Security Directory

V

Vorwerk & Co. KG

cookidoo.tw

65

Cookidoo® is the official recipe platform for Thermomix®, operated by Vorwerk & Co. KG, targeting the Taiwanese market with localized Traditional Chinese content. The platform offers a comprehensive digital experience including recipe discovery, meal planning, and cooking tutorials, supporting Thermomix® appliance users. The website demonstrates a mature technical infrastructure with modern web components, Algolia search integration, and robust cookie consent management via OneTrust. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR considerations. Overall, the site is professional, trustworthy, and well-aligned with the brand's market position.

E

Euroleague for Life Sciences (ELLS)

euroleague-study.org

62

The Euroleague for Life Sciences (ELLS) is a well-established European university alliance focused on life sciences and sustainability. It brings together leading academic institutions to collaborate on education, research, and innovation in agri-food systems and environmental sciences. The alliance supports student mobility, joint teaching programs, and scientific conferences, targeting students and researchers in the life sciences domain. The website reflects a professional academic portal with consistent branding and clear contact information, primarily hosted and managed by the Czech University of Life Sciences Prague and Wageningen University & Research.

V

VIPARIS

viparis.com

70

VIPARIS is a leading European business tourism company based in Paris, specializing in hosting shows, trade shows, conventions, seminars, and conferences across 12 venues. The website presents a professional and well-branded digital presence targeting business professionals and event organizers. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, with integration of Google Tag Manager for analytics. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks visible security headers and public security policies. The absence of WHOIS data and privacy/cookie policies reduces transparency and privacy compliance confidence. Overall, the site is trustworthy and professional but could improve in privacy and security disclosures.

P

PhotoShelter

photoshelter.com

63

PhotoShelter operates as a leading digital asset management and content distribution platform, primarily targeting brands and photographers. The company offers a comprehensive SaaS solution that includes AI-powered search, real-time workflows, social content distribution, and collaboration tools. Their market position is strong within the digital asset management space, supported by professional branding and extensive marketing efforts. Technically, the website is built on WordPress and integrates multiple modern marketing and analytics technologies such as Marketo, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing an excellent user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data is a notable anomaly that reduces trust slightly, though the website content and branding suggest a legitimate enterprise. Overall, the risk is moderate with recommendations to enhance transparency and security posture.

S

Storck & Merci Shop

storck.shop

68

Storck.shop is an e-commerce platform focused on retailing Storck branded confectionery products primarily to a German-speaking audience. The website offers a broad selection of sweets and emphasizes ease of online ordering and quick delivery. The site integrates modern digital marketing and analytics tools such as Google Tag Manager and Google Analytics, alongside a cookie consent management system powered by Cookiebot, reflecting a moderate level of digital maturity. The technical infrastructure is based on a Shopware CMS platform with standard web technologies and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enforced and basic security best practices observed, though improvements in security headers and explicit privacy and terms documentation are recommended. Overall, the site presents a moderate risk profile with no critical vulnerabilities detected but would benefit from enhanced transparency and contact information to improve trust and compliance.

M

Město Český Brod

cesbrod.cz

57

Město Český Brod operates an official municipal website serving the residents and stakeholders of Český Brod, Czech Republic. The site provides comprehensive information about local government services, events, public announcements, and contact channels. It maintains a consistent brand presence and integrates social media platforms to enhance community engagement. The website is built on a modern CMS framework (Nette) and uses standard web technologies including Google Analytics and reCAPTCHA for security and analytics purposes. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service pages, which are important for compliance and transparency. Security practices include HTTPS enforcement and cookie consent mechanisms, but no detailed security policy or incident response information is publicly available. The domain is long-established and consistent with the municipal nature of the site, indicating high legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

L

Lumni

lumni.fr

54

Lumni is a French educational multimedia platform offering free videos, quizzes, and games aimed at students, parents, teachers, and educational mediators. It serves as a cultural and knowledge access point, positioning itself as a trusted public educational content provider in France. The website demonstrates a mature digital infrastructure with integrations of advanced analytics and consent management tools, reflecting a commitment to user privacy and performance monitoring. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Lumni presents a professional, trustworthy, and well-maintained online presence suitable for its educational mission.

F

Fundación Bancaria Ibercaja

fundacionibercaja.es

59

Fundación Ibercaja is a well-established non-profit foundation based in Spain, dedicated to fostering social equality, cultural enrichment, educational development, and territorial economic growth. The organization operates multiple centers and offers diverse programs aimed at improving societal welfare and promoting sustainability aligned with the UN Agenda 2030. The website reflects a professional and consistent brand image, supported by comprehensive legal and privacy documentation, and active engagement through social media channels. Technically, the website employs modern web technologies including responsive design frameworks and JavaScript libraries such as Swiper.js and Google Analytics for user tracking and engagement analysis. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured content. However, some security headers are not explicitly detected, and no incident response or vulnerability disclosure information is published, which could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR requirements. No critical vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data limits domain trust evaluation, but the overall digital footprint and certifications support legitimacy. Overall, Fundación Ibercaja presents a strong digital presence with a clear mission and trustworthy operations. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its credibility and resilience.

D

Divadlo D21

divadlod21.cz

50

Divadlo D21 is a well-established theatre organization based in Prague, Czech Republic, founded in 2012. It offers theatrical performances, educational projects, and cultural events targeting the general public and schools. The website reflects a professional cultural institution with a clear focus on community engagement and artistic offerings. Technically, the site uses a mix of JavaScript libraries including jQuery, Vue.js, and Google Analytics for tracking, with a responsive design and moderate performance. Security-wise, the site implements GDPR compliance and cookie consent mechanisms but lacks visible HTTP security headers in the provided data, indicating room for improvement in security hardening. Overall, the domain registration and WHOIS data align well with the business profile, supporting legitimacy and trustworthiness.

K

Kubio

kubiobuilder.com

56

KubioBuilder is a technology company specializing in a block-based WordPress website builder plugin. The website presents a professional and modern design optimized for WordPress users seeking an intuitive site-building experience. The company appears to be a small-sized entity founded in 2021, targeting WordPress developers and site creators. The technical infrastructure leverages WordPress CMS, Yoast SEO plugin for search optimization, and Cloudflare DNS services, indicating a moderate level of digital maturity. However, the domain registration is currently expired, posing a risk to business continuity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and trustworthy but requires immediate domain renewal and enhanced compliance documentation.

The website sacredlight.to is a recently registered domain currently used as a domain parking page managed via Sedo and registered through Namecheap. It provides no original business content or services, instead displaying generic advertising and search widgets. The site targets a general audience with Finnish language content but lacks any identifiable business entity or contact information. Technically, the site uses standard HTML5 and JavaScript with Google Ads and Sedo domain parking scripts, but lacks advanced frameworks or CMS. Security posture is minimal with no visible security headers or policies, and privacy compliance is basic with a generic privacy policy and cookie consent mechanism. Overall, the site has low business credibility and limited technical sophistication.

C

Cream Code Technology Pvt Ltd

creamcode.org

60

Cream Code Technology Pvt Ltd is a Nepal-based small IT services company founded in 2020, delivering innovative IT services and technology solutions globally. Their website showcases their offerings including WordPress themes, WooCommerce addons, and license key management, targeting businesses seeking digital transformation and online presence. The company leverages modern WordPress infrastructure with Elementor and Astra theme, integrating Google Analytics and Tag Manager for marketing insights. The website is professionally designed with good mobile optimization and clear navigation, reflecting a consistent brand image. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and privacy policies are missing. Overall, the site is legitimate and functional but could improve compliance and security transparency.

T

Tapovan

tapovanfrance.com

55

Tapovan is a small healthcare and education entity based in France, specializing in Ayurveda and yoga. The website presents a professional and consistent brand image, offering Ayurvedic retreats, massages, yoga classes, and educational seminars. The business is positioned as an authentic and established center in Europe for these wellness services. Technically, the site is built on the Wix platform, leveraging Wix Thunderbolt technology, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and some security hardening scripts, but lacks visible security headers and formal policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and trustworthy for its niche but requires improvements in privacy compliance, contact transparency, and security best practices.

W

Woopra

woopra.com

73

Woopra is a technology company specializing in customer journey and product analytics software. Their platform enables businesses to track user behavior across multiple touchpoints including marketing, sales, product usage, and support, providing actionable insights to improve customer acquisition and retention. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content targeted at product, marketing, sales, and support teams. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable gap, limiting full trust assessment of domain registration legitimacy. Overall, Woopra presents as a credible SaaS analytics provider with a well-implemented website and good privacy compliance, but would benefit from enhanced transparency in security and domain registration details.

The website publicdomainregistry.com is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks access to its actual content. The domain is registered with PDR Ltd. d/b/a PublicDomainRegistry.com since 2003, indicating a long-standing presence. However, due to the WAF challenge, no business content, policies, or contact information is accessible for analysis. The technical infrastructure includes Cloudflare security services, but DNSSEC is not enabled, representing a minor security gap. The website lacks visible privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present beyond the captcha challenge. Overall, the site’s security posture is moderate due to HTTPS and domain transfer protection, but content quality and privacy compliance cannot be assessed due to blocking.

S

Střední pedagogická škola da Vinci

pedagogickaskoladavinci.cz

58

Střední pedagogická škola da Vinci is a small educational institution based in the Czech Republic specializing in preschool and extracurricular pedagogy. The website presents the school’s educational offerings, admission process, team information, and inspirational events, targeting students and educators interested in pedagogical studies. The business model is focused on providing secondary education with a niche focus on pedagogical training. The website is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for content delivery, indicating a modern but modest technical infrastructure. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structure suggest a legitimate educational entity. Overall, the site is safe, professional, and functional with room for enhancements in privacy compliance and security best practices.

D

Diochi

diochi.cz

48

Diochi.cz is an established Czech company specializing in the development, manufacturing, and sale of natural bioinformational dietary supplements. The website reflects a mature e-commerce platform with a membership club, targeting health-conscious consumers interested in natural products. The company has a long-standing domain since 2003, indicating stability and market presence. Technically, the site is built on Joomla CMS with modern JavaScript libraries and frameworks, supporting responsive design and accessibility at a basic level. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and advanced login options including WebAuthn, though some security headers could be improved. Advertising and analytics are implemented with user consent, reflecting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in its niche.

B

BSSHOP s.r.o.

bsshop.cz

60

BSSHOP s.r.o. is a Czech technology company specializing in the development of e-commerce platforms tightly integrated with the economic system POHODA. With over 20 years of experience and more than 650 active e-shops, the company holds a strong market position in the Czech and Slovak e-commerce sector. Their key services include e-shop creation, process automation, supplier integration, and marketing tools tailored for business clients. The website reflects a professional and business-oriented approach, targeting companies seeking robust e-commerce solutions integrated with POHODA. Technically, the website employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is safe, professional, and trustworthy for its intended business audience. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding incident response contacts, and improving accessibility to strengthen compliance and user trust.

D

Divadlo Hybernia

hybernia.eu

43

Divadlo Hybernia is a Czech theatre offering cultural performances and entertainment services, targeting a general audience interested in theatre arts. The website is built on WordPress and employs modern web technologies including Google Tag Manager, Microsoft Clarity, and FontAwesome for icons. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. However, it lacks explicit privacy and cookie policies, and no direct contact information is found in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for small businesses. Strategic improvements in privacy compliance and security practices are recommended.

R

Rewora

rewora.io

66

Rewora is a technology company specializing in customer experience tools designed to boost sales and build trust through authentic product and store reviews, Q&A forums, and business intelligence analytics. The company targets e-commerce businesses seeking to increase conversion rates and customer loyalty by leveraging social proof and advanced review management features. The website presents a professional and modern digital presence with clear branding and comprehensive service descriptions. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates analytics tools like Google Tag Manager and Hotjar, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent banner. However, the absence of a terms of service page and explicit security or incident response policies are gaps to address. Overall, the domain registration data aligns with the business profile, indicating a legitimate and consistent startup operation launched in 2023.

T

Televize Natura s.r.o.

tvnatura.cz

55

TV Natura is a small Czech internet television platform focused on nature, environmental awareness, and community engagement. The website offers live streaming, archived videos, articles, and opportunities for user-generated content. The business operates as a small media entity with a non-profit or community-supported model, recently transitioning to a paid membership platform due to regulatory and financial challenges. Technically, the site uses modern web technologies including HTTPS, Bootstrap, and integrates Google Analytics and Facebook Pixel for tracking. The security posture is moderate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no terms of service or incident response information is found. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site provides a good user experience with relevant content for its target audience but would benefit from enhanced security and compliance measures.

L

LABE TRI CLUB Hradec Králové z.s.

skolnitriatlon.cz

41

The website skolnitriatlon.cz represents the LABE TRI CLUB Hradec Králové z.s., a small Czech sports organization focused on organizing school and public triathlon events. The site provides event schedules, contact information, and photo galleries to engage its target audience of athletes ranging from school children to general sports enthusiasts. The business model centers on event organization in collaboration with a sports equipment rental partner, Topsports Centrum. The website is modest but functional, with a clear focus on local sports community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, supplemented by Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the business location. The site is mobile-optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and modern tracking tools but lacks visible security headers and formal privacy or cookie policies, which impacts its privacy compliance score. No active forms or incident response contacts are present, and no vulnerability disclosure mechanisms are found. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small local sports event organizer with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

B

BEST OF NATURE

bestofnature.sk

10

Best of Nature is a small retail business specializing in natural plant-based oils and wellness products, targeting consumers interested in aromatherapy and traditional herbal remedies primarily in Slovakia and the Czech Republic. The website presents a professional and consistent brand image with clear product promotion and customer engagement through exhibitions and online sales. Technically, the site uses modern web technologies including Vue.js and FontAwesome, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent and privacy policies implemented, but lacks explicit security headers and incident response information. Overall, the website is trustworthy and compliant with GDPR, though improvements in security policies and technical hardening are recommended.

The website www.zaragoza.es/sede/ is the official electronic headquarters of the Ayuntamiento de Zaragoza, serving as a comprehensive digital platform for municipal services, citizen information, and electronic administration. It offers a wide range of services including public employment offers, cultural agendas, citizen participation, and access to various municipal resources. The site targets residents and visitors of Zaragoza, providing a government-backed, authoritative source of information and services. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and FontAwesome, with integrations for Google Tag Manager and Google Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and shows good security practices, though explicit security headers and a cookie consent mechanism could be improved. The WHOIS data is unavailable due to access restrictions, but the domain is a recognized official government domain, lending high legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical digital interface for Zaragoza's municipal government.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

T

Trophée Industrie Grand Ouest

trophees-industrie-grand-ouest.com

61

The website 'Trophées Industrie Grand Ouest' serves as a regional award platform recognizing top-performing industrial companies in Brittany, Normandy, and Pays de la Loire regions of France. It is positioned as a small-sized business focused on manufacturing sector awards and recognition. The site is built on the Wix platform, leveraging Wix Thunderbolt framework, and hosted by Wix, providing a moderate level of technical maturity with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and structure appear professional and business-oriented. Contact information is limited to a phone number and postal address embedded in structured data, with no email or contact forms present. Overall, the site is functional and relevant to its target audience but requires improvements in privacy, security, and domain legitimacy verification.

P

Le Palmarès des Entreprises

palmaresdesentreprises.com

6

The website www.palmaresdesentreprises.com is hosted on the Wix platform and appears to be a business-oriented site in French. However, the content is minimal and primarily consists of Wix's standard scaffolding and scripts, with no visible business descriptions, contact information, or policies. The domain WHOIS data is unavailable, indicating either a very recent registration or privacy protection, which raises concerns about the legitimacy and transparency of the site. Technically, the site uses modern JavaScript libraries and error monitoring via Sentry, but lacks advanced security headers and privacy compliance mechanisms. Overall, the site demonstrates basic technical infrastructure but lacks critical business and security information, resulting in a moderate risk profile.

A

API Platform

api-platform.com

11

API Platform is a mature technology company specializing in providing an API-first framework that enables developers and enterprises to create REST and GraphQL APIs efficiently. The company offers a comprehensive suite of tools including client app scaffolding, a beautiful admin interface, and real-time data streaming capabilities leveraging the Mercure protocol. Their market position is strong within the developer community, supported by open source contributions and enterprise subscription offerings. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site uses a modern tech stack including React, Symfony, Next.js, and is hosted with OVH and Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced, security headers present, and a published security policy, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though it lacks explicit cookie consent mechanisms. Strategic recommendations include enabling DNSSEC, adding cookie consent, and publishing incident response contacts to further enhance security and compliance.

The website nami.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, preventing access to any substantive content. The domain is long-established, registered since 1996 with Network Solutions, LLC, and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no business, contact, or policy information is available for analysis. The technical infrastructure indicates use of modern security tools like Cloudflare's WAF and CAPTCHA to protect the site from automated threats. However, this also limits the ability to assess the website's content quality, security posture, and compliance status. Overall, the site appears legitimate based on domain age and registrar data, but the lack of accessible content restricts further evaluation.

Le Mouvement Associatif operates a French-language website focused on promoting inclusivity within associations through an evaluation tool called Inclusiscore. The site targets associations and their stakeholders, providing educational resources and a questionnaire to assess inclusiveness in project scope, openness, and governance. The organization positions itself as a niche non-profit resource provider within the French associative sector. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with Matomo analytics integrated and configured to require cookie consent. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No CMS or hosting provider details are evident. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS (assumed from canonical URLs), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented inline with GDPR principles, but no formal privacy policy or terms of service pages were found. WHOIS data is privacy protected or unavailable, which is common for non-profits but limits registrant transparency. No contact emails or phone numbers are provided, which could impact user trust and support. Overall, the website is professional, trustworthy, and safe with no adult or questionable content. The main risks relate to limited transparency in registrant data and absence of explicit privacy and security policies. Strategic improvements in these areas would enhance compliance and user trust.

S

Storck

werthers-original.de

70

Werther's Original is a well-established confectionery brand specializing in caramel products such as bonbons, soft toffees, caramel popcorn, and sugar-free sweets. The website reflects a mature digital presence with a consistent brand identity and multiple international localized versions. The business operates under the parent company Storck, a recognized name in the confectionery retail sector. The site provides comprehensive product information and marketing content targeted at general consumers interested in caramel confectionery. Technically, the website is built on TYPO3 CMS and utilizes modern JavaScript libraries including RequireJS, Lodash, and jQuery, with analytics powered by Piwik PRO. The site is mobile-optimized and demonstrates good SEO practices.

S

Storck

nimm2.de

10

The website www.nimm2.de represents the nimm2 brand, a confectionery product line under the Storck company, targeting a general audience in Germany. It provides product information, promotional content, and brand engagement features. The site is well-branded and consistent with the parent company's identity, offering a user-friendly experience with clear navigation and mobile optimization. Technically, the site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, Lodash, and jQuery, with analytics powered by Piwik PRO. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response details are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Storck

merci.de

71

Merci.de is the official German website for the merci brand, a confectionery product line under the Storck company. The site serves as a marketing and informational platform showcasing product varieties, promotional campaigns, personalized packaging options, and DIY crafting ideas. It targets German-speaking consumers interested in gifting and chocolate products. The website is well-branded, professionally designed, and consistent with the parent company's identity. Technically, it is built on TYPO3 CMS with modern JavaScript frameworks and includes a cookie consent mechanism compliant with GDPR. Social media integration and external shop links enhance user engagement. Security posture is solid with HTTPS and cookie consent, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, user-friendly, and content-rich, supporting the brand's retail and marketing objectives.

S

Storck

toffifee.hu

62

The website www.toffifee.hu is a professionally designed brand marketing site for Toffifee confectionery products targeted at the Hungarian market. It is owned and operated by Storck, a well-established confectionery company. The site provides product information, brand storytelling, and consumer engagement features, with clear navigation and mobile optimization. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, ensuring a moderate to good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. Privacy compliance is good, with accessible privacy and cookie policies in Hungarian. No direct contact emails or phone numbers are visible on the homepage, but a contact form is available on a dedicated page. WHOIS data confirms domain legitimacy and consistency with the brand identity. Overall, the site is trustworthy, safe, and professionally maintained.

S

Storck

merci.hu

70

The merci.hu website serves as the official Hungarian portal for the merci chocolate brand, owned by Storck. It provides product information, promotional content, and custom packaging options targeted at Hungarian consumers. The site is well-branded, consistent, and professionally designed, reflecting a mature retail confectionery business. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Piwik PRO for analytics, indicating a moderate to advanced digital infrastructure. Security-wise, the site employs cookie consent mechanisms and does not expose sensitive data, but lacks explicit security policies and incident response contacts, suggesting room for improvement in transparency and security posture. Overall, the site is trustworthy, GDPR compliant, and free from suspicious content or domains.

S

Storck

werthers-original.pl

62

Werther's Original Poland website represents a well-established confectionery brand under the parent company Storck. The site offers product information and brand storytelling focused on caramel sweets, targeting a general audience in Poland. The business model is retail-oriented, emphasizing product promotion and brand engagement. The website is professionally designed with consistent branding and good content quality, supporting a positive market position within the confectionery sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as RequireJS, jQuery, and Lodash. It includes responsive design elements and SEO-friendly metadata. The site performance is moderate, with good mobile optimization but basic accessibility features. Analytics are implemented via Piwik PRO with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS (implied by canonical URLs) and has implemented cookie consent banners. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is published. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this business type but slightly reduces transparency. Overall, the website presents a trustworthy and professional digital presence with moderate security posture and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's security and user trust further.

S

Storck Polska

nimm2.pl

63

The website www.nimm2.pl is the official Polish site for the nimm2 brand, a confectionery product line under the Storck company. It provides detailed product information, brand storytelling, and consumer engagement content targeted at families and general consumers interested in sweet treats with vitamins. The site is professionally designed with consistent branding and good navigation, supporting a positive user experience. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial .pl domains. Overall, the site is trustworthy, safe, and well-maintained.

S

Storck

toffifee.pl

61

The website www.toffifee.pl is a professionally designed brand site for Toffifee confectionery products in Poland, operated under the parent company Storck. It provides product information, promotional content, and brand engagement primarily targeting Polish consumers interested in sweets. The site uses TYPO3 CMS and modern JavaScript libraries, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented via a cookie notice. Security posture is moderate, with no visible security headers and no explicit incident response contacts, but no critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is not publicly available, typical for .pl domains, but the website's professional presentation and linkage to Storck indicate legitimacy. Overall, the site scores well on content quality, business credibility, and privacy compliance, with room for improvement in security best practices and transparency.

S

Storck Polska

merci.pl

70

Merci.pl is the official Polish website for the merci chocolate brand, operated under the parent company Storck Polska. The site serves as a marketing and brand engagement platform, showcasing product ranges, limited editions, and interactive features for consumers in Poland. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response information are absent. WHOIS data is unavailable, limiting domain trust assessment, but the website's professional presentation and brand consistency support legitimacy. Overall, merci.pl is a well-maintained retail brand site with moderate technical maturity and good privacy compliance.

G

Grenoble INP - UGA

grenoble-inp.fr

52

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

A

ABOUT YOU

aboutyou.cz

62

ABOUT YOU is a large online fashion retail platform operating in the Czech Republic, offering over 1500 brands with services including free delivery and a 30-day return policy. The website demonstrates a mature e-commerce business model with a strong market position in the regional fashion retail sector. Technically, the site employs modern JavaScript frameworks, integrates advanced consent management via Usercentrics, and uses Datadog for logging and monitoring, indicating a high level of digital maturity. Security posture is solid with HTTPS enforcement and security best practices, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and no detected vulnerabilities or suspicious content.

The website tarikamar.fr represents a small, specialized digital services provider focused on public interest projects, operating within a cooperative model called multi. The business offers development, data science, and consulting services emphasizing open data and free software. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of organizations seeking digital tools for social good. Technically, the site uses modern web technologies including JavaScript, Python, Ruby, and PHP, hosted by OVH with HTTPS enabled, but lacks some security headers and formal privacy or cookie policies. Security posture is moderate with secure forms but missing incident response and vulnerability disclosure information. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site contains no advertising or tracking technologies and no adult or questionable content, making it safe for general audiences.

S

Square, Inc.

squareup.com

69

Square, Inc. is a leading fintech company specializing in payment processing, point of sale software, and business management tools for merchants ranging from small businesses to enterprises. The company operates under the parent company Block, Inc., with subsidiaries including Weebly and Afterpay, enhancing its market reach and service offerings. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and comprehensive service information. Technically, the site leverages modern web technologies such as React and is hosted on AWS, ensuring scalability and performance. Security is robust, with HTTPS enforced, multiple security headers, and compliance with PCI DSS standards. Privacy policies and cookie consent mechanisms are clearly presented, indicating good GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

The website garden-gourmet.com is currently a parked domain with no active business content or services. The domain is registered since 2019 with InterNetX GmbH and is set to expire in 2026. The site primarily serves as a landing page advertising the domain for sale, containing no privacy policies, contact information, or business details. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes pointing to third-party ad and tracking domains. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. The site lacks GDPR compliance indicators and does not provide cookie consent mechanisms. Overall, the site has low trustworthiness and poor content quality, reflecting its status as a parked domain rather than an active business website.

S

Somfy Digital

somfydigital.com

66

Somfy Digital operates a specialized B2B product catalog platform focused on Somfy products, primarily targeting the Polish market. The website provides a structured catalog with product categories and filtering options, supporting business customers in discovering and ordering Somfy smart home and automation products. The platform demonstrates moderate digital maturity with a modern tech stack including Google Tag Manager and Elastic Behavioral Analytics for user tracking and analytics. The website is mobile-optimized and offers a good user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information and incident response details are not publicly available, limiting transparency and trust. Overall, the site is safe and professional but would benefit from enhanced privacy compliance and security best practices.

A

Additi Multimédia

maville.com

64

Maville.com is a well-established French regional news portal founded in 1998, owned by Additi Multimédia and associated with the parent company Ouest-France. It provides localized news, sports, entertainment, restaurant guides, classifieds, and deals across numerous French cities and regions. The website targets residents and visitors seeking local information and lifestyle content. Technically, the site employs a modern JavaScript stack with jQuery, Google Tag Manager, Facebook Pixel, and a GDPR-compliant consent management platform (Didomi). The site is mobile-optimized and uses HTTPS with a good security posture, though DNSSEC is not enabled and some security headers like CSP are missing. Privacy compliance is strong with clear cookie and privacy policies and active consent mechanisms. No direct contact information or security incident response details are published, which is a minor gap. Overall, the site is professional, trustworthy, and serves its audience well.

T

Transition Netzwerk e.V.

transition-initiativen.org

57

The website www.transition-initiativen.org represents the Transition Netzwerk e.V., a non-profit grassroots network active in Germany, Austria, and Switzerland focused on sustainability, climate protection, and social justice. It serves as a hub for over 120 local Transition Initiatives, offering educational resources, event announcements, and community engagement opportunities. The organization positions itself as a connector and supporter of local groups working towards ecological and social transformation. Technically, the site is built on Drupal 7 with jQuery and custom JavaScript, delivering a moderately performant and accessible experience. The site is mobile responsive at a basic level and includes standard SEO meta tags. Security posture is good with HTTPS enforced and CAPTCHA on login forms, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The WHOIS data is unavailable or malformed, limiting domain registration transparency and trust verification. Despite this, the website content, external partnerships, and event details support the legitimacy of the organization. No signs of malicious activity or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website is a credible and well-maintained platform for a non-profit sustainability network, with room for improvement in security headers, privacy compliance, and WHOIS transparency.

H

HappyCow

happycow.net

10

HappyCow is a well-established online platform dedicated to providing comprehensive listings and reviews of vegan and vegetarian restaurants worldwide. It serves a global community of vegans, vegetarians, and health-conscious consumers by offering restaurant directories, user-generated reviews, recipes, travel guides, and community forums. The platform also supports mobile applications, enhancing accessibility and user engagement. The website demonstrates a professional design with consistent branding and a clear focus on its niche market. Technically, HappyCow employs modern web technologies including JavaScript modules, lazy loading, and integrates with major advertising and analytics services such as Google Analytics and Mediavine. The site is hosted on a reliable CDN infrastructure (AWS Cloudfront), ensuring good performance and availability. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and integrates Google reCAPTCHA for bot mitigation. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, reflecting GDPR awareness. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trustworthiness from a domain registration perspective. Overall, HappyCow presents a secure, user-friendly, and content-rich platform with minor areas for security and transparency enhancement.

S

follow.it | The Ultimate News Platform

specificfeeds.com

66

follow.it is a technology-driven news aggregation platform founded in 2006, offering personalized news delivery and subscription services to readers and publishers. The website presents a professional design with a modern frontend framework (Vue.js) and integrates advertising through Google Adsense. The domain is well-established with DNSSEC enabled and a valid registration status, indicating a legitimate business presence. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which are important for user trust and regulatory compliance. Security posture is generally good with HTTPS and DNSSEC, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website wp-content.org is a domain parking page registered in December 2021 via Name.com, Inc. It does not represent an active business or service but serves as a placeholder with advertising links and search functionality powered by Sedo and Google Adsense. The site content is minimal, primarily in Finnish, and lacks any original business information, contact details, or security policies. Technically, the site uses standard HTML, CSS, and JavaScript with third-party ad and tracking scripts but does not enforce HTTPS or implement security headers. Privacy compliance is basic, with a privacy policy linked to Sedo's domain parking service and a cookie banner without explicit consent mechanisms. Overall, the site has a low trustworthiness and business credibility score due to its parking status and lack of substantive content or policies.