Security Directory

E

Epoch Times Tiếng Việt

etviet.com

58

Epoch Times Tiếng Việt is the Vietnamese language edition of the global Epoch Times media group, offering news, cultural, health, and world affairs content. The website is part of a large media organization with a presence in 36 countries and 22 languages, targeting Vietnamese-speaking audiences interested in truthful and traditional values. The business model centers on digital media publishing with additional video and podcast content. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Analytics, and Google Tag Manager. Push notifications are implemented via OneSignal, and user experience is enhanced with lazy loading and responsive design. Security posture is good with HTTPS enforced and use of reCAPTCHA, though security headers are not explicitly detected. Privacy and cookie policies are not found, indicating a compliance gap. WHOIS data is unavailable, which reduces transparency but the site content and branding align with a legitimate media outlet. Overall, the site is professional and trustworthy but could improve privacy disclosures and security headers.

T

The EpochTimes Türkiye

epochtimestr.com

49

The Epoch Times TR is a Turkish-language online media company established in 2010, providing news, opinion, and cultural content focused on Turkey and global affairs. The website is well-structured, uses WordPress CMS with popular plugins, and integrates social media channels to engage its audience. It targets Turkish-speaking readers interested in current events and cultural topics. Technically, the site employs modern web technologies, including HTTPS, Google Analytics, and Google AdSense for monetization, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protection statuses, but lacks advanced DNS security and published security policies. Privacy compliance is basic, with privacy and cookie policies present but no explicit GDPR compliance indicators. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in security and privacy transparency.

S

Svenska Epoch Times

epochtimes.se

56

Svenska Epoch Times is a Swedish news media outlet focusing on national and international journalism, offering news articles, opinion pieces, podcasts, and subscription-based digital and print editions. The website targets Swedish-speaking audiences interested in in-depth news coverage and cultural content. Technically, the site is built on modern frameworks such as Next.js and React, with integration of multiple third-party analytics and advertising pixels, indicating a mature digital infrastructure but with extensive user tracking. Security posture is strong with HTTPS and security headers, but privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data for the queried subdomain is missing, raising some concerns about domain registration transparency, though the main domain likely exists. Overall, the site is professional and content-rich but should improve privacy disclosures and incident response transparency.

T

The Epoch Times

epochtimes.sk

58

The Epoch Times Slovensko is an independent Slovak media outlet focused on delivering accurate and independent journalism to the Slovak-speaking public. Founded in 2000, it operates primarily as an online news platform offering articles, videos, and commentary. The website leverages WordPress CMS with modern front-end technologies such as Bootstrap and Font Awesome, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms via OneTrust indicates compliance awareness with GDPR regulations, although explicit privacy and terms policies are not found in the provided content. Security posture is solid with HTTPS enforced and standard tracking and advertising scripts in use, but could benefit from enhanced security headers and published security policies. Overall, the site is accessible without WAF or blocking mechanisms, providing safe content suitable for general audiences. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims.

T

The Epoch Times

theepochtimes.gr

54

The Epoch Times Greek website is a well-established online news media platform dedicated to independent journalism, targeting Greek-speaking audiences interested in world news, opinions, science, health, and culture. The site uses WordPress CMS with modern themes and page builders, providing a professional and user-friendly experience with good mobile optimization and SEO practices. The technical infrastructure includes integration with major analytics and advertising platforms such as Google Analytics, Google Adsense, Facebook Pixel, and MailerLite, indicating a mature digital marketing approach. Security posture is adequate with HTTPS enforced and some security best practices observed, but lacks explicit privacy and cookie policies, security incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Overall, the domain registration data aligns well with the website's business model and content, supporting its legitimacy and trustworthiness.

ا

اپک تایمز فارسی

persianepochtimes.com

62

Persian Epoch Times is an independent Persian-language news media website providing uncensored news coverage focused on Iran, China, the USA, Canada, and global events. The site targets Persian-speaking audiences interested in international and regional news. Technically, the website is built on WordPress CMS using the Astra theme and Elementor page builder, with SEO enhancements via Rank Math and analytics tracking through Google Analytics. The site is hosted with DNS managed by Cloudflare and registered through NameSilo, LLC, with a domain age consistent with its business history. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the website is professionally designed, mobile-optimized, and provides relevant content, but would benefit from enhanced privacy compliance and security practices.

T

The Epoch Times Italia

epochtimes.it

69

The Epoch Times Italia is an Italian-language online news media outlet providing comprehensive news coverage and commentary on Italian and international affairs. The website targets Italian-speaking audiences interested in politics, culture, health, and science. It operates primarily on an advertising-supported business model with additional services such as newsletter subscriptions. The site is part of the broader Epoch Times media group with multiple international editions. Technically, the website employs modern tracking and consent technologies including Google Tag Manager, Google Analytics, and OneTrust cookie consent, ensuring GDPR compliance and user privacy. The site is well-structured with good mobile optimization and SEO practices, delivering a professional user experience. Security-wise, the website enforces HTTPS, uses appropriate security headers, and integrates privacy-focused consent mechanisms, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is legitimate, trustworthy, and compliant with relevant privacy regulations, with no critical vulnerabilities detected.

Ž

Život dětem o.p.s.

zivotdetem.cz

49

Život dětem o.p.s. is a Czech non-profit organization dedicated to supporting seriously ill children through financial aid, medical equipment, and community support. The website reflects a mature and professional presence with clear calls to action for donations via multiple channels including SMS, online platforms, and an e-shop. The organization has a solid market position within the Czech charitable sector, targeting donors, families, and volunteers. Technically, the site is built on WordPress with common third-party integrations such as Google Analytics and Hotjar, hosted by ACTIVE 24. While the site is mobile optimized and user-friendly, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data is due to privacy protection and does not detract from the site's legitimacy. Overall, the site demonstrates good business credibility and technical implementation but could improve its security posture and privacy compliance.

S

SKY Media s.r.o.

skymedia.cz

50

SKY Media s.r.o. is a Czech Republic-based internet agency specializing in web development, e-commerce solutions, SEO, and online marketing services. The company targets businesses and individuals seeking professional digital presence and marketing support. Their website demonstrates a professional design with clear navigation and a portfolio of client references, indicating a stable market position as a small but established technology service provider. Technically, the website uses a custom CMS (SKY:CMS) and integrates modern web technologies including Google Analytics, Google reCAPTCHA, and Microsoft Clarity for analytics and security. The site is HTTPS secured with valid SSL certificates and shows good mobile optimization and SEO practices. However, some security headers are missing, and no explicit privacy or cookie policies are found, which could be improved. From a security perspective, the site employs standard protections such as HTTPS and CAPTCHA on forms, but lacks published security policies or incident response contacts. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly reduces trustworthiness. Overall, the security posture is good but could benefit from enhanced transparency and header implementation. The overall risk is moderate with no critical vulnerabilities detected. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or security policy to improve compliance and trust. The business appears credible and professional, with a solid technical foundation and clear contact information.

Zahadyshop.cz is a Czech e-commerce website specializing in the sale of printed and electronic magazines focused on mysteries, paranormal phenomena, health, and conspiracy theories. The business operates under the WEXBO brand, with a domain registered since 2013, indicating a stable presence in the niche media market. The website targets Czech-speaking audiences interested in mysticism and related topics, offering subscriptions and individual magazine sales. Technically, the site uses a proprietary CMS (WEXBO), modern web technologies including Google Fonts and Google Analytics, and is optimized for desktop and mobile users. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is basic but adequate, with clear privacy and cookie policies and GDPR references. Overall, the site presents a professional and trustworthy e-commerce platform with good user experience and content relevance.

X

XL-Web

xl-web.org

57

XL-Web is a small French web development company founded in 2015 and based in Lamballe, Bretagne. The company specializes in creating, modernizing, and enhancing websites for local businesses and organizations. Their market position is that of a regional service provider with a focus on personalized web solutions. The website reflects this with clear descriptions of services, project references, and contact options. Technically, the site uses modern frontend technologies including Materialize CSS and jQuery, integrates Google Analytics and Plausible for analytics, and employs Google reCAPTCHA for form security. Hosting is provided by OVH, a reputable European provider. Security posture is moderate with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a legal mentions page but no explicit cookie consent or GDPR policy. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

A

A2LA

a2la.org

65

A2LA is a well-established accreditation organization founded in 1996, providing comprehensive accreditation services to laboratories, inspection bodies, product certification bodies, and proficiency testing providers. The company operates primarily in the government and healthcare sectors, offering a wide range of ISO-based accreditation programs and training services. Their website reflects a strong market position with professional branding, extensive service offerings, and a clear focus on quality and public safety. The target audience includes laboratories, organizations, and individuals seeking accreditation and quality assurance services. Technically, the website is built on WordPress using the Genesis Framework, leveraging modern web technologies such as Bootstrap, jQuery, and various analytics and marketing tools including Google Analytics, Facebook Pixel, and Salesforce Live Chat. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs domain locking statuses, and avoids exposing sensitive data. However, DNSSEC is not enabled, and there is no explicit cookie consent mechanism, which may affect GDPR compliance. No security policy or incident response information is published, and no vulnerability disclosure program is evident. Tracking technologies are used moderately, with standard marketing and analytics tools. Overall, A2LA's website demonstrates a high level of professionalism, trustworthiness, and business credibility. The security posture is good but could be improved with enhanced privacy compliance and DNS security. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include implementing cookie consent, enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

HugeDomains operates as a reputable domain marketplace specializing in premium domain sales with flexible payment options including payment plans. The company targets individuals and businesses seeking valuable domain names and offers a streamlined purchasing experience backed by a 30-day money back guarantee and secure transaction methods. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly environment. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS enforced and SSL encryption, although some security headers could be improved. Privacy compliance is robust with visible cookie consent mechanisms and a comprehensive privacy policy. Overall, the business credibility is high, supported by customer testimonials and trusted partnerships with NameBright.com and Escrow.com. The absence of WHOIS data is consistent with privacy protection practices common in domain marketplaces and does not detract significantly from trustworthiness.

P

PMB Services

sigb.net

66

PMB Services is a French company specializing in the development and support of PMB, an open-source library and documentation management software. The company targets libraries, documentation centers, educational and research institutions, offering a comprehensive suite of services including software development, consulting, installation, hosting, training, and support. With over 20 years of experience and a client base exceeding 1800 organizations and 10,000 users, PMB Services holds a solid position in the library technology sector. Technically, the website employs a mature technology stack featuring jQuery, UIkit, Dojo Toolkit, and FontAwesome, alongside analytics tools like Google Analytics and Matomo. The site is built on the PMB CMS platform, optimized for mobile devices with good SEO and basic accessibility features. Security practices include HTTPS usage, CSRF tokens in forms, and a cookie consent mechanism, though explicit security headers are not evident. The security posture is moderate, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. The absence of WHOIS data suggests privacy protection, which is justified for this business type. Social media presence and community engagement further enhance trust. Overall, PMB Services presents a professional, trustworthy online presence with a focus on open-source library management solutions. Strategic improvements in security headers and accessibility could further strengthen their digital maturity and security posture.

P

Planet Ayurveda

planetayurveda.sk

57

Planet Ayurveda is a Slovakian e-commerce retailer specializing in Ayurvedic health products including capsules, oils, powders, and combo packages. The website positions itself as a trusted source for standardized, laboratory-tested Ayurvedic extracts, targeting consumers interested in natural health solutions. The business operates a niche market model with additional educational content and an affiliate program to expand reach. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript frameworks like Vue.js and libraries such as jQuery and Slick Carousel. It integrates multiple marketing and analytics tools including Google Analytics, Klaviyo, and RetentionUp, with a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced, secure forms, and no visible vulnerabilities. WHOIS data aligns with the business claims, supporting legitimacy. Overall, the website demonstrates a mature digital presence with good content quality and user experience.

R

Ramaja s. r. o.

zahadyzivota.cz

41

Záhady života is a Czech media publication focused on mysteries, health, esoterics, and historical curiosities. It operates primarily as a magazine with both printed and online content, targeting a general audience interested in these topics. The website is built on WordPress and integrates common web technologies such as jQuery, Google Analytics, and Facebook SDK for social media engagement and analytics. The site is well-structured with good SEO practices and mobile optimization, providing a positive user experience. However, the absence of privacy and cookie policies indicates a compliance gap, especially under GDPR regulations. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

V

Ve hvězdách TV

vehvezdach.cz

52

Ve hvězdách TV is a Czech Republic based niche media outlet specializing in spirituality, health, astrology, and personal development content. Established in 2008, it offers a variety of services including online TV content, magazine subscriptions, and an e-commerce shop for related products. The website targets a general audience interested in spiritual and holistic health topics. Technically, the site is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure login forms, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is legitimate, well-branded, and maintains a consistent online presence with active social media integration.

Z

Zpravodajství z Prahy, pozvánky na kulturní a sportovní akce

prazsky-magazin.cz

63

Pražský magazín is a Czech regional online news and cultural magazine focused on delivering daily news, press releases, cultural and political updates, and event invitations primarily for Prague and its surroundings. The website targets a general audience interested in local news, culture, sports, and lifestyle. It operates on a WordPress platform with modern plugins for SEO and media embedding, supported by Czech hosting services. The site maintains an active social media presence and regularly updates content, positioning itself as a trusted regional media outlet. Technically, the website uses WordPress CMS with Yoast SEO, WPBakery Page Builder, and integrates Google Analytics, Google Tag Manager, and Facebook SDK for analytics and marketing. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and explicit security headers. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanism, which is a significant compliance gap under GDPR. Overall, Pražský magazín presents a professional and trustworthy media platform with good content quality and business credibility but should improve privacy compliance and security posture to enhance user trust and regulatory adherence.

P

Plné zdraví

plnezdravi.cz

61

Plné zdraví is a Czech online magazine focused on health, sports, and lifestyle content. It targets a general audience interested in wellness and healthy living. The website is professionally designed, regularly updated, and uses WordPress CMS with various plugins for SEO, advertising, and consent management. The site employs major advertising networks and analytics services, including Google Analytics and Plausible Analytics, with a cookie consent mechanism in place. However, no explicit privacy policy or terms of service pages were detected, which is a compliance gap. The WHOIS data for the domain is missing, which reduces domain trustworthiness, though the website content and presentation suggest legitimate operation.

I

inpublic group s.r.o.

bustv.cz

37

BUS TV is a Czech Republic based advertising media company specializing in digital advertising campaigns on information panels within public transport vehicles across multiple regional cities. The company operates under the parent entity inpublic group s.r.o. and targets advertisers seeking regional reach in public transit environments. The website is built on WordPress CMS with standard plugins and integrates Google Analytics and Microsoft Clarity for user behavior tracking. Contact information is comprehensive with multiple named representatives and direct email addresses, enhancing business credibility. However, the absence of WHOIS data limits domain trust assessment. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and cookie consent mechanisms. Overall, the website is professional, content-rich, and serves its business purpose effectively.

H

Healing Our World

healingourearth.com

61

Healing Our World operates a global platform focused on spiritual and environmental healing, primarily through virtual events such as the Global Gayatri Mantra Session. The organization targets a global audience interested in earth healing and spiritual community engagement. The website is built on Drupal 9, leveraging modern web technologies including Google Analytics and Facebook Pixel for analytics and marketing. Hosting and domain registration are managed by IONOS SE, with a domain age consistent with the organization's founding in 2020. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service. Contact information is limited but includes a UK phone number and social media presence.

Latvijas Universitāte is a prominent higher education institution in Latvia, offering a broad spectrum of academic programs and engaging in extensive research and international collaboration. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. Technically, the site is built on TYPO3 CMS with integration of modern web technologies and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism and trustworthiness, supporting the university's reputable market position.

N

Nepal Ayurveda Wellness Pvt,Ltd

nepoayurveda.com

56

Nepal Ayurveda Wellness Pvt,Ltd operates a professional Ayurvedic healthcare and wellness website based in Kathmandu, Nepal. The company offers a range of services including hospital treatments, wellness programs, herbal medicine production, educational resources, and an online shop for Ayurvedic products. The website is well-structured and uses modern WordPress technologies such as WooCommerce and Elementor, supported by Cloudflare DNS and Google Analytics for tracking. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and privacy compliance mechanisms. The domain is newly registered in 2024, which is somewhat recent compared to the company's founding in 2018, suggesting a possible rebranding or new web presence. Overall, the site is trustworthy, professional, and targets individuals interested in natural wellness and Ayurveda.

The Research Council for Complementary Medicine (RCCM) is a UK-based non-profit organization established in 1983, dedicated to advancing research in Traditional Complementary and Integrative Medicine (TCIM). The website positions RCCM as a leading authority in the UK for TCIM research, offering membership benefits, conferences, mentorship, and research resources to healthcare professionals, researchers, and practitioners. The content is well-structured, professionally presented, and targeted towards the integrative medicine community. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Beaver Builder, ensuring good SEO and mobile responsiveness. Google Analytics and Tag Manager are used for visitor tracking with IP anonymization enabled, reflecting moderate user tracking practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published incident response policies. Overall, the domain registration data aligns well with the organization's UK non-profit identity, supporting legitimacy and trustworthiness.

E

EUROCAM

cam-europe.eu

51

EUROCAM is a European non-profit foundation that unites umbrella organizations representing patients, medical doctors, veterinarians, and practitioners in the Traditional, Complementary, and Integrative Healthcare (TCIH) sector. It holds a recognized position within the European health policy landscape, engaging with the European Commission and Parliament, and is accredited by the WHO Regional Office for Europe. The organization focuses on advocacy, policy influence, and education to promote TCIH's role in sustainable, patient-centered healthcare across Europe. The website reflects this mission with comprehensive content, clear navigation, and a professional design tailored to its target audience of healthcare stakeholders and policymakers. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and integrates various plugins for SEO, GDPR compliance, and user engagement (e.g., Mailchimp for newsletters). The site is mobile-optimized and employs HTTPS with a good SSL configuration. Analytics and tracking are implemented via Google Analytics and MonsterInsights, with appropriate cookie consent mechanisms in place. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or suspicious elements were detected in the provided content. The WHOIS data confirms a consistent and legitimate domain registration with a reputable registrar and no privacy protection, appropriate for a transparent non-profit entity. Overall, EUROCAM's website is a credible, well-maintained platform supporting its advocacy and educational goals in the healthcare sector, with room for improvement in security transparency and accessibility features.

Profesní komora Sanátor is a Czech non-profit organization dedicated to the education, certification, and promotion of biotronics and complementary and alternative medicine (CAM) based on the philosophy of Josef Zezulka. The organization actively participates in international conferences and collaborates with European and global CAM associations, positioning itself as a specialized entity within the healthcare and CAM sector in the Czech Republic. The website provides comprehensive educational content, event information, and publications to support its mission. Technically, the site is built on Umbraco CMS, uses modern web technologies, and implements Google Analytics and Tag Manager for traffic analysis. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS in use and cookie consent implemented, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which impacts domain legitimacy verification. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Themebeez.com

themebeez.com

61

Themebeez.com is a Nepal-based small technology company founded in 2018, specializing in WordPress themes, plugins, and related services. The company targets WordPress users and developers seeking quality, easy-to-use themes and plugins, offering both free and premium products alongside custom WordPress services. Their market position is that of a niche provider with a focus on quality and customer support. Technically, the website is built on WordPress using Elementor and LiteSpeed Cache, with Cloudflare DNS enhancing reliability. The site demonstrates good SEO and mobile optimization but could improve accessibility and performance further. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is strong with clear contact information, testimonials, and a consistent brand presence. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Magnet

magnet.co

62

Magnet is a well-established full-service digital marketing agency founded in 2004 and headquartered in Cincinnati, Ohio. The company specializes in building high-converting websites and full-funnel marketing systems that combine search engine optimization, paid media, and outbound strategies to grow client pipelines. Their market position is strong, supported by a portfolio of case studies, client testimonials, and a 5-star aggregate rating from 37 reviews. Magnet targets businesses seeking comprehensive digital growth solutions, offering services including website development, ecommerce, SEO, PPC, and growth marketing. Technically, the website is built on the Webflow platform, leveraging modern technologies such as GSAP for animations, Google Tag Manager, and Apollo.io for analytics and tracking. The site demonstrates excellent design quality, mobile optimization, and good SEO practices. Performance is fast, and accessibility considerations are evident, though there is room for improvement in explicit security headers and privacy compliance disclosures. From a security perspective, the site uses HTTPS with strong SSL configuration and mentions security best practices like multi-factor authentication and regular audits. However, it lacks publicly available security policies, incident response plans, and cookie consent mechanisms, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected. Overall, Magnet presents a professional, trustworthy, and technically mature digital presence. The main risks relate to privacy compliance gaps and the absence of explicit security disclosures. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

C

Commission des Titres d'Ingénieur

cti-commission.fr

50

The Commission des Titres d'Ingénieur (CTI) is an independent French organization established in 1934, responsible for accrediting engineering schools in France and abroad. It promotes the engineering profession and ensures the quality of engineering education. The website serves as an official portal providing information on accreditation, quality assurance, international activities, and communication related to engineering education. The target audience includes educational institutions, students, young graduates, and recruiters. The CTI holds recognized certifications such as ENQA, EUR-ACE, EQAR, and CeQuInt, reinforcing its authoritative position in the education sector. Technically, the website is built on WordPress with common plugins for forms, multilingual support, and email obfuscation. It uses Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and has good SEO practices, though some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a good SSL configuration. However, security headers are not visibly present, and no cookie consent mechanism was detected, indicating areas for improvement in privacy compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and email address protection. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data is a concern but likely due to registry privacy or query failure rather than malicious intent. Overall, the site is trustworthy and professional but could enhance its security posture and privacy compliance. Strategically, the CTI should implement a cookie consent banner to comply with GDPR, add security headers to improve protection against common web attacks, and publish explicit security and incident response policies. Regular updates and monitoring of the WordPress environment are recommended to maintain security and performance.

C

CGIAR

cgiar.org

58

CGIAR is a globally recognized non-profit research partnership focused on agricultural innovation to address poverty, hunger, and environmental degradation. It operates a network of 15 research centers and collaborates with over 3,000 partners worldwide. The website reflects a mature digital presence with comprehensive content, including research portfolios, impact reports, and news updates, targeting global stakeholders in agriculture and development. Technically, the site is built on WordPress with modern JavaScript libraries and SEO tools, hosted with secure HTTPS and optimized for mobile devices. While performance is moderate, the site demonstrates good accessibility and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response information. The WHOIS data is unavailable due to malformed output, limiting domain registration verification. However, the website's professionalism, transparency, and extensive content strongly indicate legitimacy. No signs of blocking or WAF interference were detected, allowing full content access and analysis. Overall, CGIAR's website is a trustworthy and authoritative source for agricultural research information, with room for security enhancements and more explicit contact details for incident response and vulnerability disclosures.

Les Alvéoles is a French-based ecological education center specializing in permaculture and agroecology. The organization offers a variety of services including in-person and online training, consulting, a nursery, and an experimental garden. Their target audience includes individuals and organizations interested in sustainable landscape design and ecological transition. The website is professionally designed using the Odoo CMS platform and integrates modern technologies such as Google Analytics and Vimeo for content delivery. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled and CSRF tokens present, but missing explicit security headers and incident response contacts. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

U

UnlimitedWP

unlimitedwp.com

75

UnlimitedWP is a specialized white label WordPress development service provider targeting digital agencies. Founded in 2019 and operating under the parent company E2M Company, it offers subscription-based fixed monthly plans for unlimited WordPress development, maintenance, SEO, and WooCommerce support. The company has established a strong market position with over 200 digital agency clients and a large pool of WordPress experts. Technically, the website is built on WordPress CMS with a modern tech stack including Google Tag Manager, Microsoft Clarity, Hotjar, and AWS hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements like DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

M

Mauges Communauté

rencontres-tepos.fr

42

Rencontres TEPOS is a professionally managed event website dedicated to the 15th national meetings focused on energy transition in rural territories in France. The site is operated by Mauges Communauté in partnership with the réseau Cler, targeting local authorities, associations, and enterprises engaged in sustainable energy initiatives. The website provides rich multimedia content, event information, and partner details, reflecting a mature digital presence for a specialized community event. Technically, the website is built on WordPress with a modern theme and uses common web technologies such as Google Analytics and YouTube embeds. The hosting is provided by OVH, a reputable provider. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Privacy policies and cookie consent are clearly presented, supporting compliance. Contact information is transparent and professional, enhancing trustworthiness. The domain registration is consistent with the event's timeline and purpose. Overall, the website demonstrates a solid security and compliance posture suitable for its business model and audience, with room for minor improvements in security headers and incident response disclosures.

K

KPMG Česká republika, s.r.o.

otestovat.cx

57

The website otestovat.cx is a professionally developed online testing platform operated by KPMG Česká republika, s.r.o., a reputable global consulting firm. It offers a customer experience management test targeted at business owners and executives to assess their firm's capabilities in building long-term customer relationships. The site is well-branded, consistent with KPMG's corporate identity, and provides comprehensive privacy and cookie policies aligned with GDPR requirements. Technically, the site employs modern web technologies including Google Analytics and Tag Manager for tracking, and a cookie consent management system from Cookies Giant. The site is mobile-optimized with good navigation and user experience. However, explicit security headers are not detected in the provided data, and SSL configuration details are not confirmed but implied by HTTPS URLs. From a security perspective, the site shows good privacy compliance and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to registry restrictions limits transparency but does not undermine the site's legitimacy given the strong KPMG branding and professional content. Overall, the site presents a moderate to high security posture with room for improvement in security headers and explicit incident response information. Strategically, the site serves as a digital engagement tool for KPMG to attract and assess potential clients in the Czech market, reinforcing their position as a trusted advisor in customer experience management.

K

KPMG Česká republika, s.r.o.

manifest121.cz

59

Manifest 121 is a socially driven initiative emphasizing the centrality of humans in societal and technological progress, commemorating the 100th anniversary of Karel Čapek's play R.U.R. The initiative is supported and branded by KPMG Česká republika, indicating strong corporate backing and credibility. The website is professionally designed, multilingual, and includes interactive elements such as forms for joining and newsletter subscription, with clear privacy and cookie policies in place. Technically, the site uses modern JavaScript, cookie consent management, and Google Analytics for minimal tracking, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and anti-spam measures on forms, though some security headers are not explicitly detected. The absence of WHOIS data reduces transparency but does not significantly impact trust due to the strong corporate association. Overall, the site is a credible, well-maintained platform for a socially conscious initiative.

U

Université Populaire de Permaculture

permaculture-upp.org

54

Université Populaire de Permaculture is a French non-profit educational network dedicated to permaculture training, events, and community building. It operates a WordPress-based website providing rich content including webinars, training schedules, and partnerships with other permaculture organizations. The website targets individuals interested in permaculture education and practice, offering courses and networking opportunities. Technically, the site uses common WordPress plugins and is hosted by OVH sas, with a moderate performance profile and basic SEO and accessibility features. Security posture is adequate with HTTPS and domain locking but lacks advanced security headers and published security policies. Privacy compliance is partial due to absence of cookie consent mechanisms. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

I

Incroyables Comestibles France

lesincroyablescomestibles.fr

53

Incroyables Comestibles France is a French non-profit association dedicated to promoting urban shared gardens and participative agriculture to foster local, sustainable, and solidarity-based food systems. The organization acts as a national coordinator for local gardening groups, providing resources, organizing events, and encouraging community engagement. Their website reflects a strong community focus with testimonials, event announcements, and resource links. Technically, the site is built on modern frameworks such as Next.js and React, with WordPress used for blog content, and integrates Google Analytics for visitor insights. The site is well-optimized for mobile and SEO, with good accessibility features and fast performance. Security posture is strong with HTTPS enforced and modern security headers in place, though the absence of a cookie consent mechanism and lack of visible incident response or vulnerability disclosure policies are areas for improvement. The domain WHOIS data is missing, which reduces trustworthiness and suggests the need for verification of domain registration status. Overall, the website is professional, trustworthy, and serves its community well but could enhance privacy compliance and transparency.

The website reseau-amap.org serves as a national directory and informational resource for AMAPs (Associations pour le maintien d'une agriculture paysanne) in France. It aims to promote sustainable and organic farming by connecting consumers directly with farmers. The site provides educational content, a directory of AMAPs, and guidance on creating new associations. The business model is non-profit and community-focused, targeting consumers and farmers interested in local agriculture. The website is modest in scale and has been operational since 2007, indicating a stable presence in its niche. Technically, the site uses basic web technologies including JavaScript and CSS, with Google Analytics for visitor tracking. Hosting is provided by Infomaniak, a known European hosting provider. The site lacks modern CMS indicators and shows basic mobile optimization and accessibility. SEO practices are minimal but functional. No advanced frameworks or platforms are detected. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance concern especially under GDPR. The use of Google Analytics without a consent mechanism further impacts privacy compliance. No incident response or security policies are published. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the non-commercial, informational nature of the site and absence of sensitive data collection. However, compliance gaps and missing security headers should be addressed to enhance trust and legal adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving mobile and accessibility features.

The website permaculture.fr serves as the French network for permaculture, promoting ecological design principles and supporting permaculture projects and education in France. It acts as a hub connecting various French permaculture actors and organizations, including associations and educational institutions. The site provides information about permaculture, links to partner organizations, and contact via email. The domain is well-established since 2008 and hosted by Infomaniak Network SA, a reputable provider. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking. The site lacks advanced frameworks or CMS and shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. No forms collecting sensitive data are present, reducing risk exposure. From a security perspective, the site uses HTTPS (implied by URL), but no security headers were detected in the provided data. There is no visible privacy or cookie policy, nor GDPR compliance indicators, which is a compliance gap. No incident response or vulnerability disclosure information is provided. The site does not appear to be behind a WAF or security challenge, and no suspicious WHOIS patterns were found, indicating a legitimate and stable domain. Overall, the site is safe and suitable for general audiences, with content focused on permaculture education and networking. Strategic improvements include adding privacy and cookie policies, enhancing security headers, improving mobile responsiveness, and publishing GDPR compliance information to strengthen trust and compliance posture.

E

ECOLISE

ecolise.eu

53

ECOLISE is a European non-profit network dedicated to empowering community-led initiatives focused on climate change and sustainability. The organization provides participatory advocacy, funding through the Regenerative Communities Fund, project support, and a variety of resources including publications and activity reports. Their target audience includes communities and stakeholders engaged in environmental sustainability across Europe. The website positions ECOLISE as a key network in the European sustainability ecosystem, emphasizing collaboration and community empowerment. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO, Events Calendar Pro, and Groundhogg for marketing automation. The site is well-structured with good SEO practices, mobile optimization, and accessibility features. Google Analytics is used with consent mode configured to deny personalization and storage in certain regions, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements consent mechanisms for cookies. However, no explicit security headers were detected, and there is a lack of published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. The domain registration is consistent and trustworthy, with no privacy protection masking registrant details. Overall, ECOLISE's website demonstrates a solid digital presence with good business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and terms of service policies, add security policy information, and consider a vulnerability disclosure mechanism. These steps will strengthen the site's privacy compliance and security posture, supporting its mission to empower communities for a sustainable future.

R

Rob Hopkins

robhopkins.net

59

Rob Hopkins' website serves as a professional platform for his work as an author and advocate for sustainability and collective imagination. The site offers rich content including blog posts, podcasts, videos, and information about his books and trainings, targeting individuals interested in environmental and community-driven change. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and CleanTalk for anti-spam, and integrates Google Analytics and Jetpack for analytics and performance monitoring. The site is well-structured, mobile-optimized, and accessible, providing a positive user experience. Security-wise, the site enforces HTTPS and uses anti-spam measures but lacks some security headers and formal policies such as privacy and cookie notices, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active content of the site.

P

Partage des eaux

partagedeseaux.info

47

Partage des eaux is a French-language non-profit informational website focused on water management, sustainability, and environmental issues. The site operated actively from 2010 to 2020, publishing analyses and resources, and now serves as an archive with new content redirected to the Ritimo network. The website uses the SPIP CMS platform with standard web technologies and integrates Google Analytics and Google Tag Manager for tracking. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies and does not display security headers, which are areas for improvement. WHOIS data is unavailable due to TLD restrictions, but the domain appears legitimate and privacy protection is justified given the site's nature. Overall, the site is a valuable resource with moderate technical and security maturity.

Orbisius is a small technology company specializing in WordPress development services, custom plugin development, and SaaS applications. The website positions itself as a niche provider targeting WordPress users and businesses seeking tailored digital solutions. The business has been established since 2012, with a consistent domain registration and a professional online presence. Technically, the website is built on WordPress CMS using popular plugins and themes, integrating Google APIs and live chat for user engagement. SEO optimization is evident through the use of Yoast SEO and structured data. However, the website lacks explicit privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust. The domain is registered transparently without privacy protection, indicating legitimacy. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security posture.

E

Elephant Orchestra, a.s.

pujcky.cz

63

Pujcky.cz is a Czech Republic-based loan comparison platform operated by Elephant Orchestra, a.s. The website aggregates loan offers from various bank and non-bank lenders, providing consumers with an easy way to compare and apply for loans. The platform leverages affiliate partnerships to redirect users to loan providers, facilitating lead generation. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, though lacks visible security headers and comprehensive privacy documentation. Security posture is moderate with HTTPS usage but missing advanced headers and incident response contacts. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and partner links. Strategic improvements include publishing clear privacy and terms policies, enhancing security headers, and adding vulnerability disclosure mechanisms.

E

Elephant Orchestra s.r.o.

uspory.cz

67

Úspory.cz is a Czech financial comparison portal operated by Elephant Orchestra s.r.o., part of the Srovnejto.cz group. The website offers comprehensive comparison services for loans, insurance, mortgages, energy providers, and mobile tariffs, targeting Czech consumers seeking to save money and time. The platform is well-established with over 1.5 million households served since 2010, indicating a strong market presence. Technically, the site uses a modern JavaScript stack with analytics and marketing tools integrated, including Google Analytics, Facebook Pixel, Hotjar, and Inspectlet, all managed with user consent mechanisms. Security is robust with HTTPS and 256-bit SSL encryption, though some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant. However, WHOIS data is unavailable, limiting domain registration trust verification. Overall, the site is professional, trustworthy, and safe for general audiences.

Elephant Orchestra, a.s. is a Czech Republic-based digital marketing company specializing in lead generation, email marketing, mobile marketing, telemarketing, affiliate programs, and discount portals. With over 12 years of market presence and recognition such as Deloitte's Technology Fast 50 CE Rising Star in 2011, the company serves a broad range of business clients aiming to enhance their online customer acquisition and marketing effectiveness. The company operates multiple projects and is part of the Klik.cz & ePojisteni.cz s.r.o group, indicating a strong partnership ecosystem. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Bootstrap, and various JavaScript libraries for UI and performance enhancements. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some security headers are missing, and WHOIS data is unavailable, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enabled and no visible vulnerabilities in the content. Privacy compliance is good with clear policies and consent banners. The absence of WHOIS registration data is a notable risk factor, but the website content and business information suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from improved security headers and domain registration transparency. Strategic recommendations include enhancing security headers, conducting regular security audits of third-party scripts, improving accessibility, and verifying domain registration details to strengthen trust and compliance.

M

Medaprex, s.r.o.

medaprex.cz

58

The website www.annabrandejs.cz operates as a professional e-commerce platform specializing in cosmetic and health products, particularly focused on anti-aging, skincare, and hair care solutions. The business has a strong market presence in the Czech Republic with over two decades of experience, positioning itself as a trusted distributor of multiple well-known brands. The site offers a comprehensive product catalog, customer support via online chat, and clear contact information, enhancing customer trust and engagement. Technically, the website is built using modern web technologies including React and Google Tag Manager, with good mobile optimization and SEO practices. The site enforces HTTPS and includes cookie consent mechanisms, reflecting a good level of privacy compliance. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found, indicating room for improvement in security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces the domain trustworthiness score, but the professional presentation and verified customer reviews mitigate some concerns. Overall, the website demonstrates a solid security and privacy foundation suitable for its business model. Strategically, the company should focus on enhancing transparency by publishing explicit security policies and incident response procedures, improving WHOIS data availability, and implementing additional security headers. These steps will strengthen customer confidence and regulatory compliance, supporting sustainable growth in the competitive e-commerce cosmetics market.

KPMG Business Institute, operated by KPMG Česká republika, s.r.o., is a professional educational platform specializing in finance, accounting, compliance, and management training. The website offers a broad catalog of courses targeting professionals and companies in the Czech Republic, leveraging the strong global KPMG brand. The business model focuses on B2B and B2C training services with a well-established market position supported by client testimonials and ACCA accreditation. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager and Google Analytics for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. No CMS or hosting provider details are explicitly detected. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR alignment. Overall, the website presents a low-risk profile with strong business credibility and professional content. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

C

CanvasJS

canvasjs.com

68

CanvasJS is a specialized technology company providing a high-performance HTML5 JavaScript charting library designed for developers and businesses requiring advanced data visualization solutions. The company offers a broad range of chart types and supports multiple popular frameworks such as React, Angular, and jQuery, positioning itself as a versatile and developer-friendly solution in the data visualization market. The business is a subsidiary of Fenopix and has been operational since 2013, with a domain registration dating back to 2011, indicating a stable and established presence. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is optimized for performance and mobile responsiveness, with good SEO practices implemented via Yoast SEO. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring reliable uptime and performance. From a security perspective, the site enforces HTTPS with strong domain status protections and includes standard security headers. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response contacts are published, suggesting room for enhancement in transparency and security governance. The site does not expose sensitive data and uses asynchronous loading for analytics scripts to minimize performance impact. Overall, CanvasJS presents a professional, trustworthy, and technically sound web presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

C

Coredem

coredem.info

53

Coredem is a collective project aggregating documentary resources from over 30 organizations focused on democracy and social transformation. It offers a specialized search engine, Scrutari, and hosts thematic collections and debates in multiple languages. The website is built on the SPIP CMS platform with a modern responsive design and uses analytics tools such as Google Analytics and Matomo. However, it lacks visible privacy and cookie policies and does not expose contact information prominently. The WHOIS data is unavailable, which limits domain trust verification, but the website content and structure appear professional and legitimate for a non-profit collective. Security headers are not detected, and privacy compliance is minimal, indicating areas for improvement.