Security Directory

S

Storck

werthers-original.co.uk

65

Werther’s Original is a well-established confectionery brand owned by Storck, specializing in caramel and toffee products. The website serves as a brand and product showcase with rich multimedia content, product catalogs, recipes, and brand storytelling aimed at a general consumer audience in the UK. The business model focuses on retail and brand marketing within the confectionery sector, supported by a large parent company with multiple related brands. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes Piwik PRO analytics with GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is moderate; while HTTPS is implied, explicit security headers are not detected, and no dedicated security or incident response policies are published. WHOIS data is unavailable due to domain registration errors, which slightly reduces trust but does not undermine the legitimacy of the brand given the strong corporate backing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though improvements in security transparency and WHOIS clarity are recommended.

W

Werther's Original

werthers-original.ca

62

Werther's Original is a well-established confectionery brand specializing in classic caramel treats, operating under the parent company Storck. The website targets a general audience in Canada, offering a variety of caramel products and related content such as recipes and commercials. The brand maintains consistent and professional digital branding with a focus on retail confectionery. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and integrates analytics and advertising tools like Piwik PRO and StackAdapt. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not outweigh the overall legitimacy indicated by the brand association and website content. Strategic recommendations include improving security headers, publishing incident response information, and monitoring domain registration details to enhance trust and compliance.

The website www.cargill.fr is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents retrieval of any meaningful content or business information. The domain WHOIS data is unavailable from the AFNIC registry, indicating either privacy protection or a non-registered status under this TLD. Consequently, no metadata, structured data, contact information, or security policies could be extracted or analyzed. The technical infrastructure is limited to Cloudflare's security service, with no visible CMS or hosting details. The security posture cannot be properly assessed due to the block, but the presence of a WAF indicates some level of protection. Overall, the site cannot be evaluated for content quality, privacy compliance, or business credibility in its current state.

L

Limagrain

limagrain.com

70

Limagrain is a large French cooperative agricultural and agro-food group headquartered in Auvergne, France, with operations in 53 countries. The group specializes in the selection, production, and commercialization of high-value seeds for large-scale and vegetable crops, alongside unique agro-food supply chains that valorize the production of its 1,300 cooperative farmers. The website reflects a mature and professional business with a strong cooperative identity and a focus on sustainability and innovation. Technically, the website uses modern JavaScript frameworks, Google Tag Manager for analytics, and accessibility tools to ensure compliance and user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and incident response contacts. The absence of WHOIS registration data reduces trust slightly but is offset by the professional presentation and social media presence. Overall, the site is well-designed, accessible, and informative, serving a broad audience including agricultural professionals and job seekers.

T

TIMAC AGRO INTERNATIONAL

timacagro.com

70

TIMAC AGRO INTERNATIONAL is a well-established enterprise specializing in soil, plant, and animal nutrition, with a history dating back to 1959 in Saint-Malo, France. As part of Groupe Roullier, it holds a strong market position as an innovation leader in sustainable agriculture, serving farmers globally through a network of subsidiaries and field representatives. The company offers a comprehensive range of products and services focused on efficient and sustainable farming practices. Technically, the website is built on a modern WordPress platform using Elementor and WooCommerce, with advanced analytics and consent management tools implemented. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a public security policy or incident response information. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, though the website content and branding strongly suggest legitimacy. Overall, the site demonstrates a high level of professionalism and trustworthiness, with room for improvement in transparency and security disclosures.

Terrena is a well-established agricultural cooperative based in the Grand Ouest region of France, serving 18,000 member farms and employing 13,000 people. The cooperative focuses on supporting farmers through local supply chains and strong brand management, aiming to provide responsible and accessible food. The website reflects a mature digital presence built on WordPress, with good SEO, mobile optimization, and privacy-conscious analytics via Matomo. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism in place. Security posture is solid with HTTPS enforced, though explicit security headers and incident response policies are not published. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high due to consistent branding and external partner references.

I

InVivo

invivo-group.com

66

InVivo is a major French agricultural cooperative group with a strong European presence, focused on driving the agricultural and food transition towards sustainability and resilience. The company operates across multiple sectors including agriculture, international commodity trading, agro-food production, and retail, serving farmers, cooperatives, and consumers. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization and SEO practices. Social media integration is robust, supporting brand engagement. Security posture is generally good with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the professional website content and branding mitigate some risk. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on privacy and security policies.

A

Alumni Agro Bordeaux

alumni-agro-bordeaux.org

57

Alumni Agro Bordeaux is a French alumni association dedicated to graduates of Bordeaux Sciences Agro, providing a platform for networking, career development, and community engagement. The website offers access to alumni directories, event information, a career center, and a magazine publication, targeting agronomy professionals and students. Technically, the site uses a mix of modern JavaScript libraries and frameworks, including jQuery, Bootstrap, and hCaptcha for security, with a CMS likely based on NetAssoc. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and spam protection, though improvements in HTTP security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust analysis, but the association with reputable educational institutions and federations supports legitimacy. Overall, the website is professional, secure, and well-suited for its audience.

A

AnaEnsaia

anaensaia.org

58

AnaEnsaia is a French alumni association for graduates of ENSAIA, an agricultural engineering school. The website serves as a community hub offering networking, career services, events, and publications to its members. It is well-branded and professionally maintained, targeting alumni and professionals in the agricultural sector. The technical infrastructure uses modern JavaScript libraries and CMS features, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protection, and GDPR-compliant cookie consent, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but the website's content and social presence strongly indicate legitimacy. Overall, AnaEnsaia presents a trustworthy, professional online presence supporting its community effectively.

I

Institut Agro Alumni

institut-agro-alumni.fr

46

Institut Agro Alumni operates as a dedicated alumni community platform for graduates of Institut Agro schools in France. The website offers a range of services including networking, career support, event organization, and publication of a magazine. It targets alumni and professionals connected to the agricultural and educational sectors, positioning itself as a niche but important community resource. The platform integrates modern web technologies and provides a mobile-friendly experience, including a dedicated mobile app. Security measures such as HTTPS, CSRF tokens, and hCaptcha are implemented, alongside GDPR-compliant cookie consent mechanisms. Contact information and social media presence enhance trust and accessibility.

A

Aptalumni

aptalumni.org

48

Aptalumni is a well-established alumni association serving graduates of AgroParisTech, a prestigious French engineering school. The website provides a comprehensive platform for alumni networking, career services, events, solidarity initiatives, and publications. It targets AgroParisTech alumni and professionals connected to the institution, offering membership benefits and community engagement. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized organization in the education and non-profit sectors based in France. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, SweetAlert, and hCaptcha for security. It uses a specialized CMS likely based on NetAssoc. The site is mobile-optimized and includes accessibility and SEO best practices. Privacy and cookie policies are well implemented with GDPR compliance, including a consent banner managed by tarteaucitron. Analytics and error tracking are handled via Google Analytics and Raygun. Security posture is strong with HTTPS enforced, CSRF protection on forms, and bot mitigation via hCaptcha. However, security headers are not visibly configured, and no explicit security or incident response policies are published. WHOIS data is unavailable due to a malformed response, but the website's professionalism and content quality indicate legitimacy. No suspicious or malicious indicators were found. Overall, the site presents a low-risk profile with good privacy and security hygiene, serving an important educational community. Strategic improvements include adding security headers, publishing a security policy, and enhancing incident response transparency.

B

Breek

breek.fr

51

Breek is a French technology consultancy specializing in web strategy, functional specifications, and development services primarily using Drupal and iOS platforms. Established in 2003, the company serves a professional clientele including major brands such as LVMH, Apple, and BNP Paribas, positioning itself as a niche expert in web development and AMOA services. The website reflects a professional and consistent brand image with a clear focus on technology and consulting services. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and SEO practices. Analytics are implemented via Piwik PRO, indicating moderate user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partial, lacking a cookie consent mechanism and detailed GDPR indicators. Overall, the website is trustworthy and professional, with a strong business credibility score and no signs of malicious or adult content.

E

Eric A. and Kathryn S. Meyer

meyerweb.com

45

meyerweb.com is a well-established personal and professional website belonging to Eric A. Meyer, a recognized expert in CSS and web development, and his wife Kathryn, a doctor of nursing. The site primarily serves as a blog and resource hub for web developers and CSS enthusiasts, featuring detailed technical articles, tools, and personal writings. The business model is centered on content sharing and community engagement, targeting a niche audience of web professionals and learners. The site has a consistent brand identity and a strong reputation within its niche, supported by a domain age of over two decades. Technically, the site uses a combination of hand-authored HTML and WordPress for the blog section, with some static site generation for book content. The technology stack is modern and standards-compliant, with good mobile optimization and accessibility features. However, performance is moderate and could benefit from further optimization. SEO practices are good, with proper meta tags and structured navigation. From a security perspective, the site benefits from a long-standing domain with clientTransferProhibited status, indicating protection against unauthorized transfers. However, there is no evidence of DNSSEC, security headers, or explicit SSL configuration details, which suggests room for improvement. The absence of privacy and cookie policies is a compliance gap, especially for GDPR. No contact or incident response information is provided, limiting transparency in security matters. Overall, meyerweb.com is a trustworthy and authoritative site with excellent content quality and business credibility. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance the site's security posture and user trust. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and vulnerability disclosure information.

S

SIL Global

sil.org

63

SIL Global is a well-established, faith-based nonprofit organization dedicated to language development and community empowerment worldwide. Their website reflects a professional and comprehensive digital presence, offering extensive resources, training, and services in linguistic research, literacy, translation, and language technology. The organization targets diverse global communities and language professionals, emphasizing equal access to education and socio-economic opportunities regardless of language barriers. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses standard web technologies including jQuery and Font Awesome. It is mobile-optimized and accessible, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and secure form handling, though the absence of certain security headers and explicit cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain registration trust verification, but the presence of recognized nonprofit certifications and consistent branding supports legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance.

C

Concrete CMS

concrete5.org

74

Concrete CMS is an open source content management system designed for teams including content creators, designers, and developers. It offers a website builder with built-in tools to simplify content editing and management. The company behind Concrete CMS, PortlandLabs, positions itself as a provider of secure, compliant, and enterprise-ready CMS solutions, serving notable clients such as the U.S. Army, BASF, and Home Depot. Their business model includes offering the open source CMS software alongside hosting, support, and custom development services. The website demonstrates strong branding consistency, professional design, and clear navigation, targeting medium-sized to enterprise organizations in technology and government sectors. Technically, the website leverages modern web technologies including jQuery, Bootstrap, Vue.js, and integrates analytics and marketing tools such as Google Tag Manager, Matomo, ZoomInfo, Leadfeeder, and Pipedrive LeadBooster. The CMS platform itself is Concrete CMS, hosted likely by PortlandLabs. The site is mobile optimized and performs moderately well, with good SEO and accessibility features. From a security perspective, Concrete CMS emphasizes compliance with ISO 27001, SOC 2, and HIPAA standards, offering role-based access control, workflow approvals, and version control. The site uses HTTPS and has cookie consent mechanisms. However, explicit security headers are not detected, and there is no public vulnerability disclosure or incident response contact information, which are areas for improvement. Overall, the website is professional, trustworthy, and content safe for general audiences. The main concern is the lack of WHOIS registration data, which raises questions about domain legitimacy despite the strong business presence. Strategic recommendations include improving security header implementation, publishing vulnerability disclosure policies, and clarifying domain registration details to enhance trust.

P

PortlandLabs

concretecms.org

72

Concrete CMS is an established open source content management system developed and maintained by PortlandLabs since 2008. It targets web developers and content editors seeking an easy-to-use, flexible CMS platform with built-in features and a strong community backing. The website positions Concrete CMS as a trusted solution used by governments and Fortune 500 companies, emphasizing security, extensibility, and user-friendly editing experiences. The business model revolves around open source software distribution complemented by community engagement and commercial support services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Vue.js, FontAwesome, and analytics tools such as Matomo and Google Analytics. The CMS itself is Concrete CMS, which is also the product being promoted. The site is mobile optimized, well-structured, and uses responsive design techniques. Performance is moderate with room for improvement in accessibility features. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes a dedicated security page. Cookie consent mechanisms and a comprehensive privacy policy demonstrate compliance with privacy regulations including GDPR. However, explicit security headers are not detected, and no public vulnerability disclosure or incident response contacts are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and well-maintained with a high level of content quality and business credibility. The lack of WHOIS data limits domain registration trust analysis, but the site’s branding and external trust signals strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, improving accessibility, and maintaining transparency in data protection practices.

M

miniOrange

xecurify.com

68

The website login.xecurify.com/moas/login serves as a secure login portal for miniOrange, a company specializing in identity and access management solutions such as Single Sign-On and Multi-Factor Authentication. The portal is designed for business and enterprise users requiring secure authentication services. The site uses modern frontend technologies including Bootstrap, jQuery, and Select2, ensuring a responsive and user-friendly experience. However, the page is minimalistic, focusing solely on login functionality without additional content such as privacy or cookie policies. From a security perspective, the site enforces HTTPS and uses cache-control headers to prevent sensitive data caching. The login form includes CSRF tokens, enhancing security. Nonetheless, the absence of key security headers like Content-Security-Policy, HSTS, and Referrer-Policy represents an area for improvement. No signs of WAF or security challenge blocking were detected, allowing full content access. WHOIS data for the subdomain login.xecurify.com is unavailable, which is typical for subdomains. The main domain xecurify.com likely holds the registration. The branding and technical setup align with a legitimate business operation. The lack of privacy and cookie policies on this login page reduces privacy compliance scores. Overall, the site demonstrates a moderate security posture and good business credibility but would benefit from enhanced privacy and security header implementations.

B

Bloo Kanoo

blookanoo.com

51

Bloo Kanoo is a technology company founded in 2020 that provides a live shopping platform targeted at brands and retailers. Their service enables interactive and engaging shopping experiences, positioning them as a niche player in the live shopping technology market. The website is built on WordPress using Elementor, hosted on Amazon AWS infrastructure, and integrates modern analytics tools such as Google Tag Manager and LogRocket. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is moderate with professional content but missing explicit contact details and security policies. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

D

Deutsch-Griechische Industrie- und Handelskammer

german-chamber.gr

48

The Deutsch-Griechische Industrie- und Handelskammer (German-Greek Chamber of Industry and Commerce) serves as a bilateral business network fostering trade and cooperation between Germany and Greece. With approximately 900 members, it offers a range of services including market entry consulting, legal and tax advice, delegation support, job portals, and translation services. The organization also hosts social events and networking opportunities to strengthen business ties. The website reflects a professional and consistent brand image aligned with its institutional partners such as BMWK, DIHK, and IHK. Technically, the site is built on the Ibexa DXP CMS with Vue.js and Swiper.js for frontend interactivity, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS and no exposed sensitive data, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, serving a medium-sized organization focused on government and non-profit sectors.

The website www.vorwerk-group.com is currently inaccessible, returning a CloudFront 403 error page indicating that requests are blocked due to traffic or configuration issues. No website content, metadata, or business information is available for analysis. The domain WHOIS query returned no registration data, suggesting the domain may not be registered or WHOIS data is unavailable. Due to these factors, a comprehensive assessment of the company's business, technical infrastructure, and security posture is not possible at this time. The lack of accessible content and registration data significantly limits trust and credibility evaluation.

P

Pinterest

pinterest.com.mx

74

Pinterest is a globally recognized technology company specializing in visual discovery and social media services. The platform enables users to find and share ideas related to recipes, home decor, fashion, and more, targeting a broad general audience. The Mexican localized site (mx.pinterest.com) reflects the company's commitment to regional markets with tailored content and language support. Pinterest operates primarily on an advertising and e-commerce integrated business model, leveraging its large user base and visual content to connect users with products and services. Technically, the website employs a modern tech stack including React, JavaScript, and WebAssembly, hosted on Amazon AWS infrastructure. It integrates multiple third-party services for fonts, analytics, advertising, and security, such as Google Fonts, Amazon Advertising, Facebook Pixel, and Arkose Labs for bot mitigation. The site demonstrates excellent performance, mobile optimization, and accessibility standards, ensuring a smooth user experience. From a security perspective, Pinterest enforces HTTPS with strong SSL configurations and implements comprehensive security headers including a strict Content Security Policy. The use of reCAPTCHA and Arkose Labs indicates proactive measures against automated abuse. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. No critical vulnerabilities or suspicious indicators were detected in the analyzed content. Overall, Pinterest's Mexican site exhibits a high level of professionalism, security, and compliance, supporting its position as a trusted and established platform. The absence of WHOIS data for the subdomain is typical and does not detract from legitimacy, as it is managed under the main pinterest.com domain. Strategic recommendations include maintaining regular security audits, enhancing transparency around vulnerability disclosures, and continuing to optimize privacy compliance.

V

Vorwerk & Co. KG

cookidoo.mx

65

Cookidoo® is the official recipe platform for Thermomix® users in Mexico, operated by Vorwerk & Co. KG. It offers a comprehensive digital recipe library, personalized cooking suggestions, and meal planning tools, positioning itself as a leader in culinary content for Thermomix® appliances. The platform is well-branded, professionally designed, and optimized for mobile and accessibility, providing an excellent user experience. Technically, the site employs modern web technologies including Algolia for search, Snowplow for analytics, and OneTrust for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, consent-based tracking, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, compliant with privacy regulations, and serves its target audience effectively.

L

Loyalty Marketing Services SAPI de CV

recomiendayganathermomix.mx

59

The website recomiendayganathermomix.mx serves as a login portal for a customer referral and rewards program associated with Thermomix products in Mexico. Operated by Loyalty Marketing Services SAPI de CV, the platform targets Thermomix customers to facilitate user authentication, password recovery, and registration. The site leverages modern frontend technologies such as jQuery, Bootstrap 5, and SweetAlert2, and is built on an ASP.NET Core Identity framework, indicating a mature technical infrastructure. The website is mobile optimized and presents a consistent brand image aligned with Thermomix official branding. From a security perspective, the site enforces HTTPS and includes anti-forgery tokens in forms, enhancing protection against common web attacks. However, the absence of security headers like Content-Security-Policy and lack of a cookie consent mechanism indicate areas for improvement. No explicit privacy or incident response policies are published on the site, which could impact compliance with data protection regulations. The WHOIS data is privacy protected but consistent with the business branding, and no suspicious patterns were detected. Overall, the website demonstrates a moderate to good security posture and technical maturity suitable for its business purpose. Strategic enhancements in privacy compliance, security headers, and transparency around data protection would strengthen trust and regulatory adherence. The platform's focused business model and clear target audience position it well within the niche Thermomix customer referral market in Mexico.

1

104人力銀行

104.com.tw

64

104人力銀行 is a leading Taiwanese online job recruitment platform providing comprehensive job search and talent acquisition services. The platform targets a broad audience including job seekers, students, fresh graduates, senior professionals, middle-aged workers, and foreigners. It holds a strong market position supported by recognized certifications and awards, reflecting its commitment to social value and work-life balance. The company operates multiple service verticals and partner domains to cater to diverse employment needs. Technically, the website employs modern frontend technologies such as Vue.js and integrates multiple analytics and advertising tools, indicating a mature digital infrastructure. The site is mobile optimized and offers a professional user experience with clear navigation and rich content. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers are not explicitly detected. Privacy compliance is supported by a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness with consistent branding and transparent company information.

V

Vorwerk & Co. KG

cookidoo.tw

65

Cookidoo® is the official recipe platform for Thermomix®, operated by Vorwerk & Co. KG, targeting the Taiwanese market with localized Traditional Chinese content. The platform offers a comprehensive digital experience including recipe discovery, meal planning, and cooking tutorials, supporting Thermomix® appliance users. The website demonstrates a mature technical infrastructure with modern web components, Algolia search integration, and robust cookie consent management via OneTrust. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR considerations. Overall, the site is professional, trustworthy, and well-aligned with the brand's market position.

S

SHOPLINE Limited

shoplineapp.com

66

SHOPLINE Limited operates a global smart commerce platform providing total commerce solutions and customized services to businesses ranging from startups to established global brands. Their offerings support online, social media, and offline sales channels, positioning them as a comprehensive e-commerce enabler. The website reflects a mature business with over 10 years of domain history and consistent branding across multiple localized domains. Technically, the site leverages modern web technologies including AngularJS, Google Tag Manager, and multiple analytics and marketing tools, hosted on AWS infrastructure. While the site is performant and mobile-optimized, some accessibility and SEO improvements could be made. Security posture is solid with HTTPS and domain locks, but lacks DNSSEC and advanced security headers. Privacy compliance is partially met with clear privacy and terms pages but lacks cookie consent mechanisms and explicit security policies. Overall, the site is professional and trustworthy with extensive tracking and marketing integrations.

E

Euroleague for Life Sciences (ELLS)

euroleague-study.org

62

The Euroleague for Life Sciences (ELLS) is a well-established European university alliance focused on life sciences and sustainability. It brings together leading academic institutions to collaborate on education, research, and innovation in agri-food systems and environmental sciences. The alliance supports student mobility, joint teaching programs, and scientific conferences, targeting students and researchers in the life sciences domain. The website reflects a professional academic portal with consistent branding and clear contact information, primarily hosted and managed by the Czech University of Life Sciences Prague and Wageningen University & Research.

A

Agreenium

agreenium.fr

63

Agreenium is a French non-profit alliance focused on education and research in agriculture, food, environment, and global health. The organization provides a comprehensive platform for educational resources, doctoral and international research training, and thematic research coordination. The website is built on Drupal 10 and uses modern frontend technologies including Alpine.js and Swiper.js, with Matomo analytics for privacy-conscious user tracking. The site is well-designed, mobile-optimized, and offers clear navigation and professional content targeted at students, researchers, and professionals in related fields. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is a valuable resource in its sector but would benefit from enhanced transparency on privacy and security policies.

Č

České modelky s.r.o.

brigadyhostesky.eu

43

České modelky s.r.o. operates the website brigadyhostesky.eu, providing an online platform for event staffing, specifically offering job opportunities for hostesses and promoters across the Czech Republic. Established since 2006, the company positions itself as a professional service provider in organizing commercial and social events. The website features detailed job listings, profiles of hostesses, and client references, targeting individuals seeking temporary work in promotional roles. The business model revolves around connecting clients with suitable event staff and managing registrations and communications online. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 5, FontAwesome, and Google reCAPTCHA for form security. The site is mobile-optimized with good navigation and content structure, although some advanced security headers and cookie consent mechanisms are missing. External resources and partner domains are well integrated, indicating a mature digital presence. However, the lack of WHOIS data limits domain trust verification. From a security perspective, HTTPS is used, and spam protection is implemented via reCAPTCHA. The absence of security headers like CSP and HSTS, and missing cookie consent, represent areas for improvement. No critical vulnerabilities or adult content were detected, and privacy policy compliance with GDPR is indicated. Overall, the site demonstrates a moderate security posture suitable for its business scope but would benefit from enhanced security controls. The overall risk assessment is moderate with a trust score of 75 out of 100. Strategic recommendations include implementing security headers, adding cookie consent, improving WHOIS transparency, and maintaining up-to-date software. These steps will enhance user trust, compliance, and security resilience.

T

TEKOM CZ spol. s r.o.

netroliferadio.cz

59

Netro Life Radio is a regional FM radio station based in České Budějovice, Czech Republic, operated by TEKOM CZ spol. s r.o. The station focuses on dance and popular music, targeting listeners in the South Bohemia region. It offers both traditional FM broadcasting on 100.8 FM and online streaming services, including high-quality and mobile-optimized streams. The website is professionally designed, featuring clear navigation, multimedia content, and active social media channels. However, the absence of WHOIS data limits transparency about domain ownership and age. Technically, the website leverages modern web technologies including Google Tag Manager, Google Analytics, and a proprietary CMS platform (solidpixels.). The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure form handling, but lacks visible security headers and explicit privacy policies, indicating room for improvement. Overall, the security posture is moderate with no critical vulnerabilities detected in the visible content. The business credibility is strong due to clear company information and legal disclosures. The absence of WHOIS data and privacy policy slightly reduce trust scores. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility features to strengthen compliance and user trust.

T

TN Média s.r.o.

salonkyhk.cz

44

Salonky is a regional news media website operated by TN Média s.r.o., focusing on delivering local news, sports, cultural events, and multimedia content to the Hradec Králové region in the Czech Republic. The site targets local residents and those interested in regional affairs, leveraging a content-rich platform with regular updates and social media integration. The business model appears to be advertising-supported, with visible banners and campaign redirects embedded in the site. Technically, the website is built on WordPress and utilizes modern front-end libraries such as jQuery, Bootstrap, Owl Carousel, and Font Awesome. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a responsive design and includes interactive features like video tabs and newsletter subscription forms. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. The newsletter subscription form uses JavaScript fetch API for secure data submission, but no explicit privacy policy or cookie consent mechanism is present, which may raise compliance concerns. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and design indicate a legitimate media outlet. Overall, Salonky presents a professional and content-rich platform for regional news but would benefit from enhanced privacy disclosures, security headers, and WHOIS transparency to improve trust and compliance. Strategic improvements in these areas will strengthen its security posture and user confidence.

V

VIPARIS

viparis.com

70

VIPARIS is a leading European business tourism company based in Paris, specializing in hosting shows, trade shows, conventions, seminars, and conferences across 12 venues. The website presents a professional and well-branded digital presence targeting business professionals and event organizers. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, with integration of Google Tag Manager for analytics. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks visible security headers and public security policies. The absence of WHOIS data and privacy/cookie policies reduces transparency and privacy compliance confidence. Overall, the site is trustworthy and professional but could improve in privacy and security disclosures.

P

PhotoShelter

photoshelter.com

63

PhotoShelter operates as a leading digital asset management and content distribution platform, primarily targeting brands and photographers. The company offers a comprehensive SaaS solution that includes AI-powered search, real-time workflows, social content distribution, and collaboration tools. Their market position is strong within the digital asset management space, supported by professional branding and extensive marketing efforts. Technically, the website is built on WordPress and integrates multiple modern marketing and analytics technologies such as Marketo, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing an excellent user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data is a notable anomaly that reduces trust slightly, though the website content and branding suggest a legitimate enterprise. Overall, the risk is moderate with recommendations to enhance transparency and security posture.

S

Storck

dein-merci.de

62

The website www.dein-merci.de is an e-commerce platform specializing in personalized merci Finest Selection chocolates, allowing customers to customize packaging with photos and messages. It operates under the reputable Storck brand, targeting consumers seeking unique gift ideas. The site is built on a modern Shopify Oxygen infrastructure using React and Tailwind CSS, ensuring good performance and mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is solid with HTTPS and cookie consent, though some security headers and incident response details are missing. Overall, the site presents a professional and trustworthy online shopping experience with no signs of malicious content or blocking mechanisms.

S

Storck & Merci Shop

storck.shop

68

Storck.shop is an e-commerce platform focused on retailing Storck branded confectionery products primarily to a German-speaking audience. The website offers a broad selection of sweets and emphasizes ease of online ordering and quick delivery. The site integrates modern digital marketing and analytics tools such as Google Tag Manager and Google Analytics, alongside a cookie consent management system powered by Cookiebot, reflecting a moderate level of digital maturity. The technical infrastructure is based on a Shopware CMS platform with standard web technologies and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enforced and basic security best practices observed, though improvements in security headers and explicit privacy and terms documentation are recommended. Overall, the site presents a moderate risk profile with no critical vulnerabilities detected but would benefit from enhanced transparency and contact information to improve trust and compliance.

K

Krby komplet s.r.o.

krbykomplet.eu

53

Krby komplet s.r.o. is a specialized small business based in the Czech Republic, providing comprehensive heating solutions including fireplaces, stoves, chimneys, garden fireplaces, gas grills, and chimney maintenance services. Established in 2008, the company has a strong local presence with over 520 completed projects and a focus on quality and professional service primarily in the Central Bohemian Region. Their website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on Webflow, leveraging modern web technologies and content delivery networks to ensure fast performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of explicit privacy policies and security headers indicates room for improvement. Overall, the website is trustworthy and well-positioned for its market segment, but should enhance compliance and security transparency to further strengthen user trust and regulatory adherence.

M

Město Český Brod

cesbrod.cz

57

Město Český Brod operates an official municipal website serving the residents and stakeholders of Český Brod, Czech Republic. The site provides comprehensive information about local government services, events, public announcements, and contact channels. It maintains a consistent brand presence and integrates social media platforms to enhance community engagement. The website is built on a modern CMS framework (Nette) and uses standard web technologies including Google Analytics and reCAPTCHA for security and analytics purposes. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service pages, which are important for compliance and transparency. Security practices include HTTPS enforcement and cookie consent mechanisms, but no detailed security policy or incident response information is publicly available. The domain is long-established and consistent with the municipal nature of the site, indicating high legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

W

Wp Royal

wp-royal.com

57

WP Royal Themes is a small technology company specializing in the development and sale of WordPress themes, targeting bloggers, small businesses, and WordPress users seeking quality, customizable themes. The company emphasizes customer support, providing forums, documentation, and video tutorials to enhance user experience. Their market position is that of a niche WordPress theme provider with a focus on quality and support, leveraging modern WordPress technologies and e-commerce capabilities via WooCommerce. Technically, the website is built on WordPress with a robust tech stack including WooCommerce, Yoast SEO, WPBakery Page Builder, and Slider Revolution. Hosting is provided by Bluehost Inc., and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured data. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are provided, which could be improved for better trust and compliance. Cookie consent is implemented, indicating some GDPR compliance efforts. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to minor security hardening and privacy policy transparency. Strategic improvements in these areas would enhance compliance and user trust.

M

McM promotion

pragueidiots.cz

41

Green Day revival Prague is a tribute band project established in 2012 by experienced musicians from various Czech bands. The website serves as a platform to promote their live performances, share news, and provide booking contact information. The site is built on WordPress with common plugins and scripts, offering a moderate level of technical sophistication and basic mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data limits domain legitimacy verification, but the presence of detailed contact information and active social media profiles supports business credibility. Overall, the site is functional and serves its niche audience effectively but would benefit from enhanced security and compliance measures.

M

Město Říčany

ricany.cz

57

Město Říčany is the official municipal government website for the town of Říčany in the Czech Republic. It serves as a comprehensive portal for citizens and local businesses, providing news updates, cultural event calendars, public service information, official notices, and contact details. The site targets local residents and stakeholders, offering a user-friendly experience with multilingual support and clear navigation. The business model is focused on public administration and community engagement, positioning itself as a trusted local government authority. Technically, the website is built on WordPress with a modern tech stack including jQuery, WPML for multilingual support, and various plugins for GDPR compliance and user interaction. The site demonstrates good performance, mobile optimization, and accessibility features. It integrates Google Analytics and Tag Manager for analytics and marketing purposes, with a clear cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and uses best practices such as cookie consent and DOMPurify for sanitization. However, some minor issues like broken lazy loading images and missing explicit security headers (CSP, X-Frame-Options) were noted. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and official branding support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, fixing image loading errors, and adding a security.txt file for vulnerability disclosure to further strengthen trust and compliance.

H

Humanoid

humanoid.fr

59

Humanoid is a French media publishing company operating multiple recognized online media brands such as Frandroid, Numerama, and Lemon.fr. The company is positioned as a leader in its category, focusing on modern, independent digital journalism accessible freely to readers. The business model includes advertising, affiliate marketing, premium subscriptions, and event services. The company is part of the EBRA Group, indicating a solid corporate backing and market presence. The website is professionally designed, mobile-optimized, and well-structured, reflecting a mature digital infrastructure. Technically, the site uses WordPress CMS, Cloudflare for DNS and CDN, and integrates Google Tag Manager and New Relic for analytics and monitoring. Security posture is good with HTTPS enforced and reputable hosting, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. Overall, the website is trustworthy and professional, with no signs of malicious or adult content.

R

Reddit, Inc.

redd.it

73

Reddit, Inc. operates one of the largest and most influential social media platforms globally, providing a space for user-generated content, community discussions, and social networking. The platform targets a broad audience of internet users and content creators, leveraging advertising and premium memberships as its primary business model. The website demonstrates a high level of professionalism, with excellent content quality and consistent branding. Technically, Reddit employs modern web technologies including React and Node.js, hosted behind Cloudflare, ensuring fast performance and mobile optimization. Security posture is strong, with HTTPS enforced and comprehensive security headers implemented, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with GDPR adherence. Overall, Reddit presents a trustworthy and mature digital presence with minor gaps in publicly available security governance documentation.

L

Lumni

lumni.fr

54

Lumni is a French educational multimedia platform offering free videos, quizzes, and games aimed at students, parents, teachers, and educational mediators. It serves as a cultural and knowledge access point, positioning itself as a trusted public educational content provider in France. The website demonstrates a mature digital infrastructure with integrations of advanced analytics and consent management tools, reflecting a commitment to user privacy and performance monitoring. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Lumni presents a professional, trustworthy, and well-maintained online presence suitable for its educational mission.

F

Fondation Thuram

education-racisme.fr

49

The website education-racisme.fr is a French non-profit educational platform dedicated to combating racism through awareness and scientific knowledge dissemination. It is affiliated with the Fondation Thuram and offers interactive educational resources such as videos, animations, cards, and legal texts. The site targets educators, students, and the general public interested in anti-racism education. Technically, it is built on WordPress with common plugins for SEO and caching, and uses Google Analytics for visitor tracking. The site is secured with HTTPS and includes cookie consent mechanisms, reflecting good privacy compliance. However, WHOIS data is unavailable, likely due to privacy protection, but the website's content and partner affiliations support its legitimacy. Security headers could be improved, and accessibility and mobile optimization are basic but functional.

N

Nadace pro rozvoj architektury a stavitelství

stavbaroku.cz

45

Stavba roku is a Czech Republic-based non-profit foundation focused on promoting excellence in architecture and construction through various awards and competitions. The website serves as a platform to showcase these awards, provide information about the competitions, and engage with professionals and stakeholders in the construction and architectural sectors. The foundation operates with a clear mission to support architectural development and urban projects, targeting industry professionals and regional participants. The site is well-positioned in its niche with partnerships including media and construction industry leaders.

F

Fundación Bancaria Ibercaja

fundacionibercaja.es

59

Fundación Ibercaja is a well-established non-profit foundation based in Spain, dedicated to fostering social equality, cultural enrichment, educational development, and territorial economic growth. The organization operates multiple centers and offers diverse programs aimed at improving societal welfare and promoting sustainability aligned with the UN Agenda 2030. The website reflects a professional and consistent brand image, supported by comprehensive legal and privacy documentation, and active engagement through social media channels. Technically, the website employs modern web technologies including responsive design frameworks and JavaScript libraries such as Swiper.js and Google Analytics for user tracking and engagement analysis. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured content. However, some security headers are not explicitly detected, and no incident response or vulnerability disclosure information is published, which could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR requirements. No critical vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data limits domain trust evaluation, but the overall digital footprint and certifications support legitimacy. Overall, Fundación Ibercaja presents a strong digital presence with a clear mission and trustworthy operations. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its credibility and resilience.

N

Netinteractive

webpublication.fr

61

Webpublication.fr is a French-based digital content creation company specializing in interactive digital publishing solutions such as catalogs, magazines, annual reports, and sales presentations. Established in 2007, it serves a broad B2B market including agencies and advertisers, positioning itself as a mature player with a solid client base and reputable testimonials. The website is built on WordPress with a modern tech stack including analytics and marketing tools, demonstrating a good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved and formal security policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with room for enhanced transparency in security and incident response.

M

Mauges Communauté

maugescommunaute.fr

48

Mauges Communauté is a French local government community of agglomeration providing a broad range of public services and information to residents and stakeholders within the Mauges territory. The website serves as an official portal offering details on governance, environmental initiatives, economic development, cultural activities, and citizen participation. It targets local residents and public sector stakeholders, positioning itself as a key regional authority. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Matomo analytics for user tracking. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Security posture is solid with HTTPS enforced and use of security plugins, but lacks visible security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain appears legitimate despite missing WHOIS data, consistent with privacy protection norms for government domains. Strategic improvements in security headers, privacy mechanisms, and transparency would enhance trust and compliance.

J

Josef Špaček

josefspacek.com

64

Josef Špaček's website serves as a professional digital portfolio showcasing his career as a renowned Czech solo violinist and former concertmaster of the Czech Philharmonic Orchestra. The site provides comprehensive information about his biography, upcoming concerts, media appearances, and album releases, targeting classical music enthusiasts and concert attendees. The website is built on the Squarespace platform, leveraging embedded media from YouTube and SoundCloud, and integrates social media channels for broader audience engagement. Technically, the site is well-structured with modern web technologies, responsive design, and basic accessibility features, though there is room for improvement in security headers and SEO enhancements. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced HTTP security headers. The absence of WHOIS data raises questions about domain registration transparency, though the professional presentation and consistent branding support legitimacy. Overall, the site is a high-quality, trustworthy artist portfolio with minor technical and compliance improvements recommended.