Medium-risk security reports

Vinofol, s.r.o. is a well-established family winery based in the Czech Republic, operating since 1992. The company specializes in producing and selling high-quality wines from the Mikulov and Novosedly regions, leveraging modern technology and traditional winemaking methods. Their market position is strong within the Czech wine retail sector, supported by a broad product range, including award-winning wines, and a multi-channel sales approach via e-shop and physical vinoték stores. The website reflects a mature digital presence with integrated marketing and analytics tools, providing a professional user experience and clear business information. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content. The site targets adult consumers, implementing age verification due to alcohol sales regulations.

FOTBALservis.cz is a Czech Republic-based e-commerce retailer specializing in football equipment including balls, boots, clothing, and accessories. The website targets football players, teams, referees, and coaches, offering a comprehensive product catalog and club-specific e-shop services. The business operates on the Shoptet platform, leveraging modern web technologies and marketing tools such as Facebook Pixel and Google Tag Manager. The site demonstrates good content quality, clear navigation, and GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Technically, the site uses HTTPS and secure login forms but lacks explicit security headers and a published security policy or vulnerability disclosure mechanism.

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Hitrádio City 93,7 FM is a well-established regional radio station based in Prague, Czech Republic, operating since 2005. The website offers multiple live internet radio streams, podcasts, program schedules, contests, and a listener club, targeting a broad audience in the Prague region. The business model centers on media broadcasting and advertising, supported by a professional online presence and active social media channels. The company behind the site is MEDIA MARKETING SERVICES a.s., indicating a medium-sized media entity with a stable market position. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and CSS frameworks like Foundation. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility could be made. Hosting is managed via Dial Telecom, with secure HTTPS enforced and CSRF protection tokens present, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for enhancement. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and accessible, supporting regulatory compliance. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content. The domain registration data aligns well with the business history and operations, reinforcing legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and publishing a formal security policy and incident response information to further strengthen trust and compliance.

The website www.fotbal.cz is the official online presence of the Football Association of the Czech Republic (Fotbalová asociace České republiky). It serves as a comprehensive platform for football-related news, official publications such as the Časopis Gól magazine, match calendars, and information about clubs and competitions. The site targets football fans, players, clubs, and stakeholders within the Czech football ecosystem, positioning itself as the authoritative source for football governance and media in the country. The business model is non-profit and government-affiliated, focusing on sports governance and media dissemination. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Facebook Pixel, Smartlook, and various JavaScript libraries for UI and cookie consent management. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. Performance is moderate, with asynchronous loading of analytics and tracking scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Cookie consent mechanisms are implemented, indicating awareness of privacy regulations. However, the site lacks a publicly accessible privacy policy and terms of service pages, which are important for full GDPR compliance and user trust. No security incident response or vulnerability disclosure information is published, which could be improved. Overall, the website is professional, trustworthy, and content-rich, with strong branding and partner endorsements. The absence of WHOIS data is consistent with CZ NIC policies and does not detract from the site's legitimacy. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and formalizing incident response disclosures to improve compliance and security posture.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for European football fans, stakeholders, and media, providing news, live scores, video content, and detailed information about UEFA's competitions and initiatives. It holds a strong market position as the authoritative source for European football, supported by consistent branding and extensive content offerings. Technically, the site employs modern web technologies including React, Google Analytics, and Microsoft Application Insights, ensuring a fast, responsive, and accessible user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though the absence of publicly available WHOIS data limits full domain registration verification. Overall, UEFA.com demonstrates a mature digital infrastructure with strong privacy compliance and business credibility, making it a trusted resource in the sports domain.

The website www.declaration-langues-langage.net is a French non-profit cultural platform dedicated to promoting a Declaration on Duties towards Languages and Language. It serves as a hub for linguistic rights advocacy, multilingual translations, and cultural discourse primarily linked to the Carrefour Culturel Arnaud-Bernard and the Forom des Langues du Monde. The site targets linguists, cultural activists, and language communities with academic and ethical-political content. Technically, it is built on WordPress using Elementor and OceanWP theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is missing, which raises transparency concerns but the site content and affiliations suggest legitimacy. Overall, the site is content-rich and professionally presented but would benefit from improved privacy compliance and domain registration transparency.

Salon Permae is a French event organizer specializing in permaculture, agroecology, and natural gardening exhibitions held at the Parc Floral de Paris. The website serves as an information portal for visitors and exhibitors, offering event details, conference programs, and exhibitor portraits. The business targets gardening enthusiasts and professionals interested in sustainable agriculture and natural gardening practices. The company positions itself as the first dedicated salon in this niche in France, operating since 2019 with a small but focused market presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Google Analytics for tracking, and several plugins for content display and advertising management. Hosting is provided by Infomaniak, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, and there is no visible security policy or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, the website is professional and trustworthy for its business purpose but could improve in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and enhancing contact information clarity.

The New Botanist is a French ecological gardening initiative focused on promoting biodiversity by offering seed kits of local wildflowers to create pollinator refuges. The website is hosted on Squarespace, leveraging standard web technologies and security features such as HTTPS and HSTS. While the site is well-designed, mobile-optimized, and provides relevant content for environmentally conscious gardeners, it lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate small business. Security posture is strong with HTTPS and reCAPTCHA usage, but improvements in privacy compliance and contact transparency are recommended.

WICONA is a well-established company specializing in architectural aluminum systems, serving primarily the construction and architectural sectors. The website reflects a professional B2B business model with a focus on product offerings such as facades, windows, doors, and sliding systems. The company is a subsidiary of Hydro, a global aluminum company, which supports its market position and credibility. The website is targeted at architects, builders, and construction professionals, providing detailed product information and resources. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Microsoft Azure services for hosting and telemetry, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured cookie consent mechanisms. Security-wise, the website enforces HTTPS and includes a Content Security Policy header, but lacks some additional security headers and explicit privacy and terms of service pages. The cookie consent mechanism is comprehensive and GDPR compliant, with detailed cookie categorization and user control. However, the absence of visible contact information and WHOIS data inconsistency slightly reduce trustworthiness. Overall, the website is professional, secure, and compliant, but could improve transparency and contact accessibility to enhance user trust and compliance posture.

Le Grand Ouest Toulousain Agglomération operates as a local government community entity serving multiple communes in the Toulouse region of France. The website provides comprehensive information on public services including waste management, social services, territorial planning, mobility, and economic development. It targets residents and stakeholders within the community, offering access to administrative resources, news, and contact channels. The business model is that of a public service provider with a medium-sized organizational footprint, founded in 2021. Technically, the website is built on Joomla CMS with a modern front-end stack including Bootstrap, jQuery, and Font Awesome. It is hosted by OVH, a reputable provider, and employs HTTPS with a valid SSL certificate. The site includes a cookie consent mechanism compliant with GDPR principles, though it lacks a dedicated privacy policy page. Performance and mobile optimization are moderate to good, with room for improvement in accessibility and SEO. From a security perspective, the site benefits from HTTPS and cookie consent but lacks published security policies, incident response information, and advanced security headers. No vulnerabilities or suspicious content were detected in the analysis. The WHOIS data aligns well with the website's public government role, supporting legitimacy and trustworthiness. Overall, the site is professional, trustworthy, and serves its community well but would benefit from enhanced privacy disclosures, security policies, and accessibility improvements to strengthen compliance and user trust.

TECHNAL is a globally recognized premium brand specializing in aluminum building systems, offering solutions such as windows, doors, facades, and solar protections. The company emphasizes sustainability and innovation, backed by 60 years of industry experience and is part of the Hydro group, a major player in the energy and metals sector. The website targets both professionals and homeowners with localized sites worldwide, reflecting a broad market reach and strong brand presence. Technically, the website employs modern JavaScript libraries like jQuery and Slick Carousel, integrates Google Tag Manager and Cookiebot for analytics and consent management, and demonstrates good mobile optimization and SEO practices. However, the absence of WHOIS registration data for the domain www.technal.com raises concerns about domain legitimacy and registration transparency. Security-wise, the site uses HTTPS and cookie consent but lacks visible security headers and explicit incident response contacts, indicating room for improvement in security posture. Overall, the website is professional and trustworthy in content but would benefit from enhanced transparency and security measures.

Fondation du patrimoine is a leading French non-profit organization dedicated to the preservation and restoration of cultural heritage across France. The website serves as a platform to engage donors, volunteers, and project owners by providing information about restoration projects and facilitating donations. The organization holds a strong market position as a primary actor in heritage preservation, targeting a broad audience interested in cultural and historical conservation. Technically, the website is built using modern web technologies including React and Next.js, with content likely managed via a headless CMS such as Strapi. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of Google Tag Manager for analytics and marketing purposes. Performance is moderate, with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a publicly available security policy and incident response information, which are recommended for transparency and trust. The absence of WHOIS data limits domain registration verification, slightly reducing trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly interface aligned with its non-profit mission. Strategic improvements in security transparency and domain registration disclosure would enhance its credibility and compliance posture.

PanneauPocket is a French-based company providing a leading mobile application designed for local governments such as municipalities and intercommunal entities (EPCI) to communicate real-time information and alerts to residents. Established in 2017, the company has positioned itself as the number one mobile alert and information app in France, serving over 13,500 local entities including gendarmeries and covering approximately 8 million residents. Their key services include push notifications, RSS feeds, legal postings, directories, and event calendars, all aimed at enhancing local communication efficiency and citizen engagement. Technically, the website is built on WordPress with Elementor and leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and analytics. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Analytics tools such as Matomo and Microsoft Clarity are used for user behavior tracking, complemented by Google reCAPTCHA for form security. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable, which slightly reduces trust but is mitigated by strong business signals such as media coverage, partnerships with official organizations, and transparent contact information. Overall, PanneauPocket presents a professional, trustworthy, and well-maintained digital presence with a strong market position in the French local government communication sector. Strategic improvements in security headers and publishing a dedicated security policy would further enhance their security posture and trustworthiness.

Haute-Garonne Ingénierie - Agence Technique Départementale (HGI-ATD) is a regional government technical agency serving the Haute-Garonne department in France. The organization provides a range of services including technical engineering support, legal and financial advisory, training for local elected officials, and information dissemination. The website targets local government officials and public sector entities, positioning itself as a trusted regional partner. The business model is public service oriented, focusing on supporting territorial communities with expertise and resources. Technically, the website is built on the Ametys CMS platform and employs modern JavaScript libraries such as jQuery and Slick Carousel. It uses Matomo analytics configured for privacy by design and implements a comprehensive cookie consent mechanism via tarteaucitron.js. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. From a security perspective, the website enforces HTTPS and uses privacy-respecting analytics. However, it lacks visible security headers and does not publicly provide a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is not publicly available due to AFNIC policies, but the domain and website content appear legitimate and consistent with a government entity. Overall, the website presents a professional and trustworthy digital presence for a regional government agency. Strategic recommendations include publishing a security policy, adding security headers, and providing incident response information to enhance transparency and security posture.

KV-Media studio s.r.o. is a Czech Republic based multimedia and creative marketing studio founded in 2021, specializing in UX/UI design, web development, branding, video production, podcasting, graphic design, photography, and AV equipment rental. The company targets businesses seeking comprehensive multimedia marketing solutions and maintains a professional online presence with a well-structured and content-rich website. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and optimized for SEO and mobile devices. Security posture is good with HTTPS and cookie consent implemented, though lacking explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The Kukang Rescue Program is a small non-profit organization founded in 2014 focused on the conservation of endangered slow lorises in Sumatra, Indonesia. The organization operates through community engagement, education, anti-poaching efforts, and sustainable farming projects such as the Kukang Coffee initiative. It maintains partnerships with multiple zoos and conservation groups, enhancing its credibility and reach. The website reflects a professional and consistent brand image with clear messaging targeted at conservationists, donors, and local communities. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries like jQuery and Bootstrap. It features multimedia content including embedded YouTube videos and responsive design optimized for mobile devices. While performance is moderate, the site lacks some advanced accessibility features and security headers, which could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and security posture. The WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's content quality and partner ecosystem provide strong trust signals. Overall, the site is a credible and well-maintained platform for wildlife conservation awareness, though it would benefit from improved privacy compliance and security best practices to strengthen its risk profile and user trust.

Divadlo Husa na provázku is a well-established cultural theatre organization based in Brno, Czech Republic, with a history dating back to 1967. The institution focuses on contemporary theatrical performances and cultural projects, serving a general audience interested in arts and culture. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and privacy policy documentation are missing. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong partner ecosystem and content quality.

Magazín O webu is a Czech-language online magazine specializing in web development, SEO, internet marketing, copywriting, social media, and e-commerce topics. It targets web developers, marketers, and small business owners seeking practical advice and tutorials. The website is hosted by BANAN.CZ and uses a custom CMS called Web Bez starosti. The technical infrastructure includes modern JavaScript libraries and frameworks such as jQuery, Bootstrap (modal only), and Google Tag Manager for analytics and marketing. The site is mobile responsive and well-structured, providing a good user experience with clear navigation and regularly updated content. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces transparency and trust slightly, but the website content and contact information appear professional and legitimate. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable resource in its niche.

The website auxerre.fr serves as the official digital portal for the city of Auxerre, France, providing residents and visitors with comprehensive access to administrative procedures, local news, cultural events, and public services. It positions itself as a trusted municipal resource with a clear focus on community engagement and information dissemination. The site is well-structured, featuring clear navigation menus and a responsive design suitable for desktop and mobile users. Technically, the site leverages established technologies such as jQuery and Matomo analytics, hosted by OVH, a reputable provider. The presence of a cookie consent mechanism and use of privacy-conscious analytics indicate a commitment to user privacy. However, the site lacks visible advanced security headers and formal security policies, which could be enhanced to improve its security posture. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. No signs of WAF blocking or security challenges were detected, allowing full content accessibility. The domain registration data aligns well with the website's official municipal nature, reinforcing its legitimacy. Overall, the site demonstrates a solid foundation in content quality, technical implementation, and business credibility, with room for improvement in security policy transparency and header implementation.

The website www.lille.fr is the official digital presence of the Ville de Lille, the municipal government of Lille, France. It serves as a comprehensive portal for residents, visitors, and professionals to access city news, cultural events, administrative services, and citizen participation resources. The site is well-branded with consistent official imagery and provides extensive content relevant to its audience. Technically, the site uses standard web technologies including jQuery 1.11.0, Matomo analytics, and Facebook Pixel for tracking. While the site is mobile-optimized and offers good user experience, the use of an outdated jQuery version presents a security risk that should be addressed. Security headers are not visibly implemented, and WHOIS data is not publicly available due to AFNIC policies for .fr domains, which is typical but reduces transparency. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and professional, serving its public sector role effectively.

Métropole Européenne de Lille (MEL) is a public metropolitan government entity serving 95 communes in the Lille region of France, with a population of approximately 1.2 million residents. The website serves as an official portal providing information and services related to urban planning, waste management, transportation, culture, economic development, and environmental sustainability. The MEL positions itself as a key regional authority with a comprehensive service offering to residents, businesses, and professionals. Technically, the website is built on Drupal 10, leveraging modern web technologies and providing a responsive, accessible user experience. The site includes cookie consent mechanisms and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and well-aligned with the public institution it represents.

Mulhouse Alsace Agglomération (m2A) is a regional government entity serving 39 communes in the Mulhouse Alsace region of France. The website acts as the official portal for territorial development, public services, environmental initiatives, culture, tourism, and economic activities. It targets residents, local businesses, and stakeholders within the region, providing comprehensive information and access to services. The site is well-branded and professionally designed, reflecting its official status. Technically, the website is built on WordPress with a variety of plugins including Yoast SEO Premium, Elementor, and AngularJS for dynamic content. It integrates Google Analytics and Google Tag Manager for analytics and uses WP Rocket for performance optimization. The site is mobile-optimized and includes accessibility features, though some improvements could be made. The use of AngularJS 1.4.14 is outdated and may pose security risks. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are found. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, though the website content and social media presence strongly indicate legitimacy. Overall, the website presents a solid digital presence for a government entity with good content quality and privacy compliance. Strategic recommendations include updating legacy libraries, enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and security posture.

Mulhouse.fr is the official municipal website of the city of Mulhouse, France, providing comprehensive information and services to residents and visitors. The site covers a wide range of topics including employment, municipal administration, urban development projects, culture, education, health, and social services. It serves as a central hub for local government communication and citizen engagement, featuring news, interactive maps, and access to various public resources. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap for responsive design, jQuery, Swiper.js for interactive elements, and Matomo Analytics configured with privacy by design principles. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by Yoast SEO plugin and structured data in JSON-LD format. From a security perspective, the site enforces HTTPS and uses a cookie consent management tool (tarteaucitron) to comply with privacy regulations. However, no explicit security headers were detected, and there is no visible security policy or incident response information published. The WHOIS data is unavailable, likely due to registry restrictions or privacy protection, which limits domain registration trust verification but does not detract from the site's legitimacy given its official nature. Overall, Mulhouse.fr presents a professional, trustworthy, and user-friendly platform for municipal services and information. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen security posture and transparency.

The website www.communaute-paysbasque.fr serves as the official portal for the Communauté d'Agglomération Pays Basque, a regional government entity in France. It provides comprehensive information and services related to public utilities, environmental initiatives, transport, waste management, housing, agriculture, culture, and social services tailored for residents, businesses, and associations within the Pays Basque region. The site is multilingual, primarily in French, with Basque and Gascon language options, reflecting the local cultural context. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Matomo analytics with privacy by design, and a robust cookie consent mechanism via tarteaucitron.js. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Performance is moderate, with room for optimization. From a security standpoint, the site enforces HTTPS and uses privacy-focused analytics. However, explicit security headers are not clearly detected, and no public security policy or incident response contacts are provided. The absence of WHOIS registration data for the domain reduces trust from a domain legitimacy perspective, though the content and domain suffix strongly indicate a legitimate government site. Overall, the website is professional, trustworthy, and privacy-conscious, serving its public sector mission effectively. Strategic improvements in transparency around security policies, incident response, and domain registration details would enhance trust and compliance further.

The domain www.paris-saclay.com currently serves a security challenge page indicating anti-DDoS flood protection and firewall measures, effectively blocking normal access to website content. No business-related content, contact information, or policies are available, making it impossible to assess the company's operations or services. The domain WHOIS data is missing or unregistered, further reducing trust and legitimacy. Technically, the site uses minimal JavaScript and Google Fonts but lacks modern CMS or frameworks. Security posture is weak due to absence of HTTPS and security headers, although the presence of a WAF indicates some level of protection. Overall, the site is inaccessible for meaningful analysis and scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

Métropole Rouen Normandie operates as the official metropolitan government entity for the Rouen Normandie region in France, providing citizens and professionals with comprehensive information on local governance, public services, administrative procedures, news, and events. The website serves as a central hub for community engagement, business support, and access to metropolitan resources. It holds a strong market position as the authoritative source for metropolitan information and services. Technically, the website is built on Drupal 11, leveraging modern web technologies such as Bootstrap for responsive design and Matomo for privacy-focused analytics. The site demonstrates good digital maturity with mobile optimization, accessibility features, and a cookie consent mechanism compliant with GDPR requirements. Performance is moderate, with lazy loading implemented for images to enhance user experience. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. WHOIS data is unavailable, which limits domain registration trust verification, but the website's official nature and consistent branding mitigate concerns. Overall, the site presents a professional, trustworthy, and user-friendly platform that effectively serves its governmental role. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture and stakeholder trust.

The website www.gouv.mc is the official online portal of the Gouvernement Princier de Monaco, serving as the primary digital gateway for government information, public services, and news related to the Principality of Monaco. It targets a broad audience including citizens, residents, businesses, tourists, and international partners. The portal provides comprehensive access to government departments, legislative information, administrative procedures, and cultural and tourism content. Technically, the site employs modern JavaScript libraries and analytics tools such as Piwik (Matomo), with a custom or proprietary CMS likely used for content management. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and authoritative, consistent with its role as a government portal.

Lorient Agglomération operates as a French local government entity providing a broad range of public services to its 25 member communes. The website serves as an information hub for residents and businesses, covering topics such as waste management, water services, urban planning, transport, economic development, and cultural activities. The site is well-structured and targets local citizens and stakeholders within the Lorient region. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, integrating analytics tools like Google Analytics and Matomo, and implements a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enforced and privacy-focused cookie management, though some HTTP security headers are missing. The WHOIS data confirms the domain's legitimacy and consistency with the website's governmental nature. Overall, the site is professional, trustworthy, and serves its community effectively.

The Région Hauts-de-France website serves as the official digital presence of the regional government of Hauts-de-France, France. It provides comprehensive information and services related to regional news, employment, aids, events, and public consultations. The site targets residents, businesses, and stakeholders within the region, positioning itself as a key resource for regional governance and community engagement. The business model is public sector-focused, delivering government services and information. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, enhanced by SEO and cookie consent plugins. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in accessibility and security headers could be made. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks visible advanced security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy, professional, and well-maintained, with a high legitimacy score despite the absence of public WHOIS data due to AFNIC policies. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the site's security posture and user trust.

Grand Poitiers Communauté urbaine operates as the official urban community government portal for the Grand Poitiers area in France. The website provides comprehensive information and services related to administrative procedures, waste management, transport, culture, sports, urban planning, employment, and environmental initiatives. It targets residents, local businesses, and visitors, positioning itself as a key public service provider in the region. The business model is focused on public service delivery and community engagement rather than commercial revenue generation. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including jQuery, Parsley.js for form validation, and tarteaucitron.js for cookie consent management. The site uses Matomo analytics configured to respect Do Not Track settings, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration trust analysis, but the domain is managed by AFNIC, the French registry, supporting legitimacy. Overall, the website demonstrates a strong commitment to privacy and user experience, with room for improvement in security policy transparency and contact information availability. The risk profile is low, with no indications of malicious activity or content safety concerns.

Setec is a French multidisciplinary engineering group specializing in complex and innovative construction projects worldwide. The company targets professional clients in sectors such as energy, transport, and telecommunications. Their website reflects a mature digital presence built on WordPress, enhanced with SEO tools and privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism, demonstrating compliance with privacy regulations. However, explicit privacy policy and terms of service pages were not detected in the provided content, which could be improved for better compliance and transparency. The absence of WHOIS data limits domain trust assessment, but the professional presentation and content quality support the company's legitimacy.

Actierra is a French consulting engineering firm specializing in ecological transition and sustainability. With over 300 experts and 17 agencies, it operates as a subsidiary of Ingérop and focuses on delivering environmentally responsible and resilient projects. The company offers a broad range of services including climate, biodiversity, water expertise, and regulatory environment consulting. The website reflects a mature digital presence built on WordPress with modern JavaScript frameworks and SEO optimization. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. WHOIS data is privacy protected, typical for consulting firms, and no suspicious indicators are found. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

Ingérop is a well-established French engineering and consulting group with over 60 years of experience, specializing in construction, infrastructure, energy, and transport sectors. The company operates internationally with multiple subsidiaries across Europe, Africa, Asia-Pacific, and the Americas, positioning itself as an independent reference in the engineering market. The website reflects a professional digital presence with a modern WordPress-based infrastructure, leveraging SEO and performance optimization tools. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data limits full trust verification but does not detract significantly from the company's apparent legitimacy. Overall, Ingérop demonstrates a mature business and digital footprint suitable for its industry and scale.

ABMI Engineering is a well-established French engineering company founded in 2002, specializing in multiple industrial sectors including nuclear, rail, aerospace, health, and manufacturing. The company offers a broad range of engineering services such as design, industrialization, supply chain management, robotics, and IoT solutions. Their market position is supported by a diversified sector presence and partnerships with major industry players. Technically, the website is built on a modern Next.js framework, optimized for performance and mobile responsiveness, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website projects a professional and trustworthy image with strong business credibility and technical maturity.

Eiffage is a leading European construction and concessions group specializing in infrastructure development, energy systems, and real estate. The company holds a strong market position as a major player in the construction sector, with a broad portfolio of subsidiaries covering various specialized domains such as construction, rail, metal works, and energy systems. The website reflects a professional corporate presence with consistent branding and comprehensive information about its group and subsidiaries. Technically, the website employs modern JavaScript libraries including jQuery, YouTube and Vimeo APIs, and integrates Google reCAPTCHA for form security. The use of OneTrust for cookie consent demonstrates compliance with GDPR and privacy regulations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is well-structured, accessible, and optimized for SEO and mobile devices, supporting a positive user experience and trustworthiness.

Urbanomy is a strategic energy and climate consulting subsidiary of the EDF group, founded in 2020. The company provides tailored consulting services to public and private organizations to accelerate their climate transition, leveraging strong technical expertise and international presence in Paris and London. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site uses Drupal 10 CMS, integrates modern analytics and marketing tools, and is hosted likely via Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosure mechanisms are absent. WHOIS data is privacy protected, typical for corporate domains, and the domain aligns well with the business identity and parent company branding. Overall, the site is trustworthy, compliant with GDPR, and serves as a credible digital asset for Urbanomy.

Paris-Est Sup is a consortium of 17 higher education and research institutions located in the Paris-Est region of France. It serves a large academic community including 60,000 students and 1,380 doctoral candidates, offering doctoral education, research collaboration, innovation project support, and student entrepreneurship programs. The website reflects a well-structured academic institution with a focus on research and education. Technically, the site is built on TYPO3 CMS with modern web technologies and includes cookie consent and analytics tracking. Security posture is adequate with HTTPS and some security headers but could be improved with additional headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly but does not detract from the professional presentation and trustworthiness of the site content. Overall, the site is safe, professional, and well-targeted to its academic audience.

ESIEE Paris is a well-established French engineering school specializing in technological innovation, digital, energy, and environmental transitions. It holds prestigious accreditations such as CTI and CGE and offers a broad range of engineering programs including apprenticeships and international degrees. The website reflects a professional and modern educational institution with clear navigation, comprehensive content, and strong trust indicators including certifications and alumni references. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes robust cookie consent mechanisms ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie management but lacks explicit security policies and visible security headers. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the overall legitimacy supported by external partnerships and certifications.

Argentan Intercom operates the Argentan développement website as a public economic development service focused on supporting local businesses and promoting economic growth in the Argentan region of Normandy, France. The organization provides business support, financing assistance, real estate and land management for business zones, and collaborates closely with regional partners and government entities. The website is content-rich, providing detailed information on local projects, business incentives, and community initiatives. Technically, the website is built with standard HTML and CSS, without advanced frameworks or CMS detected. It offers moderate performance and basic mobile optimization but lacks modern security headers and privacy compliance features. No analytics or tracking scripts were found, indicating minimal user tracking. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, which are critical for GDPR compliance. The WHOIS data for the domain is missing, which reduces trust from a domain registration standpoint, although the website content and contact details strongly indicate a legitimate local government service. Overall, the website is functional and informative but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and user experience.

The website tourisme-argentan-intercom.fr is currently inaccessible, serving a 403 Forbidden error page with no accessible content. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and legitimacy. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business details available on the site. The technical infrastructure shows hosting via Hosting Concepts B.V. with Cloudflare nameservers, indicating some level of protection but no visible security headers or scripts. Overall, the site lacks digital maturity and business credibility, with minimal SEO or accessibility features.

The website 'Médiathèques Argentan' serves as a regional informational media platform providing news and educational content primarily in French. It targets a general audience interested in cultural, educational, and societal topics. The site is built on WordPress with common optimization plugins such as WP Rocket and uses technologies like jQuery and FontAwesome. The technical infrastructure is modern and optimized for performance and mobile devices. Security posture is adequate with HTTPS and a Content Security Policy header, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and structure appear professional and trustworthy. No contact information or social media links are provided, which reduces business credibility and user trust. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and clearer business transparency.

The Conseil départemental de l'Orne operates as the official government body for the Orne department in Normandy, France. The website serves as a comprehensive portal for residents and stakeholders, offering news, public services, administrative procedures, and cultural information. It holds a strong market position as the authoritative source for regional government information and services. The digital infrastructure is built on Drupal 10, integrating modern web technologies and privacy-conscious analytics (Matomo). The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital presence. Security measures include HTTPS enforcement, reCAPTCHA v3 on forms, and cookie consent management, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but is likely due to AFNIC policies or privacy protections. Overall, the site is trustworthy, professional, and safe for general audiences.

meetnlearn.si is an educational platform based in Slovenia that connects students with tutors for individual learning sessions across various subjects such as mathematics, languages, and sciences. Founded in 2019, the company operates a user-friendly website offering features like tutor search, question and answer forums, and blog content to support learning. The platform targets students, tutors, and families, including those from abroad, positioning itself as a trusted regional player with partnerships including Wayra, the European Union, and Telefónica. Technically, the website employs modern web technologies including React and Bootstrap, hosted on Websupport infrastructure, and integrates analytics and social media SDKs for marketing and user engagement. Security-wise, the site enforces HTTPS, provides a comprehensive cookie consent mechanism, and maintains GDPR compliance, although it lacks explicit security policies or incident response contacts. Overall, the website is professional, secure, and privacy-conscious, with room for improvement in security header implementation and incident response transparency.

meet'n'learn.ro is an established online educational platform focused on connecting students with qualified tutors across Romania and other European countries. The platform offers a comprehensive marketplace for tutoring services, including search functionality, user reviews, Q&A sections, and educational blogs. It targets students and tutors, providing a user-friendly interface with multilingual support and a strong emphasis on verified profiles and transparent pricing. Technically, the site leverages modern web technologies such as React and Bootstrap, integrates Google Fonts and Iconify for UI elements, and uses Google Tag Manager and Facebook SDK for analytics and marketing. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR, though it lacks some advanced security headers and explicit incident response documentation. Overall, the platform demonstrates a mature digital presence with good content quality, privacy compliance, and business credibility, positioning it well in the education sector.

meet'n'learn.fi is an established Finnish online platform connecting students with private tutors across various subjects. The website offers a comprehensive marketplace for finding, scheduling, and conducting tutoring sessions both online and in-person. The platform supports multiple languages and targets students and teachers primarily in Finland, with extensions to other European countries. The business model is based on facilitating direct connections between tutors and learners, supported by user reviews and transparent pricing. The site demonstrates consistent branding and good content quality, with trust signals such as partner logos and social media presence.

meet'n'learn is an established online platform specializing in connecting students with private tutors for individual and online tutoring sessions, primarily targeting the German market and other European countries. The website offers a comprehensive service including tutor search, homework help, and private tutoring requests, supported by user reviews and partner endorsements. The platform demonstrates a strong market position within the education sector, leveraging modern web technologies and a multilingual approach to reach a broad audience. Technically, the site uses Bootstrap and React frameworks, integrates Google Fonts and Iconify icons, and employs Google Tag Manager and Facebook SDK for analytics and marketing. Hosting is provided by websupport.sk, indicating a reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. The website exhibits excellent design quality, user experience, and trustworthiness, supported by verified profiles and partner logos. WHOIS data is minimal but consistent with the business, showing no suspicious patterns. Overall, meet'n'learn presents a professional, secure, and user-friendly platform with room for improvement in transparency of security policies and contact information.

Doučuji.eu is an established online tutoring platform operated by meetnlearn s.r.o., targeting students and tutors primarily in the Czech Republic. The platform offers a comprehensive marketplace for finding and offering tutoring services across various subjects, supporting both online and in-person sessions. It also provides additional features such as study questions, blogs, and user reviews, positioning itself as a trusted educational resource in the region. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including Czech, English, and Ukrainian.

meet'n'learn.ch is a well-established Swiss online platform that connects students with private tutors for personalized and flexible tutoring services. The website offers a comprehensive range of services including tutor search, homework help, and both online and in-person tutoring. It targets students and tutors primarily in Switzerland but is part of a broader network with presence in multiple European countries. The platform emphasizes quality through user reviews, partner endorsements, and transparent policies. Technically, the site employs modern frameworks such as Bootstrap and React, integrates Google and Facebook analytics, and maintains good SEO and accessibility standards. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

meetnlearn s.r.o. operates an established online platform focused on connecting students with private tutors for individual and online tutoring sessions primarily in Austria. The website offers comprehensive services including tutor search, homework help, and flexible scheduling for both in-person and remote learning. The platform targets students and tutors, emphasizing verified profiles and user reviews to build trust. The company is positioned as a medium-sized player in the education sector with a strong regional presence and partnerships with notable organizations such as Wayra, the European Union, and Telefónica. Technically, the website employs modern web technologies including Bootstrap, React components, Google Tag Manager, and Facebook SDK for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security is well-handled with HTTPS enforced and a cookie consent mechanism in place, although some security headers and incident response information are not publicly disclosed. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. However, the lack of WHOIS data limits domain trust verification, slightly impacting the overall credibility score. The website content is safe, family-friendly, and focused on education without any adult or questionable material. Overall, meetnlearn.at presents a professional, trustworthy, and user-friendly platform with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration information to strengthen trust and compliance.