Security Directory

W

Woopra

woopra.com

73

Woopra is a technology company specializing in customer journey and product analytics software. Their platform enables businesses to track user behavior across multiple touchpoints including marketing, sales, product usage, and support, providing actionable insights to improve customer acquisition and retention. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content targeted at product, marketing, sales, and support teams. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable gap, limiting full trust assessment of domain registration legitimacy. Overall, Woopra presents as a credible SaaS analytics provider with a well-implemented website and good privacy compliance, but would benefit from enhanced transparency in security and domain registration details.

The website publicdomainregistry.com is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks access to its actual content. The domain is registered with PDR Ltd. d/b/a PublicDomainRegistry.com since 2003, indicating a long-standing presence. However, due to the WAF challenge, no business content, policies, or contact information is accessible for analysis. The technical infrastructure includes Cloudflare security services, but DNSSEC is not enabled, representing a minor security gap. The website lacks visible privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present beyond the captcha challenge. Overall, the site’s security posture is moderate due to HTTPS and domain transfer protection, but content quality and privacy compliance cannot be assessed due to blocking.

S

Střední pedagogická škola da Vinci

pedagogickaskoladavinci.cz

58

Střední pedagogická škola da Vinci is a small educational institution based in the Czech Republic specializing in preschool and extracurricular pedagogy. The website presents the school’s educational offerings, admission process, team information, and inspirational events, targeting students and educators interested in pedagogical studies. The business model is focused on providing secondary education with a niche focus on pedagogical training. The website is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for content delivery, indicating a modern but modest technical infrastructure. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structure suggest a legitimate educational entity. Overall, the site is safe, professional, and functional with room for enhancements in privacy compliance and security best practices.

D

Diochi

diochi.cz

48

Diochi.cz is an established Czech company specializing in the development, manufacturing, and sale of natural bioinformational dietary supplements. The website reflects a mature e-commerce platform with a membership club, targeting health-conscious consumers interested in natural products. The company has a long-standing domain since 2003, indicating stability and market presence. Technically, the site is built on Joomla CMS with modern JavaScript libraries and frameworks, supporting responsive design and accessibility at a basic level. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and advanced login options including WebAuthn, though some security headers could be improved. Advertising and analytics are implemented with user consent, reflecting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in its niche.

B

BSSHOP s.r.o.

bsshop.cz

60

BSSHOP s.r.o. is a Czech technology company specializing in the development of e-commerce platforms tightly integrated with the economic system POHODA. With over 20 years of experience and more than 650 active e-shops, the company holds a strong market position in the Czech and Slovak e-commerce sector. Their key services include e-shop creation, process automation, supplier integration, and marketing tools tailored for business clients. The website reflects a professional and business-oriented approach, targeting companies seeking robust e-commerce solutions integrated with POHODA. Technically, the website employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is safe, professional, and trustworthy for its intended business audience. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding incident response contacts, and improving accessibility to strengthen compliance and user trust.

D

Divadlo Hybernia

hybernia.eu

43

Divadlo Hybernia is a Czech theatre offering cultural performances and entertainment services, targeting a general audience interested in theatre arts. The website is built on WordPress and employs modern web technologies including Google Tag Manager, Microsoft Clarity, and FontAwesome for icons. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. However, it lacks explicit privacy and cookie policies, and no direct contact information is found in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for small businesses. Strategic improvements in privacy compliance and security practices are recommended.

R

Rewora

rewora.io

66

Rewora is a technology company specializing in customer experience tools designed to boost sales and build trust through authentic product and store reviews, Q&A forums, and business intelligence analytics. The company targets e-commerce businesses seeking to increase conversion rates and customer loyalty by leveraging social proof and advanced review management features. The website presents a professional and modern digital presence with clear branding and comprehensive service descriptions. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates analytics tools like Google Tag Manager and Hotjar, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent banner. However, the absence of a terms of service page and explicit security or incident response policies are gaps to address. Overall, the domain registration data aligns with the business profile, indicating a legitimate and consistent startup operation launched in 2023.

T

Televize Natura s.r.o.

tvnatura.cz

55

TV Natura is a small Czech internet television platform focused on nature, environmental awareness, and community engagement. The website offers live streaming, archived videos, articles, and opportunities for user-generated content. The business operates as a small media entity with a non-profit or community-supported model, recently transitioning to a paid membership platform due to regulatory and financial challenges. Technically, the site uses modern web technologies including HTTPS, Bootstrap, and integrates Google Analytics and Facebook Pixel for tracking. The security posture is moderate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no terms of service or incident response information is found. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site provides a good user experience with relevant content for its target audience but would benefit from enhanced security and compliance measures.

L

LABE TRI CLUB Hradec Králové z.s.

skolnitriatlon.cz

41

The website skolnitriatlon.cz represents the LABE TRI CLUB Hradec Králové z.s., a small Czech sports organization focused on organizing school and public triathlon events. The site provides event schedules, contact information, and photo galleries to engage its target audience of athletes ranging from school children to general sports enthusiasts. The business model centers on event organization in collaboration with a sports equipment rental partner, Topsports Centrum. The website is modest but functional, with a clear focus on local sports community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, supplemented by Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the business location. The site is mobile-optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and modern tracking tools but lacks visible security headers and formal privacy or cookie policies, which impacts its privacy compliance score. No active forms or incident response contacts are present, and no vulnerability disclosure mechanisms are found. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small local sports event organizer with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

B

BEST OF NATURE

bestofnature.sk

10

Best of Nature is a small retail business specializing in natural plant-based oils and wellness products, targeting consumers interested in aromatherapy and traditional herbal remedies primarily in Slovakia and the Czech Republic. The website presents a professional and consistent brand image with clear product promotion and customer engagement through exhibitions and online sales. Technically, the site uses modern web technologies including Vue.js and FontAwesome, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent and privacy policies implemented, but lacks explicit security headers and incident response information. Overall, the website is trustworthy and compliant with GDPR, though improvements in security policies and technical hardening are recommended.

The website www.zaragoza.es/sede/ is the official electronic headquarters of the Ayuntamiento de Zaragoza, serving as a comprehensive digital platform for municipal services, citizen information, and electronic administration. It offers a wide range of services including public employment offers, cultural agendas, citizen participation, and access to various municipal resources. The site targets residents and visitors of Zaragoza, providing a government-backed, authoritative source of information and services. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and FontAwesome, with integrations for Google Tag Manager and Google Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and shows good security practices, though explicit security headers and a cookie consent mechanism could be improved. The WHOIS data is unavailable due to access restrictions, but the domain is a recognized official government domain, lending high legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical digital interface for Zaragoza's municipal government.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

T

Trophée Industrie Grand Ouest

trophees-industrie-grand-ouest.com

61

The website 'Trophées Industrie Grand Ouest' serves as a regional award platform recognizing top-performing industrial companies in Brittany, Normandy, and Pays de la Loire regions of France. It is positioned as a small-sized business focused on manufacturing sector awards and recognition. The site is built on the Wix platform, leveraging Wix Thunderbolt framework, and hosted by Wix, providing a moderate level of technical maturity with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and structure appear professional and business-oriented. Contact information is limited to a phone number and postal address embedded in structured data, with no email or contact forms present. Overall, the site is functional and relevant to its target audience but requires improvements in privacy, security, and domain legitimacy verification.

P

Le Palmarès des Entreprises

palmaresdesentreprises.com

6

The website www.palmaresdesentreprises.com is hosted on the Wix platform and appears to be a business-oriented site in French. However, the content is minimal and primarily consists of Wix's standard scaffolding and scripts, with no visible business descriptions, contact information, or policies. The domain WHOIS data is unavailable, indicating either a very recent registration or privacy protection, which raises concerns about the legitimacy and transparency of the site. Technically, the site uses modern JavaScript libraries and error monitoring via Sentry, but lacks advanced security headers and privacy compliance mechanisms. Overall, the site demonstrates basic technical infrastructure but lacks critical business and security information, resulting in a moderate risk profile.

A

API Platform

api-platform.com

11

API Platform is a mature technology company specializing in providing an API-first framework that enables developers and enterprises to create REST and GraphQL APIs efficiently. The company offers a comprehensive suite of tools including client app scaffolding, a beautiful admin interface, and real-time data streaming capabilities leveraging the Mercure protocol. Their market position is strong within the developer community, supported by open source contributions and enterprise subscription offerings. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site uses a modern tech stack including React, Symfony, Next.js, and is hosted with OVH and Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced, security headers present, and a published security policy, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, though it lacks explicit cookie consent mechanisms. Strategic recommendations include enabling DNSSEC, adding cookie consent, and publishing incident response contacts to further enhance security and compliance.

The website nami.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, preventing access to any substantive content. The domain is long-established, registered since 1996 with Network Solutions, LLC, and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no business, contact, or policy information is available for analysis. The technical infrastructure indicates use of modern security tools like Cloudflare's WAF and CAPTCHA to protect the site from automated threats. However, this also limits the ability to assess the website's content quality, security posture, and compliance status. Overall, the site appears legitimate based on domain age and registrar data, but the lack of accessible content restricts further evaluation.

Le Mouvement Associatif operates a French-language website focused on promoting inclusivity within associations through an evaluation tool called Inclusiscore. The site targets associations and their stakeholders, providing educational resources and a questionnaire to assess inclusiveness in project scope, openness, and governance. The organization positions itself as a niche non-profit resource provider within the French associative sector. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with Matomo analytics integrated and configured to require cookie consent. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No CMS or hosting provider details are evident. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS (assumed from canonical URLs), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented inline with GDPR principles, but no formal privacy policy or terms of service pages were found. WHOIS data is privacy protected or unavailable, which is common for non-profits but limits registrant transparency. No contact emails or phone numbers are provided, which could impact user trust and support. Overall, the website is professional, trustworthy, and safe with no adult or questionable content. The main risks relate to limited transparency in registrant data and absence of explicit privacy and security policies. Strategic improvements in these areas would enhance compliance and user trust.

S

Storck

werthers-original.de

70

Werther's Original is a well-established confectionery brand specializing in caramel products such as bonbons, soft toffees, caramel popcorn, and sugar-free sweets. The website reflects a mature digital presence with a consistent brand identity and multiple international localized versions. The business operates under the parent company Storck, a recognized name in the confectionery retail sector. The site provides comprehensive product information and marketing content targeted at general consumers interested in caramel confectionery. Technically, the website is built on TYPO3 CMS and utilizes modern JavaScript libraries including RequireJS, Lodash, and jQuery, with analytics powered by Piwik PRO. The site is mobile-optimized and demonstrates good SEO practices.

S

Storck

nimm2.de

10

The website www.nimm2.de represents the nimm2 brand, a confectionery product line under the Storck company, targeting a general audience in Germany. It provides product information, promotional content, and brand engagement features. The site is well-branded and consistent with the parent company's identity, offering a user-friendly experience with clear navigation and mobile optimization. Technically, the site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, Lodash, and jQuery, with analytics powered by Piwik PRO. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response details are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Storck

merci.de

71

Merci.de is the official German website for the merci brand, a confectionery product line under the Storck company. The site serves as a marketing and informational platform showcasing product varieties, promotional campaigns, personalized packaging options, and DIY crafting ideas. It targets German-speaking consumers interested in gifting and chocolate products. The website is well-branded, professionally designed, and consistent with the parent company's identity. Technically, it is built on TYPO3 CMS with modern JavaScript frameworks and includes a cookie consent mechanism compliant with GDPR. Social media integration and external shop links enhance user engagement. Security posture is solid with HTTPS and cookie consent, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, user-friendly, and content-rich, supporting the brand's retail and marketing objectives.

S

Storck

toffifee.hu

62

The website www.toffifee.hu is a professionally designed brand marketing site for Toffifee confectionery products targeted at the Hungarian market. It is owned and operated by Storck, a well-established confectionery company. The site provides product information, brand storytelling, and consumer engagement features, with clear navigation and mobile optimization. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, ensuring a moderate to good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. Privacy compliance is good, with accessible privacy and cookie policies in Hungarian. No direct contact emails or phone numbers are visible on the homepage, but a contact form is available on a dedicated page. WHOIS data confirms domain legitimacy and consistency with the brand identity. Overall, the site is trustworthy, safe, and professionally maintained.

S

Storck

merci.hu

70

The merci.hu website serves as the official Hungarian portal for the merci chocolate brand, owned by Storck. It provides product information, promotional content, and custom packaging options targeted at Hungarian consumers. The site is well-branded, consistent, and professionally designed, reflecting a mature retail confectionery business. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Piwik PRO for analytics, indicating a moderate to advanced digital infrastructure. Security-wise, the site employs cookie consent mechanisms and does not expose sensitive data, but lacks explicit security policies and incident response contacts, suggesting room for improvement in transparency and security posture. Overall, the site is trustworthy, GDPR compliant, and free from suspicious content or domains.

S

Storck

werthers-original.pl

62

Werther's Original Poland website represents a well-established confectionery brand under the parent company Storck. The site offers product information and brand storytelling focused on caramel sweets, targeting a general audience in Poland. The business model is retail-oriented, emphasizing product promotion and brand engagement. The website is professionally designed with consistent branding and good content quality, supporting a positive market position within the confectionery sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as RequireJS, jQuery, and Lodash. It includes responsive design elements and SEO-friendly metadata. The site performance is moderate, with good mobile optimization but basic accessibility features. Analytics are implemented via Piwik PRO with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS (implied by canonical URLs) and has implemented cookie consent banners. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is published. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this business type but slightly reduces transparency. Overall, the website presents a trustworthy and professional digital presence with moderate security posture and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's security and user trust further.

S

Storck Polska

nimm2.pl

63

The website www.nimm2.pl is the official Polish site for the nimm2 brand, a confectionery product line under the Storck company. It provides detailed product information, brand storytelling, and consumer engagement content targeted at families and general consumers interested in sweet treats with vitamins. The site is professionally designed with consistent branding and good navigation, supporting a positive user experience. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial .pl domains. Overall, the site is trustworthy, safe, and well-maintained.

S

Storck

toffifee.pl

61

The website www.toffifee.pl is a professionally designed brand site for Toffifee confectionery products in Poland, operated under the parent company Storck. It provides product information, promotional content, and brand engagement primarily targeting Polish consumers interested in sweets. The site uses TYPO3 CMS and modern JavaScript libraries, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented via a cookie notice. Security posture is moderate, with no visible security headers and no explicit incident response contacts, but no critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is not publicly available, typical for .pl domains, but the website's professional presentation and linkage to Storck indicate legitimacy. Overall, the site scores well on content quality, business credibility, and privacy compliance, with room for improvement in security best practices and transparency.

S

Storck Polska

merci.pl

70

Merci.pl is the official Polish website for the merci chocolate brand, operated under the parent company Storck Polska. The site serves as a marketing and brand engagement platform, showcasing product ranges, limited editions, and interactive features for consumers in Poland. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response information are absent. WHOIS data is unavailable, limiting domain trust assessment, but the website's professional presentation and brand consistency support legitimacy. Overall, merci.pl is a well-maintained retail brand site with moderate technical maturity and good privacy compliance.

G

Grenoble INP - UGA

grenoble-inp.fr

52

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

A

ABOUT YOU

aboutyou.cz

62

ABOUT YOU is a large online fashion retail platform operating in the Czech Republic, offering over 1500 brands with services including free delivery and a 30-day return policy. The website demonstrates a mature e-commerce business model with a strong market position in the regional fashion retail sector. Technically, the site employs modern JavaScript frameworks, integrates advanced consent management via Usercentrics, and uses Datadog for logging and monitoring, indicating a high level of digital maturity. Security posture is solid with HTTPS enforcement and security best practices, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and no detected vulnerabilities or suspicious content.

The website tarikamar.fr represents a small, specialized digital services provider focused on public interest projects, operating within a cooperative model called multi. The business offers development, data science, and consulting services emphasizing open data and free software. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of organizations seeking digital tools for social good. Technically, the site uses modern web technologies including JavaScript, Python, Ruby, and PHP, hosted by OVH with HTTPS enabled, but lacks some security headers and formal privacy or cookie policies. Security posture is moderate with secure forms but missing incident response and vulnerability disclosure information. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site contains no advertising or tracking technologies and no adult or questionable content, making it safe for general audiences.

S

Square, Inc.

squareup.com

69

Square, Inc. is a leading fintech company specializing in payment processing, point of sale software, and business management tools for merchants ranging from small businesses to enterprises. The company operates under the parent company Block, Inc., with subsidiaries including Weebly and Afterpay, enhancing its market reach and service offerings. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and comprehensive service information. Technically, the site leverages modern web technologies such as React and is hosted on AWS, ensuring scalability and performance. Security is robust, with HTTPS enforced, multiple security headers, and compliance with PCI DSS standards. Privacy policies and cookie consent mechanisms are clearly presented, indicating good GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

The website garden-gourmet.com is currently a parked domain with no active business content or services. The domain is registered since 2019 with InterNetX GmbH and is set to expire in 2026. The site primarily serves as a landing page advertising the domain for sale, containing no privacy policies, contact information, or business details. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes pointing to third-party ad and tracking domains. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. The site lacks GDPR compliance indicators and does not provide cookie consent mechanisms. Overall, the site has low trustworthiness and poor content quality, reflecting its status as a parked domain rather than an active business website.

S

Somfy Digital

somfydigital.com

66

Somfy Digital operates a specialized B2B product catalog platform focused on Somfy products, primarily targeting the Polish market. The website provides a structured catalog with product categories and filtering options, supporting business customers in discovering and ordering Somfy smart home and automation products. The platform demonstrates moderate digital maturity with a modern tech stack including Google Tag Manager and Elastic Behavioral Analytics for user tracking and analytics. The website is mobile-optimized and offers a good user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information and incident response details are not publicly available, limiting transparency and trust. Overall, the site is safe and professional but would benefit from enhanced privacy compliance and security best practices.

A

Additi Multimédia

maville.com

64

Maville.com is a well-established French regional news portal founded in 1998, owned by Additi Multimédia and associated with the parent company Ouest-France. It provides localized news, sports, entertainment, restaurant guides, classifieds, and deals across numerous French cities and regions. The website targets residents and visitors seeking local information and lifestyle content. Technically, the site employs a modern JavaScript stack with jQuery, Google Tag Manager, Facebook Pixel, and a GDPR-compliant consent management platform (Didomi). The site is mobile-optimized and uses HTTPS with a good security posture, though DNSSEC is not enabled and some security headers like CSP are missing. Privacy compliance is strong with clear cookie and privacy policies and active consent mechanisms. No direct contact information or security incident response details are published, which is a minor gap. Overall, the site is professional, trustworthy, and serves its audience well.

T

Transition Netzwerk e.V.

transition-initiativen.org

57

The website www.transition-initiativen.org represents the Transition Netzwerk e.V., a non-profit grassroots network active in Germany, Austria, and Switzerland focused on sustainability, climate protection, and social justice. It serves as a hub for over 120 local Transition Initiatives, offering educational resources, event announcements, and community engagement opportunities. The organization positions itself as a connector and supporter of local groups working towards ecological and social transformation. Technically, the site is built on Drupal 7 with jQuery and custom JavaScript, delivering a moderately performant and accessible experience. The site is mobile responsive at a basic level and includes standard SEO meta tags. Security posture is good with HTTPS enforced and CAPTCHA on login forms, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The WHOIS data is unavailable or malformed, limiting domain registration transparency and trust verification. Despite this, the website content, external partnerships, and event details support the legitimacy of the organization. No signs of malicious activity or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website is a credible and well-maintained platform for a non-profit sustainability network, with room for improvement in security headers, privacy compliance, and WHOIS transparency.

H

HappyCow

happycow.net

10

HappyCow is a well-established online platform dedicated to providing comprehensive listings and reviews of vegan and vegetarian restaurants worldwide. It serves a global community of vegans, vegetarians, and health-conscious consumers by offering restaurant directories, user-generated reviews, recipes, travel guides, and community forums. The platform also supports mobile applications, enhancing accessibility and user engagement. The website demonstrates a professional design with consistent branding and a clear focus on its niche market. Technically, HappyCow employs modern web technologies including JavaScript modules, lazy loading, and integrates with major advertising and analytics services such as Google Analytics and Mediavine. The site is hosted on a reliable CDN infrastructure (AWS Cloudfront), ensuring good performance and availability. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and integrates Google reCAPTCHA for bot mitigation. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, reflecting GDPR awareness. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trustworthiness from a domain registration perspective. Overall, HappyCow presents a secure, user-friendly, and content-rich platform with minor areas for security and transparency enhancement.

S

follow.it | The Ultimate News Platform

specificfeeds.com

66

follow.it is a technology-driven news aggregation platform founded in 2006, offering personalized news delivery and subscription services to readers and publishers. The website presents a professional design with a modern frontend framework (Vue.js) and integrates advertising through Google Adsense. The domain is well-established with DNSSEC enabled and a valid registration status, indicating a legitimate business presence. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which are important for user trust and regulatory compliance. Security posture is generally good with HTTPS and DNSSEC, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website wp-content.org is a domain parking page registered in December 2021 via Name.com, Inc. It does not represent an active business or service but serves as a placeholder with advertising links and search functionality powered by Sedo and Google Adsense. The site content is minimal, primarily in Finnish, and lacks any original business information, contact details, or security policies. Technically, the site uses standard HTML, CSS, and JavaScript with third-party ad and tracking scripts but does not enforce HTTPS or implement security headers. Privacy compliance is basic, with a privacy policy linked to Sedo's domain parking service and a cookie banner without explicit consent mechanisms. Overall, the site has a low trustworthiness and business credibility score due to its parking status and lack of substantive content or policies.

P

Precious Plastic France

preciousplastic.fr

53

Precious Plastic France is a French non-profit association dedicated to advancing ecological and social transition in the plastic economy. It operates as a community network promoting open-source recycling solutions, training, and events such as an annual festival. The organization targets professionals and the general public interested in sustainable plastic recycling. Technically, the website is built on WordPress, hosted by Alwaysdata, and uses common plugins like Contact Form 7. The site is moderately performant, mobile-optimized, and has good content quality but lacks explicit privacy and cookie policies. Security posture is decent with HTTPS enforced but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the association.

O

One Army

projectkamp.com

56

Project Kamp is a small community-driven initiative based in Portugal focused on researching and prototyping sustainable living methods. The project emphasizes open source sharing of knowledge and community collaboration, positioning itself as a niche player in sustainability research. The website is built on modern web technologies using Webflow and integrates Google Analytics for user tracking. While the site is well-designed and content-rich, it lacks formal privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain registration is consistent and stable, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

F

Ferme de Cagnolle

fermedecagnolle.fr

42

Ferme de Cagnolle is a small organic farm based in Dordogne, France, specializing in living soil market gardening and the production of organic vegetables, seeds, and legal CBD/CBG products. The farm also offers training programs and creates media content to share agroecological knowledge. Their business model combines direct product sales through an online boutique with educational services and participatory agricultural projects, targeting environmentally conscious consumers and learners in France and nearby European cities. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies including Google Analytics and cookie consent tools, but lacks some advanced security headers. The security posture is good with HTTPS enforced and no visible vulnerabilities. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which should be addressed to improve trust. Overall, the site is professional and trustworthy, with good privacy compliance and clear contact information.

M

makesense

makesense.org

61

makesense is a French non-profit organization dedicated to creating tools and programs for collective mobilization to build an inclusive and sustainable society. With over 10 years of experience and an international presence, it supports citizens, entrepreneurs, and organizations in social impact initiatives. The website is professionally designed, multilingual, and provides clear information about its vision, missions, values, and impact. The technical infrastructure is based on WordPress, hosted by DreamHost, and uses common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but lacks detailed security or incident response policies. Overall, the website is trustworthy, safe, and well-positioned in its sector.

J

Joanna Macy & Her Work

joannamacy.net

57

The website 'Joanna Macy & Her Work' appears to be a small-scale, non-profit or personal site hosted on the Squarespace platform. It presents minimal content with no descriptive business information or contact details. The technical infrastructure is standard for a Squarespace site, with HTTPS enabled and basic mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate due to HTTPS but lacks security headers and privacy policies. Overall, the site is accessible and safe but lacks comprehensive business and compliance information.

T

TotalEnergies

totalenergies.com

72

TotalEnergies is a global integrated energy company specializing in oil, biofuels, natural gas, green gases, renewables, and electricity. The company positions itself as a leader in the energy transition, emphasizing sustainability and innovation. The website reflects a mature digital presence with comprehensive corporate content, including press releases, sustainability reports, and investor information. The technical infrastructure is modern, leveraging Drupal CMS, Tealium for tag management, and Cloudflare for hosting and performance optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR consent management. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

C

Conservatoire national des arts et métiers

cnam.fr

53

The Conservatoire national des arts et métiers (Cnam) is a well-established French public higher education institution dedicated to lifelong learning, scientific and technical culture dissemination, and research. The website reflects a mature digital presence with extensive content covering education, research, culture, and regional and international activities. The institution targets students, professionals, and researchers, offering a broad range of services including micro-certifications, MOOCs, and cultural exhibitions. Technically, the site uses modern JavaScript libraries and a custom CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website's branding, certifications, and content strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

G

Groupe INP

groupe-inp.fr

53

Groupe INP is a consortium of public engineering and management schools in France, offering high-quality education and research opportunities across multiple regions including Brittany, Bordeaux, Clermont-Ferrand, Grenoble, Nancy, and Toulouse. The group emphasizes professional training, scientific excellence, and strong ties with industry and international partners. The website reflects a well-structured educational institution with clear branding and a focus on student engagement and admissions. Technically, the site uses a custom CMS (K-Sup), modern web technologies, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but the site content and branding strongly indicate legitimacy. Overall, the site is professional, accessible, and trustworthy for its target audience.

AST Partner Connect is a professional platform operated by the American Society of Transplantation, providing transplant healthcare professionals with access to educational content, clinical trials, career opportunities, and partner resources. The platform serves as a bridge between healthcare professionals and industry partners, facilitating knowledge sharing and professional development in transplantation. The website is well-branded, consistent, and targets a specialized audience in the healthcare sector. Technically, the site uses common web technologies such as jQuery, Vimeo API, and Select2, hosted likely on AWS infrastructure. The design is professional and mobile-optimized, though accessibility and SEO could be improved. Security posture is moderate with no evident critical vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. WHOIS data is transparent and consistent with the organization's profile, enhancing trustworthiness. Overall, the site is a credible and useful resource for its target audience.

S

Somfy

somfy.at

71

Somfy is a well-established company specializing in motorized shading solutions and smart home automation products. The website www.somfy.at serves the Austrian market with a comprehensive product catalog, e-commerce integration, and extensive customer support resources. The company targets private customers, professional partners, and technical planners, positioning itself as a leader in smart home technology and automation. The site is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website employs modern web technologies including responsive images, SVG icons, JSON-LD structured data, and uses Akamai CDN for performance optimization. The platform appears custom-built with a focus on user experience and SEO best practices. Security measures such as HTTPS, security headers, and privacy compliance mechanisms are well implemented, although explicit security policy and incident response pages are not found. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR. The absence of WHOIS data is noted but likely due to privacy protection, which is justified for a commercial brand site. Trust indicators such as Trusted Shops certification and active social media presence further enhance credibility. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Recommendations include publishing explicit security policies and vulnerability disclosure information to further enhance transparency and trust.

P

Près de chez nous

presdecheznous.fr

55

Près de chez nous is a French collaborative platform focused on ecological and solidarity initiatives, providing a map-based directory to connect users with local sustainable resources. The website is designed with a consistent and professional aesthetic, optimized for mobile devices, and includes SEO-friendly metadata. The technical infrastructure relies on standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted by OVH, a reputable provider. User analytics are tracked via Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security practices.

A

Association Colibris

colibris-lafabrique.org

46

La Fabrique des colibris is a French non-profit platform affiliated with the Association Colibris, dedicated to supporting collective projects aligned with ecological and social values. The platform offers free services to project initiators including visibility, volunteer recruitment, and resource sharing, funded primarily through donations. The website is well-branded, consistent, and targets a community of socially conscious individuals and groups in France. Technically, the site runs on Drupal 7 with embedded multimedia and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy transparency.

M

Mouvement Colibris

colibris-universite.org

46

The Université des Colibris is a French non-profit educational platform operated by the Mouvement Colibris, focused on empowering individuals and organizations to engage in ecological and social transition. The website offers a variety of MOOCs and training programs targeting citizens and professionals interested in sustainable development, governance, and community projects. The organization is well-established with a domain registered since 2016 and holds the Qualiopi certification, reinforcing its credibility in the education sector. Technically, the website is built on Drupal 7, utilizing JavaScript and Matomo analytics for user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data enhancing search visibility. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. The site tracks users moderately via Matomo, a privacy-friendly analytics tool. No vulnerabilities or exposed sensitive data were identified. Overall, the website presents a trustworthy and professional front for the educational services it offers, with room for improvement in security and privacy compliance to align with best practices and regulatory requirements.