Skip to main content

Is cwrc.ca a Scam? Security Check Results - Canadian Writing Research Collaboratory Reviews

cwrc.ca favicon

Is cwrc.ca Safe? Security Analysis for Canadian Writing Research Collaboratory

Check if cwrc.ca is a scam or legitimate. Free security scan and reviews.

EducationCanadasmall
Drupal 10Bootstrap Barrio themeMatomo analyticsAddToAny sharingColorbox+1 more
Analyzed 9/7/2025Completed 9:10:29 AM
67
Security Score
MEDIUM RISK

AI Summary

The Canadian Writing Research Collaboratory (CWRC) is a well-established academic platform focused on cultural and writing research in Canada. Founded in 2009, it serves researchers, academics, and students by providing digital infrastructure and hosting various research projects and collections. The website is professionally designed using Drupal 10 and incorporates modern web technologies and analytics tools such as Matomo with privacy considerations like DoNotTrack enabled. The platform is supported by reputable sponsors including the Social Sciences and Humanities Research Council of Canada, Mellon Foundation, and Canada Foundation for Innovation, which enhances its credibility and trustworthiness. Technically, the website demonstrates good mobile optimization, accessibility, and SEO practices. However, there is room for improvement in security posture by enabling DNSSEC, implementing security headers, and publishing explicit privacy and cookie policies with consent mechanisms. No contact emails, phone numbers, or security incident response information are publicly available, which could be enhanced to improve transparency and user trust. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks some advanced security headers and formalized security policies. No WAF or blocking mechanisms are detected, and the domain registration is privacy protected but consistent with the academic nature and longevity of the project. Overall, the website is safe, professional, and trustworthy but could benefit from enhanced privacy compliance and security best practices.

Detected Technologies

Drupal 10Bootstrap Barrio themeMatomo analyticsAddToAny sharingColorboxjQuery

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

CWRC operates in the education and non-profit sectors, targeting academic researchers and cultural scholars interested in Canadian writing and culture. Its business model revolves around providing digital research infrastructure and hosting collaborative projects. The platform's market position is niche but well-supported by major research funding bodies, indicating stable partnerships and funding streams. The website's content and project catalog demonstrate active engagement with the academic community. The absence of direct contact information and formal privacy/security policies suggests a focus on institutional users rather than general public engagement. The technical infrastructure is modern and maintained, supporting scalability and user experience. Strategic partnerships with research councils and foundations strengthen its ecosystem and credibility.

Security Posture Analysis

Comprehensive Security Assessment

The website exhibits a moderate security maturity level with HTTPS enforced and no visible sensitive data exposure. The use of Matomo analytics with DoNotTrack enabled reflects some privacy awareness. However, the absence of DNSSEC, security headers, and published security policies or incident response contacts indicates gaps in comprehensive security management. No vulnerabilities or malicious content were detected in the HTML content. The lack of a vulnerability disclosure policy or security.txt file limits transparency for security researchers. Overall, the security posture is adequate for an academic platform but could be improved by adopting additional security best practices and formal policies to enhance resilience and trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Enable DNSSEC on the domain to improve DNS security and prevent spoofing.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Canadian Writing Research Collaboratory

Description:

The Canadian Writing Research Collaboratory (CWRC) is a platform and community focused on writing and research on culture, hosting various projects and collections related to Canadian cultural studies, literature, and history.

Key Services:
Digital research collaboratoryProject hosting and cataloguingAccess to cultural and writing research collections
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
Drupal 10Bootstrap Barrio themeMatomo analyticsAddToAny sharingColorboxjQuery
Frameworks:
Drupal CMS
Performance:

moderate

Mobile:

good

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
75/100
Best Practices:
  • HTTPS enforced
  • No exposed sensitive data in HTML
  • Use of Matomo with DoNotTrack enabled

Analytics & Tracking

Services:
Matomo
Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Matomo
Marketing Tools:
AddToAny
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a Drupal 10 based academic research collaboratory platform.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

95/100
Score

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

62/100
Score

DMARC not enforcing

MEDIUM

DMARC policy is set to "none"

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 ip4:206.12.88.111 ip4:206.12.88.124 ip4:206.12.88.125 ip4:206.12.88.128 ip4:38.15.146.220 mx ~all
DNS Lookups:1/10
Policy:~all
DMARC Details
Policy:none
Aggregate Reports:cwrc@cwrc.ca

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

72/100
Score

Weak Protocols Supported

HIGH

Server supports weak protocols: TLSv1.1

OCSP Stapling Not Enabled

LOW

OCSP stapling improves performance and privacy

Certificate Transparency Not Implemented

LOW

Certificate is not logged in Certificate Transparency logs

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 78 days

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Protocol Support

TLSv1.3TLSv1.2TLSv1.1

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

65/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

DMARC Policy Set to None

LOW

DMARC is configured but not enforcing any policy

Domain Registration Details

Domain Age
16 years(mature)
Expiry Risk
none(677 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • No domain protection locks enabled
  • Privacy/proxy registration detected

DNS Records

A Records:206.12.88.130
Name Servers:
ns1.namespro.ca
ns2.namespro.ca
MX Records:
10: mailroot6.namespro.ca
SOA:Serial: 1756291528, TTL: 3600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:311ms

SPF Analysis

SPF Record:
v=spf1 ip4:206.12.88.111 ip4:206.12.88.124 ip4:206.12.88.125 ip4:206.12.88.128 ip4:38.15.146.220 mx ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on Drupal 10 CMS using the Bootstrap Barrio theme, ensuring a modern and responsive design. It incorporates JavaScript libraries such as jQuery, FontAwesome, Colorbox, and AddToAny for enhanced UI and sharing capabilities. Matomo analytics is used for user tracking with privacy considerations. The site demonstrates good mobile optimization and accessibility features. Performance is moderate, with no major issues detected. The domain is registered with Namespro Solutions Inc. and has a long registration history consistent with the academic project timeline. No CDN or hosting provider details are explicitly found in the HTML content. SEO practices are good with proper meta tags and canonical links. Overall, the technical infrastructure is solid but could benefit from enhanced security configurations and formal privacy compliance implementations.
Analyze Another Website