Carle. The website serves as a blog and information portal for their publications, events, and educational content, targeting parents, educators, and children. Their market position is that of an established niche publisher with a strong brand presence and consistent content quality. Technically, the website is built on WordPress with Bootstrap framework, enhanced by Matomo analytics for user tracking. The site is hosted likely by Deutsche Telekom, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks some advanced security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy standards. It provides a safe environment focused on children's educational content. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

K

kimverlag GmbH

kimverlag.de

10

kimverlag GmbH is an independent, artist-led publishing company specializing in children's media, hobby art, and creativity. They develop and publish magazines, audio content, and digital media, also producing and licensing content for German and international book publishers. The company positions itself as a niche publisher with a focus on creative and child-friendly content, targeting children and hobby artists. The website reflects a small-sized business with a professional and consistent brand presence, founded around 2020 in Germany. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS platform with good SEO practices. Hosting is provided by rzone.de, a German hosting provider, and the site uses Google Analytics and a consent management platform for tracking and privacy compliance. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. However, no direct contact emails or phone numbers were found in the content provided. Overall, the website is trustworthy, professional, and compliant with privacy regulations, suitable for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information for security or incident response purposes.

A

ADAC Reisen

adacreisen.de

68

ADAC Reisen is a well-established travel service provider affiliated with the reputable ADAC brand in Germany. The company offers a wide range of travel products including package holidays, member-exclusive trips, camper rentals, flights, and cruises. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks such as Next.js and React, hosted on DigitalOcean infrastructure, and integrates consent management and analytics tools responsibly. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement.

L

Laudert GmbH + Co. KG

laudert.de

74

Laudert GmbH + Co. KG is a European leader in holistic product communication, offering consulting, tools, content, and channel services primarily targeting businesses seeking to enhance their product messaging. The company positions itself as a highly effective partner in the media sector, with a professional and well-branded online presence. The website is built on WordPress with modern SEO and privacy compliance features, including a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Technically, the site employs standard web technologies and integrates Google Tag Manager and Cookiebot for analytics and consent management. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data for the domain is a notable anomaly that warrants further investigation. Overall, the website demonstrates a mature digital infrastructure and a high level of professionalism, supporting the company's market position.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

insa.de

57

Nahverkehrsservice Sachsen-Anhalt GmbH operates the INSA platform, a regional public transportation service providing comprehensive timetable information and ticketing solutions for Sachsen-Anhalt and the Mitteldeutschen Verkehrsverbund (MDV). The website serves as a digital hub for users seeking mobility information, ticket purchases, and related services such as the INSA app and RufBus ordering. Positioned as a key regional mobility facilitator, INSA leverages modern web technologies and complies with GDPR regulations to ensure user privacy and data protection. Technically, the website is built on TYPO3 CMS, integrating JavaScript libraries such as ReadSpeaker for accessibility and Cookiebot for consent management. The infrastructure is hosted with professional DNS providers and employs HTTPS with good SSL configuration, ensuring secure communications. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a user-friendly experience. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit published security policies or incident response contacts, which could be improved to enhance trust and readiness. Analytics usage is moderate with Piwik (Matomo), respecting privacy with clear retention policies. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. Strategic recommendations include publishing a security.txt file, incident response contacts, and expanding security policy disclosures to strengthen the security posture and user trust.

S

SPL-XDEMAT

spl-xdemat.fr

47

SPL-XDEMAT is a French public local company established in 2012 by multiple departmental governments to provide digital dematerialization services tailored for local authorities. The company offers a suite of applications and services including administrative document management, electronic signatures, public procurement platforms, and citizen communication tools. The website reflects a mature regional service provider with a strong focus on government clients and compliance with French regulations. Technically, the site uses standard web technologies such as jQuery and JavaScript, with a responsive and accessible design optimized for mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. The absence of WHOIS data limits domain legitimacy verification but the professional presentation and official departmental partnerships support trustworthiness.

S

SPL-XDEMAT

maelis.info

47

Maelis.info is the official website for the MAELIS application, a service provided by SPL-XDEMAT aimed at facilitating local community engagement through a smartphone app. The app offers practical information, alerts, incident reporting, and access to local public services and associations. The website is professionally designed with clear navigation and mobile optimization, targeting French local government citizens and community members. The business model focuses on providing a digital platform for local government communication and citizen participation. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery and AOS for animations. It supports mobile platforms with links to iOS and Android app stores. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common but reduces transparency. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with no signs of malicious content or suspicious behavior. Strategic recommendations include implementing security headers, adding cookie consent, improving privacy disclosures, and providing clear contact information for security incidents to enhance trust and compliance.

The domain park.g-ny.eu currently serves only a 404 Not Found error page, indicating the website is either inactive or misconfigured. No business information, metadata, or structured data is present to analyze the company's operations or services. The lack of accessible content prevents meaningful assessment of the business model, target audience, or market position. Technically, the site does not provide any detectable technologies, frameworks, or hosting details. Security posture cannot be evaluated due to absence of HTTPS, security headers, or policies. The WHOIS query failed to return any registrar or registration data, further limiting trust and legitimacy assessment. Overall, the domain appears inactive or abandoned, with no visible digital maturity or security measures in place.

N

Nancy Jazz Pulsations

nancyjazzpulsations.com

42

Nancy Jazz Pulsations is a well-established cultural festival based in France, focusing on jazz music and related events. The website serves as the primary digital platform for festival programming, ticketing, and information dissemination. It targets jazz enthusiasts and cultural event attendees, positioning itself as a key regional festival with a history dating back to 2000. The business model revolves around event organization, promotion, and ticket sales, supported by a medium-sized operational scale.

M

Meta

facebook.fr

74

Facebook, accessible via the fr-fr.facebook.com subdomain, is a leading social networking platform operated by Meta Platforms, Inc. The website serves the French-speaking audience in France, providing a localized interface for users to connect, share, and communicate. As part of Meta's extensive ecosystem, Facebook maintains a dominant market position with a broad range of services including messaging, video content, and advertising solutions. The platform's business model is primarily advertising-based, leveraging extensive user data to deliver targeted ads. The website's content is professionally presented, with clear navigation and strong branding consistent with Meta's corporate identity. Technically, the website employs modern web technologies such as React and BigPipe for efficient content delivery and dynamic user experiences. The site is optimized for performance and mobile responsiveness, ensuring accessibility across devices. Security is robust, with HTTPS enforced, secure cookies, and standard security headers like HSTS. The login form includes anti-CSRF tokens and secure input handling, reflecting good security practices. Privacy and cookie policies are comprehensive and GDPR compliant, demonstrating Meta's commitment to regulatory adherence. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. While no explicit incident response or vulnerability disclosure pages are found, the overall security framework appears mature. The website integrates multiple analytics and marketing tools, including Meta Pixel and Google Analytics, enabling extensive user tracking balanced with privacy compliance. No adult or questionable content is present, making the site safe for general audiences. Overall, Facebook's French site is a high-quality, secure, and professionally managed platform aligned with Meta's global standards. It effectively serves its target audience with a reliable and trustworthy user experience, supported by a mature technical infrastructure and strong business credibility.

The website www.tours-tourisme.fr serves as the official online presence of the Office de Tourisme de Tours Val de Loire, providing tourism-related services such as hotel reservations, activity bookings, guided tours, and holiday stays. It targets tourists and visitors interested in the Tours Val de Loire region in France. The site is built using modern web technologies including Gatsby and React, indicating a contemporary digital infrastructure. However, the technical implementation shows room for improvement in security and privacy compliance, as no privacy or cookie policies were detected, and security headers are absent. The WHOIS data is unavailable from the AFNIC database, which limits the ability to fully verify domain legitimacy and age. Overall, the site appears professional and trustworthy in content and design but would benefit from enhanced security and compliance measures.

A

Altimax

altimax.com

49

Altimax is a French digital agency specializing in strategy, web development, social media, SEO, and audiovisual production. Based in Annecy, France, the company serves both BtoB and BtoC clients nationally and internationally. The website demonstrates a mature digital presence with a professional design, comprehensive service offerings, and active client case studies. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not outweigh the professional presentation and compliance indicators. Overall, Altimax presents as a credible and established digital agency with room for minor security enhancements.

H

Hurricane Electric

he.net

61

Hurricane Electric is a well-established Internet backbone and colocation provider founded in 1995, offering global IP Transit, Layer 2 transport, colocation, dedicated servers, and IPv6 certification services. The company targets ISPs, enterprises, and network operators seeking reliable and scalable Internet infrastructure. Their market position is strong, supported by a large IPv6 deployment and global network presence. Technically, the website uses standard web technologies with Google Analytics and Google Ads integrated for tracking and marketing. The site is moderately optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is moderate; while HTTPS is implied, no DNSSEC or security headers are enabled, and no explicit security policies or incident response contacts are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the domain WHOIS data confirms legitimacy and long-term operation, enhancing trust. Strategic improvements in security headers, DNSSEC, and privacy compliance would strengthen the security and compliance posture.

The website cardi.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is long-established, registered since 1997 with Network Solutions, and uses Hurricane Electric name servers. However, the lack of accessible content prevents assessment of the business operations, services, or audience. No privacy, cookie, or terms of service policies are present, nor is there any contact information or forms. The technical infrastructure appears minimal with no detectable scripts, analytics, or security headers. This results in a very low security posture and poor digital maturity. Overall, the site is effectively offline or access-restricted, limiting trust and credibility.

I

IICA - Instituto Interamericano de Cooperación para la Agricultura

iica.int

65

The Instituto Interamericano de Cooperación para la Agricultura (IICA) is a well-established international organization focused on agricultural cooperation and development in the Americas. The website presents a professional and consistent brand image, targeting governments, agricultural institutions, and rural communities. It offers cooperation programs, strategic alliances, and technical assistance to promote innovation and sustainable agriculture. The domain age and WHOIS data align with the organization's history, supporting its legitimacy. Technically, the website is built on WordPress with Elementor and optimized for performance using WP Rocket and Cloudflare services. It employs modern web technologies and provides a good user experience with mobile optimization and clear navigation. However, accessibility features are basic, and explicit privacy and cookie policies are not evident in the provided content. From a security perspective, the site uses HTTPS and benefits from Cloudflare DNS, but lacks explicit security headers and visible incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency and compliance. The overall risk is low, with recommendations to enhance privacy disclosures, implement security headers, and provide clear contact information for security incidents to strengthen trust and compliance.

S

Synergiles

synergile.fr

44

Synergiles is a French innovation cluster specializing in energy and ecological transition, acting as an interface between technical, scientific, and institutional stakeholders. The website presents a professional and consistent brand image with a clear focus on its mission and services. The technical infrastructure is based on WordPress with the Divi theme and includes modern web technologies and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and policies are absent. The absence of WHOIS data limits domain legitimacy verification, but the active social media presence and quality content support business credibility. Overall, the website is functional, secure, and professionally maintained but would benefit from enhanced transparency and security documentation.

U

Unite Caribbean

unite-caribbean.com

55

Unite Caribbean is a Caribbean-based consulting firm specializing in sustainable development and regional cooperation, with offices in Guadeloupe and Saint Lucia. The company offers consulting services and initiates cooperative projects in partnership with public, private, and philanthropic sectors in the Caribbean. The website is professionally designed using WordPress and Elementor, with multilingual support and SEO optimization. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled and domain transfer protection, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the website presents a trustworthy and professional image suitable for its target audience.

L

Les Gîtes d'Olive

lesgitesdolive.com

58

Les Gîtes d'Olive is a small hospitality business specializing in rural holiday rental accommodations in France. The website offers direct booking capabilities and targets tourists seeking vacation stays in a natural setting. The business has been established since 2011, with a consistent domain registration history and a professional online presence. The website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. Privacy and cookie compliance are managed through Iubenda, reflecting good adherence to GDPR requirements. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although DNSSEC is not enabled. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in explicit security and incident response disclosures.

S

Spoconline Ads

spoconline-ads.fr

61

Spoconline Ads is a technology company specializing in urban innovation and smart city solutions, focusing on sustainable, connected, and people-centered urban environments. Their offerings include solar-powered connected urban furniture, advertising LCD screens, mapping solutions, and a digital creative studio, targeting businesses and municipalities primarily in the Caribbean region. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information are not publicly detailed. WHOIS data is unavailable due to privacy protection, which is typical for this business type. Overall, the site presents a trustworthy and credible business presence.

J

Judyth Dressing

judythdressing.com

53

Judyth Dressing is a French-based e-commerce retailer specializing in elegant, colorful, and modern women's fashion collections. The website offers a range of products including dresses, tops, pants, jewelry, and accessories, targeting women who want to express their femininity and character through fashion. The business appears to be newly founded in 2024, with a domain registration date consistent with this timeline. The company operates on a WordPress platform using WooCommerce for e-commerce functionality and Elementor for page building, indicating a modern and flexible technical infrastructure. Hosting is provided by OVH sas, a reputable European hosting provider. From a security perspective, the website uses HTTPS with a valid SSL certificate and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML source, which could be improved to enhance security posture. Privacy and cookie policies are not found on the site, and no consent mechanisms are implemented, which may pose compliance risks under GDPR. Google Analytics is used for tracking, integrated via the Site Kit plugin, indicating moderate user tracking. Overall, the website is professionally designed with good content quality, clear navigation, and mobile optimization. The business credibility is supported by consistent branding and transparent domain registration data. The security posture is moderate but could benefit from additional hardening measures. Privacy compliance is currently weak due to missing policies and consent mechanisms. Strategic improvements in these areas would enhance trust and regulatory compliance.

E

Experis France

experisfrance.fr

55

Experis France is a well-established IT talent and solutions provider operating primarily in France, with a business foundation dating back to 2011. The company offers a broad range of IT services including professional resourcing, managed services, consulting, project services, and academy services, targeting IT professionals and businesses seeking specialized IT expertise. As a subsidiary of ManpowerGroup, Experis France benefits from a strong market position and brand recognition in the technology sector. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern frontend frameworks and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Piano Analytics, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and maintains GDPR compliance with cookie consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Strategic recommendations include publishing explicit security policies, establishing incident response contacts, and enhancing accessibility features to further improve compliance and trust.

Manpower France operates as a leading recruitment and temporary staffing agency in France, providing a wide range of employment services including permanent and fixed-term contracts. The company is part of the global ManpowerGroup, which enhances its market position and credibility. The website is professionally designed, targeting job seekers and employers with clear navigation and comprehensive service offerings. The content is primarily in French, reflecting its local market focus. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. Security best practices are observed with HTTPS enforcement and appropriate security headers, although there is room for improvement in accessibility and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is readily available, including a dedicated Data Protection Officer email, enhancing trust and compliance. Overall, the website presents a low risk profile with a solid business credibility and technical foundation. The main limitation is the absence of WHOIS data, which is likely due to registry policies but should be monitored. Strategic recommendations include establishing a public vulnerability disclosure policy and enhancing accessibility features.

M

Montpellier Méditerranée Métropole et ville de Montpellier

montpellier.fr

68

Montpellier Méditerranée Métropole and the city of Montpellier operate an official government website serving residents, visitors, and stakeholders with comprehensive information on local governance, public services, urban projects, and citizen participation. The website is well-structured, professionally designed, and targets a broad audience including citizens and businesses within the metropolitan area. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Matomo analytics with privacy considerations such as Do Not Track. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are not clearly present in the analyzed content. The absence of WHOIS data limits domain registration trust analysis, but the official .fr domain and consistent branding support legitimacy. Overall, the site demonstrates a mature digital presence appropriate for a large government entity.

G

GoDaddy Operating Company, LLC

nicexpo.com

71

The website is a domain sales landing page operated by GoDaddy, offering the domain nicexpo.com for sale. It targets individuals and businesses interested in acquiring premium domain names, providing options to buy outright or lease to own. The platform leverages GoDaddy's established market presence and integrates partner services such as Afternic and Trustpilot to enhance trust and user confidence. The site is localized for the German market with appropriate language and currency settings. Technically, the site is built using modern web technologies including React and Next.js, hosted on GoDaddy infrastructure. It employs standard security measures such as HTTPS and reCAPTCHA for form protection, and uses tag management and analytics tools like Tealium and Google Analytics. Performance and mobile optimization are good, though some accessibility features could be improved. From a security perspective, the site demonstrates a solid posture with encrypted connections and secure payment options. However, explicit security headers are not evident, and no dedicated security or incident response policies are published. The WHOIS data for the domain is unavailable, which is typical for parked domains listed for sale, and does not raise concerns. Overall, the site is trustworthy and professionally maintained. The overall risk is low, with recommendations to enhance security headers, improve accessibility, and publish clear security policies to further strengthen user trust and compliance.

N

Nantes Saint-Nazaire Développement

nantes-saintnazaire.fr

11

Nantes Saint-Nazaire Développement is a French economic development agency focused on supporting businesses in implantation and growth within the Nantes Saint-Nazaire region. It emphasizes environmental and societal transitions and positions itself as the first economic development agency with a mission in France. The website is professionally designed, mobile-optimized, and uses modern WordPress technologies including Yoast SEO and WP Rocket for performance and SEO enhancements. Security measures include HTTPS and reCAPTCHA, with a cookie consent mechanism implemented, though explicit security headers and detailed privacy policies are not evident. The absence of WHOIS data is likely due to privacy protections common in French domain registrations. Overall, the site reflects a mature digital presence aligned with its governmental and economic development role.

P

Accueil - Parc expo Montpellier

parc-expo-montpellier.com

8

Parc Expo Montpellier operates as an event venue located in Montpellier, France, providing exhibition spaces and hosting various events. The website is built on WordPress using Elementor and Yoast SEO plugins, indicating a moderate level of digital maturity. The site is accessible without any WAF or security challenges, and it features a cookie consent mechanism, though lacks explicit privacy and security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy. Security posture is moderate with no detected security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website presents a professional front but would benefit from enhanced transparency and security measures to improve trust and compliance.

E

Europe 1

europe1.fr

10

Europe 1 is a major French media and radio broadcasting company offering live streaming, news articles, podcasts, and videos. The website targets a general audience interested in political, economic, and international news. It is part of the Lagardère Active group, a significant player in the media sector. The digital platform demonstrates good content quality, clear navigation, and mobile optimization, supported by modern JavaScript technologies and multimedia streaming capabilities. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data limits domain trust analysis but does not detract from the site's professional presentation and compliance with GDPR. Overall, Europe 1's website is a reliable and well-maintained media platform with moderate to high digital maturity.

A

Aufeminin

aufeminin.com

10

Aufeminin is a well-established French media company specializing in women's lifestyle content including fashion, beauty, motherhood, marriage, and psychology. It operates a large online portal with extensive editorial content and monetizes through advertising and subscription paywalls. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, advanced advertising technologies, and consent management platforms to comply with GDPR. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain trust but the overall brand presence and compliance measures indicate a legitimate and professional operation. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

Sortiraparis.com : Les meilleures sorties restaurant, cinéma, spectacle, théâtre, concert, musée, balade, soirée à Paris et Ile de France

sortiraparis.com

10

Sortiraparis.com is a well-established online city guide focused on Paris and the Île-de-France region, providing comprehensive information on events, restaurants, cultural activities, and leisure options. The site targets both residents and visitors, offering multilingual support and a rich content experience. Technically, the website employs modern JavaScript libraries, including jQuery and Google Tag Manager, and integrates multiple advertising and analytics platforms, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent management mechanisms but lacks explicit security headers and detailed privacy policies, which could be improved. Overall, the site is professional, content-rich, and trustworthy, though the absence of WHOIS data and explicit contact information slightly reduces its credibility.

T

trace.tv

trace.tv

51

The website at trace.plus/app is currently inaccessible or blocked, showing only a loading spinner with no substantive content. The domain WHOIS data is unavailable or privacy protected, providing no registrar, creation, or registrant information. The site uses modern web technologies such as React and Gatsby, and includes multiple third-party marketing and tracking scripts including Google Tag Manager, Facebook Pixel, AppsFlyer, and Gigz. However, no privacy, cookie, or terms of service policies are present, and no contact or business information is visible. This limits the ability to assess the business or security posture comprehensively. The security posture is weak due to lack of visible security headers and absence of HTTPS enforcement indicators in the content. Overall, the site appears to be under a WAF or security challenge that blocks full content access, resulting in a low trust and credibility score.

A

Association Foire Haute-Savoie Mont Blanc

rochexpo.com

59

Rochexpo operates as a regional event venue and exhibition center located in Haute-Savoie, France, managed by the Association Foire Haute-Savoie Mont Blanc. The organization provides modular event spaces and comprehensive event management services, targeting businesses and event organizers in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins for SEO, social media integration, and performance optimization. While the site uses HTTPS and has cookie consent mechanisms in place, it lacks some security headers and has an unconfigured Google Analytics plugin, indicating room for improvement in security posture. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website is functional, secure enough for general use, and compliant with GDPR, but would benefit from enhanced security practices and WHOIS transparency.

M

Discover Top OnlyFans Telegram Channels | Free Content Previews | mayndrive.fr

mayndrive.fr

6

The website mayndrive.fr operates as a niche content aggregator focusing on adult entertainment, specifically promoting and linking to OnlyFans Telegram channels with free preview content. The business model revolves around aggregating and providing access to various Telegram groups, many of which contain explicit or leaked adult content. The site targets an adults-only audience and positions itself as a resource for discovering popular adult content groups on messaging platforms. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS. The design and content quality are basic, with moderate mobile optimization and limited SEO features. Security posture is weak, lacking essential security headers and privacy compliance mechanisms. The domain is very new with minimal WHOIS data, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but low security and compliance readiness.

V

Val de Loire TV

valdeloire.tv

65

Val de Loire TV is a regional French television channel focused on providing local news, entertainment, and event coverage for the Indre-et-Loire and Loir-et-Cher regions. The website offers live streaming and replay services, targeting a regional French-speaking audience interested in local content. The business model appears to be ad-supported media broadcasting with a digital presence. Technically, the site is built on WordPress with modern plugins for video delivery, consent management, and analytics integration. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy page found in the scanned content but a robust cookie consent mechanism is present. WHOIS data is privacy protected, which is common for media websites, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and serves its regional audience effectively.

V

Ville de Tours

tours.fr

55

The website www.tours.fr is the official digital presence of the city of Tours, France, serving as a comprehensive portal for municipal information, citizen services, news, and events. It targets residents, visitors, businesses, and community organizations, providing access to administrative procedures, cultural activities, and participatory governance platforms. The site is well-branded with official logos and consistent design, reflecting its government entity status. Technically, the site is built on WordPress 6.7.2, leveraging modern web technologies such as jQuery, Matomo analytics, and a cookie consent framework (Tarteaucitron). The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is robust with HTTPS enforced and privacy compliance evident through GDPR-aligned cookie consent and a detailed privacy policy. Security posture is strong, though the absence of explicit security headers and incident response contacts suggests areas for improvement. No vulnerabilities or suspicious content were detected. The lack of WHOIS data limits domain registration trust assessment, but the official nature and content quality strongly support legitimacy. Overall, the site presents a trustworthy, professional, and user-friendly government portal with minor technical and security enhancements recommended to further strengthen its posture.

Tours Métropole Val de Loire is the official metropolitan government entity serving the Tours metropolitan area in France. The website provides comprehensive information about local government services, urban projects, ecological initiatives, and citizen services. It targets residents and stakeholders within the metropolitan region, offering online access to administrative procedures and event information. The site is well-positioned as a regional authority with a clear public service mission. Technically, the website is built on Drupal 7 CMS with a modern JavaScript stack including jQuery, Slick carousel, and Matomo analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a cookie consent banner and privacy policy indicates compliance with EU data protection regulations. However, the site lacks some advanced security headers and explicit security or incident response policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The use of Matomo analytics with DoNotTrack enabled shows privacy-conscious tracking. The absence of WHOIS data is a concern but likely due to AFNIC or privacy settings rather than malicious intent. Overall, the site appears trustworthy and professionally maintained. Recommendations include adding security headers, publishing a security policy and incident response contact, and ensuring regular CMS and module updates to maintain security. Enhancing transparency with a vulnerability disclosure policy would further improve trust. The domain WHOIS gap should be investigated to confirm registration legitimacy.

T

Tours Événements

tours-evenements.com

62

Tours Événements is a professional event organization and venue management company based in Tours, France, specializing in congresses, salons, galas, and seminars. They operate key venues such as the Palais des Congrès de Tours and Parc Expo Tours, offering modular spaces and comprehensive event services including hospitality, audiovisual, and security. The company positions itself as a major regional player in the hospitality and event sector with a focus on sustainable event management, evidenced by their ISO 20121 certification. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrations such as Google Tag Manager, Hotjar, and Finsweet Cookie Consent for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete or unavailable, which slightly reduces trust but does not outweigh the professional presentation and contact transparency. Overall, the website demonstrates a strong digital presence and business credibility with minor areas for security and compliance improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and monitoring domain registration data for consistency.

M

McDonald's

mcdonalds.fr

51

The website www.mcdonalds.fr represents the French domain of McDonald's, a leading global fast-food restaurant chain. The business focuses on quick-service meals including burgers, fries, and beverages, operating primarily through a franchise model. The brand is well-known and holds a strong market position in the retail food sector in France and globally. However, the provided HTML content is minimal and blocked by a CAPTCHA security mechanism, preventing access to substantive website content or metadata. From a technical perspective, the site employs JavaScript and external CAPTCHA services for bot protection, but no further technology stack or CMS details are discernible. The lack of accessible content and metadata limits the ability to assess performance, SEO, or mobile optimization. Security posture cannot be fully evaluated due to absence of visible security headers or SSL information in the provided data. Security-wise, the presence of a CAPTCHA indicates an active WAF or bot mitigation strategy, which is positive for protection against automated threats. However, the absence of visible privacy policies, cookie consent mechanisms, or contact information reduces transparency and compliance visibility. WHOIS data is unavailable, which is common for domains protected by privacy services but limits trust verification. Overall, the site is likely legitimate given the brand but is currently inaccessible for detailed analysis due to security controls. Strategic recommendations include improving transparency by publishing privacy and cookie policies, enhancing contact and incident response information, and ensuring visible security headers and SSL configurations are in place.

P

Portail - Centre commercial

centre-commercial.fr

58

The website www.centre-commercial.fr is a French portal dedicated to listing Carrefour shopping centers across France. It serves as an informational platform for users to locate and learn about various Carrefour commercial centers, providing addresses and links to individual center pages. The site targets general consumers in France interested in retail shopping locations affiliated with Carrefour. The business model is primarily informational, supporting Carrefour's retail presence by enhancing customer access to store locations. Technically, the website is built on WordPress using the Elementor page builder, integrating modern web technologies such as jQuery, Google Tag Manager for analytics, and Google Maps API for location services. The site includes a cookie consent mechanism compliant with GDPR norms, implemented via OneTrust. The design is responsive and optimized for mobile devices, with good SEO practices including structured data (JSON-LD) and Open Graph metadata. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of explicit privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, indicating privacy protection, which is common for commercial sites but slightly reduces transparency. Overall, the website presents a professional and trustworthy front for Carrefour shopping centers in France, with moderate technical maturity and a good security baseline. Strategic improvements include adding explicit privacy and security policies, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.

D

Digilor

digilor.fr

54

Digilor is a French technology company specializing in innovative interactive digital devices and custom tactile application development. The company targets businesses, public sector entities, and enterprises seeking advanced digital signage, interactive kiosks, and video conferencing solutions. Their market position is that of a specialized B2B provider with a strong focus on tactile and digital display technologies. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, including modern lazy loading and tracking technologies. Security posture is good with HTTPS and some security headers, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, supporting user trust. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, Digilor demonstrates a mature digital presence suitable for its business domain.

V

Ville de Vandœuvre

vandoeuvre.fr

52

The website www.vandoeuvre.fr serves as the official digital presence for the city of Vandœuvre-les-Nancy in France, providing residents and visitors with access to municipal news, event agendas, and a variety of online administrative services. The site targets a broad audience including families, seniors, students, and local businesses, positioning itself as a comprehensive resource for community engagement and public service delivery. The business model is typical of government websites, focusing on information dissemination and facilitating citizen interactions with municipal services. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The inclusion of libraries like jQuery, PhotoSwipe, and Leaflet indicates a moderately modern tech stack aimed at enhancing user experience with interactive elements such as maps and image galleries. The site demonstrates good mobile optimization and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, allowing users granular control over tracking. However, the absence of explicit security headers and lack of visible privacy policy or terms of service pages represent areas for improvement. The WHOIS data is notably missing, which is unusual for an official municipal domain and slightly detracts from the domain's trustworthiness. Overall, the site is a well-structured, professional municipal portal with solid technical foundations and a focus on user privacy. Strategic enhancements in security policy transparency and domain registration clarity would further strengthen its credibility and compliance posture.

F

France Bleu / Radio France

francebleu.fr

59

France Bleu, a part of Radio France, operates the website www.francebleu.fr as a major French local news media outlet providing live news, radio broadcasts, cultural and sports content, and community services. The site targets French-speaking audiences interested in local and national news, offering a comprehensive media experience with strong branding and professional content. Technically, the site uses modern web technologies including the Svelte framework, privacy management SDKs, and advertising platforms like Outbrain and Google DoubleClick. The website is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly found. WHOIS data is unavailable due to privacy protection typical for .fr domains, but the domain and website are legitimate and professionally maintained. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

V

Ville de Nancy

nancy.fr

69

The website www.nancy.fr is the official digital portal for the Ville de Nancy, France, providing comprehensive information and services related to municipal administration, cultural events, public services, and citizen engagement. It serves a broad audience including residents, visitors, families, students, and local businesses. The site is well-positioned as the authoritative source for city-related information and services, leveraging a public service business model focused on transparency and accessibility. Technically, the site is built on TYPO3 CMS with modern front-end technologies such as Bootstrap, jQuery, Vue.js, and Swiper for interactive components. It employs Matomo for analytics and uses a robust cookie consent management system (tarteaucitron) to comply with GDPR. The site is mobile-optimized, accessible, and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding additional security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or WAF blocking were detected, indicating a mature security posture suitable for a government website. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its users. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

M

Métropole du Grand Nancy

grandnancy.eu

69

The Métropole du Grand Nancy website serves as the official digital presence for the metropolitan government of the Grand Nancy region in France. It provides comprehensive information about metropolitan governance, urban planning, public transportation, cultural events, and citizen services. The site targets residents, visitors, and local businesses, offering a broad range of public sector services and information. The website is well-positioned as a trusted government resource with a consistent brand and professional content. Technically, the site is built on TYPO3 CMS with modern front-end frameworks including Bootstrap and Vue.js, ensuring a responsive and user-friendly experience. It integrates analytics via Matomo and manages cookie consent effectively with the Tarteaucitron tool. The site demonstrates good mobile optimization and SEO practices, although some accessibility improvements could be made. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks some advanced security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy-protected, which is typical for government-related domains, and no suspicious patterns were found. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen trust and security posture.

A

AJI Groupe

exponum.salon

53

Exponum.salon is a French digital platform owned by AJI Groupe SAS that provides innovative digital mini-sites for exhibitors and organizers of salons, exhibitions, and events. The platform enhances visibility and engagement by offering dynamic digital plans, personalized QR codes, and easy-to-manage exhibitor mini-sites. The website is professionally designed using WordPress with Elementor and Yoast SEO, ensuring good SEO and user experience. The platform integrates Google reCAPTCHA v3 for form security and maintains comprehensive legal and privacy documentation, indicating strong compliance with GDPR and related regulations. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy, well-maintained, and targeted at B2B clients in the event technology sector.

P

Publicore

publicore.fr

52

Publicore is a well-established communication agency based in Colmar, France, specializing in content marketing, branding, video and photo production, web development, and social media strategy. The website reflects a professional and comprehensive digital presence with clear service offerings and client engagement. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the professional content and contact transparency. Overall, the site is safe, well-structured, and compliant with privacy regulations.