Security Directory

L

La Quinzaine du commerce équitable

quinzaine-commerce-equitable.org

41

La Quinzaine du commerce équitable is a French non-profit campaign initiated in 2001 to promote fair trade and responsible consumption. The website serves as an awareness platform providing information, event organization, communication kits, and newsletters to engage the public and partners. It is coordinated by a collective linked to www.commercequitable.org, indicating a well-established presence in the fair trade sector in France. The site targets a general audience interested in ethical consumption and sustainability. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, integrating modern plugins such as Slider Revolution and Matomo for analytics. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Cookie consent management is robust, offering detailed user controls compliant with GDPR requirements. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate spam. However, no explicit security headers were detected, and there is no visible security policy or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations but slightly reduces transparency. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Strategic improvements include implementing security headers, publishing security policies, and enhancing accessibility features to further strengthen the security posture and user trust.

U

Urgenci

urgenci.net

46

Urgenci is an established international network dedicated to Community Supported Agriculture (CSA), promoting sustainable agroecology and food sovereignty worldwide. Founded in 2003, it operates as a non-profit organization providing resources, advocacy, events, and community engagement to consumers, producers, and activists interested in local and solidarity-based food systems. The website serves as a hub for news, educational materials, and networking opportunities within the CSA movement. Technically, the site is built on WordPress with Elementor and integrates modern JavaScript libraries such as Leaflet for interactive maps and YouTube embeds for multimedia content. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are not explicitly presented, indicating a compliance gap with GDPR and related regulations. Overall, the website is professional, content-rich, and trustworthy, but would benefit from improved privacy disclosures and security hardening.

R

Revue S!LENCE

revuesilence.net

58

Revue S!LENCE is an independent French monthly magazine focused on ecology, alternatives, and non-violence, published since 1982 and managed by an association. The website serves as a platform for subscription services, news, articles, and event information targeting French-speaking audiences interested in social and ecological issues. The business model is subscription-based with no advertising or subsidies, emphasizing independence and trustworthiness. Technically, the website is built on the SPIP CMS platform with common JavaScript libraries such as jQuery and bxSlider, and uses Bootstrap for responsive design. The site is moderately performant, mobile-optimized, and has good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though some security headers and cookie consent mechanisms are missing. The WHOIS data for the domain is unavailable or indicates the domain is not registered, which is inconsistent with the active and professional website presence. This discrepancy suggests possible WHOIS server limitations or privacy protections but warrants caution. Overall, the site is safe, trustworthy, and well-maintained with clear contact information and privacy policies. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and clarifying domain registration details to improve trust and transparency.

C

Carrefour Culturel Arnaud Bernard

arnaud-bernard.org

56

The Carrefour Culturel Arnaud Bernard is a small non-profit cultural association based in Toulouse, France, focused on promoting cultural and linguistic diversity through events such as the Forom des Langues du Monde, Repas de Quartier, and Conversations Socratiques. The website reflects a community-oriented organization with an international cultural ambition. Technically, the site is built on WordPress using Elementor and the OceanWP theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding are consistent and professional. Overall, the site is trustworthy for its cultural mission but would benefit from improved transparency and security practices.

T

Terre Vivante

terrevivante.org

65

Terre Vivante is a French organization focused on promoting organic gardening, permaculture, ecological housing, and healthy cooking. It operates a content-rich website offering advice, books, and a magazine called Les 4 Saisons. The organization targets environmentally conscious individuals and gardeners interested in sustainable living. The website uses WordPress with WooCommerce for e-commerce and integrates multiple marketing and analytics tools to support its business model. Technically, the site is well-structured, mobile-optimized, and SEO-friendly, though performance is moderate due to numerous third-party scripts. Security posture is good with HTTPS and captcha protections, but could be improved by adding explicit security headers and publishing a security policy. Privacy compliance is strong with cookie consent and GDPR-aligned policies. The absence of WHOIS registration data reduces domain trust slightly, but overall the site appears legitimate and professional.

A

Association PROMMATA

assoprommata.org

47

Association PROMMATA is a French non-profit organization dedicated to promoting modern animal traction in agriculture. The association focuses on supporting and training farmers and users of animal traction through educational programs and the development of simple, versatile tools. The website reflects a niche market position within sustainable and traditional agriculture, targeting a specialized audience of agricultural practitioners interested in animal-powered farming methods. The association emphasizes collaboration with animals to foster a modern yet sustainable agricultural future. Technically, the website is built on WordPress, utilizing popular plugins such as Yoast SEO for search engine optimization and WP Rocket for performance enhancement. The site is mobile-optimized and presents a professional design with clear navigation. However, some technical improvements could be made, including the implementation of security headers and more comprehensive privacy and cookie policies. From a security perspective, the site uses HTTPS, ensuring encrypted communication. No major vulnerabilities or exposed sensitive data were detected. The absence of security headers and explicit privacy compliance documentation suggests room for improvement in security posture and regulatory adherence. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is not uncommon for non-profit entities. Overall, the website is professional, content-rich, and serves its target audience effectively. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing incident response and vulnerability disclosure policies to strengthen trust and security maturity.

P

Phacelia

phacelia.fr

32

Phacelia is a French educational organization dedicated to supporting agricultural renewal through training and educational services. The website presents a professional and consistent brand image with a focus on agricultural education. The technical infrastructure is based on WordPress with WooCommerce and Tutor LMS plugins, hosted on a provider consistent with the domain registrar. The site is mobile optimized and uses HTTPS, indicating a modern digital presence. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and user trust. Security posture is moderate with HTTPS and domain transfer protection but lacks security headers and vulnerability disclosure mechanisms. Overall, the website is functional and credible but would benefit from enhanced privacy and security transparency.

P

Permaculture Humaine

permaculture-humaine.fr

40

Permaculture Humaine is a small French organization focused on promoting human permaculture principles, collective intelligence, and cooperation through educational content, training sessions, and facilitation services. The website serves as an informational and engagement platform, offering resources, blog articles, and contact avenues for interested individuals and groups. The business operates in a niche educational and facilitation market with a clear mission to foster cooperation over competition. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and popular plugins like Yoast SEO and Contact Form 7. Hosting is provided via Scaleway and o2switch, with HTTPS enabled ensuring secure communications. The site demonstrates good SEO practices and mobile optimization but lacks some advanced accessibility features. From a security perspective, the site benefits from HTTPS and no visible sensitive data exposure. However, it lacks important security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, representing a gap in security transparency. Overall, the security posture is moderate but could be improved with additional best practices. The website is fully accessible without WAF or blocking mechanisms, and content safety analysis confirms it is suitable for general audiences with no adult or questionable content. The domain registration is consistent and appropriate for the business age and scope, supporting legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding incident response contacts to enhance trust and compliance.

N

Nature et Progrès

natureetprogres.org

67

Nature et Progrès is a well-established French non-profit association founded in 1964, dedicated to promoting agroecology and organic production through a participatory guarantee system. The website serves as an informational and community platform for producers, consumers, and local groups involved in sustainable agriculture and related sectors. The organization holds a credible market position within the organic certification space in France, supported by a domain registered since 2002 with a reputable registrar, OVH sas. Technically, the website is built on the YesWiki CMS platform, leveraging Bootstrap, jQuery, and Vue.js for a responsive and modern user experience. Hosting is provided by OVH, a known hosting provider. The site demonstrates good mobile optimization and accessibility, though SEO and privacy compliance could be improved. No major performance issues were detected. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited and clientTransferProhibited statuses. However, it lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. The absence of privacy and cookie policies indicates a gap in compliance with GDPR and related regulations. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

C

Chival

chival.fr

48

Chival is a small non-profit association based in France focused on promoting yoga, permaculture, and animal welfare through retreats, workshops, and educational events. The website serves as an informational and community engagement platform targeting individuals interested in ecological sustainability, ethical veganism, and holistic well-being. The technical infrastructure is built on WordPress with common plugins for forms and social media integration, hosted by OVH, a reputable provider. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and consistent with its stated mission but would benefit from enhanced compliance and security practices.

P

Provence Energie Citoyenne

provence-energie-citoyenne.fr

43

Provence Energie Citoyenne is a small French citizen cooperative focused on renewable energy, particularly hydroelectric power generation at the Marie-Thérèse micro-plant. The organization emphasizes community involvement, ecological preservation, and sustainable energy production. The website serves as an information hub with news, events, and educational content targeted at local citizens and environmental advocates. Technically, the site is built on WordPress with modern plugins for SEO, social sharing, and event management, showing moderate to good performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and active content. Overall, the site is trustworthy and well-positioned as a local energy cooperative.

C

Citoyen'R

citoyenr.org

49

Citoy’enR is a French cooperative (SCIC) focused on developing renewable energy production means, primarily photovoltaic solar panels, within the Toulouse urban area. The cooperative model emphasizes citizen participation, social economy values, and ecological responsibility. The business model involves collective citizen investment to finance installations, with electricity sold at guaranteed tariffs to fund new projects, educational initiatives, and member remuneration. The website presents a professional and consistent brand image, targeting local citizens and stakeholders interested in sustainable energy solutions.

E

EnergyTransition.org

energytransition.org

46

EnergyTransition.org is an informational and educational platform focused on global energy transitions, with a particular emphasis on Germany's Energiewende. It is affiliated with the Heinrich Böll Foundation, a reputable organization promoting democracy, human rights, and environmental sustainability. The website serves a broad audience including policy makers, researchers, and the general public interested in energy and climate issues. The platform offers articles, blogs, podcasts, and a wiki to support knowledge dissemination in the energy sector. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, Podlove Podcasting, and Piwik PRO analytics. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The hosting and domain registration are consistent with the organization's profile, with no privacy protection used, enhancing transparency. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and explicit security or incident response policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. No contact emails or phone numbers are provided, which may limit direct user engagement. Overall, the website is professional, trustworthy, and content-rich but could improve its privacy compliance and security posture by implementing standard security headers, publishing privacy and cookie policies, and providing vulnerability disclosure information.

P

Post Carbon Institute

resilience.org

61

Resilience.org is a non-profit program under the Post Carbon Institute focused on supporting community resilience in response to ecological and social challenges. The website offers editorial content, podcasts, events, and subscription-based deep dives to educate and engage its audience. The organization positions itself as a thought leader in sustainability and resilience, targeting a general audience interested in these topics. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy transparency and WHOIS data availability for improved domain trust.

E

ECOLISE

ecolise.eu

53

ECOLISE is a European non-profit network dedicated to empowering community-led initiatives focused on climate change and sustainability. The organization provides participatory advocacy, funding through the Regenerative Communities Fund, project support, and a variety of resources including publications and activity reports. Their target audience includes communities and stakeholders engaged in environmental sustainability across Europe. The website positions ECOLISE as a key network in the European sustainability ecosystem, emphasizing collaboration and community empowerment. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO, Events Calendar Pro, and Groundhogg for marketing automation. The site is well-structured with good SEO practices, mobile optimization, and accessibility features. Google Analytics is used with consent mode configured to deny personalization and storage in certain regions, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements consent mechanisms for cookies. However, no explicit security headers were detected, and there is a lack of published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. The domain registration is consistent and trustworthy, with no privacy protection masking registrant details. Overall, ECOLISE's website demonstrates a solid digital presence with good business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and terms of service policies, add security policy information, and consider a vulnerability disclosure mechanism. These steps will strengthen the site's privacy compliance and security posture, supporting its mission to empower communities for a sustainable future.

T

Transition Initiative by Transition Network

transitiongroups.org

41

The website maps.transitionnetwork.org serves as a global directory and mapping platform for Transition groups, hubs, and trainers focused on community-led sustainability and resilience initiatives. It is a niche, non-profit community platform that supports the Transition movement by enabling group registration, mapping, and providing resources. The platform targets members of the Transition movement, community organizers, and sustainability advocates worldwide. Technically, the website is built on WordPress with a modern tech stack including jQuery, Leaflet.js for mapping, and multilingual support via TranslatePress. It employs Google reCAPTCHA for form security and uses Matomo and GoatCounter for analytics. The site is well-structured with good SEO and accessibility features, and it is mobile-optimized. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms. However, it lacks several important security headers such as Content-Security-Policy and X-Frame-Options, which could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found in the analyzed content. Overall, the website presents a professional and trustworthy platform for its community-focused mission. The lack of WHOIS data due to privacy protection is common for such non-profit entities and does not raise immediate concerns. Strategic recommendations include adding comprehensive privacy and terms of service pages, implementing additional security headers, and maintaining regular updates to WordPress and plugins to ensure ongoing security and compliance.

R

Rob Hopkins

robhopkins.net

59

Rob Hopkins' website serves as a professional platform for his work as an author and advocate for sustainability and collective imagination. The site offers rich content including blog posts, podcasts, videos, and information about his books and trainings, targeting individuals interested in environmental and community-driven change. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and CleanTalk for anti-spam, and integrates Google Analytics and Jetpack for analytics and performance monitoring. The site is well-structured, mobile-optimized, and accessible, providing a positive user experience. Security-wise, the site enforces HTTPS and uses anti-spam measures but lacks some security headers and formal policies such as privacy and cookie notices, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active content of the site.

O

Octopuce

octopuce.fr

55

Octopuce is a French technology company founded in 1999 specializing in custom server hosting and managed IT services since 2005. The company emphasizes high-quality service, security, and direct client engagement, managing Debian Linux infrastructures with a devops approach. Their service model includes contractual SLAs with 24/7 support and a commitment to free software and data protection values. Technically, the website is built on WordPress with the Divi theme and uses jQuery, reflecting a modern but standard web technology stack. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit policies. The absence of WHOIS data limits domain trust assessment, but the website content and business presentation are professional and consistent with a legitimate small technology service provider.

G

GoGoCarto - Créez des cartes à GoGo !

gogocarto.fr

59

GoGoCarto is a French technology platform specializing in participatory mapping, enabling users to create and share community-driven map projects. The platform hosts thousands of projects, indicating a vibrant user base and active community engagement. The website is well-branded, consistent, and provides open source code and documentation links, reflecting transparency and openness. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics for privacy-conscious user tracking. The hosting is provided by Colibris outils libres, a known free software hosting provider, which aligns with the platform's open source ethos. Security posture is moderate with HTTPS enforced and sandboxed iframes, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Business credibility is supported by domain age, consistent WHOIS data, and active project hosting. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

SeenThis.net is a niche social blogging platform in beta phase, offering short-blogging without text limits, content curation, forums, and automatic thematisation. The platform targets general internet users interested in social media and content sharing. Technically, it uses the SPIP CMS with JavaScript libraries such as jQuery and Photoswipe, hosted by Infomaniak Network SA. The website is moderately optimized for mobile and performance, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and stable with a domain age consistent with its business history.

P

Partage des eaux

partagedeseaux.info

47

Partage des eaux is a French-language non-profit informational website focused on water management, sustainability, and environmental issues. The site operated actively from 2010 to 2020, publishing analyses and resources, and now serves as an archive with new content redirected to the Ritimo network. The website uses the SPIP CMS platform with standard web technologies and integrates Google Analytics and Google Tag Manager for tracking. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies and does not display security headers, which are areas for improvement. WHOIS data is unavailable due to TLD restrictions, but the domain appears legitimate and privacy protection is justified given the site's nature. Overall, the site is a valuable resource with moderate technical and security maturity.

S

index [Scrutari]

scrutari.net

43

Scrutari is a niche technology project focused on providing a metadata-driven search engine platform that indexes subscribed websites using a custom XML metadata format called ScrutariData. The system architecture includes a Java-based server running on Tomcat and various clients implemented in PHP and XUL. The website serves as documentation for developers and users interested in this specialized search technology. The site is built on DokuWiki and presents technical content in French, targeting a developer and technical audience. The business model appears to be centered on offering a customizable search engine solution for specific site collections, emphasizing relevance over exhaustive indexing. Technically, the website uses a standard DokuWiki CMS with jQuery and custom JavaScript. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No hosting provider or SSL configuration details are evident from the content. The absence of HTTPS information and security headers suggests potential security improvements are needed. No analytics or advertising scripts were detected, indicating minimal tracking and marketing activity. From a security perspective, the site does not disclose privacy, cookie, or terms of service policies, nor does it provide contact information for incident response or data protection officers. The WHOIS lookup failed to retrieve domain registration details, raising concerns about domain legitimacy and ownership transparency. No vulnerabilities or exposed sensitive data were found in the HTML content, but the lack of security best practices and policies reduces the overall security posture. Overall, the site is a functional technical documentation resource with moderate content quality but lacks critical security, privacy, and business credibility indicators. The domain registration ambiguity is a significant risk factor. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and incident response information, and improving mobile and accessibility features to enhance trust and compliance.

F

fenopix

fenopix.com

57

Fenopix is a small technology company specializing in providing an HTML5 and JavaScript charting library called CanvasJS. The website positions itself as a niche provider of responsive, high-performance charting solutions suitable for developers and businesses requiring interactive data visualization. The business model revolves around software product offerings, with additional promotion of a Twitter extension called HashPlug. The site demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Bootstrap framework, and integrating Google Analytics and social media for marketing. The technical infrastructure is stable with Cloudflare DNS and GoDaddy domain registration, but lacks advanced security configurations such as DNSSEC and security headers. Security posture is basic with HTTPS enabled but missing explicit security policies or incident response information. Overall, the website is professional and safe, but lacks comprehensive privacy and cookie policies, which impacts compliance. Strategic improvements in security and privacy transparency are recommended to enhance trust and compliance.

C

Centrum vzdělávání, informací a kultury p. o.

cvik.info

45

Centrum vzdělávání, informací a kultury Český Brod is a local public institution combining educational, informational, and cultural services including a municipal library, information center, and cultural house. The website serves as a portal for event calendars, ticket sales, photo galleries, and official communications targeting the local Czech community. The business model is focused on community engagement and cultural enrichment rather than commercial activities. Technically, the website employs a modern frontend stack with Bootstrap, jQuery, FontAwesome, and other libraries, ensuring a responsive and user-friendly experience. Google Tag Manager is used for analytics and marketing tracking, with a cookie consent mechanism implemented to comply with GDPR requirements. The site is well-structured with clear navigation and accessible contact options. From a security perspective, the site uses HTTPS and has implemented cookie consent controls, but lacks visible HTTP security headers and explicit security or incident response policies. The WHOIS data is incomplete and malformed, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a public cultural institution. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in security headers, WHOIS transparency, and explicit security policies would enhance its security posture and compliance.

Igor Mikula Photography is a small-scale professional photography business specializing in wildlife and nature photography. The website serves as a portfolio showcasing galleries and films related to the photographer's work. The business targets photography enthusiasts and nature lovers, offering visual art products and services. The market position is niche, focusing on artistic and nature photography rather than commercial mass-market offerings. Technically, the website is built on WordPress using the Vantage theme and common plugins such as Contact Form 7 and SiteOrigin Panels. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks important security headers and privacy compliance documentation. No WHOIS data is available for the domain, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but minimal in content and security best practices, with room for improvement in privacy, contact transparency, and security hardening.

Orbisius is a small technology company specializing in WordPress development services, custom plugin development, and SaaS applications. The website positions itself as a niche provider targeting WordPress users and businesses seeking tailored digital solutions. The business has been established since 2012, with a consistent domain registration and a professional online presence. Technically, the website is built on WordPress CMS using popular plugins and themes, integrating Google APIs and live chat for user engagement. SEO optimization is evident through the use of Yoast SEO and structured data. However, the website lacks explicit privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust. The domain is registered transparently without privacy protection, indicating legitimacy. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security posture.

T

Trustami GmbH

produktbewertungen.org

59

Produktbewertungen.org is a German-based product review aggregation platform operated by Trustami GmbH. It consolidates over 10 million product reviews from various e-commerce and marketplace websites, providing consumers with a comprehensive overview and unified rating to facilitate informed purchasing decisions. The platform targets online shoppers seeking to save time by accessing all relevant product feedback in one place. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics with IP anonymization, and uses a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and presents a professional, consistent brand experience aligned with Trustami's corporate identity. Security-wise, the site enforces HTTPS and anonymizes analytics data but lacks some advanced security headers and explicit security policies. The absence of WHOIS registration data limits domain trust verification, though the presence of company contact details and social media links supports legitimacy. Overall, the website demonstrates a solid digital maturity level with room for improvement in security transparency and WHOIS data availability.

E

Elephant Orchestra s.r.o.

uspory.cz

67

Úspory.cz is a Czech financial comparison portal operated by Elephant Orchestra s.r.o., part of the Srovnejto.cz group. The website offers comprehensive comparison services for loans, insurance, mortgages, energy providers, and mobile tariffs, targeting Czech consumers seeking to save money and time. The platform is well-established with over 1.5 million households served since 2010, indicating a strong market presence. Technically, the site uses a modern JavaScript stack with analytics and marketing tools integrated, including Google Analytics, Facebook Pixel, Hotjar, and Inspectlet, all managed with user consent mechanisms. Security is robust with HTTPS and 256-bit SSL encryption, though some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant. However, WHOIS data is unavailable, limiting domain registration trust verification. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Storck

toffifee.com

61

The website www.toffifee.com represents the Toffifee confectionery brand, part of the Storck group. It provides product information, brand history, and country-specific site links targeting a general family audience. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy despite the professional appearance and brand association. Security posture is good with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is trustworthy and well-maintained but would benefit from improved transparency in domain registration and security disclosures.

S

STORCK SVERIGE AB

storck.dk

60

STORCK SVERIGE AB operates as the Swedish branch of the global confectionery manufacturer August Storck KG, offering well-known brands such as Werther's Original, Toffifee, and Riesen. The website serves as a corporate and brand information portal targeting Swedish consumers and business partners, providing product information, company news, and career opportunities. The site is professionally designed, localized in Swedish, and integrates modern web technologies including TYPO3 CMS and JavaScript libraries for enhanced user experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR requirements. Security posture is generally strong with HTTPS enforced, though explicit security headers and incident response contacts are not evident. The WHOIS data for the subdomain www.storck.se is unavailable, likely due to it being a subdomain rather than a registered domain, but the overall brand legitimacy is supported by consistent branding and related domains. Recommendations include enhancing security headers, providing clearer security contact information, and auditing third-party scripts for vulnerabilities.

A

AUGUST STORCK KG

storck.de

73

Storck is a well-established German confectionery company operating a professional corporate website that showcases its brands, sustainability initiatives, career opportunities, and news updates. The website is built on TYPO3 CMS and employs modern JavaScript libraries and frameworks, providing a responsive and accessible user experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which contrasts with the professional and active nature of the website. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of security headers and explicit incident response information suggests room for improvement. Overall, the website is trustworthy and well-maintained but would benefit from enhanced transparency regarding domain registration and security policies.

S

Storck

toffifee.at

72

The website www.toffifee.at is a professionally designed brand site for Toffifee, a confectionery product under the Storck company umbrella. It provides product information, recipes, and brand engagement content targeted primarily at Austrian consumers and families. The site uses TYPO3 CMS and modern JavaScript libraries to deliver a responsive and user-friendly experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR requirements. However, no direct contact emails or phone numbers are present on the homepage, with contact facilitated via a form on a dedicated page. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. WHOIS data is unavailable, limiting domain registration trust analysis, but the brand consistency and external links to Storck-related domains support legitimacy.

A

August Storck KG

mamba.us

72

Mamba.us is the official website for Mamba Fruit Chews, a confectionery brand owned by August Storck KG, a well-established German company. The site provides detailed product information, consumer engagement features such as newsletter signup, and social media integration. The business targets general consumers interested in fruity candy products and maintains a consistent brand presence aligned with its parent company Storck USA. Technically, the website uses modern JavaScript libraries and analytics tools, with a moderate performance profile and basic mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, supporting the brand's retail marketing efforts effectively.

P

PROFI CREDIT Czech, a. s.

proficredit.cz

53

PROFI CREDIT Czech, a. s. is a well-established financial services company based in the Czech Republic, specializing in non-bank insured loans up to 250,000 CZK. The company targets individuals and small business clients seeking flexible loan options with insurance for repayment capability. With a domain age dating back to 2006, PROFI CREDIT has a solid market presence and a good reputation, supported by positive customer ratings and professional branding. The website reflects a mature digital infrastructure built on WordPress, integrating modern tools such as Cookiebot for privacy compliance, Google Tag Manager, Hotjar for analytics, and a chat system for customer support. The site is mobile-optimized and SEO-friendly, providing a good user experience.

W

Web pro Vás

web-provas.cz

49

Web pro Vás is a Czech-based small business specializing in professional web development, e-commerce solutions, and online/offline marketing services. Established in 2013, the company positions itself as a reliable partner for small and medium enterprises and entrepreneurs seeking to enhance their online presence. Their website demonstrates a clear business model focused on delivering comprehensive digital solutions including website creation, e-shop development, and marketing strategies. The company emphasizes client satisfaction and long-term cooperation, supported by client testimonials and named contact persons. Technically, the website is built on WordPress with popular plugins and frameworks, ensuring a modern and responsive user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Tracking and retargeting pixels are used moderately, with privacy policies in place indicating GDPR compliance. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Elephant Orchestra, a.s. is a Czech Republic-based digital marketing company specializing in lead generation, email marketing, mobile marketing, telemarketing, affiliate programs, and discount portals. With over 12 years of market presence and recognition such as Deloitte's Technology Fast 50 CE Rising Star in 2011, the company serves a broad range of business clients aiming to enhance their online customer acquisition and marketing effectiveness. The company operates multiple projects and is part of the Klik.cz & ePojisteni.cz s.r.o group, indicating a strong partnership ecosystem. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Bootstrap, and various JavaScript libraries for UI and performance enhancements. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some security headers are missing, and WHOIS data is unavailable, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enabled and no visible vulnerabilities in the content. Privacy compliance is good with clear policies and consent banners. The absence of WHOIS registration data is a notable risk factor, but the website content and business information suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from improved security headers and domain registration transparency. Strategic recommendations include enhancing security headers, conducting regular security audits of third-party scripts, improving accessibility, and verifying domain registration details to strengthen trust and compliance.

V

Vorwerk

vorwerk.de

73

Vorwerk is a well-established German company specializing in premium household appliances, notably the Thermomix® kitchen appliance and Kobold vacuum cleaners. The website reflects a strong market position with comprehensive product offerings, customer engagement through product demonstrations, and a dedicated recipe portal. The brand targets consumers seeking innovative and high-quality home appliances. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager and Adobe Helix RUM. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website demonstrates a mature digital presence with strong branding and trust indicators, though WHOIS data is unavailable, which slightly limits domain registration trust analysis.

L

Léo Chiron

leochiron.fr

57

Léo Chiron is a freelance full-stack web developer and webmaster based in France, with over 8 years of experience. The website serves as a professional portfolio showcasing his expertise in web development, SEO, WordPress, and site maintenance. The business targets clients needing custom website creation, e-commerce platforms, and ongoing site support. Technically, the site uses a modern tech stack including PHP, JavaScript, SQL Server, and integrates Google services such as Maps, reCAPTCHA, and Tag Manager. The hosting is provided by o2switch, a French hosting provider. Security posture is solid with HTTPS and reCAPTCHA protection on forms, but lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Vorwerk UK

vorwerkcommunitystars.com

64

Vorwerk Community Stars is a dedicated online platform designed to engage Thermomix customers and culinary enthusiasts through a global community program. The website facilitates recipe sharing, product testing, and community challenges, fostering brand loyalty and customer interaction. It targets passionate Thermomix users primarily in the UK and several European countries, leveraging a niche community model to enhance customer experience and product feedback. Technically, the website is built on the Telligent Community platform, utilizing jQuery and Google Tag Manager for analytics and user interaction. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Hosting and domain registration are consistent with the brand's UK presence, though DNSSEC is not enabled, representing a minor security improvement opportunity. From a security perspective, the site enforces HTTPS and employs domain transfer protections. However, it lacks visible security policies and incident response contacts, which could be enhanced to improve transparency and trust. Privacy compliance is well addressed with clear cookie consent mechanisms and privacy policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and user-friendly experience for its target audience. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to strengthen the security posture further.

KPMG Business Institute, operated by KPMG Česká republika, s.r.o., is a professional educational platform specializing in finance, accounting, compliance, and management training. The website offers a broad catalog of courses targeting professionals and companies in the Czech Republic, leveraging the strong global KPMG brand. The business model focuses on B2B and B2C training services with a well-established market position supported by client testimonials and ACCA accreditation. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager and Google Analytics for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. No CMS or hosting provider details are explicitly detected. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR alignment. Overall, the website presents a low-risk profile with strong business credibility and professional content. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

C

CanvasJS

canvasjs.com

68

CanvasJS is a specialized technology company providing a high-performance HTML5 JavaScript charting library designed for developers and businesses requiring advanced data visualization solutions. The company offers a broad range of chart types and supports multiple popular frameworks such as React, Angular, and jQuery, positioning itself as a versatile and developer-friendly solution in the data visualization market. The business is a subsidiary of Fenopix and has been operational since 2013, with a domain registration dating back to 2011, indicating a stable and established presence. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is optimized for performance and mobile responsiveness, with good SEO practices implemented via Yoast SEO. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring reliable uptime and performance. From a security perspective, the site enforces HTTPS with strong domain status protections and includes standard security headers. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response contacts are published, suggesting room for enhancement in transparency and security governance. The site does not expose sensitive data and uses asynchronous loading for analytics scripts to minimize performance impact. Overall, CanvasJS presents a professional, trustworthy, and technically sound web presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

C

Coredem

coredem.info

53

Coredem is a collective project aggregating documentary resources from over 30 organizations focused on democracy and social transformation. It offers a specialized search engine, Scrutari, and hosts thematic collections and debates in multiple languages. The website is built on the SPIP CMS platform with a modern responsive design and uses analytics tools such as Google Analytics and Matomo. However, it lacks visible privacy and cookie policies and does not expose contact information prominently. The WHOIS data is unavailable, which limits domain trust verification, but the website content and structure appear professional and legitimate for a non-profit collective. Security headers are not detected, and privacy compliance is minimal, indicating areas for improvement.

C

Collectif des associations citoyennes

associations-citoyennes.net

52

The Collectif des associations citoyennes (CAC) is a French non-profit organization dedicated to defending the rights of associations and promoting social solidarity. The website serves as a hub for advocacy, events, publications, and mobilization efforts targeting associations and citizens engaged in social causes. The organization maintains an active presence on social media platforms including Facebook, Twitter, and YouTube, and provides multiple resource sites for knowledge sharing and mobilization. Technically, the website is built on WordPress using the Themify Ultra theme, incorporates modern JavaScript libraries such as Swiper.js, and employs Matomo for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and use of hCaptcha for forms, though there is room for improvement in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and social presence strongly support the organization's authenticity. Overall, the site is professional, content-rich, and serves its target audience effectively.

H

Habitat Participatif France

habitatparticipatif-france.fr

58

Habitat Participatif France is a French citizen movement founded in 2013 dedicated to promoting participative, ecological, and solidarity-based housing projects. The organization acts as a federation providing resources, advocacy, and networking opportunities for individuals and groups interested in alternative housing models. The website is well-structured, professionally designed, and provides comprehensive information and tools to support participative housing initiatives across France. Technically, the site is built on the YesWiki CMS platform, leveraging Bootstrap 5 and jQuery, and employs Matomo analytics configured to respect user privacy by disabling cookies. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. The absence of WHOIS data for the domain is a transparency concern but does not detract significantly from the site's legitimacy given the quality and consistency of content. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy, informative, and serves a niche non-profit community effectively.

A

Association On passe à l'acte

onpassealacte.fr

47

On passe à l'acte is a French non-profit media platform dedicated to showcasing positive social and environmental initiatives through documentaries, interviews, and educational content. Founded in 2010, it operates with a cooperative business model and relies on donations and community support. The website targets a general audience interested in social innovation and sustainability. Technically, the site uses modern web technologies including the Foundation CSS framework, jQuery, and integrates Google Analytics and Facebook Pixel for tracking. Hosting is provided by Infomaniak Network SA, a reputable Swiss provider. Security posture is moderate with HTTPS enforced but lacks some recommended security headers and explicit privacy compliance mechanisms such as cookie consent banners. The WHOIS data is transparent and consistent with the business profile, indicating legitimacy. Overall, the website is professional, content-rich, and trustworthy but could improve in privacy compliance and security best practices.

M

Mouvement Utopia

mouvementutopia.org

52

Mouvement Utopia is a French non-profit cooperative dedicated to popular education and social activism. Established in 2008, it operates as a citizen cooperative offering educational resources, events, podcasts, and cultural activities. The organization maintains a strong presence in its niche sector with active engagement through its website and social media channels. The website serves as a hub for news, event announcements, and educational content, targeting citizens interested in social change and education.

L

Le Mouvement pour l’économie solidaire

le-mes.org

56

Le Mouvement pour l’économie solidaire is a French non-profit organization founded in 2002 that promotes and supports the social and solidarity economy (ESS) through networking, advocacy, and member engagement. The website serves as a platform to inform, recruit members, and share news and resources related to the ESS sector in France. The organization holds a historic and transversal position within the French ESS ecosystem, actively participating in national and European networks. Technically, the website is built on the SPIP CMS platform, using jQuery and AddThis for social sharing, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS assumed but lacking modern security headers and updated libraries. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional and content-rich but requires improvements in security and privacy compliance to enhance trust and user protection.

A

Artisans du Monde

artisansdumonde.org

45

Artisans du Monde is a French non-profit organization and associative distribution network dedicated to promoting fair trade products and solidarity artisan crafts. Established in 2001, it operates a network of shops and campaigns to inform, sensitize, and advocate for ethical commerce. The website reflects this mission with content focused on fair trade, education, and advocacy, targeting consumers interested in socially responsible products. Technically, the site is built on Joomla CMS with extensions like Flexicontent and uses modern JavaScript libraries such as jQuery and Select2. It employs Matomo analytics, indicating a preference for privacy-conscious tracking. The site is hosted on o2switch servers with HTTPS enabled, but lacks DNSSEC and some security headers, representing minor security gaps. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies detected. Overall, the website is professional, well-branded, and trustworthy, with a moderate to good security posture.

M

MIRAMAP

miramap.org

57

MIRAMAP is a French non-profit organization dedicated to supporting and consolidating the movement of AMAPs (Associations for the Maintenance of Peasant Agriculture) across France. The organization promotes local, ecological, and solidarity-based agriculture by connecting producers and consumers through AMAP networks. MIRAMAP acts as a national representative and facilitator for these local networks, providing tools, events, and advocacy to strengthen sustainable food systems. The website reflects a mature and well-established entity with a domain registered since 2009, consistent with its organizational history. Technically, the website is built on WordPress using the Astra theme, leveraging common plugins such as Contact Form 7, Leaflet.js for interactive maps, and Matomo for analytics. The site is hosted by OVH sas, a reputable provider, and employs HTTPS with a valid SSL certificate. Mobile optimization and SEO practices are good, though some accessibility features could be improved. Cookie consent is managed via CookieYes, indicating attention to privacy compliance, although a dedicated privacy policy page is not explicitly found. From a security perspective, the site uses HTTPS and Google reCAPTCHA on forms, but lacks DNSSEC and several recommended security headers. No direct incident response or vulnerability disclosure policies are present, which could be areas for improvement. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, MIRAMAP presents a credible, professional, and trustworthy online presence for a non-profit agricultural movement. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing clear privacy and security policies to improve compliance and trust further.

C

Commerce Équitable France

commercequitable.org

59

Commerce Équitable France is a French non-profit collective representing actors in the fair trade sector. The organization focuses on advocacy, education, campaigns, and member services to promote fair trade practices nationally. The website is well-structured, professionally designed, and targets both fair trade stakeholders and the general public interested in ethical commerce. The digital infrastructure is based on WordPress with modern plugins and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, some security headers are missing and WHOIS data is privacy-protected, which slightly reduces transparency. Overall, the website is trustworthy and professionally maintained, supporting the organization's mission effectively.