Security Directory

S

Storck

nimm2.de

10

The website www.nimm2.de represents the nimm2 brand, a confectionery product line under the Storck company, targeting a general audience in Germany. It provides product information, promotional content, and brand engagement features. The site is well-branded and consistent with the parent company's identity, offering a user-friendly experience with clear navigation and mobile optimization. Technically, the site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, Lodash, and jQuery, with analytics powered by Piwik PRO. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response details are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Storck

merci.de

71

Merci.de is the official German website for the merci brand, a confectionery product line under the Storck company. The site serves as a marketing and informational platform showcasing product varieties, promotional campaigns, personalized packaging options, and DIY crafting ideas. It targets German-speaking consumers interested in gifting and chocolate products. The website is well-branded, professionally designed, and consistent with the parent company's identity. Technically, it is built on TYPO3 CMS with modern JavaScript frameworks and includes a cookie consent mechanism compliant with GDPR. Social media integration and external shop links enhance user engagement. Security posture is solid with HTTPS and cookie consent, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, user-friendly, and content-rich, supporting the brand's retail and marketing objectives.

S

Storck

toffifee.hu

62

The website www.toffifee.hu is a professionally designed brand marketing site for Toffifee confectionery products targeted at the Hungarian market. It is owned and operated by Storck, a well-established confectionery company. The site provides product information, brand storytelling, and consumer engagement features, with clear navigation and mobile optimization. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, ensuring a moderate to good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. Privacy compliance is good, with accessible privacy and cookie policies in Hungarian. No direct contact emails or phone numbers are visible on the homepage, but a contact form is available on a dedicated page. WHOIS data confirms domain legitimacy and consistency with the brand identity. Overall, the site is trustworthy, safe, and professionally maintained.

S

Storck

merci.hu

70

The merci.hu website serves as the official Hungarian portal for the merci chocolate brand, owned by Storck. It provides product information, promotional content, and custom packaging options targeted at Hungarian consumers. The site is well-branded, consistent, and professionally designed, reflecting a mature retail confectionery business. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Piwik PRO for analytics, indicating a moderate to advanced digital infrastructure. Security-wise, the site employs cookie consent mechanisms and does not expose sensitive data, but lacks explicit security policies and incident response contacts, suggesting room for improvement in transparency and security posture. Overall, the site is trustworthy, GDPR compliant, and free from suspicious content or domains.

S

Storck

werthers-original.pl

62

Werther's Original Poland website represents a well-established confectionery brand under the parent company Storck. The site offers product information and brand storytelling focused on caramel sweets, targeting a general audience in Poland. The business model is retail-oriented, emphasizing product promotion and brand engagement. The website is professionally designed with consistent branding and good content quality, supporting a positive market position within the confectionery sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as RequireJS, jQuery, and Lodash. It includes responsive design elements and SEO-friendly metadata. The site performance is moderate, with good mobile optimization but basic accessibility features. Analytics are implemented via Piwik PRO with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS (implied by canonical URLs) and has implemented cookie consent banners. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is published. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this business type but slightly reduces transparency. Overall, the website presents a trustworthy and professional digital presence with moderate security posture and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's security and user trust further.

S

Storck Polska

nimm2.pl

63

The website www.nimm2.pl is the official Polish site for the nimm2 brand, a confectionery product line under the Storck company. It provides detailed product information, brand storytelling, and consumer engagement content targeted at families and general consumers interested in sweet treats with vitamins. The site is professionally designed with consistent branding and good navigation, supporting a positive user experience. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial .pl domains. Overall, the site is trustworthy, safe, and well-maintained.

S

Storck

toffifee.pl

61

The website www.toffifee.pl is a professionally designed brand site for Toffifee confectionery products in Poland, operated under the parent company Storck. It provides product information, promotional content, and brand engagement primarily targeting Polish consumers interested in sweets. The site uses TYPO3 CMS and modern JavaScript libraries, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented via a cookie notice. Security posture is moderate, with no visible security headers and no explicit incident response contacts, but no critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is not publicly available, typical for .pl domains, but the website's professional presentation and linkage to Storck indicate legitimacy. Overall, the site scores well on content quality, business credibility, and privacy compliance, with room for improvement in security best practices and transparency.

S

Storck Polska

merci.pl

70

Merci.pl is the official Polish website for the merci chocolate brand, operated under the parent company Storck Polska. The site serves as a marketing and brand engagement platform, showcasing product ranges, limited editions, and interactive features for consumers in Poland. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response information are absent. WHOIS data is unavailable, limiting domain trust assessment, but the website's professional presentation and brand consistency support legitimacy. Overall, merci.pl is a well-maintained retail brand site with moderate technical maturity and good privacy compliance.

F

Flexity

flexitylife.eu

46

Flexity is a specialized e-commerce retailer focusing on Pilates reformers, chairs, Cadillac units, and related fitness and body-mind care products. The website targets Pilates and fitness enthusiasts across multiple European markets with localized versions and multiple language support. The business model is retail e-commerce with a niche focus, supported by professional product presentation and customer engagement tools such as Trustpilot reviews and loyalty programs. Technically, the site is built on the Shoptet platform, leveraging common web technologies like jQuery, Google Tag Manager, and Facebook SDK for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS enforced and CSRF protection on forms, though some security headers could be improved. Privacy compliance is evident with a cookie consent mechanism and a privacy policy that aligns with GDPR requirements. No WHOIS registrant data is publicly available due to privacy protection, which is typical for commercial e-commerce sites. Overall, the site presents a trustworthy and professional front with moderate technical sophistication and good compliance practices.

Z

Zalando

zalando.cz

47

Zalando.cz is a major European e-commerce platform specializing in fashion, shoes, and accessories. The website offers a broad assortment of products with a focus on fast delivery and free shipping for most orders. The platform targets a general audience including women, men, and children, providing a comprehensive online shopping experience. Technically, the site uses modern web technologies including React and RequireJS, and integrates a consent management platform to comply with GDPR requirements. The security posture is strong with HTTPS enforced and use of security best practices, although explicit security headers and vulnerability disclosure mechanisms are not visible in the provided data. Overall, Zalando.cz presents a professional, trustworthy, and user-friendly online retail environment.

P

pressrelations GmbH

pressrelations.com

49

pressrelations GmbH is a well-established media monitoring and intelligence company founded in 2001, offering AI-supported platforms and consulting services to marketing and PR professionals worldwide. Their flagship product, NewsRadar®, provides cross-media monitoring and analysis, supporting over 1000 clients globally with a team of 250 employees across 12 locations. The company emphasizes a blend of technology and human expertise to deliver comprehensive media insights in real time. Technically, the website is built on TYPO3 CMS and integrates modern analytics and tracking tools such as Google Tag Manager, Hotjar, and social media pixels, with a strong focus on user privacy and consent management. Security posture is good with HTTPS enforced and secure forms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a strong business credibility despite missing WHOIS data. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure mechanisms to further strengthen trust and security.

G

Grenoble INP - UGA

grenoble-inp.fr

52

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

A

ABOUT YOU

aboutyou.cz

62

ABOUT YOU is a large online fashion retail platform operating in the Czech Republic, offering over 1500 brands with services including free delivery and a 30-day return policy. The website demonstrates a mature e-commerce business model with a strong market position in the regional fashion retail sector. Technically, the site employs modern JavaScript frameworks, integrates advanced consent management via Usercentrics, and uses Datadog for logging and monitoring, indicating a high level of digital maturity. Security posture is solid with HTTPS enforcement and security best practices, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and no detected vulnerabilities or suspicious content.

2

20ecolesdechimie

20ecolesdechimie.com

41

20ecolesdechimie.com is the official website of the Fédération Gay-Lussac, a federation of 20 chemistry and process engineering schools in France. The site serves as an informational and promotional platform targeting prospective students, educators, and partners interested in chemistry engineering education. It provides detailed information on admissions, student life, international programs, and federation activities, positioning itself as a key resource in the French higher education sector for chemistry engineering. The federation is well-established, with a domain registered since 2015 and a consistent brand presence. Technically, the website is built on WordPress, utilizing common plugins such as Formidable Forms for contact and newsletter forms, Mailjet for email marketing, and Matomo for analytics. The site employs modern web technologies including lazy loading for images and SVG icons, ensuring good performance and mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags, structured data, and language alternates. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and some recommended security headers, which could be improved. The presence of a cookie consent mechanism and privacy policy indicates GDPR awareness, though no explicit security policy or incident response contact was found. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. It demonstrates a solid digital maturity level with room for security enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns.

A

AIA7

aia7.fr

50

AIA7 is a French online community platform dedicated to members of ENSIACET, including students, alumni, teachers, and recruiters. It offers networking, career services, event management, and news updates to foster engagement within the academic and professional community. The platform supports multiple OAuth login providers and integrates social media for broader connectivity. Technically, the site uses modern web technologies such as Vue.js, Google Analytics, Google Maps API, and Leaflet.js, providing a responsive and user-friendly experience. Security is reasonably well implemented with HTTPS and OAuth authentication, though some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies, including GDPR considerations. The absence of WHOIS data reduces domain trust slightly, but the website content and structure indicate a legitimate and professional organization.

H

Heinrich-Böll-Stiftung

boell.de

60

The Heinrich-Böll-Stiftung website represents a well-established German political foundation focused on green politics, ecology, democracy, gender justice, and human rights. The site offers extensive content including dossiers, publications, events, and livestreams, targeting politically engaged audiences and the general public interested in these themes. Technically, the site is built on Drupal 10, hosted on Colt infrastructure, and employs modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent mechanisms for embedded content, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Overall, the website is professional, trustworthy, and content-rich, reflecting the foundation's mission and stature.

The website tarikamar.fr represents a small, specialized digital services provider focused on public interest projects, operating within a cooperative model called multi. The business offers development, data science, and consulting services emphasizing open data and free software. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of organizations seeking digital tools for social good. Technically, the site uses modern web technologies including JavaScript, Python, Ruby, and PHP, hosted by OVH with HTTPS enabled, but lacks some security headers and formal privacy or cookie policies. Security posture is moderate with secure forms but missing incident response and vulnerability disclosure information. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site contains no advertising or tracking technologies and no adult or questionable content, making it safe for general audiences.

S

Square, Inc.

squareup.com

69

Square, Inc. is a leading fintech company specializing in payment processing, point of sale software, and business management tools for merchants ranging from small businesses to enterprises. The company operates under the parent company Block, Inc., with subsidiaries including Weebly and Afterpay, enhancing its market reach and service offerings. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and comprehensive service information. Technically, the site leverages modern web technologies such as React and is hosted on AWS, ensuring scalability and performance. Security is robust, with HTTPS enforced, multiple security headers, and compliance with PCI DSS standards. Privacy policies and cookie consent mechanisms are clearly presented, indicating good GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

A

Amorino

amorino.com

52

Amorino is a premium artisanal Italian gelato brand offering a wide range of products including gelato flavors, waffles, crepes, hot drinks, gelato macarons, and cakes. The company operates through retail shops and franchises, targeting general consumers and franchise/job seekers. The website is professionally designed using modern web technologies such as Nuxt.js and integrates analytics and consent management tools. Security posture is moderate with no visible security headers and no explicit privacy policy, but the site uses HTTPS and cookie consent mechanisms. WHOIS data is unavailable from the provided raw output, which slightly impacts trust but the overall digital presence is consistent and professional. Recommendations include publishing clear privacy and security policies and enhancing security headers.

P

PAUL

paul.fr

69

PAUL is a well-established French bakery brand operating since 1889, offering bakery products and food services with an online ordering platform and click and collect options. The website is built on Magento 2, leveraging modern web technologies such as RequireJS and jQuery, and integrates monitoring and analytics tools like New Relic and ElasticSuite Tracker. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. Security posture is solid with HTTPS and security headers in place, though explicit privacy and terms of service pages are not clearly found, which could be improved. Overall, the website presents a professional and trustworthy digital presence aligned with its longstanding brand reputation.

The website garden-gourmet.com is currently a parked domain with no active business content or services. The domain is registered since 2019 with InterNetX GmbH and is set to expire in 2026. The site primarily serves as a landing page advertising the domain for sale, containing no privacy policies, contact information, or business details. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes pointing to third-party ad and tracking domains. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. The site lacks GDPR compliance indicators and does not provide cookie consent mechanisms. Overall, the site has low trustworthiness and poor content quality, reflecting its status as a parked domain rather than an active business website.

S

Somfy Digital

somfydigital.com

66

Somfy Digital operates a specialized B2B product catalog platform focused on Somfy products, primarily targeting the Polish market. The website provides a structured catalog with product categories and filtering options, supporting business customers in discovering and ordering Somfy smart home and automation products. The platform demonstrates moderate digital maturity with a modern tech stack including Google Tag Manager and Elastic Behavioral Analytics for user tracking and analytics. The website is mobile-optimized and offers a good user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information and incident response details are not publicly available, limiting transparency and trust. Overall, the site is safe and professional but would benefit from enhanced privacy compliance and security best practices.

Y

YMAG

ymag.fr

63

YMAG is a French company specializing in innovative and scalable software solutions designed to simplify and digitalize administrative and operational management for training organizations such as CFA, OFA, and OF. Their key offerings include the ORYZEA SaaS software and the modular ERP YPAREO, targeting complex organizational needs. The website demonstrates a professional digital presence with a focus on education sector clients in France. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot marketing and analytics tools, and a GDPR-compliant cookie consent mechanism. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are missing. The absence of WHOIS data from the AFNIC server is a concern but the website content and branding suggest a legitimate business. Strategic recommendations include adding explicit privacy and security policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

D

Dendreo

dendreo.com

55

Dendreo is a French SaaS company providing a comprehensive management software solution tailored for professional training centers. The platform covers administrative, commercial, financial, pedagogical, and quality management aspects, including compliance with the Qualiopi certification. The website demonstrates a mature digital presence with detailed product features, client testimonials, and integration of modern web technologies such as Webflow, Google Tag Manager, and HubSpot. The inclusion of an AI assistant and e-learning integrations highlights a focus on innovation and user experience. Security posture is generally good with HTTPS and deferred script loading, but lacks explicit security headers and visible privacy policies. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and client references suggest a legitimate and established business. Overall, the site is professional, well-branded, and targeted at training organizations in France.

S

Septeo

septeo.be

57

Septeo Belgium operates as a specialized technology provider delivering software solutions tailored for legal professionals such as lawyers and notaries. Their offerings focus on simplifying legal practice management through cloud-based, AI-enhanced tools that improve productivity and data security. The website reflects a mature digital presence with modern technologies and compliance with GDPR through clear privacy and cookie policies. Security posture is strong with HTTPS and consent management, though some security headers could be improved. The WHOIS data is restricted, which is common for privacy protection and does not detract from the site's legitimacy given the professional branding and content. Overall, Septeo presents as a credible and established player in the Belgian legal tech market.

F

Farrows Ltd

farrows.co.uk

65

Farrows Ltd is a well-established creative marketing and digital agency based in Norwich, UK, with over 40 years of experience. The company holds prestigious trust indicators such as the Royal Warrant, underscoring its market position as a reputable and award-winning agency. Their business model focuses on providing comprehensive creative and digital marketing services to a diverse client base worldwide. The website reflects a professional and consistent brand image, showcasing a strong portfolio and client partnerships. Technically, the site is built on WordPress and leverages modern web technologies including jQuery and Isotope for layout management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and domain registration data indicate a legitimate, trustworthy business with a strong digital presence.

P

Proparco

proparco.fr

61

Proparco is a French development finance institution affiliated with the Agence Française de Développement (AFD) group. It focuses on financing and supporting private sector enterprises and financial institutions across Africa, Asia, Latin America, Eurasia, and the Middle East, aiming to contribute to the Sustainable Development Goals (SDGs). The website presents a professional and comprehensive overview of its mission, services, and impact, targeting businesses, investors, and development stakeholders. The content is rich, well-structured, and available in French and English, reflecting a mature digital presence. Technically, the website is built on Drupal CMS with integration of French government design system DSFR, and uses modern JavaScript libraries and consent management tools. It is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be better documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data is noted but likely due to privacy protection common for government-affiliated domains. The site is not blocked by any WAF or security challenge, allowing full content access and analysis.

E

Expertise France

expertisefrance.fr

62

Expertise France is a French public agency specializing in international technical cooperation, operating as a subsidiary of the Agence française de développement. The agency holds a strong market position as the second largest technical cooperation entity in Europe, delivering projects across governance, security, climate, health, education, and cultural sectors in over 140 countries. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it leverages Drupal CMS, the French government design system (DSFR), and integrates modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and consent mechanisms, though some security headers could be explicitly confirmed. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable, which slightly impacts domain legitimacy assessment.

M

Mediavine

mediavine.com

73

Mediavine is a well-established digital advertising technology and management company focused on serving content creators and bloggers. The company positions itself as a full-service ad management partner, helping creators build sustainable businesses through advanced advertising technology and management solutions. With a strong market presence as a Top 20 Comscore property and exclusive reach to over 125 million monthly unique visitors, Mediavine offers programmatic advertising and comprehensive support to its clients. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. It employs consent management mechanisms to comply with GDPR and other privacy regulations, and uses Google reCAPTCHA to secure forms. The site is mobile-optimized, fast-loading, and accessible, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and integrates multiple security best practices, including consent-based tracking and form protection. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the professional business presence and trust indicators. Overall, Mediavine presents a low-risk profile with strong business credibility, technical maturity, and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and maintaining vigilant third-party script audits to sustain security and trust.

F

First Spark Media

firstsparkmedia.net

54

First Spark Media is a small US-based documentary film production company founded by award-winning director Keegan Kuhn. The company focuses on creating socially conscious, justice-focused documentaries and offers full production consulting services. Their market position is niche but notable due to collaborations with high-profile executive producers and impactful films. Technically, the website is built on Squarespace, leveraging modern web technologies and multimedia content to engage visitors. The site is well-designed, mobile-optimized, and provides a good user experience. Security posture is adequate with HTTPS enabled but lacks some best practices such as HSTS and CAPTCHA on forms. Privacy and cookie policies are missing, which impacts compliance. WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and social media presence support authenticity. Overall, the site is professional and trustworthy but would benefit from improved security and compliance documentation.

A

AUM Films & Media

aumfilms.org

60

AUM Films & Media is a small non-profit media organization specializing in producing award-winning documentary films focused on social and environmental issues. Their website showcases their films, filmmakers, and educational resources, targeting a general audience interested in impactful media. The organization maintains a professional online presence with consistent branding and active social media channels. Technically, the website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and multimedia content. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are lacking. The absence of WHOIS data due to privacy protection is common for such organizations but slightly reduces transparency. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and contact transparency.

A

A.U.M. Films and Media

whatthehealthfilm.com

50

What The Health is a documentary film project operated by A.U.M. Films and Media, a US-based non-profit organization focused on health, sustainability, and animal rights. The website serves as a platform to distribute the documentary, offer related merchandise, and provide a meal planner service to support plant-based diets. The site is built on Squarespace, leveraging embedded Vimeo videos and standard e-commerce features. Social media integration and tracking tools like Google Analytics and Facebook Pixel are used for marketing and audience engagement. However, the absence of a privacy policy and cookie consent mechanisms indicates compliance gaps. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency but does not necessarily indicate malicious intent given the professional content and social presence. Overall, the website is functional, professionally designed, and moderately secure but would benefit from enhanced privacy compliance and domain registration transparency.

A

Association L214 – Éthique & Animaux

l214.com

68

L214 is a French non-profit organization dedicated to animal ethics and welfare, focusing on exposing conditions of animal life, transport, and slaughter through filmed investigations and sourced information. The organization advocates for ethical questions and proposes political and individual solutions. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and uses modern web technologies and analytics tools such as Google Tag Manager. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. The WHOIS data is unavailable, which slightly reduces trust but is common for privacy reasons. Overall, the site is trustworthy, content-rich, and serves a general audience interested in animal rights and veganism.

P

Permacultuur Magazine – ontwerpen voor een veerkrachtige toekomst

permacultuur-magazine.eu

57

Permacultuur Magazine is a niche Dutch media publication focused on permaculture and sustainable living. It operated as a quarterly print magazine from 2015 to 2023 and now publishes monthly free articles online, supported by a webshop for back issues. The website is built on WordPress using the GeneratePress theme and includes standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile and SEO, with good content relevance for its target audience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. Contact is available via a contact form but no direct emails or phone numbers are published. Overall, the site is legitimate and consistent with a small media business but would benefit from improved privacy and security practices.

E

An embeddable Events Calendar for any website

eventscalendar.co

59

The website www.eventscalendar.co offers a feature-rich embeddable events calendar solution designed for integration with multiple platforms such as Shopify, Wix, Webflow, Wordpress, and others. It targets website owners and event organizers seeking to manage and display events seamlessly, with syncing capabilities to popular services like Eventbrite, Zoom, Google Calendar, and Outlook. The business operates as a small SaaS provider within the technology sector, focusing on event management tools. Technically, the site is built on Webflow CMS and leverages modern analytics and tracking technologies including Google Tag Manager, Mixpanel, and FullStory, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design with good user experience, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. No direct contact or incident response information is provided, which limits trust and transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

L

La Tribune

latribune.fr

70

La Tribune is a prominent French economic and financial news media outlet providing comprehensive coverage of economic, financial, and business news both in France and internationally. The website targets French-speaking professionals and the general public interested in economic affairs, offering news, analysis, and exclusive information. The business model is primarily based on media publishing with revenue streams from subscriptions and advertising. The site demonstrates a strong market position as an established media brand in France. Technically, the website is built on modern web technologies including Next.js and React, with integration of advanced consent management tools like Didomi and analytics platforms such as Piano Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website employs HTTPS with strong SSL configurations and security headers, alongside GDPR-compliant consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, La Tribune presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing transparency around security policies and providing clear contact channels for security and privacy concerns to further strengthen trust and compliance.

Le Média is an independent French media outlet focused on providing socially and ecologically engaged news and analysis. It operates on a citizen-funded model, ensuring independence from state or billionaire ownership. The website offers a rich variety of content including articles, investigative reports, podcasts, and video programs, targeting French-speaking audiences interested in alternative media perspectives. Technically, the site uses modern web technologies such as React and privacy-conscious analytics like Matomo, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the active and professional content suggests a legitimate operation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

A

Additi Multimédia

maville.com

64

Maville.com is a well-established French regional news portal founded in 1998, owned by Additi Multimédia and associated with the parent company Ouest-France. It provides localized news, sports, entertainment, restaurant guides, classifieds, and deals across numerous French cities and regions. The website targets residents and visitors seeking local information and lifestyle content. Technically, the site employs a modern JavaScript stack with jQuery, Google Tag Manager, Facebook Pixel, and a GDPR-compliant consent management platform (Didomi). The site is mobile-optimized and uses HTTPS with a good security posture, though DNSSEC is not enabled and some security headers like CSP are missing. Privacy compliance is strong with clear cookie and privacy policies and active consent mechanisms. No direct contact information or security incident response details are published, which is a minor gap. Overall, the site is professional, trustworthy, and serves its audience well.

Visionscarto is a niche website dedicated to cartographic sketches and reflections, offering a collection of articles and reports primarily in French. The site targets an audience interested in cartography, mapping, and related academic or reflective content. The business model appears to be content publishing without evident commercial transactions or e-commerce. Technically, the site is built on the SPIP CMS platform and uses modern JavaScript libraries such as Photoswipe and Lity for media display, providing a good user experience with mobile optimization and decent SEO practices. However, the site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security posture is moderate with no explicit security headers detected and unclear SSL configuration. The WHOIS data is missing or the domain is not registered according to the raw WHOIS output, which raises concerns about domain legitimacy despite the professional content. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

D

DEVO

clubdevo.com

62

The website clubdevo.com serves as the official online presence for the iconic band DEVO, providing fans and visitors with news, tour dates, music, and multimedia content. The site integrates third-party services such as Bandsintown for live event tracking and offers links to official merchandise and galleries. The business model centers on entertainment, fan engagement, and merchandise sales, positioning DEVO as an established band with a dedicated audience. The website's content is professionally presented with consistent branding and a focus on user experience.

I

ID Meneo

id-meneo.com

55

ID Meneo is a Paris-based digital agency specializing in bespoke web development, digital marketing, and strategy consulting with over 13 years of experience. The company offers a comprehensive range of services including WordPress and Prestashop site creation, Laravel application development, SEO/SEA, and maintenance services. Their market position is that of a small, specialized agency focused on delivering tailored digital solutions to businesses seeking to differentiate themselves online. Technically, the website is built on WordPress with modern technologies such as jQuery and Google Tag Manager, and it demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and some security best practices in place, though explicit security headers and policies are not evident. The WHOIS data is missing, which raises some legitimacy concerns, but the professional presentation and active social media presence support credibility. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

The Odoo Community Association (OCA) is a well-established non-profit organization founded in 2014 that supports the Odoo open source ERP ecosystem by fostering collaboration among developers, integrators, consultants, and users. The organization provides access to high quality apps, open upgrades, and community-driven resources, positioning itself as a key player in the open source ERP community. The website reflects this mission with clear navigation, professional design, and active engagement with sponsors and partners. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies such as FontAwesome, Google Analytics, and reCAPTCHA for security and analytics. Hosting is provided by Gandi SAS, with HTTPS enabled ensuring secure communications. However, some security best practices such as DNSSEC and security headers are not implemented, and no explicit cookie consent mechanism is present, which may impact GDPR compliance. Contact information is primarily via web forms, with no direct email or phone numbers visible. Overall, the site demonstrates good digital maturity and community trust but could improve in security and privacy compliance areas.

Coop Formations is a French cooperative organization specializing in professional training aimed at transforming work, organizations, and society. Founded in 2020, it operates as a small, human-scale entity focused on delivering accessible, high-quality educational sessions and courses. The cooperative emphasizes combining critical thinking with practical action, supported by passionate trainers and personalized learner support. The website reflects a clear mission and strong trust signals such as the Qualiopi certification and a 100% learner recommendation rate. Technically, the website is built on the Odoo CMS platform, hosted via Infomaniak, and employs modern web technologies including Bootstrap, FontAwesome, and Chart.js. It demonstrates good mobile optimization, accessibility, and SEO practices. Analytics are implemented with privacy-conscious tools like Plausible alongside Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled and no explicit security policies or incident response contacts are published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen trust and resilience.

A

Association Permaculture Romande

permaculture.ch

60

Association Permaculture Romande is a Swiss non-profit organization dedicated to promoting permaculture practices in the French-speaking region of Switzerland. The website serves as a community hub offering news, events, educational resources, and a directory for permaculture practitioners. The organization targets individuals passionate about sustainable agriculture and ecological design, fostering collaboration and knowledge sharing. Technically, the website is built on Ruby on Rails with modern front-end components and uses Piwik/Matomo for analytics, reflecting a moderate level of digital maturity. Security measures include HTTPS and CSRF protection, but lack advanced security headers and published policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-maintained, but could improve in privacy transparency and security hardening.

P

Permacultuur Magazine – ontwerpen voor een veerkrachtige toekomst

permacultuur.be

9

Permacultuur Magazine is a niche publishing entity focused on permaculture and sustainability topics, operating primarily as a quarterly magazine from 2015 to 2023. The website serves as an archive and content hub offering free monthly articles, book reviews, Q&A, and a webshop for back issues. The business targets environmentally conscious individuals interested in ecological design and sustainable living. Technically, the site is built on WordPress with a modern theme and plugins, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

P

permaculture formation

permaculturefrance.org

7

The website permaculture-formation.org is a Wix-hosted site focused on permaculture education and training. It targets individuals interested in sustainable agriculture and permaculture practices. The site leverages Wix's Thunderbolt framework and integrates multiple Wix apps for enhanced functionality. While the technical infrastructure is modern and mobile-optimized, the site lacks critical privacy and security documentation, such as privacy policies and cookie consent mechanisms. No contact information or business registration details are provided, limiting business credibility. The absence of WHOIS data further complicates trust assessment. Security posture is basic with no evident security headers or incident response policies. Overall, the site serves its educational purpose but requires improvements in compliance and security to enhance trust and professionalism.

T

Transition Netzwerk e.V.

transition-initiativen.org

57

The website www.transition-initiativen.org represents the Transition Netzwerk e.V., a non-profit grassroots network active in Germany, Austria, and Switzerland focused on sustainability, climate protection, and social justice. It serves as a hub for over 120 local Transition Initiatives, offering educational resources, event announcements, and community engagement opportunities. The organization positions itself as a connector and supporter of local groups working towards ecological and social transformation. Technically, the site is built on Drupal 7 with jQuery and custom JavaScript, delivering a moderately performant and accessible experience. The site is mobile responsive at a basic level and includes standard SEO meta tags. Security posture is good with HTTPS enforced and CAPTCHA on login forms, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The WHOIS data is unavailable or malformed, limiting domain registration transparency and trust verification. Despite this, the website content, external partnerships, and event details support the legitimacy of the organization. No signs of malicious activity or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website is a credible and well-maintained platform for a non-profit sustainability network, with room for improvement in security headers, privacy compliance, and WHOIS transparency.

A

A.U.M. Films & Media

cowspiracy.com

9

The website www.cowspiracy.com represents a non-profit environmental documentary project focused on exposing the environmental impact of animal agriculture. The site is professionally designed using Squarespace, featuring multimedia content, calls to action, and social media integration. The business operates primarily through film distribution, educational licensing, and advocacy, targeting environmentally conscious audiences. Technically, the site uses modern web technologies and third-party analytics but lacks some security headers and privacy policies, which are areas for improvement. The absence of WHOIS data reduces transparency and trust, though the site content and social presence support legitimacy. Overall, the site is functional and informative but should enhance privacy compliance and security posture to strengthen trust and compliance.

V

VegOresto Pro

vegoresto.fr

10

VegOresto Pro is a French non-profit initiative under the animal defense association L214, dedicated to supporting professionals in the restaurant and agro-food sectors to develop plant-based offerings. The website is well-designed, professionally maintained, and leverages modern web technologies such as WordPress with Elementor, Google Tag Manager, and reCAPTCHA for security. The site demonstrates a strong market position with over 3,000 partners and a clear focus on sustainable gastronomy. Security posture is solid with HTTPS and form protections, though explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, linked to the parent association's policies. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the site's credibility given the professional content and association backing.