Security Directory

P

Partage des eaux

partagedeseaux.info

47

Partage des eaux is a French-language non-profit informational website focused on water management, sustainability, and environmental issues. The site operated actively from 2010 to 2020, publishing analyses and resources, and now serves as an archive with new content redirected to the Ritimo network. The website uses the SPIP CMS platform with standard web technologies and integrates Google Analytics and Google Tag Manager for tracking. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies and does not display security headers, which are areas for improvement. WHOIS data is unavailable due to TLD restrictions, but the domain appears legitimate and privacy protection is justified given the site's nature. Overall, the site is a valuable resource with moderate technical and security maturity.

P

PMB Group

ritimo.fr

45

The website ritimo.fr serves as a portal for PMB, an open source library and media management software primarily targeted at French-speaking libraries and media centers. The business operates in the technology sector with a niche focus on library management solutions. The domain is well established since 2011 and hosted by SCALEWAY, indicating a stable technical foundation. The website content is basic, primarily providing a login interface with minimal public-facing information. Technical infrastructure relies on PHP and MySQL, supporting multiple operating systems, reflecting a mature but simple technology stack. Security posture is basic with no advanced protections or security headers detected, and no privacy or cookie policies are present, indicating room for compliance improvements. Overall, the site is safe with no adult or questionable content, but lacks comprehensive business and security transparency.

R

ritimo

ritimo.org

54

Ritimo is a French non-profit network dedicated to providing information and documentation on international solidarity and sustainable development. The website serves as a hub for educational resources, campaigns, and community engagement, targeting a general audience interested in social and environmental issues. Ritimo maintains a consistent brand presence and offers multiple channels for user interaction, including social media and contact forms. Technically, the site is built on the SPIP CMS platform, employs Matomo analytics for privacy-conscious tracking, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present, indicating room for improvement in privacy compliance. WHOIS data is unavailable due to privacy protection, which is typical for non-profit organizations but slightly reduces trust scoring. Overall, Ritimo presents a professional, trustworthy, and content-rich platform with moderate technical sophistication and a strong focus on its mission.

S

index [Scrutari]

scrutari.net

43

Scrutari is a niche technology project focused on providing a metadata-driven search engine platform that indexes subscribed websites using a custom XML metadata format called ScrutariData. The system architecture includes a Java-based server running on Tomcat and various clients implemented in PHP and XUL. The website serves as documentation for developers and users interested in this specialized search technology. The site is built on DokuWiki and presents technical content in French, targeting a developer and technical audience. The business model appears to be centered on offering a customizable search engine solution for specific site collections, emphasizing relevance over exhaustive indexing. Technically, the website uses a standard DokuWiki CMS with jQuery and custom JavaScript. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No hosting provider or SSL configuration details are evident from the content. The absence of HTTPS information and security headers suggests potential security improvements are needed. No analytics or advertising scripts were detected, indicating minimal tracking and marketing activity. From a security perspective, the site does not disclose privacy, cookie, or terms of service policies, nor does it provide contact information for incident response or data protection officers. The WHOIS lookup failed to retrieve domain registration details, raising concerns about domain legitimacy and ownership transparency. No vulnerabilities or exposed sensitive data were found in the HTML content, but the lack of security best practices and policies reduces the overall security posture. Overall, the site is a functional technical documentation resource with moderate content quality but lacks critical security, privacy, and business credibility indicators. The domain registration ambiguity is a significant risk factor. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and incident response information, and improving mobile and accessibility features to enhance trust and compliance.

C

Citego

citego.org

48

Citego is a small non-profit platform established in 2015, focused on providing resources and tools related to cities, territories, and governance with an emphasis on sustainable societal transitions. The website offers a document library, relational atlas, and distance learning opportunities (MOOCs), targeting researchers, policymakers, and territorial actors. The platform is supported by donations and participates in the Coredem network, reinforcing its community and resource-sharing approach. Technically, the website is built on the SPIP CMS with a tech stack including jQuery and Mediabox for media display. It uses HTTPS with a good SSL configuration and is hosted via Gandi SAS. The site performance is moderate with good mobile optimization and basic accessibility features. Analytics are implemented using Piwik/Matomo, but no cookie consent mechanism is present, which is a privacy compliance gap. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No incident response or vulnerability disclosure policies are published, and no contact emails or phone numbers are openly listed, relying instead on contact forms. The WHOIS data is consistent and transparent, supporting the site's legitimacy. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance, improved security headers, and explicit security policies to strengthen its security posture and user trust.

R

ritimo

ritimo.info

54

Ritimo is a French non-profit network dedicated to providing information and documentation on international solidarity and sustainable development. The organization operates a network of 75 locations to inform and engage the public. Their services include information dissemination, documentation resources, advocacy campaigns, and educational training. The website is well-structured, professionally designed, and targets a general audience interested in social and environmental issues. Technically, the site uses the SPIP CMS platform and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enabled, though some security headers are missing and no explicit cookie consent mechanism is present. WHOIS data is unavailable, which slightly reduces domain trust but does not detract significantly from the legitimacy of the organization given their clear contact information and social media presence. Overall, the site is trustworthy, safe, and professionally maintained.

F

fenopix

fenopix.com

57

Fenopix is a small technology company specializing in providing an HTML5 and JavaScript charting library called CanvasJS. The website positions itself as a niche provider of responsive, high-performance charting solutions suitable for developers and businesses requiring interactive data visualization. The business model revolves around software product offerings, with additional promotion of a Twitter extension called HashPlug. The site demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Bootstrap framework, and integrating Google Analytics and social media for marketing. The technical infrastructure is stable with Cloudflare DNS and GoDaddy domain registration, but lacks advanced security configurations such as DNSSEC and security headers. Security posture is basic with HTTPS enabled but missing explicit security policies or incident response information. Overall, the website is professional and safe, but lacks comprehensive privacy and cookie policies, which impacts compliance. Strategic improvements in security and privacy transparency are recommended to enhance trust and compliance.

O

OnlineStar

onlinestar.cz

54

OnlineStar is a Czech-based technology company offering a suite of AI-powered digital marketing tools designed to enhance local SEO, reputation management, social media management, and website development. Launched in 2021 as a new brand under the experienced Mediatel group, OnlineStar targets small and medium businesses seeking to automate and optimize their marketing efforts through innovative AI solutions. Their platform includes AI chat assistants, local data management, review monitoring, social media content planning, and comprehensive reporting tools. The company maintains a professional web presence with consistent branding and active social media engagement.

K

Komunitní centrum Říčany – o.p.s.

kcricany.cz

44

Komunitní centrum Říčany – o.p.s. is a small non-profit organization operating since 2006, providing social and community care services in the Říčany region of the Czech Republic. Their key services include personal assistance, family support programs, and social activation for seniors and disabled persons. The organization is a member of the national Association of Social Service Providers, which adds to its credibility and trustworthiness. The website reflects a focused mission on social support without commercial intent. Technically, the website is built on WordPress 6.8.3 with common plugins such as Formidable Forms and Download Manager. It uses modern web technologies including jQuery and FontAwesome, and is served over HTTPS, ensuring basic security. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, it lacks privacy and cookie policies, and security headers are not implemented, which are areas for improvement. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies and security headers lowers the compliance and security posture scores. The WHOIS data is unavailable, which limits domain registration trust analysis, but the website content and certifications support legitimacy. Overall, the website is a trustworthy and professional representation of a local non-profit social service provider, with recommendations to enhance privacy compliance and security hardening to improve trust and regulatory adherence.

Sportovně kulturní centrum v Ondřejově is a local community center in the Czech Republic providing a wide range of sports, cultural, educational, and recreational courses and events. Established since 2006, it serves a general audience including families and individuals interested in active leisure. The website offers detailed information about courses, events, rental services, and a café with a children's play area, reflecting a well-rounded community service model. Technically, the website uses a mix of older and modern web technologies including jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics, running on the IPO content management system. The site is mobile responsive with good navigation and content structure, though some libraries are outdated. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and formal privacy or terms of service documents. The cookie consent mechanism is present and functional, indicating some GDPR awareness. WHOIS data is unavailable, limiting domain trust verification, but the site content and contact details appear legitimate and consistent with a community organization. Overall, the site is trustworthy and professionally presented but would benefit from enhanced security headers, updated libraries, published privacy policies, and improved WHOIS transparency to strengthen its security posture and compliance.

C

Centrum vzdělávání, informací a kultury p. o.

cvik.info

45

Centrum vzdělávání, informací a kultury Český Brod is a local public institution combining educational, informational, and cultural services including a municipal library, information center, and cultural house. The website serves as a portal for event calendars, ticket sales, photo galleries, and official communications targeting the local Czech community. The business model is focused on community engagement and cultural enrichment rather than commercial activities. Technically, the website employs a modern frontend stack with Bootstrap, jQuery, FontAwesome, and other libraries, ensuring a responsive and user-friendly experience. Google Tag Manager is used for analytics and marketing tracking, with a cookie consent mechanism implemented to comply with GDPR requirements. The site is well-structured with clear navigation and accessible contact options. From a security perspective, the site uses HTTPS and has implemented cookie consent controls, but lacks visible HTTP security headers and explicit security or incident response policies. The WHOIS data is incomplete and malformed, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a public cultural institution. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in security headers, WHOIS transparency, and explicit security policies would enhance its security posture and compliance.

D

Divadlo bez zábradlí

bezzabradli.cz

60

Divadlo bez zábradlí is a Czech theatre company with a website that provides information about its theatrical performances and cultural events. The domain is well-established since 2001, indicating a stable presence in the local cultural scene. The website design is professional and user-friendly, optimized for mobile devices, and includes a cookie consent mechanism, reflecting some level of privacy awareness. However, the absence of a privacy policy, terms of service, and explicit contact information limits the site's compliance and user trust. Technically, the site uses modern web standards and Mapbox for map integration but lacks advanced security headers and detailed security policies. Overall, the security posture is moderate but could be improved with better security practices and transparency. The site content is safe for general audiences with no adult or questionable material detected.

Igor Mikula Photography is a small-scale professional photography business specializing in wildlife and nature photography. The website serves as a portfolio showcasing galleries and films related to the photographer's work. The business targets photography enthusiasts and nature lovers, offering visual art products and services. The market position is niche, focusing on artistic and nature photography rather than commercial mass-market offerings. Technically, the website is built on WordPress using the Vantage theme and common plugins such as Contact Form 7 and SiteOrigin Panels. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks important security headers and privacy compliance documentation. No WHOIS data is available for the domain, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but minimal in content and security best practices, with room for improvement in privacy, contact transparency, and security hardening.

Základní umělecká škola Říčany is a Czech educational institution specializing in artistic education for children and youth, including music, dance, visual arts, and drama. The website serves as a communication platform for news, events, and projects related to the school and its community. It holds partnerships with cultural institutions such as the National Theatre and participates in EU-funded educational projects, indicating a stable position in the regional education sector. Technically, the website is built on a custom CMS developed by Vitalex Computers, utilizing a variety of JavaScript libraries including jQuery, Bootstrap, and TinyMCE. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and enhancing accessibility. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy compliance. Nonetheless, the absence of WHOIS data and security headers, as well as missing explicit contact information for security incidents, represent areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website is a trustworthy and professional platform for the school’s community, but it would benefit from enhanced transparency in domain registration and improved security practices to strengthen its credibility and compliance posture.

K

Kulturní centrum Labuť

kclabut.cz

58

Kulturní centrum Labuť is a local cultural center based in Říčany, Czech Republic, offering a variety of cultural events, courses, and ticket sales. The website serves as an official portal for event information, ticket purchasing, and community engagement. It targets local residents and visitors interested in cultural activities. The business model revolves around event hosting, ticket sales, and community cultural promotion, positioning itself as a key local cultural institution with several partnerships and sponsors.

Orbisius is a small technology company specializing in WordPress development services, custom plugin development, and SaaS applications. The website positions itself as a niche provider targeting WordPress users and businesses seeking tailored digital solutions. The business has been established since 2012, with a consistent domain registration and a professional online presence. Technically, the website is built on WordPress CMS using popular plugins and themes, integrating Google APIs and live chat for user engagement. SEO optimization is evident through the use of Yoast SEO and structured data. However, the website lacks explicit privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust. The domain is registered transparently without privacy protection, indicating legitimacy. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security posture.

V

Vorwerk

vorwerk-digital.com

64

Vorwerk is a well-established manufacturing company specializing in household appliances, notably the Thermomix and Kobold brands. The website www.vorwerk.com functions primarily as a country selector landing page, directing users to localized versions of Vorwerk and Thermomix websites across multiple countries. This indicates a global market presence and a business model focused on direct sales and regional customer engagement. The website's content is minimal, focusing on navigation rather than detailed product or corporate information. From a technical perspective, the site uses standard web technologies such as HTML5, CSS3, and JavaScript, but lacks advanced frameworks or CMS indicators. The performance and mobile optimization are basic, with no detected analytics or tracking scripts in the provided content. Security features such as HTTPS enforcement, security headers, and privacy policies are not evident in the analyzed content, which suggests room for improvement in digital maturity and compliance. Security posture evaluation reveals a lack of visible security headers and no SSL configuration details, which are critical for protecting user data and ensuring trust. The absence of privacy and cookie policies further highlights compliance gaps, particularly concerning GDPR and other data protection regulations. The WHOIS data for the domain is unavailable or protected, which is common for large enterprises but reduces transparency and trustworthiness from a domain registration perspective. Overall, the website presents a moderate risk profile primarily due to limited security and privacy disclosures. Strategic recommendations include implementing robust HTTPS configurations, adding comprehensive privacy and cookie policies, enhancing security headers, and improving transparency around domain registration. These steps will strengthen trust, compliance, and security posture, aligning the digital presence with the company's global brand stature.

The website tmecosys.com currently presents only a minimal 404 default backend page, indicating that the site content is inaccessible or missing. There is no visible business information, metadata, or structured data to analyze. The domain is registered since 2013 with a reputable registrar and hosted on AWS infrastructure, but the lack of accessible content severely limits the ability to assess the company's business model, services, or market position. Technically, the site lacks HTTPS enforcement, security headers, and DNSSEC, which are critical for a secure web presence. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the site is not currently functional or professionally maintained, resulting in a low trust and security posture.

The website www.bescheinigung-forschungszulage.de serves as the official digital platform for the Bescheinigungsstelle Forschungszulage (BSFZ), a German government entity responsible for certifying research and development projects eligible for tax incentives under the Forschungszulagengesetz. It targets companies with tax residence in Germany engaged in R&D activities, providing them with information, application procedures, and digital access to submit certification requests. The site is well-branded with official logos and links to the Bundesministerium für Bildung und Forschung (BMBF), reinforcing its authoritative position. Technically, the website is built on TYPO3 CMS, hosted on German infrastructure (SGX Leipzig), and employs modern web standards with responsive design and accessibility considerations. The site lacks advanced tracking or advertising technologies, focusing on privacy and minimal data collection. However, no explicit cookie consent mechanism was detected despite anonymized data collection disclosures. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data aligns with the website's official nature, showing consistent domain registration and hosting details. Overall, the website demonstrates a solid business credibility and technical foundation suitable for its government service role. Strategic improvements include implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to enhance trust and compliance.

The website gemeinsamgegenfakebewertungen.de currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. No business-related content, metadata, or structured data is accessible, preventing a full assessment of the company's offerings or market position. The lack of contact information, privacy policies, or terms of service further limits the ability to evaluate compliance or customer engagement. Technically, the site does not expose any scripts, analytics, or external links, and no security headers or SSL details are discernible from the provided content. The WHOIS data is minimal but shows the domain uses reputable nameservers from Noris, suggesting some legitimacy, though the domain status 'connect' is unusual and may indicate a transitional state. Overall, the site appears to be either misconfigured or intentionally restricted, resulting in a low digital maturity and security posture score.

T

Trustami GmbH

produktbewertungen.org

59

Produktbewertungen.org is a German-based product review aggregation platform operated by Trustami GmbH. It consolidates over 10 million product reviews from various e-commerce and marketplace websites, providing consumers with a comprehensive overview and unified rating to facilitate informed purchasing decisions. The platform targets online shoppers seeking to save time by accessing all relevant product feedback in one place. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics with IP anonymization, and uses a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and presents a professional, consistent brand experience aligned with Trustami's corporate identity. Security-wise, the site enforces HTTPS and anonymizes analytics data but lacks some advanced security headers and explicit security policies. The absence of WHOIS registration data limits domain trust verification, though the presence of company contact details and social media links supports legitimacy. Overall, the website demonstrates a solid digital maturity level with room for improvement in security transparency and WHOIS data availability.

Srovnejto.cz operates as an online energy price comparison platform primarily targeting consumers in the Czech Republic. The website facilitates comparison of electricity and gas tariffs, helping users find competitive energy prices. The business model likely revolves around affiliate partnerships or lead generation within the energy sector. The site presents a professional and consistent brand image with good content quality and user experience.

E

Elephant Orchestra, a.s.

pujcky.cz

63

Pujcky.cz is a Czech Republic-based loan comparison platform operated by Elephant Orchestra, a.s. The website aggregates loan offers from various bank and non-bank lenders, providing consumers with an easy way to compare and apply for loans. The platform leverages affiliate partnerships to redirect users to loan providers, facilitating lead generation. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, though lacks visible security headers and comprehensive privacy documentation. Security posture is moderate with HTTPS usage but missing advanced headers and incident response contacts. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and partner links. Strategic improvements include publishing clear privacy and terms policies, enhancing security headers, and adding vulnerability disclosure mechanisms.

E

Elephant Orchestra s.r.o.

uspory.cz

67

Úspory.cz is a Czech financial comparison portal operated by Elephant Orchestra s.r.o., part of the Srovnejto.cz group. The website offers comprehensive comparison services for loans, insurance, mortgages, energy providers, and mobile tariffs, targeting Czech consumers seeking to save money and time. The platform is well-established with over 1.5 million households served since 2010, indicating a strong market presence. Technically, the site uses a modern JavaScript stack with analytics and marketing tools integrated, including Google Analytics, Facebook Pixel, Hotjar, and Inspectlet, all managed with user consent mechanisms. Security is robust with HTTPS and 256-bit SSL encryption, though some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant. However, WHOIS data is unavailable, limiting domain registration trust verification. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Storck

toffifee.com

61

The website www.toffifee.com represents the Toffifee confectionery brand, part of the Storck group. It provides product information, brand history, and country-specific site links targeting a general family audience. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy despite the professional appearance and brand association. Security posture is good with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is trustworthy and well-maintained but would benefit from improved transparency in domain registration and security disclosures.

B

Bendicks

bendicks.co.uk

56

Bendicks is a well-established British chocolatier specializing in premium dark mint chocolates with a heritage spanning over 90 years. The company holds a Royal Warrant by appointment to King Charles III, underscoring its reputation for quality. The website serves as a brand and product showcase, targeting consumers seeking luxury chocolate gifts and after-dinner treats. The business model focuses on retail distribution through national retailers and online presence. Technically, the website is built on WordPress with UKit framework and uses standard web technologies including jQuery and lazy loading for images. The site is mobile optimized and SEO friendly, though some libraries like jQuery are outdated. Performance is moderate with good mobile responsiveness and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Contact information is limited to forms without explicit emails or phone numbers. Overall, the website presents a low risk profile with strong business credibility and good privacy practices. Recommendations include updating JavaScript libraries, adding security headers, and publishing security and incident response policies to enhance trust and compliance.

S

STORCK SVERIGE AB

storck.dk

60

STORCK SVERIGE AB operates as the Swedish branch of the global confectionery manufacturer August Storck KG, offering well-known brands such as Werther's Original, Toffifee, and Riesen. The website serves as a corporate and brand information portal targeting Swedish consumers and business partners, providing product information, company news, and career opportunities. The site is professionally designed, localized in Swedish, and integrates modern web technologies including TYPO3 CMS and JavaScript libraries for enhanced user experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR requirements. Security posture is generally strong with HTTPS enforced, though explicit security headers and incident response contacts are not evident. The WHOIS data for the subdomain www.storck.se is unavailable, likely due to it being a subdomain rather than a registered domain, but the overall brand legitimacy is supported by consistent branding and related domains. Recommendations include enhancing security headers, providing clearer security contact information, and auditing third-party scripts for vulnerabilities.

A

AUGUST STORCK KG

storck.de

73

Storck is a well-established German confectionery company operating a professional corporate website that showcases its brands, sustainability initiatives, career opportunities, and news updates. The website is built on TYPO3 CMS and employs modern JavaScript libraries and frameworks, providing a responsive and accessible user experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which contrasts with the professional and active nature of the website. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of security headers and explicit incident response information suggests room for improvement. Overall, the website is trustworthy and well-maintained but would benefit from enhanced transparency regarding domain registration and security policies.

S

Storck

werthers-original.at

65

Werther's Original is a well-established confectionery brand specializing in caramel products such as bonbons, soft toffees, caramel popcorn, and sugar-free variants. The website reflects a mature digital presence with a focus on product variety and brand heritage, targeting general consumers interested in quality caramel confectionery. The site is part of the larger Storck group, a recognized player in the retail confectionery sector. Technically, the website is built on TYPO3 CMS and uses modern JavaScript frameworks, ensuring a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given the brand's reputation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security best practices and contact information transparency.

S

Storck

toffifee.at

72

The website www.toffifee.at is a professionally designed brand site for Toffifee, a confectionery product under the Storck company umbrella. It provides product information, recipes, and brand engagement content targeted primarily at Austrian consumers and families. The site uses TYPO3 CMS and modern JavaScript libraries to deliver a responsive and user-friendly experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR requirements. However, no direct contact emails or phone numbers are present on the homepage, with contact facilitated via a form on a dedicated page. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. WHOIS data is unavailable, limiting domain registration trust analysis, but the brand consistency and external links to Storck-related domains support legitimacy.

S

Storck

merci.at

72

Merci.at is the official Austrian website for the merci chocolate brand, owned by the Storck group. The site serves as a product showcase and marketing platform, offering detailed product information, personalization options, and promotional content targeted at Austrian consumers. The website demonstrates a mature digital presence with a professional design, consistent branding, and multilingual support via alternate hreflang links. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and uses Piwik PRO for analytics, respecting user consent for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not evident in the HTML source. The absence of WHOIS data limits domain trust verification, but the strong brand association and external partner links support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

A

August Storck KG

mamba.us

72

Mamba.us is the official website for Mamba Fruit Chews, a confectionery brand owned by August Storck KG, a well-established German company. The site provides detailed product information, consumer engagement features such as newsletter signup, and social media integration. The business targets general consumers interested in fruity candy products and maintains a consistent brand presence aligned with its parent company Storck USA. Technically, the website uses modern JavaScript libraries and analytics tools, with a moderate performance profile and basic mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, supporting the brand's retail marketing efforts effectively.

S

Storck

merci.us

66

merci is a European chocolate brand marketed in the United States by Storck. The website serves as a brand and e-commerce platform offering a variety of chocolate products including personalized chocolate covers. The brand positions itself as a premium gift option for heartfelt moments of appreciation. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS and modern JavaScript libraries, with integration of SmartCart for e-commerce functionality. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. The lack of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the strong brand presence and consistent content. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency.

S

Storck

werthers-original.us

71

Werther’s Original is a well-established confectionery brand specializing in caramel products, operating under the parent company Storck. The website showcases a variety of caramel products and brand storytelling aimed at a general consumer audience in the United States. The digital infrastructure is built on TYPO3 CMS with modern JavaScript frameworks and includes e-commerce capabilities via SmartCart. Privacy and cookie policies are implemented with consent mechanisms, reflecting a commitment to compliance. However, the absence of WHOIS data limits domain trust verification. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, accessible, and trustworthy with a good user experience.

S

Storck Slovakia

merci.sk

63

The website www.merci.sk is the official Slovak regional site for the merci chocolate brand, operated under the parent company August Storck KG. It serves as a product showcase and marketing platform offering detailed product information, personalized chocolate creation options, and downloadable content such as ringtones and wallpapers. The site targets general consumers in Slovakia interested in confectionery products. Technically, the site is built on TYPO3 CMS with a modern JavaScript stack including RequireJS and Piwik PRO for analytics. The site is mobile optimized with good navigation and professional design, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Privacy compliance is supported by a clear privacy policy and cookie banner consistent with GDPR requirements. Overall, the site is trustworthy and professionally maintained with no signs of suspicious or adult content.

K

Knoppers

knoppers.sk

65

Knoppers is a well-established confectionery brand specializing in breakfast bars and wafers, operating under the parent company Storck. The website serves primarily as a brand marketing and product information platform targeting general consumers in Slovakia and surrounding regions. It features a modern design with good navigation and multimedia content to engage visitors. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Piwik analytics, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, but lacks some advanced security disclosures and terms of service documentation.

P

PROFI CREDIT Czech, a. s.

proficredit.cz

53

PROFI CREDIT Czech, a. s. is a well-established financial services company based in the Czech Republic, specializing in non-bank insured loans up to 250,000 CZK. The company targets individuals and small business clients seeking flexible loan options with insurance for repayment capability. With a domain age dating back to 2006, PROFI CREDIT has a solid market presence and a good reputation, supported by positive customer ratings and professional branding. The website reflects a mature digital infrastructure built on WordPress, integrating modern tools such as Cookiebot for privacy compliance, Google Tag Manager, Hotjar for analytics, and a chat system for customer support. The site is mobile-optimized and SEO-friendly, providing a good user experience.

The website www.edarling.cz is currently inaccessible due to a bot protection mechanism implemented via captcha-delivery.com, which blocks direct access to the content. The lack of WHOIS registration data further complicates trust and legitimacy assessments. The site appears to be related to dating services, but no business or contact information is available to confirm this. The technical infrastructure is minimal, with no visible CMS, security headers, or privacy policies, indicating a low level of digital maturity and security posture. Overall, the site presents significant risks due to its inaccessibility, lack of transparency, and missing compliance documentation.

ePojisteni.cz is an established online insurance platform based in the Czech Republic, specializing in vehicle liability insurance and travel insurance. The company targets Czech vehicle owners and travelers seeking affordable and convenient insurance solutions. The website demonstrates a professional and consistent brand presence with a clear focus on its core services. Technically, the site leverages modern frontend frameworks such as Nuxt.js and Vue.js, and integrates common marketing and analytics tools like Google Tag Manager and Cookiebot, ensuring a moderate level of digital maturity. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the site is accessible, well-structured, and compliant with GDPR, but the absence of WHOIS data limits full domain trust assessment.

C

CloudMagic

cloudmagic.com

61

CloudMagic is a specialized consultancy focused on delivering Google Cloud Platform solutions including cloud migration, data analytics, AI/ML, DevOps automation, security, and cost optimization. The company positions itself as a Google Cloud Premier Partner with multiple professional certifications and a strong track record of client satisfaction and project delivery. The website reflects a mature business with a professional and modern digital presence, optimized for performance and mobile use. Security posture is good with HTTPS and Cloudflare DNS, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the risk is moderate with recommendations to improve compliance and security transparency.

W

Web pro Vás

web-provas.cz

49

Web pro Vás is a Czech-based small business specializing in professional web development, e-commerce solutions, and online/offline marketing services. Established in 2013, the company positions itself as a reliable partner for small and medium enterprises and entrepreneurs seeking to enhance their online presence. Their website demonstrates a clear business model focused on delivering comprehensive digital solutions including website creation, e-shop development, and marketing strategies. The company emphasizes client satisfaction and long-term cooperation, supported by client testimonials and named contact persons. Technically, the website is built on WordPress with popular plugins and frameworks, ensuring a modern and responsive user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Tracking and retargeting pixels are used moderately, with privacy policies in place indicating GDPR compliance. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Plná Peněženka

plnapenezenka.cz

60

Plná Peněženka is a leading cashback portal based in the Czech Republic, offering users cashback rewards, discounts, and coupons from over 1100 partner shops domestically and internationally. The platform boasts over one million registered users and has paid out more than 246 million CZK in cashback, positioning itself as the largest cashback service in the Czech market. The business model revolves around affiliate partnerships, sharing commissions with users to incentivize online shopping through their platform. Technically, the website employs modern JavaScript libraries and OAuth integrations for social logins, ensuring a seamless user experience across web and mobile platforms. Security measures include HTTPS enforcement, use of Google reCAPTCHA, and cookie consent mechanisms, although explicit security headers could be further verified. The absence of WHOIS data limits domain registration trust verification, but the professional site presence and comprehensive policies indicate a legitimate and mature operation.

S

Superprof

superprof.fr

58

Superprof is a leading French online platform that connects students with private tutors across a wide range of subjects, offering both in-person and online lessons. The website is professionally designed, mobile-optimized, and provides comprehensive content including tutor profiles, reviews, and educational resources. The platform targets learners in France and positions itself as a major player in the private tutoring market. Technically, the website employs modern web technologies such as Vue.js, integrates multiple analytics and advertising tools including TikTok Analytics, Bing Ads, and Google Tag Manager, and uses security measures like HTTPS and Google reCAPTCHA to protect against bots. The site demonstrates good SEO and accessibility practices, ensuring a positive user experience. From a security perspective, the site has a solid posture with appropriate security headers and encrypted connections. However, it lacks explicit security policies and incident response contact information, which could be improved to enhance transparency and trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the professional web presence and social media links support its credibility. Overall, Superprof presents a trustworthy and well-maintained educational service platform with room for improvement in security transparency and domain registration visibility.

Srovnejto.cz is a Czech-based online comparison platform specializing in insurance, energy, and loan products. It serves consumers in the Czech Republic by providing a user-friendly interface to compare financial and utility offerings, helping users make informed decisions. The website demonstrates a professional design and clear service focus, positioning itself as a significant player in the local comparison market. Technically, the site leverages modern frontend technologies such as Nuxt.js and Font Awesome, ensuring a responsive and visually appealing user experience. However, performance is moderate and could benefit from optimization. Security posture is average; while HTTPS is presumably enabled, no explicit security headers or policies are detected, and privacy compliance is weak due to missing privacy and cookie policies. The absence of WHOIS data limits domain legitimacy assessment, but the website's professional appearance and content relevance suggest a legitimate business. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

Elephant Orchestra, a.s. is a Czech Republic-based digital marketing company specializing in lead generation, email marketing, mobile marketing, telemarketing, affiliate programs, and discount portals. With over 12 years of market presence and recognition such as Deloitte's Technology Fast 50 CE Rising Star in 2011, the company serves a broad range of business clients aiming to enhance their online customer acquisition and marketing effectiveness. The company operates multiple projects and is part of the Klik.cz & ePojisteni.cz s.r.o group, indicating a strong partnership ecosystem. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Bootstrap, and various JavaScript libraries for UI and performance enhancements. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some security headers are missing, and WHOIS data is unavailable, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enabled and no visible vulnerabilities in the content. Privacy compliance is good with clear policies and consent banners. The absence of WHOIS registration data is a notable risk factor, but the website content and business information suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from improved security headers and domain registration transparency. Strategic recommendations include enhancing security headers, conducting regular security audits of third-party scripts, improving accessibility, and verifying domain registration details to strengthen trust and compliance.

The domain eoit.cz is registered since 2015 and hosted on Amazon AWS infrastructure, but the website is currently inaccessible beyond a standard HTTP 404 Not Found error page. There is no visible content, metadata, or business information available on the site. This lack of content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site does not provide evidence of modern web technologies, security headers, or privacy compliance mechanisms. The absence of HTTPS information and security policies indicates a weak security posture. Overall, the website is non-functional and does not present any trust or credibility signals, resulting in a very low AI score and high risk from a security and compliance perspective.

Z

Zoan - Agence de communication à Châteaubriant (44)

zoan.fr

53

Zoan is a French communication agency founded in 2007, specializing in graphic design, advertising, and web services. The agency serves a regional clientele including SMEs, industrial companies, associations, and local authorities primarily in the Loire-Atlantique and Ille-et-Vilaine regions. Their business model focuses on providing strategic communication consulting and creative production services such as branding, website creation, and video content. The company maintains a professional online presence with consistent branding and a clear market position as a local creative partner. Technically, the website is built on WordPress with Yoast SEO and Matomo analytics configured for privacy. The site is well-optimized for mobile and SEO, with fast loading times and modern web technologies including GSAP for animations. Hosting is provided by OVH, a reputable provider, and the domain is long-established, supporting credibility. From a security perspective, the site uses HTTPS and privacy-conscious analytics settings but lacks visible security headers and cookie consent mechanisms. There is no published security policy or incident response information, which represents an area for improvement. No vulnerabilities or suspicious indicators were detected in the content or WHOIS data. Overall, Zoan presents a trustworthy and professional digital footprint with strong business credibility and good technical implementation. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen their security posture and compliance.

M

Medaprex, s.r.o.

medaprex.cz

58

The website www.annabrandejs.cz operates as a professional e-commerce platform specializing in cosmetic and health products, particularly focused on anti-aging, skincare, and hair care solutions. The business has a strong market presence in the Czech Republic with over two decades of experience, positioning itself as a trusted distributor of multiple well-known brands. The site offers a comprehensive product catalog, customer support via online chat, and clear contact information, enhancing customer trust and engagement. Technically, the website is built using modern web technologies including React and Google Tag Manager, with good mobile optimization and SEO practices. The site enforces HTTPS and includes cookie consent mechanisms, reflecting a good level of privacy compliance. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found, indicating room for improvement in security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces the domain trustworthiness score, but the professional presentation and verified customer reviews mitigate some concerns. Overall, the website demonstrates a solid security and privacy foundation suitable for its business model. Strategically, the company should focus on enhancing transparency by publishing explicit security policies and incident response procedures, improving WHOIS data availability, and implementing additional security headers. These steps will strengthen customer confidence and regulatory compliance, supporting sustainable growth in the competitive e-commerce cosmetics market.