High-risk security reports

M

Mairie de Lasserre-Pradère

mairie-lasserrepradere.fr

49

The website www.mairie-lasserrepradere.fr serves as the official online presence for the municipal government of Lasserre-Pradère, France. It provides residents and visitors with comprehensive information about local administration, community services, urban planning, social programs, and municipal news. The site targets local citizens and stakeholders, offering essential public service information and facilitating administrative procedures. The business model is centered on public service and community engagement, positioning the site as a trusted local government resource. Technically, the website is built on the Ametys CMS platform, utilizing jQuery and the tarteaucitron cookie consent framework to ensure GDPR compliance. It integrates Matomo analytics configured for privacy by design, reflecting a mature approach to user data protection. The site is mobile-optimized, accessible, and well-structured, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no explicit security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data indicates privacy protection for the domain registration, which is appropriate for a municipal website. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional presentation. It is a reliable and trustworthy source of municipal information with minimal risk exposure. Strategic recommendations include enhancing security headers, adding incident response information, and maintaining regular CMS updates to sustain security and compliance.

A

Audiotec

audiotec.fr

49

Audiotec is a well-established French company specializing in audiovisual equipment rental, sales, integration, and event services. Founded in 1988, it has a strong market position as a leading supplier for both professionals and individuals in France. The company offers a comprehensive range of services including sound, video, lighting, and stage structure solutions, supported by a competent technical team and a dedicated design office. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the website is built on WordPress with WooCommerce and uses modern technologies such as Google Tag Manager, Matomo, Microsoft Clarity, and reCAPTCHA for analytics and security. Hosting is provided by PLANETHOSTER, a reputable provider. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience and discoverability. From a security perspective, the site enforces HTTPS, uses secure login forms with nonce tokens, and integrates reCAPTCHA v3 to mitigate automated abuse. However, it lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Audiotec's digital presence is robust, trustworthy, and professionally managed. The domain registration data aligns with the business history, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

A

Amicale des Élèves de l'INSA Toulouse

amicale-insat.fr

45

Amicale des Élèves de l'INSA Toulouse is a student association dedicated to supporting students at INSA Toulouse by providing various services and managing campus life activities. The organization operates as a non-profit entity focused on enhancing the student experience through events, clubs, and associative management. The website reflects a small but active local presence with a clear focus on its target audience of INSA Toulouse students. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Tabulator.js library for interactive tables. Hosting is provided by reputable providers Scaleway and o2switch. The site is mobile responsive and well-structured, though some SEO and accessibility features could be improved. No CMS or complex frameworks were detected. From a security perspective, the site uses HTTPS and includes some basic CSRF protection meta tags but lacks explicit security headers and publicly available security policies. There is no evidence of vulnerability disclosure or incident response information. Privacy and cookie policies are missing, which represents a compliance gap with GDPR requirements. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy with no adult or explicit content. The domain registration data is consistent with the organization's profile, showing a long-established presence since 2006. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the security posture and trustworthiness of the site.

L

Loire-Atlantique développement

loireatlantique-developpement.fr

42

Loire-Atlantique développement is a public engineering agency serving the Loire-Atlantique department in France. It provides expert services in urban planning, construction, architecture, environmental sustainability, and tourism development to local governments, private project holders, and other stakeholders. The agency positions itself as a key regional player in sustainable development and quality of life improvement. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital presence. The technical infrastructure is solid with HTTPS enabled and integration of popular libraries like Leaflet.js for mapping. Security posture is good but could be enhanced by adding security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy, well-branded, and serves its public sector audience effectively.

G

Générations Futures

semaine-sans-pesticides.fr

46

The website 'Semaine pour les alternatives aux pesticides' is a professionally maintained platform promoting a non-profit event focused on alternatives to pesticides, organized by Générations Futures. It targets a general audience interested in environmental sustainability and agricultural alternatives, providing event information, news, and resources. The site is well-structured, multilingual, and uses modern web technologies including WordPress, Yoast SEO, and Leaflet.js for interactive maps. It integrates Google Analytics and Google reCAPTCHA for analytics and form security respectively. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is not publicly available, indicating privacy protection, which is justified for this non-profit entity. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience.

I

Irfan Skiljan

irfanview.com

47

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users. The website serves as the official homepage offering downloads, information, and support for the software. It positions itself as one of the most popular image viewers worldwide with a focus on simplicity, speed, and multi-language support. The business model is freeware for non-commercial use with options for donations and support. The website content is professionally presented with clear navigation and relevant partner links, targeting a general audience interested in image viewing and editing tools. Technically, the website uses standard HTML, CSS, and JavaScript without advanced frameworks or CMS. Hosting is provided by domainunion.de, and the site offers multiple download mirrors. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the website's apparent long history and professional presentation. No forms collect sensitive data, reducing immediate risk, but the absence of HTTPS verification and security policies is a gap. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is moderate with recommendations to improve domain registration transparency, implement HTTPS and security headers, add privacy and cookie policies, and publish security incident response information. These steps would enhance trust and compliance, aligning the site with modern security and privacy standards.

A

Agence Tokster

tokster.fr

49

Agence Tokster is a specialized BtoB digital communication agency integrated within the Zepros group, focusing on content strategy and marketing services for industries such as building, automotive aftermarket, and restaurant sectors. The website presents a professional and consistent brand image with clear service offerings and client study-cases. Technically, the site is built on WordPress with Elementor and uses modern web technologies and Google Analytics for tracking. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and formal privacy/cookie policies, indicating room for compliance improvement. Overall, the domain registration and hosting are consistent with the business claims, supporting legitimacy.

A

Agence de communication Periwinkle

periwinkle.fr

44

Periwinkle is a small French communication agency based in Montauban, established in 2015. The company specializes in supporting businesses with communication and digital solutions, including web and print services. The website reflects a professional and consistent brand image, targeting businesses seeking digital communication expertise. The agency maintains an active social media presence on Facebook, Instagram, and LinkedIn, enhancing its market visibility. Technically, the website is built on WordPress using the Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable infrastructure. The site employs HTTPS with good SSL configuration and includes a cookie consent mechanism with blocking enabled, demonstrating awareness of privacy compliance. Google Analytics is integrated with IP anonymization, reflecting moderate user tracking practices. From a security perspective, the site lacks some advanced security headers and does not provide a security.txt or incident response contact information, which are areas for improvement. The absence of a published privacy policy and terms of service represents a compliance gap under GDPR and related regulations. The WHOIS data is not publicly available, suggesting privacy protection for the domain registration, which is typical for small agencies. Overall, Periwinkle's website is professional and trustworthy with moderate technical and security maturity. Strategic enhancements in privacy disclosures, security policies, and incident response readiness would strengthen its compliance posture and trustworthiness.

D

DIGEEK

digeek.fr

48

DIGEEK is a small digital communication agency based in Toulouse, France, specializing in graphic design, website and mobile application development, video production, and digital marketing. The company targets businesses, startups, institutions, and associations primarily in the Toulouse region. Their website demonstrates a professional and consistent brand image supported by strong client testimonials and active social media engagement. Technically, the site is built on WordPress with modern technologies and performance optimizations, ensuring fast loading and excellent mobile responsiveness. Security posture is good with HTTPS and performance plugins, though some security headers and explicit incident response information are missing. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

D

Domstocks

domstocks.fr

34

Domstocks is a specialized online marketplace focused on providing quality expired domain names tailored for SEO and branding purposes. The platform targets SEO professionals, marketers, and domain investors seeking domains with strong metrics and Google indexing. The business model emphasizes fixed pricing and ease of acquisition, avoiding auction complexities. Technically, the website employs modern frontend frameworks such as Bootstrap and Material Design Bootstrap, integrates marketing and analytics tools like Facebook Pixel and Statcounter, and uses Brevo (Sendinblue) for form handling. The site is mobile-optimized and presents a professional user experience. Security posture is adequate with HTTPS enforced and secure form submissions; however, the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data raises concerns about domain legitimacy, impacting trust from a registration standpoint. Overall, Domstocks presents a credible business front with moderate technical maturity and some compliance gaps.

OnlineStrat.fr is a French digital marketing and internet strategy website managed by David Chelly. It provides news, guides, directories, and resources aimed at internet professionals, marketers, startups, and beginners interested in web technologies and e-business. The site features a variety of content including articles on SEO, e-commerce, startups, and digital tools, positioning itself as a niche resource in the French-speaking digital marketing community. Technically, the website uses standard HTML, CSS, and JavaScript with legacy Adobe Spry framework components and integrates Google services such as Analytics and Custom Search Engine. While the site is accessible and content-rich, it lacks modern security headers and explicit GDPR cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is missing, which reduces transparency and trust but the active and professional nature of the site partially mitigates this concern. Overall, the site is moderately mature technically and business-wise, with room to enhance security and privacy compliance.

T

Table de massage : usage, types, avantages, prix

tabledemassage.fr

38

The website tabledemassage.fr is a newly registered French informational site focused on massage tables, their usage, types, advantages, and pricing. It targets professionals in massage therapy, physiotherapy, wellness centers, and individuals interested in massage equipment. The site provides detailed, well-structured content but lacks business contact information and formal policies. Technically, it uses a modern frontend stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization. However, no CMS or backend technologies are detected, and performance is moderate. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and contact details for incident response. The domain is very new (registered in late 2024) but WHOIS data is transparent and consistent with the website content, indicating legitimacy. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences with no adult or explicit material. Overall, the website scores moderately on content quality and business credibility but scores low on privacy compliance and security posture due to missing policies and headers. There are no critical security issues detected, but improvements are needed to enhance trust and compliance. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies, providing clear contact information, and enhancing security headers to improve the security posture and user trust.

A

Guide pour bien utiliser les antidépresseurs

antidepresseur.fr

37

The website www.antidepresseur.fr is an educational platform focused on providing detailed information about antidepressant medications, their categories, effects, and precautions. It targets a general French-speaking audience seeking mental health information. The site uses modern frontend technologies such as Bootstrap and various icon libraries, delivering a good user experience with mobile optimization and embedded multimedia content. However, the absence of privacy and cookie policies, lack of visible contact emails or phone numbers, and missing WHOIS registration data raise concerns about the site's legitimacy and compliance. Security posture is weak due to missing security headers and unknown SSL status. Overall, the site is functional and informative but requires improvements in transparency, security, and compliance to enhance trustworthiness.

O

Tout savoir sur le metier d'oculiste

oculiste.fr

34

The website www.oculiste.fr is an informational platform focused on educating visitors about the profession of oculists (ophthalmologists) in France. It provides detailed content on the role, training, income, and distinctions between oculists and opticians. The site targets a general audience interested in eye care professions and related health topics. Technically, the site uses a standard Bootstrap 4 framework with common JavaScript libraries, delivering a moderate performance and good mobile responsiveness. However, it lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies, which also impacts GDPR compliance. The WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site serves as a niche educational resource but requires significant improvements in security, privacy, and business transparency to enhance credibility and compliance.

P

premiers-secours.com

premiers-secours.com

45

The website premiers-secours.com is a newly created French-language educational platform focused on first aid guidance and emergency response techniques. It provides detailed textual content and multimedia resources to educate the general public on how to act in case of accidents or medical emergencies. The site positions itself as a niche informational resource with links to related first aid training services, targeting individuals seeking knowledge on lifesaving procedures. Technically, the site employs modern front-end technologies including Bootstrap 5, Google Fonts, and JavaScript libraries such as Swiper and Glightbox. It is hosted on AwardSpace servers with DNS managed via AwardSpace nameservers. The site is mobile optimized and has moderate performance but lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or static site build. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies present, and no explicit contact emails or phone numbers are provided, limiting transparency and compliance with GDPR. Analytics are implemented via Statcounter with minimal tracking. The domain registration is transparent and consistent with the website content, registered recently in 2024 with a reputable registrar. Overall, the site is a functional and informative resource with good content quality but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence.

Fondation Hélène et Victor Barbour is a Swiss non-profit foundation dedicated to supporting social, educational, wildlife, church, and cultural initiatives primarily in Geneva. The website presents a clear focus on philanthropy with well-structured content and a professional design that targets a general audience interested in charitable activities. The foundation operates with a small organizational footprint and provides contact details including a physical address and phone number, enhancing trustworthiness. Technically, the website uses a custom-built frontend leveraging common JavaScript libraries such as jQuery, Modernizr, and GreenSock for animations, along with Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, suggesting a bespoke solution. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No forms or incident response policies are present, and no vulnerability disclosure mechanisms are found. The WHOIS data indicates privacy protection for the domain registrant, which is typical for small non-profits and does not raise immediate concerns. Overall, the website is functional, professional, and trustworthy for its intended philanthropic purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent data protection measures.

Č

Česko-německý fond budoucnosti

fondbudoucnosti.cz

35

Česko-německý fond budoucnosti is a well-established non-profit organization dedicated to fostering Czech-German relations through project funding and cultural initiatives. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization targets individuals and groups involved in Czech-German cooperation, providing support and promoting mutual understanding. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data limits domain trust analysis but the overall professional presentation and social media presence support legitimacy.

FortGuard, a product of HYVOR based in France, offers a state-of-the-art spam detection API designed for developers and website owners seeking to prevent spam content effectively. The service includes advanced features such as human-like accuracy through multiple large language models, language detection, sentiment analysis, and IP geolocation capabilities. The availability of a WordPress plugin facilitates easy integration for WordPress websites, enhancing its accessibility and market reach. The business model is subscription-based with a free trial, targeting a niche market in spam detection and content moderation services. Technically, the website is built using modern JavaScript frameworks, specifically Svelte, and is hosted on Cloudflare infrastructure, ensuring fast performance and good mobile optimization. The site demonstrates good SEO practices and basic accessibility features. The integration of Crisp Chat indicates a minimal level of user interaction tracking, aligned with privacy-first principles. However, some security best practices such as DNSSEC and security headers could be improved. From a security perspective, the website enforces HTTPS and maintains a privacy-first approach by not storing or sharing user data. The domain registration details are consistent with the business claims, enhancing trustworthiness. There is no evidence of security policy documentation or incident response contacts, which could be areas for future enhancement. No critical vulnerabilities or suspicious content were detected. Overall, FortGuard presents a professional, secure, and privacy-conscious service with a solid technical foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

G

Graphic Solutions s.r.o.

grslt.sk

48

Graphic Solutions s.r.o. is a small Slovak company specializing in graphic design, web development, and online marketing services. Their website presents a professional image with a focus on creative solutions for local businesses, offering services such as logo creation, web presentations, and printed materials. The company emphasizes customer care and flexibility, targeting Slovak enterprises and entrepreneurs seeking tailored digital and graphic solutions. Technically, the website uses common web technologies including jQuery, Google reCAPTCHA v3, and responsive design elements, providing a moderate performance and good mobile optimization. Security measures include the use of reCAPTCHA to protect the contact form and a cookie consent banner, but lack advanced HTTP security headers and explicit security policies. The absence of a privacy policy and terms of service pages indicates room for improvement in compliance. Overall, the website is functional, trustworthy, and suitable for its business purpose but would benefit from enhanced security and privacy practices.

P

PracevRegionu.cz - nabídky práce ve vašem regionu

pracevregionu.cz

43

PracevRegionu.cz is a Czech Republic regional job portal established in 2016, offering extensive job listings across multiple regions and municipalities. The platform targets both job seekers and employers, providing a marketplace for employment opportunities with over 155,000 job offers. The website is professionally designed with clear navigation and regional segmentation, supporting a focused business model of online job advertisement and regional employment facilitation. The business operates primarily in the Other industry sector, serving a small-sized market niche within the Czech Republic.

A

AmCham Slovenia

believeinslovenia.si

38

Believe in Slovenia is a cultural and promotional initiative managed by AmCham Slovenia, focusing on highlighting Slovenian ambassadors of friendship in the USA. The project aims to strengthen cultural ties and promote positive relations between Slovenia and the Slovenian diaspora in the United States. The website presents ambassador stories, regional selections, and partner collaborations, supported by government and chamber organizations. Technically, the website uses a standard open-source stack including jQuery, Bootstrap, and Google Analytics, with a cookie consent mechanism implemented. However, it lacks explicit privacy and terms of service policies, and security headers are not detected, indicating room for improvement in security posture. The domain is registered since 2014 with a reputable Slovenian registrar, consistent with the business history and legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

L

Conseils pour aménager et entretenir le grenier

le-grenier.fr

32

Le-Grenier.fr is a small French informational website dedicated to providing detailed advice and guidance on attic (grenier) renovation, insulation, ventilation, structural assessment, pest prevention, and storage optimization. The site targets homeowners and individuals interested in improving or converting their attic spaces. The business model appears to be content-driven with external links to related health and domain services, likely for SEO or partnership purposes. Technically, the website uses a modern front-end stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization and clear navigation. However, there is no evidence of a CMS or advanced backend platform, suggesting a static or custom-built site. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie policies, which also impacts privacy compliance. The WHOIS data is unavailable, limiting trust and legitimacy verification. Overall, the site is functional and content-rich but requires improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

E

Engerio

engerio.sk

48

Engerio is a Slovak-based advertising platform specializing in native advertising formats across top Slovak media websites. Founded in 2020, it offers innovative ad formats such as pre-click ads, carousel ads, and video ads, targeting advertisers seeking quality traffic from over 120 Slovak media sources. The platform positions itself as the second largest reach in Slovak internet advertising, providing campaign performance analytics and a managed service model where clients submit links and Engerio handles campaign setup and optimization. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and analytics tools like Matomo and Google Tag Manager. The site is well-optimized for mobile and offers a professional user experience with clear navigation and rich content including client testimonials and partner logos. Security-wise, the site uses HTTPS and has a good SSL configuration but lacks explicit security headers and visible privacy or cookie policies, which are compliance gaps. No direct contact emails or phone numbers are publicly listed, relying instead on a contact form. Overall, Engerio presents a credible and professional business presence with room for improvement in privacy compliance and security best practices.

B

Bio en Normandie

bio-normandie.org

39

Bio en Normandie is a well-established non-profit association founded in 2003, dedicated to supporting and promoting organic agriculture in the Normandy region of France. The website serves as an information hub for organic producers, consumers, and local actors, offering resources such as a directory of producers, events, training, and advocacy. The organization positions itself as a regional leader in organic agriculture with a focus on local, autonomous, and equitable bio practices. Technically, the website is built on WordPress using popular plugins like Elementor and Yoast SEO, hosted on Infomaniak servers, and demonstrates good digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and serves its community effectively.

C

GoGoCarto - Des cartes à GoGo

carte.bio

46

GoGoCarto is a French-language web platform designed to enable users to create and share map projects easily. It targets a general audience interested in mapping and geographic data visualization, offering open source code access and documentation to support user engagement. The platform positions itself as a niche technology tool with a focus on community-driven map creation. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and FontAwesome icons, with moderate performance and good mobile responsiveness. However, the site lacks advanced frameworks or CMS detection and does not show evidence of strong hosting or performance optimization. From a security perspective, the site currently exhibits minimal security posture with no detected security headers or explicit HTTPS confirmation in the provided data. There are no visible privacy or cookie policies, nor contact or incident response information, which limits compliance and transparency. The WHOIS data is privacy protected or unavailable, which is common for small projects but reduces trust signals. Overall, the site is safe for general audiences and provides a functional, well-branded user experience but would benefit from enhanced security and compliance measures.

SDM Communication SAS SCOP is a French communication agency founded in 2017 specializing in digital communication tools for businesses. Their services include consulting, communication strategy, web development including eco-friendly showcase websites, e-commerce solutions, custom development, and business applications. The company targets business clients seeking digital transformation and communication expertise. The website reflects a small but professional agency with over 15 years of web development experience. Technically, the site uses modern libraries such as FontAwesome and Animate.css, integrates cookie consent via tarteaucitron.io, and employs Elfsight widgets for client testimonials and reviews. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for small businesses. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

SDM Communication operates the website monsite.link, providing affordable, responsive web design and hosting solutions primarily targeting small businesses such as TPEs, PMEs, and auto-entrepreneurs in France. Their offerings include OnePage and OneScreen websites, microblogging options, and social media page creation, supported by hosting and maintenance services. The company positions itself as a cost-effective, professional web presence provider with a focus on simplicity and mobile responsiveness. The website content is well-structured, professionally designed, and localized in French, reflecting a clear understanding of their target market.

C

CRESS

cress-na.org

44

CRESS Nouvelle-Aquitaine is a regional non-profit organization dedicated to the development of the Social and Solidarity Economy (ESS) in the Nouvelle-Aquitaine region of France. The website serves as an informational and engagement platform targeting regional stakeholders interested in economic transition and social economy initiatives. The organization positions itself as a key regional actor supporting a just economic transition through ESS development. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts, Matomo analytics for user tracking, and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with the presence of reCAPTCHA but absence of visible security headers and unknown SSL configuration. WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the website is professional and relevant to its audience but would benefit from enhanced privacy disclosures and security hardening.

A

ATIS – Association territoires et Innovation Sociale

atis-asso.org

42

ATIS is a non-profit association dedicated to fostering social innovation and supporting social enterprises in the Nouvelle Aquitaine region of France. Established in 2014, it offers incubation programs, networking, and development support to projects with strong social impact and sustainable economic models. The association positions itself as a regional leader in social enterprise support, collaborating with local partners and public entities. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins to provide a professional and accessible user experience. Security practices include HTTPS enforcement, use of Google reCAPTCHA, and a comprehensive cookie consent mechanism, though some enhancements like DNSSEC and additional security headers could improve the posture. Overall, the website is trustworthy, well-branded, and compliant with GDPR requirements, with clear contact channels and partner affiliations.

I

Initiative France

initiative-france.fr

48

Initiative France is a well-established non-profit association dedicated to financing and supporting entrepreneurs and business creators across France. The website serves as a comprehensive platform offering information about various financing solutions such as zero-interest loans (prêt d’honneur), personalized accompaniment, and specialized programs for startups and entrepreneurs in fragile territories. The organization has a strong market position as the leading associative network in France for entrepreneurial support, backed by a network of 207 local associations and partnerships with public and private entities. The domain age and WHOIS data confirm a legitimate and consistent presence since 2012. Technically, the website is built on Joomla CMS with modern front-end technologies including Bootstrap and Google Fonts, and uses Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and explicit security headers implementation. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML content. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and cookie consent banners, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance measures and security best practices to improve user trust and regulatory adherence.

U

UDES

emploi-ess.fr

47

The website www.emploi-ess.fr serves as a specialized employment portal dedicated to the social and solidarity economy sector in France. Operated by UDES, it provides job listings, employer information, and resources related to social economy professions and training. The portal targets job seekers and recruiters within this niche sector, positioning itself as a key resource for employment opportunities in non-profit and social enterprises. The business model revolves around facilitating connections between candidates and employers in the social economy, supported by a medium-sized organizational structure. Technically, the site employs a moderate technology stack including jQuery, ShareThis for social sharing, and tarteaucitron.js for cookie consent management. It uses Google Analytics for traffic analysis and is served over HTTPS, indicating a baseline of security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The CMS is not explicitly identified, suggesting a custom or less common platform. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism but lacks visible security headers and a published privacy policy, which are important for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the site content and structure appear professional and consistent with its stated mission. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance, security headers, and transparency regarding domain registration. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, providing clear contact information for security incidents, and considering a vulnerability disclosure policy to enhance trust and compliance.

The website gestmax.fr is currently inaccessible, returning a 503 Service Unavailable error indicating no server is available to handle requests. This prevents any meaningful content, metadata, or security analysis. The domain is registered since 2007 with GANDI, showing a long-term registration and active status, which supports legitimacy. However, the lack of accessible content and absence of privacy, cookie, or terms policies limits trust and compliance evaluation. No contact information or business details are available from the site content. The technical infrastructure cannot be assessed beyond the registrar data. Security posture is unknown due to lack of accessible content and security headers. Overall, the site appears inactive or down, resulting in a very low AI score and high risk for users seeking information or services.

S

salon NATURALLY Paris

salon-naturally.fr

44

Salon NATURALLY Paris is an established event organizer specializing in organic and wellness trade shows held in Paris. The website promotes the 21st edition of the event scheduled for June 6-9, 2025, at Paris Expo Porte de Versailles. The business targets consumers and professionals interested in eco-friendly, organic, and well-being products and services. The site offers exhibitor information, conference programs, and practical visitor details, positioning itself as a key player in the organic event market in France. Technically, the website is built on WordPress using Elementor, with integrations for Google Analytics, Facebook Pixel, and advertising networks like Google Adsense. Hosting is provided by Infomaniak, a reputable French hosting provider. The site demonstrates good SEO practices with structured data and Open Graph metadata, and it is mobile-optimized with a responsive design. From a security perspective, the site enforces HTTPS, includes standard security headers, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy or incident response contact information. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's business claims, indicating legitimacy. Overall, the website presents a professional and trustworthy online presence for the Salon NATURALLY event, with moderate to good technical and security maturity. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance trust and compliance.

N

Naturabio Lille

salon-naturabio.com

49

Naturabio Lille is a well-established regional trade show organizer specializing in ecological, organic, wellness, and sustainable living sectors. The website effectively communicates the event details, target audience, and exhibitor information, supported by a professional design and consistent branding. The technical infrastructure is modern, leveraging WordPress with Elementor and Yoast SEO, hosted on Infomaniak servers. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site presents a trustworthy and credible business presence in the organic event market.

S

SPAS Organisation

salon-vivreautrement.com

48

Salon Vivre Autrement is a well-established French event organizer specializing in ethical and bio trade fairs, with a history dating back to 2007. The website promotes the upcoming 37th edition of their event, targeting consumers interested in sustainable, organic, and eco-friendly products. The business model centers on organizing exhibitions, providing exhibitor services, and offering visitor programming including workshops and conferences. The site demonstrates a solid market position with a large expected visitor and exhibitor base. Technically, the website is built on WordPress with modern plugins and frameworks, hosted on Infomaniak, and optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site is professional, trustworthy, and safe for general audiences.

S

SPAS Organisation

salon-medecinedouce.com

46

The website www.salon-medecinedouce.com serves as an event platform for wellness and natural medicine salons organized by SPAS Organisation in France. It promotes two major events scheduled in Paris and Lyon in early 2026, targeting individuals interested in natural health, complementary medicine, and wellness. The site provides event information, links to city-specific pages, and a program of conferences aligned with current wellness trends. The business operates as a niche event organizer with a focus on natural health sectors, leveraging its association with SPAS Organisation and industry bodies like UNIMEV to establish credibility. Technically, the website is built on WordPress with Elementor and uses modern SEO and analytics tools such as Yoast SEO, Google Analytics via MonsterInsights, and Facebook Pixel. It employs cookie consent management through Axeptio SDK, indicating GDPR compliance. The site is mobile-optimized with good design quality and moderate performance. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced. From a security and compliance perspective, the site lacks explicit security policies or incident response information, and no direct contact details are provided on the main page, which could impact user trust. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy, although the professional site and association with SPAS Organisation mitigate this risk somewhat. Overall, the website is a well-maintained, professional platform for wellness event promotion with good technical and privacy compliance. Strategic improvements in security transparency, contact information availability, and WHOIS data clarity would enhance trust and compliance.

S

Salon professionnel Natexpo

natexpo.com

46

Salon professionnel Natexpo operates an established international trade show focused on organic and eco-responsible products, held in Paris. The website serves as an information and engagement platform for exhibitors and visitors, providing event details, exhibitor criteria, and thematic programs. The business is positioned as a key player in the organic product event sector in France, with a medium-sized operation and a history dating back to 2002. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools, indicating a moderate to good digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNSSEC and security headers. Privacy compliance is limited, with no explicit privacy or cookie policies found. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

S

Sevellia.com

sevellia.com

45

Sevellia.com is a French e-commerce marketplace specializing in organic, natural, ecological, and zero-waste products. Founded in 2015, it offers a wide range of product categories including food, beauty, health, baby, home, ethical fashion, and leisure items. The platform connects multiple vendors with consumers, positioning itself as a niche leader in the French organic retail market. Technically, the website is built on Magento with a responsive design and integrates modern marketing and analytics tools such as Google Analytics, Abtasty, and Doofinder. Security posture is solid with HTTPS enforced and secure payment processing via Hipay, though there is room for improvement in HTTP security headers and DNSSEC implementation. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

Tabula Rasa is a small, regionally focused communication agency based in France, specializing in web and print communication services. Established in 2011, the company offers bespoke website creation, online tools, print communication, and training services primarily targeting businesses in the Deux-Sèvres and Vendée regions. The website reflects a professional and consistent brand image with a clear focus on quality and originality. Technically, the site is built on the Contao CMS platform and leverages modern JavaScript libraries such as jQuery, FontAwesome, and slick slider, with a cookie consent mechanism implemented via tarteaucitron. Hosting is provided by OVH, a reputable provider, and the domain registration details align well with the business history, indicating legitimacy. Security posture is moderate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with no explicit privacy or terms of service pages found, though cookie consent is present. Overall, the website is safe, professional, and trustworthy, with room for improvement in security and privacy transparency.

N

Nous voulons des coquelicots

nousvoulonsdescoquelicots.org

45

Nous voulons des coquelicots is a French non-profit organization dedicated to environmental advocacy, specifically campaigning for the ban of all synthetic pesticides. The website serves as a platform for raising awareness, mobilizing citizens, and collecting petition signatures. It maintains an active presence through news updates, social media, and community engagement. Technically, the site is built on WordPress, uses modern JavaScript libraries like jQuery, and integrates cookie consent via tarteaucitron.js. Hosting is provided by OVH, a reputable provider. Security posture is solid with HTTPS and cookie consent, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its mission.

B

Bon Plan Bio

bonplanbio.fr

38

Bon Plan Bio is a French regional non-profit project providing an interactive map to locate local organic products and producers across several French regions. The website serves consumers seeking bio local products and supports organic farmers by promoting their points of sale. The project is supported by multiple regional organic agriculture groups, enhancing its credibility and regional reach. Technically, the site is built on WordPress using common plugins for sliders, cookie consent, and popups, hosted by OVH, a reputable provider. The site is mobile-optimized and uses Matomo analytics for privacy-friendly tracking. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and well-aligned with its mission.

S

Salon Respire La Vie

respirelavie.fr

45

Salon Respire La Vie is a French event organizer specializing in eco-friendly, organic, wellness, and healthy habitat exhibitions, primarily active in Rennes. The website promotes upcoming events with significant exhibitor and visitor numbers, targeting environmentally conscious consumers. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and advertising tools while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS and no evident vulnerabilities, though additional security headers and policies could enhance protection. The absence of WHOIS data is a concern for domain legitimacy verification but does not currently impact the operational business presence. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

E

echologia, le domaine insolite nature pour accueil des groupes

echologia.com

45

Echologia is a small French hospitality and ecological event hosting business specializing in sustainable rehabilitation of an industrial site into a nature domain. It offers unique event spaces, accommodations, and educational activities focused on ecology and aquaponics. The website is built on Joomla! CMS with modern frameworks and includes multimedia content and structured data for SEO. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy policies are present and GDPR compliance is indicated, but cookie consent mechanisms are not clearly implemented. WHOIS data is missing, which reduces domain trustworthiness and should be addressed. Overall, Echologia presents a professional and trustworthy online presence with clear contact information and a focus on ecological tourism and education.

The domain tplj.si is registered since 2019 under the registrar Arnes and currently points to Sedo Parking name servers, indicating it is a parked domain rather than an active business website. The website content is inaccessible, displaying only a placeholder message with no metadata, forms, or business information. This limits the ability to assess the business operations, technical infrastructure, or security posture. The lack of HTTPS, security headers, privacy policies, and contact information further reduces the trustworthiness and credibility of the site. Overall, the domain appears inactive or reserved without an operational website presence.

A

AmCham

amcham.si

47

AmCham Slovenia is a well-established non-profit business community organization founded in 2003, serving over 400 member companies that generate significant economic impact in Slovenia. The website reflects a mature digital presence with a focus on business networking, advocacy, and international cooperation. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and Google Analytics for tracking. Security posture is good with HTTPS and secure forms, though lacking explicit security policies and incident response information. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

N

NellMat Company, s. r. o.

vybavsenaparty.cz

43

vybavsenaparty.cz is a Czech-based small business specializing in party supplies, event decoration, and event organization services. Founded in 2020 and operated by NellMat Company, s. r. o., the company offers a variety of services including balloon decorations, mascot rentals, party equipment rental, and a dedicated e-commerce shop. The website presents a professional and consistent brand image targeting general consumers and event organizers across the Czech Republic. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Lottie animations, with analytics tools like Google Analytics and Smartlook integrated for user behavior tracking. The site is hosted likely by WEDOS, a reputable Czech hosting provider, and uses HTTPS with good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and cookie consent mechanisms. Privacy compliance is basic but present, with a privacy policy linked on the e-shop subdomain. Contact information is clearly displayed, enhancing business credibility. Overall, the website is functional, visually appealing, and trustworthy, though it lacks some compliance and security best practices.

P

Partypack.cz

partypack.cz

42

Partypack.cz is a Czech Republic-based small business specializing in event entertainment services, including photobooths, AI-enhanced photo booths, hostesses, 360° party spins, and other event-related offerings. The company positions itself as a provider of memorable event experiences with a professional approach and modern equipment. The website reflects a well-structured, SEO-optimized WordPress platform using popular plugins and themes, with a focus on user experience and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policies and headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible online presence. Overall, the business demonstrates moderate trustworthiness and digital maturity, with room for improvement in privacy transparency and security best practices.

W

webklub

web-klub.cz

42

WEB-KLUB.cz is a small Czech Republic-based technology service provider specializing in web design, internet marketing, programming, and web management services. The company presents itself as an experienced agency with a focus on delivering effective internet applications and websites optimized for search engines and marketing. The website is professionally designed with clear navigation and relevant content targeting businesses seeking digital presence enhancement. Technically, the site uses modern front-end technologies including Bootstrap, jQuery, Google Fonts, and integrates Google reCAPTCHA v3 for form security. Tracking and marketing tools such as Google Analytics and Facebook Pixel are implemented, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and use of reCAPTCHA; however, the absence of security headers and privacy/cookie policies suggests room for improvement. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is functional, professional, and safe but would benefit from enhanced privacy compliance and security best practices.

S

Smartweb s.r.o.

smartweb.es

49

Smartweb s.r.o. is a Slovakia-based technology company specializing in website development and internet marketing services. The company offers a comprehensive suite of digital marketing solutions including SEO, Google Ads campaigns, Google My Business profile management, social media management, and analytics services. Their multilingual web presence targets European markets, positioning them as a regional player in the web development and marketing sector. The website is professionally designed with clear navigation and relevant content aimed at businesses seeking to enhance their online presence. Technically, the website leverages a proprietary CMS platform with modern JavaScript libraries such as jQuery, Google Tag Manager, and Owl Carousel. The site is mobile optimized and includes SEO best practices with proper meta tags and structured data. Performance is moderate, with room for improvement in accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to Red.es restrictions limits domain registration insights, but the website content and contact information indicate a legitimate and established business. Overall, Smartweb s.r.o. demonstrates a solid digital presence with good business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would enhance their security posture and trustworthiness further.