Medium-risk security reports

Visionscarto is a niche website dedicated to cartographic sketches and reflections, offering a collection of articles and reports primarily in French. The site targets an audience interested in cartography, mapping, and related academic or reflective content. The business model appears to be content publishing without evident commercial transactions or e-commerce. Technically, the site is built on the SPIP CMS platform and uses modern JavaScript libraries such as Photoswipe and Lity for media display, providing a good user experience with mobile optimization and decent SEO practices. However, the site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security posture is moderate with no explicit security headers detected and unclear SSL configuration. The WHOIS data is missing or the domain is not registered according to the raw WHOIS output, which raises concerns about domain legitimacy despite the professional content. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

The website clubdevo.com serves as the official online presence for the iconic band DEVO, providing fans and visitors with news, tour dates, music, and multimedia content. The site integrates third-party services such as Bandsintown for live event tracking and offers links to official merchandise and galleries. The business model centers on entertainment, fan engagement, and merchandise sales, positioning DEVO as an established band with a dedicated audience. The website's content is professionally presented with consistent branding and a focus on user experience.

ID Meneo is a Paris-based digital agency specializing in bespoke web development, digital marketing, and strategy consulting with over 13 years of experience. The company offers a comprehensive range of services including WordPress and Prestashop site creation, Laravel application development, SEO/SEA, and maintenance services. Their market position is that of a small, specialized agency focused on delivering tailored digital solutions to businesses seeking to differentiate themselves online. Technically, the website is built on WordPress with modern technologies such as jQuery and Google Tag Manager, and it demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and some security best practices in place, though explicit security headers and policies are not evident. The WHOIS data is missing, which raises some legitimacy concerns, but the professional presentation and active social media presence support credibility. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

The Odoo Community Association (OCA) is a well-established non-profit organization founded in 2014 that supports the Odoo open source ERP ecosystem by fostering collaboration among developers, integrators, consultants, and users. The organization provides access to high quality apps, open upgrades, and community-driven resources, positioning itself as a key player in the open source ERP community. The website reflects this mission with clear navigation, professional design, and active engagement with sponsors and partners. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies such as FontAwesome, Google Analytics, and reCAPTCHA for security and analytics. Hosting is provided by Gandi SAS, with HTTPS enabled ensuring secure communications. However, some security best practices such as DNSSEC and security headers are not implemented, and no explicit cookie consent mechanism is present, which may impact GDPR compliance. Contact information is primarily via web forms, with no direct email or phone numbers visible. Overall, the site demonstrates good digital maturity and community trust but could improve in security and privacy compliance areas.

Coop Formations is a French cooperative organization specializing in professional training aimed at transforming work, organizations, and society. Founded in 2020, it operates as a small, human-scale entity focused on delivering accessible, high-quality educational sessions and courses. The cooperative emphasizes combining critical thinking with practical action, supported by passionate trainers and personalized learner support. The website reflects a clear mission and strong trust signals such as the Qualiopi certification and a 100% learner recommendation rate. Technically, the website is built on the Odoo CMS platform, hosted via Infomaniak, and employs modern web technologies including Bootstrap, FontAwesome, and Chart.js. It demonstrates good mobile optimization, accessibility, and SEO practices. Analytics are implemented with privacy-conscious tools like Plausible alongside Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled and no explicit security policies or incident response contacts are published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen trust and resilience.

Association Permaculture Romande is a Swiss non-profit organization dedicated to promoting permaculture practices in the French-speaking region of Switzerland. The website serves as a community hub offering news, events, educational resources, and a directory for permaculture practitioners. The organization targets individuals passionate about sustainable agriculture and ecological design, fostering collaboration and knowledge sharing. Technically, the website is built on Ruby on Rails with modern front-end components and uses Piwik/Matomo for analytics, reflecting a moderate level of digital maturity. Security measures include HTTPS and CSRF protection, but lack advanced security headers and published policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-maintained, but could improve in privacy transparency and security hardening.

The website www.transition-initiativen.org represents the Transition Netzwerk e.V., a non-profit grassroots network active in Germany, Austria, and Switzerland focused on sustainability, climate protection, and social justice. It serves as a hub for over 120 local Transition Initiatives, offering educational resources, event announcements, and community engagement opportunities. The organization positions itself as a connector and supporter of local groups working towards ecological and social transformation. Technically, the site is built on Drupal 7 with jQuery and custom JavaScript, delivering a moderately performant and accessible experience. The site is mobile responsive at a basic level and includes standard SEO meta tags. Security posture is good with HTTPS enforced and CAPTCHA on login forms, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The WHOIS data is unavailable or malformed, limiting domain registration transparency and trust verification. Despite this, the website content, external partnerships, and event details support the legitimacy of the organization. No signs of malicious activity or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website is a credible and well-maintained platform for a non-profit sustainability network, with room for improvement in security headers, privacy compliance, and WHOIS transparency.

Vegan Pratique is a French non-profit informational website dedicated to promoting veganism and plant-based nutrition. It offers educational content, recipes, and a 21-day Veggie Challenge subscription to help users transition to a vegan lifestyle. The website is affiliated with L214, a recognized animal rights organization, enhancing its credibility and trustworthiness. The platform targets individuals interested in veganism, health, and environmental sustainability, providing practical advice and community engagement. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and optimized for mobile devices. Security posture is good with HTTPS enforced and no exposed sensitive data, although some security headers and policies could be improved. Privacy compliance is basic, with a cookie consent mechanism present but lacking explicit privacy and terms of service pages. Overall, Vegan Pratique presents a professional, trustworthy, and content-rich platform with room for enhancements in privacy and security documentation.

follow.it is a technology-driven news aggregation platform founded in 2006, offering personalized news delivery and subscription services to readers and publishers. The website presents a professional design with a modern frontend framework (Vue.js) and integrates advertising through Google Adsense. The domain is well-established with DNSSEC enabled and a valid registration status, indicating a legitimate business presence. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which are important for user trust and regulatory compliance. Security posture is generally good with HTTPS and DNSSEC, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website wp-content.org is a domain parking page registered in December 2021 via Name.com, Inc. It does not represent an active business or service but serves as a placeholder with advertising links and search functionality powered by Sedo and Google Adsense. The site content is minimal, primarily in Finnish, and lacks any original business information, contact details, or security policies. Technically, the site uses standard HTML, CSS, and JavaScript with third-party ad and tracking scripts but does not enforce HTTPS or implement security headers. Privacy compliance is basic, with a privacy policy linked to Sedo's domain parking service and a cookie banner without explicit consent mechanisms. Overall, the site has a low trustworthiness and business credibility score due to its parking status and lack of substantive content or policies.

Precious Plastic France is a French non-profit association dedicated to advancing ecological and social transition in the plastic economy. It operates as a community network promoting open-source recycling solutions, training, and events such as an annual festival. The organization targets professionals and the general public interested in sustainable plastic recycling. Technically, the website is built on WordPress, hosted by Alwaysdata, and uses common plugins like Contact Form 7. The site is moderately performant, mobile-optimized, and has good content quality but lacks explicit privacy and cookie policies. Security posture is decent with HTTPS enforced but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the association.

Project Kamp is a small community-driven initiative based in Portugal focused on researching and prototyping sustainable living methods. The project emphasizes open source sharing of knowledge and community collaboration, positioning itself as a niche player in sustainability research. The website is built on modern web technologies using Webflow and integrates Google Analytics for user tracking. While the site is well-designed and content-rich, it lacks formal privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain registration is consistent and stable, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

makesense is a French non-profit organization dedicated to creating tools and programs for collective mobilization to build an inclusive and sustainable society. With over 10 years of experience and an international presence, it supports citizens, entrepreneurs, and organizations in social impact initiatives. The website is professionally designed, multilingual, and provides clear information about its vision, missions, values, and impact. The technical infrastructure is based on WordPress, hosted by DreamHost, and uses common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but lacks detailed security or incident response policies. Overall, the website is trustworthy, safe, and well-positioned in its sector.

Earthship Biras en Dordogne operates a niche informational website focused on promoting and sharing experiences about an autonomous Earthship house located in Dordogne, France. The business targets eco-conscious individuals interested in sustainable living and autonomous housing solutions. The website offers content about the house's history, life experience, rental opportunities, conferences, and related publications. Technically, the site is built on WordPress, hosted by OVH, and uses common web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and lacking published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professional but requires improvements in compliance and security to enhance trust and user protection.

Solarbrother is a French company specializing in the design and sale of solar-powered products including lighters, ovens, barbecues, dryers, and chargers. The company operates a niche e-commerce platform targeting environmentally conscious consumers interested in renewable energy solutions. The website is built on WordPress with WooCommerce, enhanced by SEO and performance plugins, and supports multiple languages. The technical infrastructure is modern and optimized for good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks clear privacy and terms of service pages. Overall, the domain registration and business information are consistent and legitimate, supporting a moderate to high trust level.

Ecodev is a Swiss-based web agency specializing in custom web and application development as well as IT infrastructure services, with a strong ethical and sustainable approach. The company has a solid market position in the Suisse romande region, backed by 20 years of experience. Their website showcases key projects and team members, reflecting a professional and human-centered business model. Technically, the site is built on a modern Angular framework, optimized for performance and mobile devices, with good SEO and accessibility practices. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professional, supporting the company's credibility in the technology sector.

Public Eye is a Swiss non-profit organization dedicated to fighting global injustices linked to Switzerland through research, advocacy, and campaigning. The website presents a professional and consistent brand focused on human rights and global justice issues, targeting a general audience interested in these topics. The organization offers publications, events, and investigative reports as key services. Technically, the website is built on TYPO3 CMS, hosted likely by RTP GmbH, and uses Matomo for analytics along with a cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS and cookie consent, though explicit security policies and headers could be improved. WHOIS data aligns well with the organization's claims, indicating legitimacy. Overall, the site is trustworthy and professionally maintained.

Berkeley Earth is a small, independent non-profit organization specializing in providing open-source, high-quality environmental and climate data and analysis. Established in 2010, it holds a reputable position as a trusted source for unbiased scientific information, targeting researchers, policymakers, and the general public interested in climate science. The organization actively publishes updates, reports, and hosts press briefings to disseminate its findings widely. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, and various plugins for anti-spam, data visualization, and user engagement. Hosting appears to be managed by WP Engine, ensuring reliable performance and security. The site is mobile-optimized with good SEO and accessibility features, though some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and uses domain status locks to protect domain integrity. It employs anti-spam measures and cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and no explicit security headers were detected, suggesting room for improvement in hardening the security posture. No incident response or vulnerability disclosure policies are publicly available. Overall, Berkeley Earth presents a professional, trustworthy, and well-maintained online presence with strong content quality and privacy compliance. Strategic enhancements in security headers, DNSSEC, and publishing security policies would further strengthen its security and compliance posture.

KAIST is a prestigious national science and technology university in South Korea, established to foster scientific talent and conduct advanced research aligned with national policies. The website reflects its institutional stature, providing comprehensive academic, research, and campus life information targeted at students, researchers, and stakeholders. The domain is longstanding and registered transparently under the institution's name, reinforcing its legitimacy. Technically, the website employs common web technologies such as jQuery and Bootstrap, with moderate performance and good mobile responsiveness. However, it lacks modern security headers and DNSSEC, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly found, indicating a gap in compliance with modern privacy standards. Security-wise, the site uses HTTPS and does not expose sensitive data, but could benefit from publishing incident response contacts and vulnerability disclosure policies. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to strengthen its digital maturity. The risk assessment is low given the institutional nature and absence of suspicious elements, but strategic improvements in privacy and security policies are recommended to maintain trust and compliance.

Global Destination Sustainability Movement (GDS-Movement) is a professional organization focused on empowering sustainable and regenerative tourism through consulting, benchmarking, education, and impact measurement services. The website is well-structured, professionally designed, and targets organizations involved in sustainable travel. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response information is published. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and credible, though lack of WHOIS transparency slightly reduces trust.

The website www.senat.fr is the official portal of the French Senate, providing authoritative information on parliamentary work, senators, legislative texts, and public consultations. It serves a broad audience including citizens, government officials, researchers, and media professionals. The site offers extensive content in French with multilingual support and integrates various services such as video archives, petitions, and legislative databases. Technically, the site is built on TYPO3 CMS, uses Bootstrap for responsive design, and employs Matomo for analytics with a GDPR-compliant cookie consent mechanism. The website demonstrates a mature digital infrastructure with good performance and accessibility standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers and explicit incident response policies could be improved. The absence of WHOIS data is noted but likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained, reflecting its role as a key government information source.

Agence Bio is the official French agency dedicated to the development and promotion of organic agriculture. It serves as a governmental and non-profit entity focused on raising awareness, providing data, funding projects, and communicating the benefits of organic farming to various stakeholders including consumers, producers, distributors, and the general public in France. The agency maintains a strong market position as the authoritative source for organic agriculture information and support in France. Technically, the website is built on a modern WordPress CMS platform with Elementor page builder and enhanced SEO via Yoast. It integrates multiple marketing and analytics tools such as Google Tag Manager, Matomo, and Sendinblue, indicating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and a published security.txt file. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits domain trust verification, though the website content and official tone strongly suggest legitimacy. Overall, Agence Bio presents a professional, trustworthy, and content-rich platform supporting organic agriculture in France. Strategic improvements in security headers, privacy policy transparency, and incident response disclosures would enhance its security posture and compliance.

The Union Nationale de l'Apiculture Française (UNAF) operates as a professional union serving beekeepers across France. The organization provides advocacy, insurance services, training, regulatory information, and publishes a specialized apiculture magazine. The website reflects a mature digital presence with a clear focus on serving both professional and amateur beekeepers, emphasizing environmental stewardship and industry support. Technically, the site is built on WordPress with modern libraries such as jQuery and AddToAny for social sharing, and it demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, alongside GDPR-compliant cookie and privacy policies. However, WHOIS data is unavailable, likely due to privacy protection, which is common and justified for such an entity. Overall, the site is trustworthy, professional, and well-maintained, with no visible security or privacy concerns.

Washington University in St. Louis (WashU) is a prominent private research university offering a wide range of academic degrees and programs, supporting extensive research and innovation activities, and providing comprehensive student life services. The website reflects a mature digital presence with strong branding, clear navigation, and rich content targeting prospective and current students, faculty, staff, alumni, and researchers. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although privacy compliance could be improved by adding cookie consent mechanisms and explicit terms of service. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the university's identity.

The website 'Joanna Macy & Her Work' appears to be a small-scale, non-profit or personal site hosted on the Squarespace platform. It presents minimal content with no descriptive business information or contact details. The technical infrastructure is standard for a Squarespace site, with HTTPS enabled and basic mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate due to HTTPS but lacks security headers and privacy policies. Overall, the site is accessible and safe but lacks comprehensive business and compliance information.

Salon Marjolaine is a well-established French event focused on organic agriculture, ecology, and sustainable living, operating since 2006. It serves as a major marketplace and meeting point for organic producers, consumers, and enthusiasts. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about the event, exhibitors, and program. Technically, it is built on WordPress with modern plugins and tracking tools, hosted likely by Infomaniak, and uses HTTPS with basic security measures. Privacy compliance is well addressed with GDPR-aligned cookie consent and a detailed privacy policy. However, explicit security policies and vulnerability disclosures are absent, and some security headers could be improved. Overall, the site is trustworthy and professionally managed, with no signs of malicious activity or content safety concerns.

Kalélia is a French digital agency based in Nantes, specializing in web communication, digital marketing, and web development services primarily for SMEs and mid-sized companies. Established since 2010, the agency offers a comprehensive suite of services including consulting, web design, SEO, SEA, social media management, and training. The website reflects a professional and consistent brand image with a strong focus on user experience and conversion optimization. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot Analytics. Security practices include HTTPS enforcement and use of reCAPTCHA, though some security headers are not visibly configured. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and business transparency.

The Fonds Français pour l’Environnement Mondial (FFEM) is a French government-established fund focused on financing innovative environmental projects in developing countries. With a history dating back to 1994, FFEM supports projects that preserve biodiversity, combat climate change, and promote sustainable resource management. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on Drupal CMS with modern frameworks and includes accessibility and SEO best practices. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high trustworthiness and aligns well with its governmental and non-profit mission.

The Agence Française de Développement (AFD) is a prominent French public development bank dedicated to financing and supporting sustainable development projects worldwide. The website reflects a mature, well-established organization with a clear mission to promote social and environmental transitions. The site targets a diverse audience including governments, investors, civil society, and enterprises. Technically, the website is built on Drupal CMS with modern frameworks and analytics tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS and consent management, though explicit security headers should be verified. The absence of WHOIS data is due to AFNIC privacy policies, which is typical for French government domains. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

AVSF - Agronomes & vétérinaires sans frontières is a French non-profit organization dedicated to supporting peasant communities through sustainable agricultural development and agroecology. With 45 years of experience, AVSF works closely with farmers to promote food autonomy, economic resilience, and environmental preservation. The organization operates multiple projects focused on agroecology, animal health, fair trade, crisis recovery, and gender equality. Their business model relies on donations and partnerships, supported by a professional website with multilingual content and integrated donation forms. Technically, the website is built on WordPress with Elementor and uses modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy compliance could be improved. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is justified for an NGO. Overall, AVSF presents a credible and professional digital presence aligned with its mission.

Somfy-profissional.pt is a professional B2B website dedicated to Somfy's automation and smart home solutions targeted at professional installers and partners in Portugal. The site offers product catalogs, training, assistance, and documentation to support its business customers. The company is well-established with a consistent brand presence and a comprehensive privacy and cookie policy, reflecting GDPR compliance. Technically, the site is built on the Liferay CMS platform, using modern JavaScript libraries and performance monitoring tools, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. No contact emails or phone numbers are explicitly presented on the homepage, which may limit direct customer contact. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Somfy Pro Romania operates a professional B2B platform designed to support dealers and distributors of Somfy products. The website provides a comprehensive product catalog, partner support resources, training programs, and connected home solutions. The platform is well integrated with social media and maintains updated privacy and cookie policies, reflecting a mature digital presence. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries and analytics tools to deliver a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain WHOIS data is privacy protected, which is common for Romanian domains, but the website content and external links strongly support legitimacy. Overall, the site is professional, trustworthy, and well-suited for its target B2B audience.

Team TotalEnergies Pro Cycling operates a professional cycling team website presenting team members, race calendars, news, photos, and videos. The site targets cycling enthusiasts and sponsors, leveraging a WordPress CMS with modern plugins and integrations such as Yoast SEO and social media feeds. The technical infrastructure is solid, hosted on Azure DNS with HTTPS and Google Tag Manager for analytics. Security posture is good with no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present and GDPR compliant with consent mechanisms. No direct contact emails or phone numbers are published, which may limit direct communication. Overall, the site is professional, well-branded, and trustworthy with a strong social media presence.

TotalEnergies Belgium operates a professional and comprehensive website offering electricity and natural gas supply services to individuals, SMEs, and large enterprises. The company positions itself as a major energy supplier with a focus on competitive pricing, renewable energy options, and customer-centric services including mobile app management and expert support. The website is well-structured, multilingual, and integrates modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed policies and cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected, indicating a trustworthy and reliable online presence.

Septeo is a professional software and services provider specializing in digital solutions for various professional sectors including legal, real estate, hospitality, education, and IT. The company offers tailored software to streamline business operations and enhance productivity for its clients. The website demonstrates a mature digital presence with multi-language support, modern web technologies, and strong privacy compliance mechanisms including GDPR-aligned cookie consent. However, the absence of WHOIS registration data introduces some uncertainty about domain registration transparency. The technical infrastructure leverages Webflow CMS, Google Tag Manager, and HubSpot forms, indicating a modern and scalable platform. Security posture is solid with HTTPS, reCAPTCHA, and consent management, but lacks explicit security policies or incident response contacts. Overall, Septeo presents as a credible and professional business with room for improvement in transparency and security documentation.

EPSA is a European specialist company focused on optimizing financial, operational, and environmental performance for its clients. The company positions itself as a leading actor in performance optimization across multiple sectors and countries, with a large workforce and extensive client base. The website reflects a professional consulting business model targeting corporate clients seeking expertise in finance, operations, and sustainability transformations. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager and lazy loading images, providing good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response policies are not explicitly published. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the website content and branding are consistent and trustworthy. Overall, EPSA presents a mature digital presence with room for improvement in transparency and security disclosures.

The Syndicat du Conseil en relations publics is a professional French association representing public relations agencies. The website serves as an information hub for members and the public, offering resources such as agency directories, training programs, events, and labels promoting responsible influence and corporate social responsibility. The site targets PR professionals, agencies, and students, positioning itself as a key industry player in France. Technically, the website is built on WordPress with common plugins like Yoast SEO and uses modern web technologies including jQuery and Google Analytics for tracking. The site is secured with HTTPS and employs Google reCAPTCHA for form protection, indicating a reasonable security posture. However, the absence of WHOIS registrant data and lack of explicit privacy cookie consent mechanisms slightly reduce trust and privacy compliance scores. Overall, the site is professional, well-structured, and trustworthy, but could improve transparency and compliance by publishing security policies and enhancing privacy controls.

Les Tantines is a French creative studio specializing in visual identity and showcase websites. The company offers accessible creativity through standard and custom packages, focusing on logos, branding, UX, web design, social media, pitch decks, and motion design videos. Their market position is that of a niche, client-focused creative agency emphasizing agility and personalized service. Technically, the website is built on Webflow with modern libraries such as Swiper.js and Finsweet Attributes, hosted on Webflow's platform, and optimized for mobile and SEO. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is unavailable, raising concerns about domain legitimacy, though the professional website and client testimonials provide trust signals. Contact is primarily via Typeform forms, with no direct emails or phone numbers found.

FRNIX is a newly established website launched in late 2024, hosted by HOSTINGER operations, UAB, and built on the WordPress platform using the Elementor page builder. The site presents a professional design with good mobile optimization and moderate performance. It employs Google Tag Manager and CookieYes for analytics and cookie consent management, indicating a basic level of digital maturity. However, the absence of explicit privacy policies, terms of service, and contact information limits its compliance and business credibility. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, the website is accessible and safe for general audiences but would benefit from improved privacy and security practices to strengthen trust and compliance.

The Conservatoire national des arts et métiers (Cnam) is a well-established French public higher education institution dedicated to lifelong learning, scientific and technical culture dissemination, and research. The website reflects a mature digital presence with extensive content covering education, research, culture, and regional and international activities. The institution targets students, professionals, and researchers, offering a broad range of services including micro-certifications, MOOCs, and cultural exhibitions. Technically, the site uses modern JavaScript libraries and a custom CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website's branding, certifications, and content strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

ENSIACET is a French engineering school specializing in the transformation of matter and energy, offering multiple engineering diplomas and masters programs. It is part of the Toulouse INP group and maintains strong partnerships with governmental and educational institutions. The website is professionally designed, content-rich, and targets prospective students, researchers, and industry partners. The technical infrastructure is based on Ametys CMS with common JavaScript libraries and includes a cookie consent mechanism and Matomo analytics for privacy-conscious tracking. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the presence of official certifications and partner links supports legitimacy. Overall, the site is well-maintained, compliant with GDPR, and provides clear contact information.

Groupe INP is a consortium of public engineering and management schools in France, offering high-quality education and research opportunities across multiple regions including Brittany, Bordeaux, Clermont-Ferrand, Grenoble, Nancy, and Toulouse. The group emphasizes professional training, scientific excellence, and strong ties with industry and international partners. The website reflects a well-structured educational institution with clear branding and a focus on student engagement and admissions. Technically, the site uses a custom CMS (K-Sup), modern web technologies, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but the site content and branding strongly indicate legitimacy. Overall, the site is professional, accessible, and trustworthy for its target audience.

The Living Donor Toolkit website serves as a specialized educational platform providing comprehensive financial and medical resources for individuals considering living organ donation. Affiliated with the American Society of Transplantation and sponsored by Novartis, the site targets potential living donors and their families, offering detailed toolkits and chapters to support informed decision-making. The website holds a strong position as a trusted non-profit healthcare resource in the transplantation community. Technically, the site is built on Drupal 7 with integration of common web technologies such as jQuery, Adobe DTM, Google Tag Manager, and Typekit fonts. While the site demonstrates good design quality, clear navigation, and moderate performance, mobile optimization and accessibility are basic and could be improved. The use of multiple third-party marketing and tracking tools indicates moderate user tracking. From a security perspective, HTTPS is properly implemented, but the absence of explicit security headers and lack of visible privacy and cookie policies reduce the overall security posture and privacy compliance. The missing WHOIS data for the domain raises transparency concerns, although the professional affiliation and sponsorship lend credibility. No WAF or blocking mechanisms were detected, and content is fully accessible. Overall, the website is a credible and valuable resource for its target audience but would benefit from enhanced privacy disclosures, improved security headers, and better transparency regarding domain registration to strengthen trust and compliance.

AST Partner Connect is a professional platform operated by the American Society of Transplantation, providing transplant healthcare professionals with access to educational content, clinical trials, career opportunities, and partner resources. The platform serves as a bridge between healthcare professionals and industry partners, facilitating knowledge sharing and professional development in transplantation. The website is well-branded, consistent, and targets a specialized audience in the healthcare sector. Technically, the site uses common web technologies such as jQuery, Vimeo API, and Select2, hosted likely on AWS infrastructure. The design is professional and mobile-optimized, though accessibility and SEO could be improved. Security posture is moderate with no evident critical vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. WHOIS data is transparent and consistent with the organization's profile, enhancing trustworthiness. Overall, the site is a credible and useful resource for its target audience.

Hotel Košice DoubleTree by Hilton operates as a prominent hospitality provider located in the heart of Košice, Slovakia. Affiliated with the global Hilton brand, it offers accommodation, conference facilities, event hosting, and gastronomy services. The website reflects a professional and consistent brand image targeting travelers, business clients, and event organizers. The business model focuses on delivering premium hospitality experiences with loyalty program integration and additional VIP services. Technically, the website is built on WordPress with Elementor, optimized for SEO and mobile responsiveness, and incorporates modern web technologies including Google Analytics and reCAPTCHA for security. Security posture is strong with HTTPS enforcement and form protections, though explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises legitimacy concerns that should be investigated further. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

KOSTKA footbike is a well-established Czech manufacturer and retailer of scooters for adults, children, seniors, and specialized uses such as mushing. The company has a strong market presence in the Czech Republic with over 25 years of tradition, offering a wide range of products and services including a Try & Buy program and customization options. The website is professionally designed, mobile-optimized, and provides comprehensive product information and customer support resources. Technically, the site runs on the PrestaShop e-commerce platform with modern JavaScript libraries and tracking tools integrated. Security posture is strong with HTTPS, security headers, and consent management in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

KOSTKA footbike is a well-established Czech manufacturer and retailer specializing in scooters for adults, children, and specialized uses such as mushing and seniors. The company emphasizes Czech production with over 20 years of tradition, offering a wide range of products and services including a Try & Buy rental program and a custom scooter configurator. The website is professionally designed, mobile-optimized, and provides rich content including blogs and community events, supporting a strong market presence in the micro-mobility retail sector. Technically, the website leverages a modern tech stack built on Prestashop CMS, integrating popular JavaScript libraries and marketing tools such as Google Tag Manager and Facebook Pixel. Performance and SEO are well addressed, with good accessibility and user experience. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Security posture is solid with HTTPS enforced, security headers implemented, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data and lack of explicit security policy or incident response information slightly reduce trustworthiness. Overall, the site is secure, professional, and trustworthy, though domain registration transparency should be improved. Strategically, the company should consider publishing a dedicated security policy and vulnerability disclosure page, and ensure domain registration data is publicly available to enhance credibility and trust.

Lounge by Zalando is a well-established online outlet platform specializing in discounted fashion, home goods, and premium products, primarily targeting consumers in the Czech Republic and broader European markets. It operates under the Zalando SE group, a leading European e-commerce company. The website offers daily deals with discounts up to 75%, supported by a modern and responsive web infrastructure leveraging React and RequireJS, with strong SEO and accessibility features. Privacy and cookie consent are managed via Usercentrics, and error monitoring is handled by Sentry, indicating a mature digital operations environment. Security posture is robust with HTTPS enforcement and security headers, though direct contact information is not prominently displayed on the site. WHOIS data for the domain is unavailable or privacy protected, which is common for commercial entities but slightly reduces transparency. Overall, the site is professional, trustworthy, and well-positioned in the online retail sector.