Medium-risk security reports

Trustami GmbH operates a sophisticated reputation aggregation platform focused on collecting and displaying customer reviews from multiple sources to enhance trust and conversion for e-commerce businesses. The company serves over 30,000 clients and aggregates more than 1.39 billion reviews, positioning itself as a significant player in the online reputation management market. Their services include trust badges, public company profiles, Google star integration, and review insurance, supported by a variety of plugins for popular shop systems. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and lazy loading, ensuring fast performance and excellent mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and external references strongly indicate a legitimate business. Security posture is generally good with HTTPS and secure form handling, but lacks explicit security policies and HTTP security headers. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

The website www.gl-lyonevents.com presents information about the Matmut Stadium, a historic and iconic stadium located in Lyon, France. The site appears to serve as an event and venue information platform, targeting visitors and event organizers interested in the stadium and related events. The business model is focused on event promotion and providing venue details, catering primarily to a general audience interested in sports and cultural events in Lyon. The website is built on Drupal 10, leveraging modern web technologies such as lazy loading for images, Matomo for analytics, and Google Tag Manager for marketing. The site is mobile optimized and includes accessibility features, contributing to a good user experience and SEO optimization. However, the absence of visible privacy policies, terms of service, and contact information limits the site's transparency and trustworthiness. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible security headers and detailed security policies. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about the legitimacy and ownership of the domain. Overall, the website is functional and professionally designed but would benefit from improved transparency and security practices to enhance trust and compliance.

Cookidoo.de is the official Thermomix® recipe portal operated under the Vorwerk & Co. KG brand, targeting German-speaking Thermomix users and cooking enthusiasts. The platform offers extensive recipe collections, meal planning, and shopping list features, supporting a subscription-based business model. The website demonstrates a high level of digital maturity with modern web technologies, responsive design, and integrated search capabilities via Algolia. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

Cookidoo.es is the official Spanish-language recipe platform for Thermomix®, operated by Vorwerk & Co. KG. It offers a subscription-based service providing thousands of recipes, meal planning, and shopping list management tailored for Thermomix® users. The platform targets cooking enthusiasts in Spain and maintains strong brand consistency with official Thermomix® branding and a professional, user-friendly website. Technically, the site uses modern web technologies including Algolia for search and OneTrust for cookie consent, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy policies and incident response contacts are not found on the analyzed page. Overall, the domain registration aligns well with the business identity, indicating high legitimacy and trustworthiness.

Cookidoo.pl is the official Polish platform for Thermomix® recipes, operated under the Vorwerk brand. It offers a comprehensive digital service including thousands of recipes, meal planning, and shopping list management, targeting Thermomix® users in Poland. The platform operates on a subscription business model and maintains a strong market position as the official source for Thermomix® culinary content. Technically, the website employs modern web technologies including JavaScript frameworks, Algolia search, and Snowplow analytics, ensuring a fast, mobile-optimized, and accessible user experience. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and safe for general audiences.

Cookidoo.fr is the official French recipe platform for Thermomix®, operated by Vorwerk. It offers a comprehensive digital service including thousands of recipes, meal planning, and shopping list features tailored for Thermomix® users. The platform targets French-speaking consumers interested in cooking with Thermomix® appliances, providing a subscription-based model for access to premium content. The website demonstrates a high level of digital maturity with modern web technologies such as Algolia search and OneTrust cookie consent integration, hosted on professional infrastructure with AWS DNS services. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies are not visible in the provided content. Privacy compliance is moderate due to the absence of visible privacy policy and terms of service links on the analyzed page. Overall, the site is professional, trustworthy, and well-branded, with no signs of malicious or adult content.

Léo Chiron is a freelance full-stack web developer and webmaster based in France, with over 8 years of experience. The website serves as a professional portfolio showcasing his expertise in web development, SEO, WordPress, and site maintenance. The business targets clients needing custom website creation, e-commerce platforms, and ongoing site support. Technically, the site uses a modern tech stack including PHP, JavaScript, SQL Server, and integrates Google services such as Maps, reCAPTCHA, and Tag Manager. The hosting is provided by o2switch, a French hosting provider. Security posture is solid with HTTPS and reCAPTCHA protection on forms, but lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Vorwerk Community Stars is a dedicated online platform designed to engage Thermomix customers and culinary enthusiasts through a global community program. The website facilitates recipe sharing, product testing, and community challenges, fostering brand loyalty and customer interaction. It targets passionate Thermomix users primarily in the UK and several European countries, leveraging a niche community model to enhance customer experience and product feedback. Technically, the website is built on the Telligent Community platform, utilizing jQuery and Google Tag Manager for analytics and user interaction. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Hosting and domain registration are consistent with the brand's UK presence, though DNSSEC is not enabled, representing a minor security improvement opportunity. From a security perspective, the site enforces HTTPS and employs domain transfer protections. However, it lacks visible security policies and incident response contacts, which could be enhanced to improve transparency and trust. Privacy compliance is well addressed with clear cookie consent mechanisms and privacy policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and user-friendly experience for its target audience. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to strengthen the security posture further.

Cookidoo.it is the official Italian recipe platform for Bimby® (Thermomix) users, operated by Vorwerk. It offers a comprehensive digital service with thousands of recipes, meal planning, and shopping list features tailored for Bimby® appliances. The platform targets Italian consumers and cooking enthusiasts, leveraging a subscription-based business model to deliver curated culinary content. The website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and strong localization. Privacy and cookie compliance are well-implemented using OneTrust, and analytics are managed responsibly with user consent. Security posture is strong with HTTPS and DNSSEC enabled, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

Magicpan.cz is a Czech Republic-based small business specializing in handcrafted handpan musical instruments under the NEO handpan brand. The website serves as a platform to promote the instruments, provide historical context, and offer workshops and courses to enthusiasts. The business positions itself as a quality local manufacturer and educator in a niche musical instrument market. Technically, the site is built on WordPress with a custom theme and uses modern web technologies such as jQuery. Hosting is provided by a Czech hosting provider, aligning with the business location. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. No privacy or cookie policies were found, indicating compliance gaps with GDPR. The site features embedded video testimonials from notable musicians, enhancing trust and credibility. Overall, the website is professional and content-rich but would benefit from improved privacy and security practices.

CanvasJS is a specialized technology company providing a high-performance HTML5 JavaScript charting library designed for developers and businesses requiring advanced data visualization solutions. The company offers a broad range of chart types and supports multiple popular frameworks such as React, Angular, and jQuery, positioning itself as a versatile and developer-friendly solution in the data visualization market. The business is a subsidiary of Fenopix and has been operational since 2013, with a domain registration dating back to 2011, indicating a stable and established presence. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is optimized for performance and mobile responsiveness, with good SEO practices implemented via Yoast SEO. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring reliable uptime and performance. From a security perspective, the site enforces HTTPS with strong domain status protections and includes standard security headers. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response contacts are published, suggesting room for enhancement in transparency and security governance. The site does not expose sensitive data and uses asynchronous loading for analytics scripts to minimize performance impact. Overall, CanvasJS presents a professional, trustworthy, and technically sound web presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

Coredem is a collective project aggregating documentary resources from over 30 organizations focused on democracy and social transformation. It offers a specialized search engine, Scrutari, and hosts thematic collections and debates in multiple languages. The website is built on the SPIP CMS platform with a modern responsive design and uses analytics tools such as Google Analytics and Matomo. However, it lacks visible privacy and cookie policies and does not expose contact information prominently. The WHOIS data is unavailable, which limits domain trust verification, but the website content and structure appear professional and legitimate for a non-profit collective. Security headers are not detected, and privacy compliance is minimal, indicating areas for improvement.

EcoIndex.fr is a French environmental digital project offering a free online tool to evaluate the environmental impact and performance of websites. It targets web professionals and environmentally conscious users, providing educational content and community engagement opportunities. The website is built using the Hugo static site generator and modern JavaScript technologies, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced, though some security headers are missing and no cookie consent mechanism is implemented. The WHOIS data is unavailable, likely due to privacy protection, but the website's transparency, open source nature, and partnerships with reputable environmental organizations support its legitimacy. Overall, EcoIndex.fr presents a trustworthy and professional platform in the niche of digital environmental responsibility.

Mouvement SOL operates as a French non-profit organization dedicated to promoting and supporting local complementary currencies (Monnaies Locales Citoyennes). The website serves as an informational and community hub, providing resources, news, and event information to stakeholders including local governments, businesses, associations, and citizens. The organization holds a leading position in the French market for local currency advocacy and coordination, with a history dating back to 2006. Technically, the website is built on the Odoo CMS platform, hosted by OVH sas, and uses Matomo for analytics, reflecting a modern but modest digital infrastructure. The site is well-structured, mobile-optimized, and professionally designed, with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and CSRF tokens implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.

The Collectif des associations citoyennes (CAC) is a French non-profit organization dedicated to defending the rights of associations and promoting social solidarity. The website serves as a hub for advocacy, events, publications, and mobilization efforts targeting associations and citizens engaged in social causes. The organization maintains an active presence on social media platforms including Facebook, Twitter, and YouTube, and provides multiple resource sites for knowledge sharing and mobilization. Technically, the website is built on WordPress using the Themify Ultra theme, incorporates modern JavaScript libraries such as Swiper.js, and employs Matomo for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and use of hCaptcha for forms, though there is room for improvement in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and social presence strongly support the organization's authenticity. Overall, the site is professional, content-rich, and serves its target audience effectively.

Mouvement Colibris is a well-established French non-profit organization focused on promoting ecological and social solidarity through community engagement, education, and activism. The website serves as a hub for information, resources, and connections to various partner projects and educational platforms. The organization targets individuals and groups interested in sustainable living and social change. Technically, the website is built on Drupal 7, uses HTTPS, and integrates privacy-conscious analytics via Matomo. While the site is generally well-designed and mobile-optimized, it lacks modern security headers and up-to-date CMS versions, which could pose risks. Privacy compliance is incomplete due to missing privacy and cookie policies. Security posture is moderate with good SSL but missing DNSSEC and security headers. No incident response or vulnerability disclosure information is published. The domain registration is consistent and trustworthy, supporting the legitimacy of the organization. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risks and improve user trust.

Habitat Participatif France is a French citizen movement founded in 2013 dedicated to promoting participative, ecological, and solidarity-based housing projects. The organization acts as a federation providing resources, advocacy, and networking opportunities for individuals and groups interested in alternative housing models. The website is well-structured, professionally designed, and provides comprehensive information and tools to support participative housing initiatives across France. Technically, the site is built on the YesWiki CMS platform, leveraging Bootstrap 5 and jQuery, and employs Matomo analytics configured to respect user privacy by disabling cookies. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. The absence of WHOIS data for the domain is a transparency concern but does not detract significantly from the site's legitimacy given the quality and consistency of content. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy, informative, and serves a niche non-profit community effectively.

Mouvement Utopia is a French non-profit cooperative dedicated to popular education and social activism. Established in 2008, it operates as a citizen cooperative offering educational resources, events, podcasts, and cultural activities. The organization maintains a strong presence in its niche sector with active engagement through its website and social media channels. The website serves as a hub for news, event announcements, and educational content, targeting citizens interested in social change and education.

Le Mouvement pour l’économie solidaire is a French non-profit organization founded in 2002 that promotes and supports the social and solidarity economy (ESS) through networking, advocacy, and member engagement. The website serves as a platform to inform, recruit members, and share news and resources related to the ESS sector in France. The organization holds a historic and transversal position within the French ESS ecosystem, actively participating in national and European networks. Technically, the website is built on the SPIP CMS platform, using jQuery and AddThis for social sharing, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS assumed but lacking modern security headers and updated libraries. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional and content-rich but requires improvements in security and privacy compliance to enhance trust and user protection.

Les Petits Débrouillards is a French non-profit association dedicated to promoting scientific culture, education, and civic engagement among children and youth. The organization operates nationally with regional branches, offering educational programs, exhibitions, training, and volunteer opportunities. Their mission emphasizes curiosity, critical thinking, solidarity, and citizenship, positioning them as a key player in the French educational non-profit sector. Technically, the website is built with standard HTML5 and CSS, featuring multimedia content such as videos. While the site is accessible and well-structured, it lacks advanced technical frameworks or CMS indications. Mobile optimization and accessibility are basic but functional. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. The WHOIS data is malformed and incomplete, which reduces domain trustworthiness from a registration standpoint. However, the professional content, official contact information, and external partnerships support the site's legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a trustworthy and professional front for a medium-sized educational non-profit. Strategic improvements in security headers, cookie consent mechanisms, and WHOIS transparency would enhance trust and compliance.

Artisans du Monde is a French non-profit organization and associative distribution network dedicated to promoting fair trade products and solidarity artisan crafts. Established in 2001, it operates a network of shops and campaigns to inform, sensitize, and advocate for ethical commerce. The website reflects this mission with content focused on fair trade, education, and advocacy, targeting consumers interested in socially responsible products. Technically, the site is built on Joomla CMS with extensions like Flexicontent and uses modern JavaScript libraries such as jQuery and Select2. It employs Matomo analytics, indicating a preference for privacy-conscious tracking. The site is hosted on o2switch servers with HTTPS enabled, but lacks DNSSEC and some security headers, representing minor security gaps. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies detected. Overall, the website is professional, well-branded, and trustworthy, with a moderate to good security posture.

MIRAMAP is a French non-profit organization dedicated to supporting and consolidating the movement of AMAPs (Associations for the Maintenance of Peasant Agriculture) across France. The organization promotes local, ecological, and solidarity-based agriculture by connecting producers and consumers through AMAP networks. MIRAMAP acts as a national representative and facilitator for these local networks, providing tools, events, and advocacy to strengthen sustainable food systems. The website reflects a mature and well-established entity with a domain registered since 2009, consistent with its organizational history. Technically, the website is built on WordPress using the Astra theme, leveraging common plugins such as Contact Form 7, Leaflet.js for interactive maps, and Matomo for analytics. The site is hosted by OVH sas, a reputable provider, and employs HTTPS with a valid SSL certificate. Mobile optimization and SEO practices are good, though some accessibility features could be improved. Cookie consent is managed via CookieYes, indicating attention to privacy compliance, although a dedicated privacy policy page is not explicitly found. From a security perspective, the site uses HTTPS and Google reCAPTCHA on forms, but lacks DNSSEC and several recommended security headers. No direct incident response or vulnerability disclosure policies are present, which could be areas for improvement. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, MIRAMAP presents a credible, professional, and trustworthy online presence for a non-profit agricultural movement. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing clear privacy and security policies to improve compliance and trust further.

Commerce Équitable France is a French non-profit collective representing actors in the fair trade sector. The organization focuses on advocacy, education, campaigns, and member services to promote fair trade practices nationally. The website is well-structured, professionally designed, and targets both fair trade stakeholders and the general public interested in ethical commerce. The digital infrastructure is based on WordPress with modern plugins and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, some security headers are missing and WHOIS data is privacy-protected, which slightly reduces transparency. Overall, the website is trustworthy and professionally maintained, supporting the organization's mission effectively.

Terre de Liens is a well-established French non-profit organization dedicated to preserving agricultural land and supporting sustainable farming practices. The organization operates through a network of associations, an investment solidarity enterprise, and a public utility foundation. Their website reflects a mature digital presence with good content quality, clear navigation, and a focus on community engagement and transparency. Technically, the site uses modern JavaScript frameworks and analytics tools, hosted under reputable providers with HTTPS enabled. However, explicit privacy policies and terms of service are not readily found, and security headers are not visibly implemented, indicating areas for improvement in compliance and security posture. Overall, the domain registration data supports the legitimacy and trustworthiness of the organization.

Bio Consom'acteurs is a French non-profit organization dedicated to promoting local, equitable, and accessible organic agriculture and food systems. The website serves as a platform for advocacy, community engagement, and information dissemination, targeting a general audience interested in sustainable agriculture and organic consumption. The organization has a clear market position within the non-profit sector focused on environmental and social sustainability. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH sas, and incorporates modern web technologies and a cookie consent mechanism compliant with GDPR standards. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-structured, with strong social media integration and a clear business model. No critical security or compliance issues were detected.

The website mairie-me.org appears to be a community engagement platform aimed at inhabitants of a commune or municipality, encouraging them to propose ideas and act collectively to improve local living conditions. The business model focuses on local governance participation, targeting residents as the primary audience. The website is built on the Bubble.io platform, utilizing modern JavaScript libraries and Google Fonts, with hosting provided by OVH sas. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is basic with HTTPS enabled and a cookie consent mechanism in place, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. The WHOIS data raises concerns due to a domain creation date set in the future, which questions the legitimacy and operational status of the domain. Overall, the website content is safe and suitable for a general audience with no adult or explicit content detected.

Transiscope is a small non-profit project based in France, founded in 2018, focused on connecting citizen initiatives for territorial transition through an open source web portal featuring a unified map and directory. The website is built on WordPress using Elementor and Astra theme, with a moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

Sunelis Services is a French company specializing in the maintenance, repair, and monitoring of photovoltaic solar power installations. Established since 2008, the company offers a range of services including maintenance contracts, after-sales service, troubleshooting, remote monitoring, cleaning, and thermographic analysis. Their target audience includes professionals, private individuals, local authorities, and farmers. The company maintains a professional online presence with clear contact information and social media links, positioning itself as a trusted regional service provider in the renewable energy sector. Technically, the website is built on WordPress using Elementor and several plugins such as Yoast SEO and MonsterInsights for analytics. The site is hosted under the registrar IONOS SE with DNS services from ui-dns providers. The website is mobile-optimized and SEO-friendly, though some accessibility features are basic. Performance is moderate, with modern technologies employed but some room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, no advanced security headers were detected, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Analytics tracking is implemented via Google Analytics and MonsterInsights, with moderate user tracking. Overall, the website is professional, trustworthy, and serves its business purpose well. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and providing clear incident response contacts to improve compliance and security posture.

Edisun Power Europe AG is a Swiss-based publicly listed company specializing in the financing and operation of solar power plants across Europe. Established in 1997, it has grown to become a pioneer in medium to large-scale photovoltaic projects, contributing significantly to the renewable energy sector and the energy transition. The company targets investors and stakeholders interested in sustainable energy solutions, leveraging its broad European presence and expertise. Technically, the website is built on Concrete CMS with modern frontend technologies such as Vue.js and Bootstrap, providing a good user experience with mobile optimization and basic accessibility features. The site employs Google Tag Manager for analytics and includes a GDPR-compliant cookie consent mechanism. Security-wise, the website enforces HTTPS and uses cookie consent but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and public listing support its credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and clearer domain registration transparency.

VALEMO is a French company specializing in the exploitation, maintenance, and supervision of renewable energy assets including wind, solar, hydroelectric, and marine energies. Established in 2011, the company has grown to a medium-sized enterprise with over 145 employees distributed across 15 bases, including a dedicated offshore team. VALEMO positions itself as a leading multi-energy operator in France, recently ranked as the 5th largest wind energy operator nationally. The company offers a comprehensive suite of services from engineering to onshore and offshore operations, targeting clients who own and operate renewable energy installations. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH, a reputable provider. The site integrates Matomo analytics for privacy-conscious user tracking and embeds YouTube videos for multimedia content. The website is mobile-optimized with good SEO practices but could improve accessibility and performance further. Security posture is solid with HTTPS enforced, though security headers and explicit security policies are absent. From a security and compliance perspective, the site implements a GDPR cookie consent mechanism but lacks visible privacy policies, terms of service, or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a long-standing presence and no privacy protection, which supports legitimacy. Overall, VALEMO presents a professional and trustworthy online presence aligned with its business sector. However, improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

Groupe Sorégies is a French energy company focused on accelerating the energy transition through renewable energy production, distribution, supply, and clean mobility services. The company operates primarily in France with a strong regional presence and a diversified portfolio including subsidiaries specializing in electricity and gas distribution, renewable energy aggregation, and innovative mobility solutions. The website demonstrates a mature digital infrastructure built on WordPress with React components and SEO optimization, reflecting a professional and modern online presence. Security posture is adequate with HTTPS and no visible critical vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is trustworthy and well-aligned with the company's business objectives, though privacy compliance could be enhanced.

The website for the Communauté de communes de l'île d'Oléron serves as the official digital presence for the local government community of Île d'Oléron in France. It provides comprehensive information on territorial management, community services, environmental initiatives, economic development, and cultural activities. The site targets residents and stakeholders of the island, offering resources and news relevant to their daily lives and local governance. The business model is that of a public service entity, focusing on community support and regional development. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Amazon Polly, ensuring good SEO and accessibility. The site is mobile-optimized and features a clear navigation structure. Security-wise, the site uses HTTPS and includes Google reCAPTCHA for form protection and a cookie consent mechanism, but lacks visible advanced security headers and published security policies. The WHOIS data is unavailable or hidden, which is unusual for a government domain and warrants further verification. Overall, the site is professional, trustworthy, and serves its community well, though improvements in privacy transparency and security documentation are recommended.

Bordeaux Métropole is the official metropolitan government entity serving 28 communes around Bordeaux, France, providing a wide range of public services including urban planning, transport, waste management, water, economic development, and environmental initiatives. The website serves residents, professionals, associations, and visitors with comprehensive information and digital services. Technically, the site is built on Drupal 10 with modern frontend technologies like Swiper.js, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is typical for some ccTLDs or privacy-protected domains and does not detract from the site's legitimacy given its government nature. Overall, the site is professional, trustworthy, and well-maintained, supporting the metropolitan community effectively.

Hespul is a French non-profit association with over 30 years of experience specializing in renewable energy, particularly solar photovoltaic technology, and energy efficiency. The organization focuses on accelerating the energy transition through project development, education, and community engagement. Their website reflects a mature digital presence with a clear mission and professional content targeting professionals and communities interested in sustainable energy solutions. Technically, the site uses modern web technologies including Foundation framework, FontAwesome icons, and Matomo analytics, hosted on a reputable registrar's infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and cookie consent mechanisms. The absence of direct contact emails or phone numbers is a minor limitation, with contact primarily via web forms. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

Label Emmaüs is an ethical and solidarity-driven e-commerce platform affiliated with the Emmaüs association in France. The website offers a variety of second-hand and vintage products including clothing, books, vinyls, reconditioned smartphones, and artisan goods, targeting consumers interested in responsible consumption and social causes. The platform positions itself as a militant e-shop, emphasizing sustainability and social impact. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, along with Tailwind CSS for styling, and integrates advanced monitoring and analytics tools like New Relic and Klaviyo. The website is well-optimized for mobile devices and includes comprehensive privacy and cookie policies with active consent management, reflecting good GDPR compliance. Security-wise, the site uses HTTPS with appropriate security headers and content security policies, though it lacks a publicly available security policy or incident response information. Overall, the domain registration data aligns with the website's claims, supporting its legitimacy and trustworthiness.

Piaille.fr operates as an independent public Mastodon server primarily serving the francophone community. It provides a federated social networking platform allowing users to participate in the fediverse without centralized control. The service is relatively new, established in late 2022, and positions itself as an accessible and open social media alternative. The website content and branding are consistent with its mission, targeting general users interested in decentralized social media. Technically, the site runs Mastodon version 4.4.7, leveraging modern JavaScript modules and React-based components. Hosting is provided by ScaleWay, a reputable cloud provider, ensuring reliable infrastructure. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be enhanced. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, no explicit security headers were detected, and there is no visible incident response or security policy information. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and GDPR compliance indicators. No contact information or vulnerability disclosure policies are provided, which could be improved to enhance trust. Overall, Piaille.fr presents a trustworthy and functional platform with room for improvement in security and privacy compliance. Strategic enhancements in security headers, privacy notices, and contact transparency would strengthen its posture and user confidence.

Krmivo-pes.cz is a Czech Republic based e-commerce platform specializing in pet food and supplies for a wide range of animals including dogs, cats, horses, and exotic pets. The business operates under Servis.com, s.r.o., with a domain age consistent with its claimed operational history since 2010. The website offers a comprehensive product catalog, customer reviews, and multiple purchasing options including home delivery and in-store pickup. The site is well-branded and provides clear contact information, enhancing customer trust. Technically, the website employs common web technologies such as jQuery, Google Analytics, and Google Tag Manager, with DNS hosted via Cloudflare. The site is mobile-optimized and structured with SEO best practices including JSON-LD structured data. However, the CMS appears custom or proprietary, and no advanced frameworks are detected. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with terms and conditions present but no dedicated privacy or cookie policy or consent mechanism. Customer trust is supported by verified reviews and a certification from Ověřeno zákazníky. Overall, the security posture is adequate but could be enhanced with better privacy and security disclosures. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and incident response transparency would strengthen the site's security and regulatory posture, supporting continued business growth and customer confidence.

Technimax is a Czech-based e-commerce company specializing in the sale of refurbished IT hardware, primarily Dell and HP computers, notebooks, monitors, printers, and servers. The company targets small and medium-sized businesses seeking high-quality, cost-effective IT solutions with extended warranty options up to five years. Their website demonstrates a professional and well-structured online presence with detailed product categorization and clear contact information, supporting their market position as a specialist in refurbished IT equipment in the Czech Republic. Technimax emphasizes quality assurance with an A+ grading system for their products and offers professional servicing and rapid complaint handling.

LGshop.cz is an authorized e-commerce retailer specializing in LG electronics and home appliances, primarily serving the Czech Republic market. The website offers a broad catalog of LG products including TVs, audio systems, home appliances, and accessories, with a focus on express delivery and customer service. The company behind the site is LGC s.r.o., indicating a medium-sized retail operation with a clear brand alignment to LG. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Microsoft Clarity, and CookieHub for analytics, marketing, and compliance. The site is well-structured with good SEO practices and mobile optimization, providing a positive user experience.

Online-textil.cz is a well-established Czech e-commerce platform specializing in promotional textiles, including branded clothing such as t-shirts, polos, hoodies, and workwear. Founded in 2012, it serves both B2B and individual customers primarily in the Czech Republic and the broader EU market. The website offers a broad product catalog with detailed categories and supports bulk orders with custom printing and embroidery services. The company positions itself as one of the largest players in the Czech promotional textile market, emphasizing fast delivery and extensive stock availability. Technically, the website employs modern web technologies including jQuery, Owl Carousel, Google Tag Manager, and a cookie consent solution from cookie-script.com. It uses Cloudflare DNS services and enforces HTTPS, ensuring secure connections. The site is mobile-optimized with good navigation and SEO practices, though it appears to be custom-built without a common CMS. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site benefits from HTTPS and standard security practices but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, Online-textil.cz presents a professional and trustworthy e-commerce presence with a solid market position. To enhance trust and compliance, it should publish comprehensive privacy and terms of service documents and improve transparency around security policies and incident response.

Auto Hotárek s.r.o. operates a specialized e-commerce platform and physical retail stores in the Czech Republic, focusing on automotive accessories and parts. The company targets vehicle owners seeking tailored and universal car accessories, offering a broad product catalog and expert services. Their market position is that of a trusted specialist with a strong local presence, supported by recognized certifications such as the Heureka Shop of the Year awards. Technically, the website employs modern JavaScript frameworks and integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook SDK, and Adform, hosted behind Cloudflare infrastructure. The site is mobile-optimized with good SEO and accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is addressed with cookie consent and detailed privacy policies, supporting GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security policies, and monitoring domain registration status to ensure continued legitimacy.

Goldea.cz is a Czech-based e-commerce retailer specializing in high-quality home textiles including bedding, curtains, towels, and table linens. The company emphasizes Czech craftsmanship, custom tailoring, and natural materials, positioning itself as a trusted brand with a strong customer satisfaction record. Founded in 2016 and operated by MIONET s. r. o., Goldea.cz serves primarily the Czech market with localized content and regional language support. The website is professionally designed with excellent content quality and user experience, supporting clear navigation and mobile responsiveness. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and error monitoring, though some HTTP security headers and explicit security policies are absent. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and business legitimacy evident on the site. Overall, Goldea.cz is a well-established retail platform with solid digital maturity and privacy compliance, though domain registration transparency should be improved.

ICC NTA, LLC operates as a specialized third-party service provider focusing on building product safety, certification, plan review, and off-site construction services. As a subsidiary of the International Code Council, it holds a strong market position within the building and construction industry, offering accredited testing and inspection services to manufacturers and regulatory bodies. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and performance optimizations to serve its target audience effectively. Security posture is robust with HTTPS and security headers implemented, though privacy compliance could be enhanced by adding explicit cookie consent mechanisms and security policies. Overall, ICC NTA demonstrates a mature digital infrastructure aligned with its business objectives and industry standards.

Odoo.sh is the official cloud platform for hosting and developing Odoo ERP applications, offering a comprehensive PaaS and IaaS solution tightly integrated with GitHub. The platform targets developers and businesses seeking streamlined deployment, staging, and production environments with automated testing and backup capabilities. The website demonstrates a high level of professionalism with excellent design, clear navigation, and consistent branding aligned with the Odoo ecosystem. Technically, the site leverages modern web technologies including the Odoo framework, Bootstrap, and integrates Google Analytics and Tag Manager for user insights. Security posture is solid with HTTPS and CSRF protections, though it lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to privacy protection, which is typical for commercial SaaS platforms and does not detract from the site's legitimacy. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

Alternatiba is a well-established French non-profit movement focused on climate action and social justice, active since 2013. The organization operates a network of over 110 local groups and multiple mobilization bases, positioning itself as a key player in climate activism in France and Europe. Their website reflects a strong community engagement model, relying on donations, volunteer participation, and educational campaigns. Technically, the site is built on WordPress with a modern plugin ecosystem, including security and performance enhancements such as reCAPTCHA and lazy loading. Hosting is provided by Infomaniak, a reputable provider. Security posture is solid with HTTPS enforced and anti-spam measures, though explicit security headers could be improved. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for its audience.

Autonomie Paris Saint Jacques (APSJ) is a non-profit association operating as a resource center focused on issues related to aging and autonomy in the central arrondissements of Paris (1st to 6th). The organization supports elderly individuals, their caregivers, and healthcare professionals by providing evaluation services, orientation, training, and innovative local projects to combat isolation and improve care. APSJ is well-positioned locally with partnerships including regional health agencies and retirement insurance bodies. The website reflects a mature digital presence built on WordPress with modern plugins and accessibility features, offering clear navigation and comprehensive content relevant to its audience. Security posture is solid with HTTPS, domain transfer protections, and reCAPTCHA usage, though DNSSEC is not enabled and security headers are absent. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Contact information is transparent and includes multiple channels. Overall, APSJ demonstrates a professional and trustworthy online presence aligned with its mission and audience.

Épices Énergie is a French company specializing in software solutions for the supervision and management of renewable energy installations, including photovoltaic, wind, and hydroelectric power plants. The company targets energy producers and operators seeking efficient tools to monitor and optimize their renewable energy assets. Their market position is that of a niche provider offering a comprehensive web and mobile platform tailored to the renewable energy sector. Key services include data centralization, real-time production monitoring, performance evaluation, maintenance management, and personalized customer support. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, FontAwesome 6 Pro, and Matomo analytics, indicating a mature digital infrastructure with responsive design and moderate performance. However, there is no explicit CMS detected, and hosting details are not disclosed. The site is well-structured with good navigation and content relevance, supporting a positive user experience. From a security standpoint, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data limits domain trust assessment, though the presence of client logos and a LinkedIn profile adds credibility. Overall, Épices Énergie presents a professional and trustworthy online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen their risk posture and user confidence.

Inddigo is a well-established French consulting and engineering firm specializing in ecological and energy transition services for public and private sectors. Founded in 1986, it employs over 400 professionals across 16 locations in France and the Caribbean. The company offers a broad range of services including consulting, engineering, training, and innovation to support sustainable development and complex territorial projects. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress with modern plugins such as Yoast SEO and WP Rocket for performance. Security posture is good with HTTPS and some security headers, but lacks explicit privacy, cookie, and incident response policies visible on the site. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear credible and trustworthy. Overall, the site demonstrates a mature digital presence but would benefit from enhanced transparency in privacy and security policies.

Transition Citoyenne operates a French-language website focused on providing comprehensive comparisons and guides for offshore sports betting sites accessible to French players in 2025. The site positions itself as a specialist resource offering detailed information on bonuses, payment methods including cryptocurrencies, and legal considerations for betting outside the French ANJ regulatory framework. Technically, the site is built on WordPress with common SEO and geotargeting plugins, hosted behind Cloudflare DNS, and uses modern web technologies such as jQuery and FontAwesome. The website is mobile-optimized and presents content in a clear, structured manner with good SEO metadata and JSON-LD structured data. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal policies such as privacy or cookie consent. No direct company contact information or incident response channels are provided, which limits transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.