Medium-risk security reports

Devisocom is a small communication agency based in Avignon, France, founded in 2008 by Odile Devise. The company offers a range of creative services including graphic design, communication strategy, digital and web solutions, and custom games. The website is professionally designed using WordPress with the Divi theme and includes a portfolio and client testimonials, indicating a credible and established presence in its niche market. Technically, the site is well-structured with SEO optimizations and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified. Overall, the website presents a trustworthy and professional image suitable for its target audience.

ADweby.com is a Czech Republic-based small technology company specializing in custom web development, e-commerce solutions, and graphic design services primarily targeting businesses and individuals in the Ostrava and Moravskoslezský kraj region. The company emphasizes unique graphic design and offers a proprietary content management system (AD-RS) and e-commerce platform (AD-Shop). The website demonstrates a professional digital presence with good content quality and SEO optimization, although some technical aspects such as outdated JavaScript libraries and lack of visible security headers suggest room for improvement. The security posture is moderate with HTTPS enforced and cookie consent implemented, but the absence of a clear privacy policy and missing WHOIS domain registration data raise concerns about compliance and legitimacy. Overall, the site is accessible and business-focused with no adult or questionable content detected.

Festival de Sevilla is a well-established European film festival based in Sevilla, Spain, with a strong cultural and media focus. The website serves as a comprehensive platform for festival information, programming, news, and educational initiatives, targeting film enthusiasts, professionals, and the general public. The festival enjoys solid institutional support from government and cultural organizations, enhancing its credibility and market position. Technically, the website is built on Drupal 8, leveraging modern web technologies such as Google Analytics for tracking, AddToAny for social sharing, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site implements basic privacy compliance with cookie consent and IP anonymization in analytics. However, it lacks advanced security headers, a published security policy, and vulnerability disclosure mechanisms. No blocking or WAF challenges were detected, and no suspicious content was found, indicating a generally secure posture but with room for improvement. Overall, the website is professional, trustworthy, and well-maintained, supporting the festival's mission and audience engagement effectively.

The website www.filmrenaissance.cz is currently inaccessible, serving an HTTP 429 Too Many Requests error page generated by nginx. This indicates that the site is either under heavy traffic load or protected by rate limiting or a web application firewall (WAF) that is blocking access. Due to the lack of accessible content, no metadata, business information, or technical details could be extracted. The WHOIS query returned no registration data, suggesting the domain may not be properly registered or is protected by privacy mechanisms that prevent data disclosure. This severely limits the ability to assess the business, technical infrastructure, or security posture of the website. From a technical perspective, the absence of accessible content and metadata means no analysis of technology stack, frameworks, or hosting provider is possible. The website performance, SEO, and accessibility cannot be evaluated. Security headers and SSL configuration are unknown. The site’s security posture is considered very low due to the inability to verify any security best practices or policies. The overall risk assessment is high due to the lack of transparency and accessibility. The domain’s legitimacy is questionable given the missing WHOIS data and the blocking of access. Strategic recommendations include resolving the rate limiting issues to restore access, verifying domain registration status, and implementing clear security and privacy policies to build trust with users and stakeholders.

Film at Lincoln Center (FLC) is a well-established nonprofit organization founded in 1969 dedicated to celebrating cinema as an essential art form and fostering a vibrant film culture. The organization operates a professional website that provides detailed information about film screenings, festivals such as the New York Film Festival (NYFF), membership programs, and cultural events. The site targets cinema enthusiasts and the broader film community, offering ticket sales and membership benefits to sustain its nonprofit mission. Technically, the website leverages modern web technologies including React and Next.js frameworks, hosted likely on Vercel with Cloudflare CDN for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing discoverability. Security best practices are observed with HTTPS enforcement and multiple security headers, and privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is unavailable due to a malformed response, which limits domain registration insights. Despite this, the website's professional presentation, consistent branding, and presence of trust indicators support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, FLC's website represents a mature digital presence for a nonprofit cultural institution with strong security and privacy practices. Strategic recommendations include publishing a vulnerability disclosure policy and incident response contacts to further enhance trust and security transparency.

Filmfestival Oostende is a well-established cultural media organization focused on hosting an annual film festival and promoting arthouse cinema in Oostende, Belgium. The website serves as a comprehensive portal for festival information, news, partner engagement, and ticketing. It targets film enthusiasts, industry professionals, and the general cultural audience. The organization maintains a strong regional presence with partnerships and sponsorships from notable cultural and commercial entities. Technically, the website is built on Drupal 9, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms, but could improve by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data limits domain trust analysis, but the overall professionalism and transparency of the site support its legitimacy. Strategic recommendations include enhancing security headers, increasing transparency on incident response, and continuous monitoring of third-party scripts.

goEast Filmfestival is a well-established cultural event organizer specializing in Central and Eastern European cinema. The website provides comprehensive information about the festival, including event dates, program details, and opportunities such as internships and film submissions. The organization targets film enthusiasts and cultural audiences interested in this niche. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, hosted on a professional DNS provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Social media integration is strong, enhancing community engagement and trust. Overall, the website is professional, trustworthy, and serves its audience effectively.

FIDMarseille is a well-established international film festival based in Marseille, France, with a history dating back to 2000. The festival showcases a diverse program of fiction, documentary, and artist films, attracting a culturally engaged audience and international cinema professionals. The website reflects a professional and consistent brand image, providing detailed event information, schedules, and social media engagement. Technically, the site is built using modern frameworks like Astro, optimized for mobile devices, and delivers fast performance with responsive images. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is currently weak, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy and security practices.

Czech Film Center is a government-affiliated organization dedicated to promoting Czech audiovisual production globally. It serves as a key resource for film industry professionals, providing information on films, filmmakers, festivals, and industry news. The website is professionally designed with consistent branding and clear navigation, targeting the international film community and industry stakeholders. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and Google services, ensuring a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit security policies. Privacy compliance is strong, featuring a comprehensive privacy policy and a granular cookie consent mechanism. The absence of WHOIS data reduces domain trust assessment, but the official affiliations and content quality support legitimacy. Overall, the site is a reliable and professional platform for Czech film promotion.

Česká filmová a televizní akademie (ČFTA) is a prominent Czech non-profit organization dedicated to promoting Czech film and television culture. It organizes the prestigious Český lev awards and provides online access to awarded and nominated films, targeting film professionals, students, and enthusiasts. The website reflects a well-structured and professionally maintained platform with consistent branding and relevant content. Technically, the site employs established JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for visitor tracking. While the site is mobile-optimized and SEO-friendly, some technologies like jQuery are outdated, which could pose security risks. Security posture is moderate with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and published incident response policies. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear legitimate and professional. Overall, the site is safe for general audiences and maintains good privacy compliance with comprehensive policies.

Cecoforma is a Belgium-based event and communication business with over 30 years of experience, offering expert services in event organization and communication management. The company targets a general audience including corporate clients and organizations seeking professional event support. Their market position is solid within the regional Belgian market, supported by certifications such as ISO 9001 and ISO 20121, and memberships in recognized industry bodies. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including Google Analytics and a Craft CMS-based SEO plugin, with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious content were detected. Overall, the website and domain registration data align well, indicating a trustworthy and credible business presence online.

Media-stands.eu is a specialized service provider organizing umbrella stands for European independent audiovisual and film market participants at major international events such as MIPTV, Marché du Film, MIFA, MIPCOM, Series Mania Festival, and the European Film Market. The website represents the interests of the Creative Europe MEDIA Programme and the European Education and Culture Executive Agency, positioning itself as an official and trusted partner in the European media sector. The business operates primarily from Belgium and targets audiovisual professionals seeking exhibition opportunities at key industry markets. Technically, the website employs modern front-end technologies including Font Awesome, Bootstrap, and Swiper.js, with a responsive design optimized for mobile devices. Cookie consent mechanisms are implemented to comply with GDPR requirements, and analytics scripts are present but commented out, reflecting a privacy-conscious approach. The site demonstrates good SEO and accessibility basics but lacks advanced security headers and explicit security policy documentation. From a security perspective, the site uses HTTPS (implied by the URL), has no visible vulnerabilities or exposed sensitive data, and implements cookie consent. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent with a legitimate domain registration. Overall, the security posture is moderate with room for improvement in formal security documentation and headers. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enhancing HTTP security headers, publishing a security policy and vulnerability disclosure, and verifying SSL/TLS configurations to strengthen security and compliance posture.

Pro kulturu is a well-established Czech cultural news portal published by the National Institute for Culture (NIK), a government-affiliated organization. The website provides extensive articles, podcasts, and editorial cycles focused on cultural events and personalities across the Czech Republic. It targets the cultural community and general public interested in cultural affairs. The site demonstrates strong digital maturity with a modern WordPress CMS, Bootstrap framework, and SEO best practices including structured data and Open Graph metadata. Privacy compliance is robust, featuring GDPR-aligned policies and cookie consent management via Complianz. Security posture is good with HTTPS enforced and Matomo analytics configured to require consent, though the absence of security headers suggests room for improvement. The lack of WHOIS data is a notable anomaly that slightly reduces trustworthiness but does not detract from the site's professional presentation and government affiliation. Overall, Pro kulturu is a credible and authoritative source for cultural information in the Czech Republic.

The website oldstarsontheroad.cz serves as an online news and information platform for the Festival Studenských divadel v Celetné a Solné věži 2025, a student theater festival in Prague. It provides festival news, interviews, backstage insights, and interactive content aimed at students and theater enthusiasts. The site is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring moderate performance and good mobile optimization. The content is well-structured, relevant, and professionally presented, though some accessibility and SEO improvements are possible. Security posture is basic with HTTPS enabled and a cookie consent banner present, but lacks advanced security headers and privacy policy documentation. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust assessment but is reasonable for a small cultural event site. Overall, the site is functional and serves its niche audience effectively.

Městys Jince operates an official municipal website serving the local community of Jince, Czech Republic. The site provides comprehensive information including news, public notices, event calendars, and contact details for municipal offices. It targets residents and visitors seeking local government services and updates. The business model is a governmental service portal with a focus on transparency and community engagement. Technically, the website uses a custom CMS platform likely provided by Galileo Corporation, leveraging technologies such as jQuery, Bootstrap, Swiper, and Highslide for UI components. The site is mobile optimized and accessible, with a clean navigation structure and good SEO practices. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, and cookie consent mechanisms are in place. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which reduces domain registration trustworthiness, but the website content and contact information strongly indicate legitimacy as a municipal government site. Overall, the site is well-structured and serves its purpose effectively, but improvements in security headers and public security policies are recommended to enhance trust and compliance.

Zámek Osečany BUDE! is a small-scale cultural heritage and tourism project focused on the restoration and promotion of the Osečany Castle in the Czech Republic. The website serves as an information portal for visitors, offering details about the castle's history, upcoming events, guided tours, and accommodation options. The business model is primarily non-profit with revenue streams from ticket sales and merchandise. The site is built on WordPress with WooCommerce integration, indicating a moderate level of digital maturity. Technical infrastructure includes modern plugins and a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and well-targeted to its audience, with room for improvement in security and incident response transparency.

Město Kutná Hora operates an official municipal information portal serving citizens, entrepreneurs, and tourists. The website provides comprehensive information about city administration, cultural events, tourism, and local services. It holds a strong market position as the authoritative source for Kutná Hora city information, leveraging official branding and UNESCO heritage association. The portal supports multiple languages and integrates social media channels to enhance engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. The CMS identified is Marwel, a specialized platform. The site is mobile optimized with good SEO and accessibility features, though some improvements in security headers and incident response transparency are recommended. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with GDPR-aligned cookie management and privacy policy presence. Overall, the website is a trustworthy, well-maintained municipal portal with moderate technical sophistication and good user experience. The absence of WHOIS data slightly reduces domain trust but does not detract from the legitimacy of the site. Strategic improvements in security policy publication and header implementation would enhance the security posture further.

The website www.mkz-ltm.cz is currently inaccessible to visitors from unauthorized countries due to geographic IP blocking. The content is limited to an access denied message in Czech and English, indicating a security or legal restriction on access. No business description or services are visible, limiting the ability to assess the company's market position or offerings. The domain WHOIS data is unavailable, suggesting privacy protection or registration issues, which impacts trust and legitimacy assessments. Technically, the site uses basic HTML, CSS, and JavaScript with responsive design but lacks advanced frameworks or CMS. Security posture is weak due to absence of security headers and unknown SSL status. Privacy and cookie policies are missing, and no analytics or tracking scripts are detected. Overall, the site is minimal and blocked, resulting in a low AI score and limited business insights.

Obec Vrdy operates an official municipal website serving the residents and visitors of the Vrdy municipality in the Czech Republic. The site provides comprehensive local government information including news, public notices, contact details, community events, and downloadable forms. It targets local citizens and stakeholders seeking municipal services and information. The website is well-structured with consistent branding and clear navigation, reflecting a professional government portal. Technically, the site employs a custom CMS likely based on Lego2, with modern JavaScript libraries such as jQuery, Bootstrap, Swiper, and Highslide for UI enhancements. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security best practices like security headers are missing, and no explicit vulnerability disclosure or security policy pages are present. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response contacts. The absence of WHOIS data for the domain reduces trustworthiness slightly, though the website content and official contact information support legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is a functional and professional municipal portal with room for improvement in security practices and transparency. Strategic recommendations include adding security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

Zámek Zruč nad Sázavou is a cultural and historical site located in the Czech Republic, offering castle tours, exhibitions, cultural events, and visitor experiences primarily targeting tourists, families, and school groups. The website presents a professional and well-structured digital presence with good content quality and clear navigation. The technical infrastructure includes modern web technologies such as HTTPS, Google Analytics, Facebook Pixel, and a CMS platform called Solidpixels, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement by adding security headers and formal security policies. The absence of WHOIS data limits domain trust verification, but the website's content and external references support its legitimacy as a cultural institution. Overall, the site is safe, family-friendly, and compliant with privacy regulations.

Divadlo X10 is a small cultural theatre organization based in Prague, Czech Republic, specializing in contemporary dramaturgy and provocative theatrical performances. The website presents a professional and well-structured digital presence with clear navigation, event listings, and social media integration. The technical infrastructure includes modern JavaScript libraries such as jQuery and Modernizr, with analytics tools like Google Analytics and Facebook Pixel implemented with privacy considerations such as IP anonymization and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and cookie consent in place, but lacks some advanced security headers and explicit privacy policy documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and partnerships with official cultural institutions support legitimacy. Overall, the website is suitable for its audience and business purpose but would benefit from improved transparency and security enhancements.

Divadlo v Celetné is a cultural and theatrical venue based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as an information and ticketing portal for visitors and theatre enthusiasts, showcasing upcoming programs, news, and partner collaborations. The business operates primarily as a local cultural institution with a focus on community engagement and arts promotion. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery and FontAwesome. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers and publicly available privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data limits domain legitimacy verification, though the presence of official partner logos and active social media accounts supports its authenticity. Overall, the website presents a professional and trustworthy front for a small cultural institution but would benefit from enhanced privacy compliance, improved security headers, and transparency in domain registration to strengthen its security posture and user trust.

The website wshakespeare.sk represents Agentúra JAY production s.r.o., organizing the Letné Shakespearovské Slávnosti, a well-established cultural festival celebrating Shakespeare's plays in Bratislava and other Slovak and Czech cities. The site targets theater lovers, families, and children with a focus on live performances and cultural enrichment. The business model revolves around event organization and ticket sales, supported by a 25-year history and regional partnerships. Technically, the site uses a custom-built platform with common JavaScript libraries like jQuery, Google reCAPTCHA for form security, and Matomo for privacy-conscious analytics. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate, with room for improvement in HTTP security headers and explicit privacy policies. The domain WHOIS data is consistent and supports the legitimacy of the business. Overall, the website is professional, trustworthy, and serves its cultural mission effectively.

PPF Group is a well-established international investment group founded in 1991 in the Czech Republic, operating in 25 countries across Europe, North America, and Asia. The company manages a diversified portfolio spanning telecommunications, media, financial services, e-commerce, real estate, biotechnology, and mobility sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting investors, partners, and the public. Technically, the site uses modern frameworks such as Next.js and React, supported by DatoCMS, and integrates Google Tag Manager and reCAPTCHA Enterprise for analytics and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is privacy protected, consistent with European domain registration norms, and the website content aligns with the company's stated business profile. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

CEA-Leti is a prominent technology research institute under CEA, specializing in miniaturization technologies that enable smart, energy-efficient, and secure solutions for various industries. The website serves as a platform to promote and organize multiple semiconductor and technology innovation events globally, targeting industry professionals and researchers. Their market position is strong as a global leader in semiconductor innovation events, supported by a large organization and a consistent brand presence. Technically, the website is built on a modern WordPress CMS with Elementor and several event management plugins. It uses Cloudflare for DNS and serves content over HTTPS, ensuring a secure and reliable user experience. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and advanced security headers like Content-Security-Policy. There is no visible security policy or incident response information, which could be improved. Privacy compliance is partially addressed with a privacy policy and GDPR links, but no cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their posture.

HYVOR is a privacy-first technology company founded in 2017, offering user-friendly web tools including commenting platforms, blogging services, and security APIs. Their products serve millions globally, targeting a broad audience from small blogs to large enterprises. The company operates on a bootstrapped business model emphasizing user privacy and data protection, with no third-party data sales. Technically, the website is built using modern frameworks like SvelteKit, hosted via Cloudflare, and optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is good with clear policies, though cookie consent mechanisms are lacking. Overall, HYVOR presents a professional, trustworthy, and technically mature online presence.

Mailmojo AS is a Norwegian technology company specializing in email newsletter and SMS marketing solutions. With 19 years of experience and over 1100 paying customers, it holds a strong position in the Norwegian digital marketing sector. The company offers a SaaS platform that enables businesses to create, segment, and automate marketing campaigns with a focus on local data storage and GDPR compliance. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting Norwegian businesses seeking effective communication tools. Technically, the website leverages modern frameworks such as Next.js and React, integrates advanced analytics tools like Segment, PostHog, and Piwik Pro, and uses Sanity CMS for content management. The platform demonstrates good performance, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with local data hosting in Norway enhancing privacy assurances. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy and incident response information, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. Business credibility is supported by transparent contact details, customer testimonials from reputable organizations, and consistent branding. Overall, Mailmojo presents a trustworthy, professional, and secure online presence suitable for its target market. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure guidelines to further enhance trust and compliance.

kodejobb.no is a Norwegian job listing portal focused on developer jobs, operated by Aller Media through its Aller X division. The site leverages a modern technical infrastructure built on Next.js and Sanity CMS, delivering a fast, mobile-optimized, and accessible user experience. It serves a niche audience of developers in Norway, providing curated job listings, salary calculators, and career advice content. The website demonstrates strong business credibility with clear contact information, professional design, and partnerships with reputable companies. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is good, with comprehensive privacy and cookie policies linked, and minimal user tracking via Plausible Analytics. Overall, kodejobb.no is a trustworthy and professionally managed platform with a clear market position in Norwegian developer recruitment.

Tisséo Mobibus is a specialized transportation service catering to persons with reduced mobility in the Toulouse metropolitan area, operating under the Tisséo Collectivités umbrella. The website provides comprehensive information about their on-demand transport services, reservation systems, tariff details, and accessibility support. The digital presence is well-structured, leveraging WordPress with modern plugins and frameworks to deliver a user-friendly experience. The site is optimized for mobile and accessibility, reflecting the organization's mission. Security posture is solid with HTTPS and cookie consent management, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business and technical indicators suggest a trustworthy public service entity.

Le Grand Ouest Toulousain Agglomération is a regional public government entity in France providing a range of community services including waste management, social services, urban planning, and mobility. The website serves as an official portal for residents and businesses within the agglomeration, offering information, online procedures, and public communications. The site is well-branded, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, hosted by OVH, and uses HTTPS with Google Analytics for visitor tracking. The cookie consent mechanism is comprehensive and GDPR-aware, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and aligns well with its public sector mission.

The website www.agglo-muretain.fr serves as an informational and promotional platform for the Muretain region in France, focusing on tourism, living, and entrepreneurship. It targets residents, tourists, and local entrepreneurs, positioning itself as a regional government or community resource. The site uses WordPress with Elementor and jQuery, indicating a moderate level of digital maturity with a basic but functional technical infrastructure. The content is safe, general audience appropriate, and the design is basic but consistent with regional promotional goals. However, the absence of privacy, cookie, and terms of service policies, as well as lack of contact information, limits its compliance and trustworthiness from a security and privacy perspective. The WHOIS data is missing, which raises concerns about domain legitimacy and registration transparency.

The website www.sicoval.fr currently presents a security challenge page indicating anti-DDoS flood protection and firewall measures are in place. The content is minimal, primarily a bot verification message with a countdown timer, and no accessible business or contact information is provided. The WHOIS lookup failed to return any registrar or registration data, suggesting the domain may be unregistered, privacy protected, or otherwise obscured. This limits the ability to verify the legitimacy or business details of the entity behind the domain. From a technical perspective, the site loads minimal resources, including Google Fonts, and uses JavaScript for the challenge mechanism. There is no evidence of a CMS, analytics, or tracking technologies. The site lacks SEO optimization, accessibility features, and security headers, and no SSL/TLS configuration details are available due to the content being blocked by a WAF or similar security mechanism. Security posture is weak from an external perspective due to the lack of visible HTTPS and security headers, but the presence of an anti-DDoS challenge indicates some level of protection against automated attacks. However, the absence of privacy policies, contact information, and WHOIS data raises concerns about transparency and trustworthiness. Overall, the site is currently inaccessible for meaningful analysis due to the WAF challenge, and the lack of WHOIS data further complicates trust assessment. Strategic recommendations include enabling HTTPS, publishing clear privacy and cookie policies, providing contact and incident response information, and improving website content and SEO to enhance credibility and user trust.

Les Enfoiros de l'INSA is a well-established non-profit student club based in Toulouse, France, dedicated to supporting the Restos du Cœur charity through annual fundraising events and performances. The organization has a strong market position as the leading private donor to the Restos du Cœur in Haute-Garonne since 2007, leveraging community engagement and student participation. Their website reflects a professional and consistent brand image with clear calls to action for donations and event participation. Technically, the site uses modern web technologies including Bootstrap 5 and Google reCAPTCHA, hosted by Scaleway SAS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and spam protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking explicit cookie consent and detailed GDPR statements. Overall, the site is trustworthy and well-maintained, serving its non-profit mission effectively.

TED Conferences LLC operates the TEDx program, a global initiative supporting independent organizers to create TED-like events in their communities. The website showcases a professional, well-structured platform with a focus on spreading ideas in technology, entertainment, and design. The site leverages modern web technologies including React (Next.js), New Relic monitoring, and consent management platforms to ensure a high-quality user experience. Security practices are robust with HTTPS enforcement and privacy compliance, including GDPR adherence. No critical vulnerabilities or security issues were detected, and the site maintains a strong trust profile consistent with its global brand recognition.

The website noche.fr is a personal portfolio site for an artist named Renaud, showcasing a variety of illustrations, drawings, and animation backgrounds. The site targets art enthusiasts and fans of fantasy and animation art. It operates primarily as a showcase without visible commercial transactions or e-commerce features. The domain is registered since 2005 with OVH, a reputable French registrar, consistent with the site's French language and content. Technically, the site uses classic web technologies including HTML, CSS, JavaScript, and jQuery 1.4.2, with integrations for Google Analytics and social media widgets. The design and navigation are basic but functional, with moderate performance and limited mobile optimization. Security posture is modest, with no visible security headers and use of outdated JavaScript libraries, which may pose risks. Privacy and cookie policies are absent, indicating poor privacy compliance. Overall, the site is moderately trustworthy but would benefit from security and compliance improvements.

The website www.loire-atlantique.fr is the official digital portal for the Département de Loire-Atlantique, a regional government entity in France. It provides comprehensive information and services related to social aids, culture, sports, environment, education, tourism, and local governance. The site targets residents and visitors of the Loire-Atlantique region, offering a broad range of public service resources and community engagement tools. The business model is that of a government information portal, focusing on public service rather than commercial revenue generation. Technically, the site is built on the Jalios JCMS platform, leveraging modern web technologies including Google Analytics and Google Tag Manager for user analytics, and Orejime for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional and consistent design. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Content-Type-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of published security policies or incident response contacts is a gap in transparency and readiness. Overall, the site is trustworthy and professional, serving as a reliable government resource. However, the WHOIS data is missing, which limits domain legitimacy verification. This may be due to AFNIC policies or query limitations. The site should consider publishing security policies and vulnerability disclosure information to enhance trust and compliance.

Plus que pro Solution is a French business-oriented website offering a comprehensive solution aimed at small and medium enterprises (TPME) to protect their reputation, enhance their know-how, and improve overall business performance. The website positions itself as a trusted partner for TPMEs, leveraging digital tools and reputation management services. The content is professionally presented, targeting a French-speaking audience with clear business value propositions. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. The presence of multiple analytics and marketing tools such as Google Analytics, Matomo, and Microsoft Clarity shows a mature approach to data-driven marketing and user behavior analysis. Security-wise, the site uses HTTPS and has no visible critical vulnerabilities or exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS registration data is a concern for domain legitimacy and trust, although the website content and technical setup appear professional. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced privacy compliance and clearer contact and security policies.

WS Interactive is a well-established French web agency based in Toulouse, offering tailored digital solutions including website creation, mobile app development, SEO, and UX/UI design. With over 25 years of experience, the agency targets businesses seeking high-quality digital presence and marketing strategies. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital infrastructure. Technically, the site runs on WordPress with modern JavaScript libraries and employs analytics tools like Matomo and Google Tag Manager, alongside privacy-compliant cookie consent mechanisms. Security posture is solid with HTTPS and CAPTCHA protections, though explicit security headers and policies could be enhanced. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and compliance. Overall, WS Interactive demonstrates a strong market position in the technology sector with a focus on quality and client engagement.

CAPTOGO is a French non-profit collective organization that unites various associations focused on Togolese community support and development. The website serves as an information hub, providing resources, event information, and networking opportunities for associations both in Europe and Togo. The organization appears to be well-established, with a domain registered since 2008, reflecting a stable presence in its niche. The target audience includes association members, donors, and individuals interested in Togolese affairs. Technically, the website is built on WordPress, utilizing common plugins such as Events Manager and Newsletter. The hosting is provided by o2switch, a French hosting provider, and the site uses HTTPS with a good SSL configuration. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Cookie consent is implemented with a blocking mechanism, indicating attention to privacy compliance. From a security perspective, the site employs HTTPS and basic security best practices but lacks advanced security headers and DNSSEC. There is no visible security policy or incident response information, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the website's claims, showing a legitimate and long-standing domain registration. Overall, CAPTOGO's website is a well-maintained, legitimate non-profit platform with good content quality and moderate technical maturity. Security posture is adequate but could be improved with additional measures. Privacy compliance is basic but present. The site does not exhibit any suspicious or risky behavior, making it a trustworthy resource within its domain.

The website consuel.com is currently inaccessible due to a security mechanism blocking requests, as evidenced by the displayed 'Attack detected' message and blocked request notice. This prevents access to any meaningful content or metadata that would describe the business or its services. The domain is registered with ORANGE since 1999, indicating a mature domain age, but no registrant details or business information are available from the site content. The lack of accessible content and policies limits the ability to assess the company's market position, services, or compliance posture. Technically, the site does not reveal any frameworks, scripts, or security headers, and DNSSEC is not enabled. The security posture cannot be fully evaluated due to the blocked content, but the presence of a WAF or similar security layer is confirmed. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to inaccessibility.

EDF Obligation d’Achat is a public service entity under EDF responsible for managing the obligation to purchase energy produced by installations at regulated tariffs in France. The website serves multiple audiences including individual producers, professionals, mandataires, and buyers, providing resources, contract simulations, and support. The site is well-branded, consistent with EDF corporate identity, and offers comprehensive information aligned with its mission to support sustainable energy production. Technically, the site is built on Drupal 10, uses modern web technologies, and is hosted via Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, likely due to AFNIC policies or privacy protection, which slightly reduces trust but is not uncommon for French domains. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

The website at sybaxis.com is currently inaccessible to the public, returning a 403 Forbidden error page. This indicates that access is restricted, possibly due to server configuration or security settings. The domain is newly registered in February 2024 and hosted on SiteGround, but no business or contact information is available on the landing page. There are no privacy, cookie, or terms of service policies detected, and no forms or data collection mechanisms are present. The technical infrastructure appears minimal with no advanced security headers or analytics scripts detected. Overall, the website lacks content and business credibility at this time.

Lendosphere is a French crowdfunding platform specializing in financing projects related to the energy and ecological transition. Established in 2014, it positions itself as a leader in responsible investment opportunities within the renewable energy sector. The platform offers investors the ability to directly fund green projects managed by recognized companies, emphasizing transparency and regulatory compliance. The website is professionally designed, mobile-optimized, and provides comprehensive information including risk disclosures, terms of service, and privacy policies in French. Technically, the site employs modern JavaScript libraries, Cloudflare DNS, and monitoring tools like New Relic, ensuring a stable and performant user experience. Security practices include HTTPS enforcement, domain transfer lock, and CAPTCHA protections, although DNSSEC is not enabled and no explicit security policy or incident response page is found. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

Family Ace is a Czech investment management company specializing in managing investment funds in which they invest their own capital, emphasizing transparency, long-term relationships, and meaningful returns. The company targets investors seeking safer equity investments and operates primarily within the Czech financial sector. Their website reflects a professional and consistent brand image, providing clear information about their services, company background, and investor resources. The company was founded in 2021 and maintains a small but focused market presence.

The website queercom.de currently serves as a minimal placeholder page that redirects or links to queer.de, a German LGBTQ+ magazine. The site lacks substantive content, contact information, privacy or cookie policies, and security features such as HTTPS or security headers. The technical infrastructure is basic, relying on CSS fonts and simple HTML, hosted via GoDaddy-related nameservers. There is no evidence of analytics, advertising, or tracking technologies. The WHOIS data is minimal but indicates a legitimate registration without privacy protection. Overall, the site appears to be in an early or transitional stage, with low digital maturity and limited business presence. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is absent. The site is safe in terms of content, with no adult or explicit material detected.

Location Managers Guild International (LMGI) is a well-established professional organization founded in 2003, serving experienced location professionals in the motion picture, television, commercial, and print production industries. The website provides comprehensive information about membership, industry awards, events, and news, positioning LMGI as a recognized guild within the media production sector. The organization targets location professionals and industry stakeholders, offering services such as networking, awards ceremonies, fam tours, and a digital magazine. The domain and website content are consistent, reflecting a credible and professional entity.

The Association of Film Commissioners International (AFCI) is a well-established membership organization founded in 1975, serving the global film commission industry. It provides networking, education, and industry support services to film commissions, business affiliates, film liaisons, and producers worldwide. The website reflects a professional and consistent brand presence, with a focus on events, educational programs, and community engagement. The organization holds a strong market position as the largest network of its kind, primarily targeting media industry professionals and stakeholders. Technically, the website is built on WordPress using modern plugins such as Elementor, WooCommerce, and Yoast SEO, with integration of Google Analytics for user tracking. The site is hosted with Cloudflare DNS and uses HTTPS with a valid SSL certificate, ensuring secure communications. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. There is no publicly visible security policy or incident response information, and no privacy or cookie policies were found, indicating gaps in privacy compliance. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain is long-standing and consistent with the organization's history, supporting legitimacy. Overall, the website is professional, content-rich, and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

AT Computers a.s. operates the ATC Market website, a well-established e-commerce platform specializing in technology products such as computers, servers, and accessories. The company has a strong regional presence in Slovakia and the Czech Republic, supported by a network of partner retail sites. The website offers a comprehensive product catalog, user account features, and a mobile application, targeting both consumers and business customers. The business model focuses on retail and B2B sales with physical and online channels. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Owl Carousel, built on an ASP.NET MVC framework with a custom CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response contacts are provided. The domain registration is consistent with the business identity, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively.

Le Pot Commun is a French fintech platform operated by Unty, specializing in online collective money pooling for occasions such as birthdays, departures, and solidarity causes. The platform offers a user-friendly, secure, and free-to-use service with optional fees on certain payment methods. It holds regulatory registration as an Intermédiaire en Financement Participatif (IFP) under ORIAS, enhancing its legitimacy. Technically, the website leverages modern frameworks like React and Next.js, integrates multiple analytics and marketing tools, and enforces strong security practices including HTTPS and 3D Secure payments. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. No blocking or WAF challenges were detected, and the site demonstrates excellent design, navigation, and trust indicators. However, no public vulnerability disclosure or incident response contacts were found, which could be improved for transparency and security readiness.

L'Informaticien is a French professional media portal focused on IT and cybersecurity news, targeting IT managers and professionals. It is operated by PC Presse and offers a range of services including news articles, videos, newsletters, and subscription options. The website is well-structured and uses Joomla CMS with modern web technologies, providing a good user experience and mobile optimization. Security measures include HTTPS and hCaptcha for form protection, though some security headers are missing. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the site presents a professional and trustworthy front for its target audience.