Medium-risk security reports

Meet'n'learn is an online marketplace platform specializing in connecting students with tutors for both online and offline tutoring sessions. The platform operates across multiple European countries with localized domains, offering a review-based, schedulable, and transparent tutoring experience. The business targets students and families seeking educational support in various subjects, positioning itself as a regional leader in the tutoring marketplace sector. Technically, the website uses modern front-end technologies including Bootstrap and Google Tag Manager, with embedded multimedia content to enhance user engagement. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, though the absence of WHOIS data and contact information slightly reduces credibility.

The Inštitút pre dobre spravovanú spoločnosť is a Slovak non-profit organization dedicated to promoting good governance, public sector quality, and civic engagement. Their website serves as a platform for news, reports, awards, and collaborations with fact-checking and media organizations, targeting Slovak citizens, local governments, and policy makers. The organization holds a recognized position within Slovakia's governance and public sector landscape. Technically, the website is built on WordPress 4.9.3 with jQuery and uses common web fonts and icon libraries. While the site is accessible and uses HTTPS, it relies on outdated software versions which may pose security risks. The site shows basic mobile optimization and SEO practices but lacks advanced accessibility and modern performance optimizations. From a security perspective, the site enforces HTTPS and uses Wordfence security scripts, but lacks modern security headers and runs outdated components. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. Contact information is clearly provided, but no incident response or security contact channels are published. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements in security patching, privacy compliance, and technical modernization are recommended to enhance the organization's digital maturity and risk posture.

Portobello Communication is a small, established communication agency based in Laval, Mayenne, France, operating since 2009. The company offers a broad range of marketing and communication services including brand strategy, web design, video production, graphic design, and social media marketing. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and WP Rocket, and integrates Matomo for analytics, indicating a focus on performance and privacy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-positioned in its local market segment.

The website vostickets.net currently serves only the default Apache2 Debian welcome page, indicating that the web server is installed but no active website or business content is present. The domain is registered with OVH sas since 2018 and uses Cloudflare DNS servers, but the lack of any business or contact information on the site suggests it is either under construction or abandoned. Technically, the site runs on Apache2 on Debian, but no modern web technologies, CMS, or analytics tools are detected. Security posture is weak due to the absence of HTTPS enforcement, security headers, and privacy policies. Overall, the site is not operational as a business or service platform.

Lecture-en-tete.fr is a French cultural or literary website associated with an organization and a literary festival. The site is minimalistic, primarily serving as a portal linking to related association and festival websites. The domain is well-established since 2010 and registered with a reputable registrar, indicating legitimacy. The technical infrastructure is basic, using standard CSS and Typekit fonts, hosted by IONOS SE. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. No contact information or forms are present, limiting user engagement and compliance with privacy regulations. Overall, the site is functional but lacks modern security and privacy features, which should be addressed to improve trust and compliance.

Ultimately Social is a small technology company specializing in a WordPress plugin that enables website owners to easily add and customize social media icons and sharing buttons. The company has established a strong market position with over one million downloads and excellent user ratings, targeting WordPress users and small to medium businesses seeking social media integration. Their business model relies on direct sales and third-party platform licensing with subscription options and a referral program. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various analytics and marketing tools. Hosting and domain registration are stable and consistent with the business profile. Security posture is good with HTTPS enforced and secure checkout, though improvements such as enabling DNSSEC and implementing Content Security Policy headers are recommended. Privacy compliance is basic with policies present but lacking explicit GDPR statements. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

The website www.ville-fontenilles.fr serves as the official online presence for the municipal government of Fontenilles, France. It provides residents and visitors with comprehensive information about local events, administrative procedures, education, cultural activities, and social services. The site is positioned as a trusted source of municipal information and public services for the local community. Technically, the site is built on WordPress, utilizing popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, with a responsive design and moderate performance. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a cookie consent mechanism, although explicit security headers and privacy policies are not fully implemented or visible. Overall, the site demonstrates a good security posture and professional presentation, but could improve transparency and compliance by publishing privacy and terms of service documents and providing clear contact information for security and data protection matters.

The website sainte-livrade31.fr serves as the official online presence for the municipal government of Sainte-Livrade, a small commune in Haute-Garonne, France. It provides residents and visitors with local news, event calendars, contact information, and municipal services. The site is built on a custom CMS platform tailored for town halls (Elodan) and uses legacy JavaScript libraries alongside Google Analytics for visitor tracking. The content is primarily in French and targets the local community. The business model is informational and service-oriented, typical for government entities, with no commercial activities. Technically, the site employs older versions of jQuery and jQuery UI, which introduces security risks. The hosting appears to be with OVH, a reputable provider, and the site uses Google Tag Manager and Analytics for data collection. The website design and navigation are basic but functional, with moderate performance and limited mobile optimization. Accessibility and SEO are at a basic level, with room for improvement. From a security perspective, the site lacks modern security headers and does not implement a cookie consent mechanism, which is a compliance gap under GDPR. The use of outdated JavaScript libraries further increases vulnerability exposure. No explicit security policies or incident response contacts are provided. The WHOIS data indicates a consistent and legitimate domain registration aligned with the municipal nature of the site. Overall, the website is trustworthy and serves its purpose as a municipal information portal but requires technical and security updates to improve compliance, user privacy, and protection against vulnerabilities.

The website www.mairie-merenvielle.fr serves as the official online presence for the municipal government of Mérenvielle, France. It provides residents and visitors with comprehensive information about local government services, administrative procedures, urban planning, community events, and contact options. The site targets local citizens and stakeholders interested in municipal affairs and community engagement. The business model is public service-oriented, focusing on information dissemination and citizen interaction. Technically, the site is built on the Ametys CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and FontAwesome. It incorporates GDPR-compliant cookie consent mechanisms via tarteaucitron and uses Matomo for privacy-focused analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms to mitigate spam. However, it lacks some advanced HTTP security headers like CSP and X-Frame-Options, which could enhance protection against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the official contact information and content quality support its authenticity. Overall, the website presents a trustworthy and professional municipal portal with solid privacy compliance and user experience. Strategic improvements in security headers and domain registration transparency would further strengthen its security posture and trustworthiness.

The website 'Mairie de Levignac' serves as the official online presence for the municipal government of Levignac, France. It provides residents and visitors with access to local news, administrative procedures, event calendars, and municipal council information. The site targets local citizens seeking government services and community updates. The business model is public service oriented, focusing on information dissemination and community engagement. The domain has been registered since 2002, reflecting a stable and established presence. Technically, the site is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The hosting and domain registration are managed by Gandi SAS, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and some advanced security headers. No security.txt or vulnerability disclosure mechanisms are found, which could be improved. No WAF or blocking mechanisms are detected, and no exposed sensitive data is visible. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional, suitable for its government role. However, improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

The website www.ville-leguevin.fr serves as the official online presence for the municipal government of Léguevin, France. It provides residents and visitors with access to local government information, administrative services, cultural activities, and community engagement resources. The site is positioned as a trusted source for municipal news and services, targeting local citizens and stakeholders. Technically, the site is built on WordPress, leveraging modern plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The site demonstrates good mobile responsiveness, accessibility, and user experience, with a clear navigation structure and professional design. Security-wise, the site uses HTTPS and implements a cookie consent mechanism with granular user control, but lacks some advanced security headers and a published security or privacy policy. The absence of WHOIS data is a notable anomaly, potentially indicating a recent registration or a WHOIS server issue, which slightly impacts trust. Overall, the site is functional, professional, and safe for general audiences, with room for improvement in privacy transparency and security hardening.

The website www.lasalvetat31.fr serves as the official digital presence of the municipal government of La Salvetat Saint-Gilles, France. It provides residents and visitors with comprehensive local information, including news, administrative procedures, municipal services, cultural events, and social support resources. The site targets local citizens and stakeholders, positioning itself as a key communication channel for the municipality. The business model is typical of government entities, focusing on public service rather than commercial revenue. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The site demonstrates good mobile responsiveness, accessibility features, and SEO practices. Performance is moderate, with caching and lazy loading implemented via WP Rocket. Cookie consent is managed through Tarteaucitron, ensuring compliance with European privacy regulations. From a security perspective, the site enforces HTTPS and employs privacy-friendly analytics that do not set cookies by default. However, the absence of explicit security headers and lack of published privacy policy or terms of service pages represent areas for improvement. The WHOIS data for the domain is unavailable, which is unusual for an official municipal domain and slightly reduces trustworthiness. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a well-structured, professional municipal portal with a strong focus on user experience and privacy. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and resolving WHOIS data inconsistencies to improve trust and compliance.

The website www.plaisancedutouch.fr serves as the official digital presence of the municipal government of Plaisance du Touch, France. It provides residents and visitors with comprehensive information about local governance, public services, community news, and administrative procedures. The site targets local citizens and stakeholders, offering a user-friendly platform to access municipal resources and engage with the community. The business model is centered on public service delivery and community engagement, positioning itself as a trusted local government authority. Technically, the website is built on the WordPress CMS platform, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-respecting analytics. The infrastructure includes modern JavaScript libraries and frameworks like jQuery and Bootstrap, ensuring responsive design and accessibility. The site demonstrates good mobile optimization and accessibility features, enhancing user experience across devices. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. While some advanced security headers are not explicitly detected, the overall security posture is solid with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data slightly reduces domain transparency but does not detract significantly from the site's legitimacy given its official nature. Overall, the site presents a professional, trustworthy, and well-maintained digital platform for municipal services. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to further strengthen trust and compliance.

Blograft is a French internet service provider specializing in website creation, integration, accessibility, SEO, and hosting services. The company targets businesses and organizations seeking comprehensive web solutions. The website presents a professional design with clear service offerings and client references, positioning Blograft as a small but capable player in the regional web services market. Technically, the website uses older JavaScript libraries such as jQuery 1.9.0 and jQuery UI 1.10.2, along with plugins like Supersized and Typed.js for visual effects. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. There is no detected CMS or hosting provider information. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no privacy or cookie policies are present, which raises compliance concerns. The WHOIS data is missing or unavailable, indicating potential domain registration issues that significantly impact trustworthiness. Google Analytics is used without clear privacy disclosures, suggesting moderate user tracking without full compliance. Overall, while the website content and design are good, critical security and compliance gaps exist, particularly the lack of HTTPS and missing domain registration data. Strategic improvements in security posture, privacy compliance, and domain legitimacy verification are recommended to enhance trust and reduce risk.

Symetri is a French company specializing in digital SaaS solutions aimed at optimizing waste management operations, particularly for waste disposal sites (déchèteries). Their offerings include access control, real-time activity monitoring, waste traceability, and cost reduction tools tailored for public entities such as communities, exploitants, and mixed syndicates. The company positions itself as a niche player with strong partnerships and certifications like UGAP-SCC and France 2030, indicating credibility and alignment with public sector standards. Technically, the website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly, but the active website and business signals support legitimacy. Overall, Symetri demonstrates a mature digital presence with room for enhanced security and transparency.

Actia is a well-established company founded in 1986, specializing in electronic diagnostics and multiplexed vehicle architecture across multiple sectors including mobility, aerospace, and energy. The company positions itself as a leader in its industry with a strong focus on innovation and technological excellence. The website reflects a mature digital presence built on WordPress with modern tools such as Elementor and Yoast SEO, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data for the domain www.actia.com is a notable anomaly that slightly impacts trust but does not detract from the professional presentation and business credibility of the site. Overall, the website is professional, secure, and compliant with GDPR, serving a B2B audience in transportation and energy sectors.

Audiotec is a well-established French company specializing in audiovisual equipment rental, sales, integration, and event services. Founded in 1988, it has a strong market position as a leading supplier for both professionals and individuals in France. The company offers a comprehensive range of services including sound, video, lighting, and stage structure solutions, supported by a competent technical team and a dedicated design office. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the website is built on WordPress with WooCommerce and uses modern technologies such as Google Tag Manager, Matomo, Microsoft Clarity, and reCAPTCHA for analytics and security. Hosting is provided by PLANETHOSTER, a reputable provider. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience and discoverability. From a security perspective, the site enforces HTTPS, uses secure login forms with nonce tokens, and integrates reCAPTCHA v3 to mitigate automated abuse. However, it lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Audiotec's digital presence is robust, trustworthy, and professionally managed. The domain registration data aligns with the business history, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

The website restosducoeur31.org is currently a parked domain with no active business content. It displays a domain sale banner in Finnish and loads an iframe pointing to an unrelated external URL. There is no privacy policy, cookie policy, terms of service, or contact information available on the site. The WHOIS data is unavailable due to a malformed query and privacy protection, which limits transparency and trust. Technically, the site uses basic JavaScript and iframe embedding, hosted behind AWS Cloudfront CDN, but lacks HTTPS enforcement and security headers. The presence of multiple suspicious external domains related to ads and tracking further reduces trustworthiness. Overall, the site does not represent an active or legitimate business presence.

Les Restos du Cœur is a well-established French non-profit organization founded in 1985, dedicated to fighting poverty and social exclusion through a variety of social aid programs including food assistance, housing support, employment help, and cultural access. The organization maintains a strong digital presence with a professionally designed and content-rich website, supported by multiple social media channels and donation platforms. Technically, the website is built on WordPress and leverages modern analytics and marketing tools, ensuring good SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although public security policies and incident response information are not explicitly published. The domain WHOIS data is privacy protected, which is common for non-profits, and no suspicious indicators were found. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

Loire Atlantique Développement operates the official regional tourism website for Loire-Atlantique, France, providing comprehensive information on local activities, cultural heritage, natural sites, and seasonal events. The website targets tourists and local visitors seeking authentic experiences, accessibility information, and sustainable travel options. It holds a strong market position as the authoritative source for tourism in the region, supported by consistent branding and high-quality content. Technically, the website is built on WordPress, leveraging modern web technologies including JavaScript, SVG graphics, and responsive design. Hosting is provided by Nuxit, with domain registration dating back to 2015, indicating an established digital presence. The site demonstrates good SEO and accessibility practices, with structured data and mobile optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers, and does not publish a security policy or incident response information. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and user-friendly, with a solid security posture for its business type. Strategic improvements include enabling DNSSEC, adding security headers, and publishing security and vulnerability disclosure policies to enhance trust and resilience.

Arc'Antique is a French government-affiliated heritage preservation laboratory with over 30 years of expertise in conservation-restoration, material analysis, scientific imaging, research, and training. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting heritage professionals, researchers, and the public. Technically, the site uses Jalios JCMS CMS, Google Tag Manager for analytics, and a cookie consent manager, indicating a modern and privacy-conscious infrastructure. Security posture is good with HTTPS and consent mechanisms, though lacking some advanced security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by strong government affiliation and professional content. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

The website represents the Église du Vieux-Bourg de Saint-Sulpice-des-Landes, a heritage church located in the Loire-Atlantique department of France. It serves as an official informational portal providing visitors and heritage enthusiasts with details about the church, virtual tours, event calendars, and links to related patrimonial sites. The site is positioned as a cultural and governmental resource, promoting local heritage and tourism. The target audience includes tourists, local visitors, researchers, and cultural heritage advocates. Technically, the website is built on the Jalios JCMS platform, utilizing modern web technologies including Google Tag Manager and Google Analytics for tracking, and Orejime for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, no explicit security headers were detected, and no published security or incident response policies were found. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the official nature of the content and domain. Overall, the security posture is good but could be improved by adding security headers and vulnerability disclosure information. The overall risk assessment is low, with the site appearing legitimate, safe, and professionally maintained. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to improve transparency and incident response readiness.

The Abbey of Blanche-Couronne website serves as an official digital presence for a heritage site managed by the Department of Loire-Atlantique in France. It provides comprehensive information about the abbey, visiting options, departmental cultural actions, and links to other related heritage sites. The site targets tourists, heritage enthusiasts, and the general public interested in regional culture. The business model is government/non-profit focused on cultural preservation and tourism promotion. Technically, the website is built on the Jalios JCMS platform, leveraging modern web technologies including Google Tag Manager and Google Analytics for tracking, and Orejime for cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy or incident response contact information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, with a high level of content quality and compliance. The absence of WHOIS data slightly reduces domain trust verification but does not detract from the site's legitimacy given its official departmental affiliation and consistent branding.

The website jardins-folies-siffait.fr represents the gardens of the Folies Siffait, a heritage site managed by the Loire-Atlantique department in France. It serves as an informational portal for visitors and cultural enthusiasts, offering practical information, virtual tours, and links to related patrimonial sites. The site targets a general audience interested in cultural heritage and tourism. The business model is public sector focused, promoting regional heritage and tourism. Technically, the website is built on the Jalios JCMS platform and integrates modern tools such as Google Tag Manager and Google Analytics for tracking and performance insights. It employs a cookie consent management system (Orejime) ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit security headers and does not provide visible security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain legitimacy verification but the official branding and content strongly suggest a legitimate government-managed site. Overall, the website is professional, secure, and compliant with privacy standards, suitable for its public heritage promotion purpose. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and security posture.

Domaine de la Garenne Lemot is a heritage site managed by the Loire-Atlantique Department in France, offering cultural and tourism services including guided tours, events, and visitor information. The website is professionally designed using Jalios JCMS, integrates modern analytics and cookie consent tools, and provides comprehensive visitor resources. Security posture is good with HTTPS and cookie management, though additional security headers could enhance protection. The domain WHOIS data is not publicly available due to AFNIC policies, but the website's content and certifications strongly support its legitimacy. Overall, the site serves as a reliable and informative portal for visitors and stakeholders interested in regional heritage.

The Château de Clisson website serves as the official digital presence for a French heritage site managed by the Department of Loire-Atlantique. It provides comprehensive visitor information, event calendars, ticketing options, and cultural highlights aimed at tourists and heritage enthusiasts. The site is well-branded with official logos and certifications, reinforcing its legitimacy and trustworthiness. Technically, the website is built on the Jalios JCMS platform, leveraging modern web technologies including Google Tag Manager and Analytics for user insights, and Orejime for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, offering a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable, likely due to privacy protection, but the domain and website content align with a legitimate government-managed heritage site. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

The Château de Châteaubriant website serves as an official cultural heritage portal managed by the Department of Loire-Atlantique, France. It provides comprehensive visitor information, event calendars, ticketing services, and highlights of the château and related heritage sites. The site targets tourists and cultural enthusiasts, positioning itself as a regional heritage and tourism authority with official certifications such as Qualité Tourisme and historical monument status. Technically, the website is built on the Jalios JCMS platform, integrating modern web technologies including Google Tag Manager and Analytics for user tracking and performance insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are missing. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS and manages cookies responsibly but lacks visible security.txt and incident response information. The absence of WHOIS data limits domain trust verification, though the website content and external references strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for general audiences without any adult or explicit content.

Musée Dobrée is a regional museum in Nantes, France, operated by the Département de Loire-Atlantique. It offers a rich cultural experience with extensive collections spanning multiple continents and historical periods. The website is professionally designed, mobile-optimized, and provides comprehensive visitor information, educational resources, and online access to collections. The museum targets a broad audience including families, researchers, and the general public. Technically, the site uses Jalios JCMS, integrates Google Tag Manager for analytics, and employs a modern cookie consent manager ensuring GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. WHOIS data is not publicly available, likely due to privacy protection, but the site’s affiliation with a government entity supports its legitimacy.

Maison du Lac de Grand-Lieu operates as a non-profit environmental education center focused on the wetlands and lake of Grand-Lieu in Loire-Atlantique, France. The website provides comprehensive information about educational visits, workshops, exhibitions, and sound walks designed to raise awareness about local biodiversity and natural heritage. The organization targets educators, professionals, groups, and the general public interested in environmental conservation and education. Technically, the website is built on WordPress using Elementor and WooCommerce for ticketing, with modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Sendinblue. The site is well-optimized for SEO, accessibility, and mobile devices, reflecting a mature digital presence for a small non-profit entity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

Pollutec is an internationally recognized trade show and conference organizer specializing in environmental and energy solutions for industry, cities, and territories. The website serves as a professional platform to promote the event, provide information on exhibitors, sessions, and networking opportunities. The site is well-structured, uses modern web technologies including React and Adobe Experience Manager, and integrates analytics and marketing tools such as Google Tag Manager and Adobe Helix RUM. Security posture is generally good with HTTPS and OAuth2 PKCE authentication, but lacks some security headers and explicit privacy and terms policies. WHOIS data is missing, which raises some concerns about domain registration transparency, though the association with Reed Exhibitions supports legitimacy. Overall, the site is professional, targeted at industry professionals, and provides a good user experience.

Pesticide Action Network Europe (PAN Europe) is a well-established non-profit organization dedicated to pesticide regulation advocacy, environmental protection, and public health in Europe. Their website reflects a professional and consistent brand focused on campaigns, legal actions, and policy influence related to pesticides. The organization targets policymakers, NGOs, researchers, and the general public interested in sustainable agriculture and environmental health. The business model is primarily grant and donation funded, with a medium-sized operational scale based in Belgium. Technically, the website is built on Drupal 7 with Bootstrap and jQuery frameworks, integrating Matomo and Google Tag Manager for analytics. The site is mobile optimized and has good SEO and accessibility basics, though some modernization is advisable due to the aging CMS version. Performance is moderate, and the site uses HTTPS with no visible security headers, indicating room for security improvements. Security posture is generally good with HTTPS and secure forms, but the absence of security headers and lack of published security policies or incident response information are gaps. WHOIS data is unavailable or blocked, which reduces domain registration trustworthiness, though the website content and EU funding acknowledgments support legitimacy. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism detected. Overall, the website is trustworthy and professional but would benefit from technical updates, enhanced security practices, and improved privacy compliance to strengthen its digital maturity and risk posture.

Dans Mon Eau is a French non-profit transparency platform focused on providing accessible, official data on chemical pollutants in tap water. It is a collaborative project by Générations Futures and Data For Good, aiming to inform the public and mobilize authorities for better water quality. The website offers an interactive map, educational content, and regularly updated official data. Technically, the site is built on WordPress, uses modern JavaScript libraries, and is hosted with Cloudflare CDN, ensuring good performance and security. The security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data shows an unusual future creation date, which slightly impacts trust but is mitigated by the association with reputable organizations. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a general audience interested in environmental health.

Victimes PFAS is a French non-profit advocacy website operated by Générations Futures, focusing on raising awareness, providing information, and mobilizing communities around the issue of PFAS pollution, a group of persistent and harmful chemical substances. The site serves as a collaborative platform for affected individuals, environmental groups, and public authorities, offering detailed reports, legal actions, scientific data, and community events. It targets citizens, activists, and stakeholders concerned with environmental health in France. Technically, the website is built on WordPress and employs modern web technologies including Yoast SEO for optimization, Leaflet.js for mapping, Swiper.js for interactive content, and tarteaucitron.js for cookie consent management. Hosted by OVH, the site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security measures include HTTPS enforcement and standard security headers, but explicit security policies and incident response information are not published. From a security and compliance perspective, the site shows a solid baseline with no detected vulnerabilities or blocking mechanisms. However, it lacks published privacy policies, terms of service, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data reveals an unusual domain creation date in 2025, which postdates content publication dates, suggesting a possible data anomaly or recent domain registration. Overall, Victimes PFAS is a credible and professionally maintained environmental advocacy platform with strong content relevance and community engagement. Strategic improvements in privacy transparency, security policy publication, and domain registration clarity would further enhance its trustworthiness and compliance posture.

Les failles de l'évaluation des pesticides is a small non-profit advocacy platform launched in 2023 focused on exposing and analyzing the flaws in pesticide evaluation and authorization systems in France. Supported by reputable foundations, it aims to raise awareness and push for regulatory reforms. The website is built on WordPress, hosted by OVH, and uses modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and security policies. No direct contact emails or phone numbers are provided, limiting transparency somewhat. Overall, the site is professional, trustworthy, and content-rich for its niche audience.

Shake Ton Politique is a French non-profit civic engagement platform operated by Générations Futures, focused on enabling citizens to participate in public health and environmental policy discussions. The website offers consultations, petitions, and interpellations to government officials and elected representatives at various levels. The platform is well-positioned in the niche of environmental advocacy and public policy engagement in France. Technically, the site is built on WordPress with modern plugins for SEO and cookie consent, hosted with OVH and using Cloudflare DNS for performance and security. The security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact information and active social media presence. No adult or explicit content is present, making it safe for general audiences.

Victimes-pesticides.fr is a French non-profit advocacy website operated by Générations Futures, dedicated to raising awareness about the health and environmental impacts of pesticide exposure. The platform primarily serves residents living near agricultural lands, professionals, and the general public concerned about pesticide risks. It collects and publishes detailed personal testimonies to support advocacy efforts and inform the public about pesticide-related health issues. The website is positioned as a niche player in environmental health advocacy within France. Technically, the site is built on WordPress, leveraging modern web technologies such as Yoast SEO for optimization, Leaflet.js for mapping, and Google reCAPTCHA for form security. Hosted by OVH, the site benefits from HTTPS encryption and standard security headers, ensuring a secure browsing experience. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website follows best practices with HTTPS, security headers, and anti-bot measures. However, it lacks explicit privacy and cookie policies, incident response contacts, and data protection officer information, indicating areas for compliance improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the site is a credible and professionally maintained platform with a clear mission. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing incident response contacts, enhancing accessibility, and maintaining transparency to strengthen trust and compliance.

ShareX is a well-established open source software project focused on providing a free, powerful screen capture and file sharing tool for Windows users. With over 17 years of active development, it holds a strong position in the productivity software market, trusted by a broad user base including power users and large companies. The website effectively communicates the product's features and benefits, supported by a consistent brand presence and active community engagement on platforms like GitHub, Discord, and Reddit. Technically, the site is built on modern web technologies including Jekyll, Bootstrap, and FontAwesome, hosted behind Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is partial; a privacy policy exists but cookie consent mechanisms are absent despite Google Analytics usage. No contact emails or phone numbers are provided, which may limit direct user support visibility. Overall, the site is professional, trustworthy, and safe for general audiences.

Calibre-ebook.com is the official website for Calibre, a well-established open source e-book management software created by Kovid Goyal. The site provides comprehensive tools for e-book library management, conversion, and reading, targeting a general audience of e-book users and enthusiasts. The business model is primarily open source software distribution supported by donations via PayPal and Patreon. The website is professionally designed with consistent branding and good content quality, reflecting its mature market position in the e-book software niche. Technically, the website uses a combination of jQuery, YUI CSS, Google Analytics, and PayPal SDK for donations. Hosting is provided by GoDaddy.com, LLC, and the site employs HTTPS with good SSL configuration. Consent management scripts for GDPR compliance are implemented, although no explicit cookie policy page is found. The site shows moderate performance and basic mobile optimization and accessibility features. From a security perspective, the site benefits from HTTPS and consent management but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent and legitimate, with a long history dating back to 2009, supporting the credibility of the business. Overall, the site is safe, professional, and trustworthy with room for improvement in security best practices and privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, publishing clear security and incident response policies, creating a terms of service page, and enhancing mobile and accessibility features to improve user experience and compliance.

The website at aptum.com is currently inaccessible due to a Vercel Security Checkpoint page that blocks access to the actual content. This security mechanism prevents analysis of the site's business, security, and compliance posture. The domain is registered since 2002 with GoDaddy and uses Cloudflare DNS, indicating a legitimate and established domain. However, no business or contact information, privacy policies, or security headers are visible due to the content block. The site appears to be hosted on the Vercel platform with Astro framework usage indicated by scripts. Without access to the real content, the security posture cannot be fully assessed, but the presence of a security checkpoint suggests some level of protection against automated or malicious access. Overall, the site is currently not analyzable beyond domain registration and hosting details.

AllyBot.io is a small technology company founded in 2020 that offers an inclusive language tool integrated as a Slackbot. The website targets Slack users and teams aiming to promote inclusive language and foster allyship within their organizations. The business model is SaaS-based, focusing on delivering value through Slack integration. The company uses privacy protection for domain registration, which is common for startups in the tech sector. The website is professionally designed with good content relevance and user experience, optimized for mobile devices. Technically, the site uses HTTPS with a reputable registrar and hosting provider, but lacks advanced security headers and formal privacy or cookie policies. No direct contact emails or phone numbers are provided, only contact forms. There is no evidence of vulnerability disclosure or incident response policies published on the site.

Action Media is a French communication agency specializing in the automotive aftermarket and building sectors, established since 1973. The company provides strategic communication and production services to major players in the automotive industry both domestically and internationally. The website reflects a professional and consistent brand presence, targeting automotive industry professionals and distributors. Technically, the site is built on the Wix platform using modern web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though some security headers and privacy compliance elements are missing. Overall, the site appears legitimate and trustworthy, though improvements in privacy and security policies are recommended.

Agence Tokster is a specialized BtoB digital communication agency integrated within the Zepros group, focusing on content strategy and marketing services for industries such as building, automotive aftermarket, and restaurant sectors. The website presents a professional and consistent brand image with clear service offerings and client study-cases. Technically, the site is built on WordPress with Elementor and uses modern web technologies and Google Analytics for tracking. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and formal privacy/cookie policies, indicating room for compliance improvement. Overall, the domain registration and hosting are consistent with the business claims, supporting legitimacy.

Fullstack is a Paris-based digital agency specializing in comprehensive digital solutions including web design, development, e-commerce, mobile applications, and UX/UI design. Established in 2014, the agency serves a diverse clientele including major brands such as Disneyland Paris and EDF, positioning itself as a trusted partner in the French digital market. The website reflects a professional and user-centric approach with detailed service offerings and client testimonials. Technically, the site employs modern web technologies and privacy-conscious analytics, delivering fast and mobile-optimized experiences. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and cookie consent mechanisms indicates room for compliance improvements. Overall, Fullstack presents a credible and mature digital presence aligned with its business claims.

Matter and Shape is a specialized design salon and curated product retailer based in Paris, organizing events in the Jardin des Tuileries during Paris Fashion Week. The company targets design professionals, exhibitors, and buyers, offering both physical event experiences and an online shop featuring design products. The website is built on WordPress with modern technologies and integrates Google Tag Manager for analytics and Cloudflare Turnstile CAPTCHA for form security. The security posture is solid with HTTPS and anti-bot measures, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the website is professional, accessible, and trustworthy with clear contact information and active social media presence.

The website at https://wsn.community/fr/pro/login is currently inaccessible beyond a minimal loading spinner, indicating that a Web Application Firewall (WAF) or other security mechanism is blocking full content access. Due to this, no meaningful business information, contact details, or policies are available for analysis. The site uses modern JavaScript frameworks such as Vue.js and Vuetify, but no metadata or structured data is present. The WHOIS data is restricted and does not provide registrant or domain creation details, limiting trust assessment. Overall, the site appears to be in a blocked or pre-load state, preventing comprehensive evaluation.

Huwise is a technology company specializing in providing a SaaS data product marketplace solution designed to centralize, govern, and distribute data assets for business teams, IT leaders, and data professionals. The company positions itself as a leading solution in the data product marketplace space, with recognition from Gartner and a strong customer base of over 350 clients across sectors such as energy, transport, banking, and government. Their platform offers a comprehensive suite of features including AI-enhanced search, metadata management, data lineage, and integration capabilities, aimed at accelerating data consumption and AI project success. Technically, the website is built on a modern WordPress CMS with Bootstrap 5, jQuery, and various JavaScript libraries for enhanced user experience and performance. The site is mobile-optimized, SEO-friendly, and integrates analytics via Matomo and marketing tools like Google Tag Manager. Privacy and cookie policies are well implemented with GDPR compliance, supported by a consent mechanism via Axeptio. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible HTTP security headers and a published security.txt file. No direct contact emails or phone numbers are publicly listed, which may limit immediate contact options. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, although the professional website and customer testimonials provide mitigating trust signals. Overall, Huwise demonstrates a mature digital presence with strong business credibility and technical implementation. However, improvements in security header implementation, incident response transparency, and WHOIS registration clarity are recommended to enhance trust and compliance.

tolk.ai is a French technology company specializing in generative AI-powered chatbots and livechat solutions for customer relations. Their platform offers no-code deployment, integration with various web services, and analytics capabilities to enhance customer experience and operational efficiency. The company targets businesses seeking advanced AI automation for pre- and post-sales customer support. The website demonstrates a professional digital presence with good SEO, structured data, and moderate use of analytics and marketing tools. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is justified for this business type. Overall, tolk.ai presents as a credible and modern SaaS provider in the AI customer service space.

La Salamandre is an independent, non-profit French media publisher dedicated to nature education and appreciation. They produce three nature magazines targeting different age groups, alongside rich digital content including articles, podcasts, videos, and educational activities. Their market position is strong within the French-speaking nature enthusiast community, with a clear focus on family and educational content. Technically, the website is built on WordPress with modern libraries and frameworks, optimized for mobile and SEO, and integrates privacy-compliant analytics and consent management. Security posture is good with HTTPS and secure login mechanisms, though some HTTP security headers could be improved. Overall, the site is professional, trustworthy, and content-rich, supporting a sustainable business model based on subscriptions and product sales.

The European Association of Independent Performing Arts (EAIPA) is a small, pan-European umbrella organization founded in 2018 that represents independent performing arts groups and professionals across 17 countries. It operates primarily as a B2B membership association advocating for the sector, providing policy input, and raising visibility for independent performing arts communities. The website is built on WordPress using Elementor and integrates GDPR compliance tools such as Complianz and Mailjet for marketing. The technical infrastructure is modern and adequate, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the site is professional, trustworthy, and compliant with European privacy regulations.

HYVOR Community is a technology-focused online forum dedicated to discussions around HYVOR products. It serves as a platform for users and developers to engage in product support, feedback, and announcements. The site leverages the Discourse platform, a modern and secure community software, ensuring a robust technical infrastructure. The website demonstrates good digital maturity with fast performance, mobile optimization, and SEO-friendly metadata. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with a privacy policy and terms of service present, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of HYVOR product users and developers.