Security Directory

Q

QS Arab Forum 2025

qsarabforum.com

51

The website portal.qshesummits.com/event/qsarabforum2025/home serves as an online registration portal for the QS Arab Forum 2025 event. It is hosted on the Cvent event management platform, leveraging modern JavaScript frameworks such as React. The site targets professionals and attendees interested in the QS Arab Forum, providing event registration and management services. The business model centers on event facilitation rather than direct commercial sales. The website content is basic but functional, with moderate branding consistency and no explicit business entity information disclosed. Technically, the site uses a modern tech stack including React and integrates Google Analytics and Google Tag Manager for tracking. The performance is moderate with basic mobile optimization and accessibility features. The site uses HTTPS and nonce attributes on scripts, indicating some security awareness, but lacks visible security headers and explicit privacy or cookie policies. From a security perspective, the site shows moderate posture with no critical vulnerabilities detected in the provided data. However, the absence of privacy policies, contact information, and security headers reduces compliance and trustworthiness. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but limits domain legitimacy verification. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is a functional event registration portal with moderate technical maturity but limited transparency on privacy and security policies. Strategic improvements in privacy compliance, security headers, and contact information would enhance trust and security posture.

F

Flexity

flexity.hr

60

Flexity.hr is a specialized e-commerce platform focused on yoga, pilates, ayurveda, and wellness products. The website offers a broad range of related goods including mats, clothing, accessories, and natural cosmetics, targeting yoga practitioners and wellness enthusiasts primarily in the Croatian and regional markets. The business operates under a small-sized model with a recent founding date in 2021, supported by a consistent domain registration and hosting provider based in Slovakia. The site is part of a regional network of sister sites serving multiple Central European countries. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and analytics. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is solid with HTTPS enforcement, standard security headers, and cookie consent mechanisms, although it lacks a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable online retail destination for its niche audience.

K

Knoppers

knoppers.ch

67

Knoppers is a well-established confectionery brand operating under the parent company Storck, targeting general consumers with a focus on product information and marketing for their wafers, bars, and goodies. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

K

Knoppers

knoppers.pl

63

Knoppers is a confectionery brand website focused on promoting its wafer and bar products in Poland. The site is professionally designed using TYPO3 CMS and provides detailed product categories and promotional content. It is part of the Storck group, a well-known confectionery company, which enhances its market credibility. The website targets general consumers interested in confectionery snacks and offers a clean, navigable user experience with mobile optimization and structured data for SEO. Technically, the website employs modern web technologies including TYPO3 CMS, RequireJS, and Piwik analytics. It uses HTTPS with good SSL configuration, though lacks explicit security headers. The site includes cookie consent mechanisms and a privacy policy indicating GDPR compliance. However, no direct contact emails or phone numbers are published, and no explicit security or incident response policies are found. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements could be made by adding security headers and incident response contacts. The WHOIS data is unavailable due to registry restrictions, which is common for .pl domains, but the website's professional presentation and linkage to the parent company Storck support its legitimacy. Overall, the website is a credible, well-maintained brand site with good content quality and privacy compliance, suitable for consumer engagement. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for improved trust and compliance.

K

Knoppers

knoppers.nl

65

Knoppers is a well-established confectionery brand operating under the parent company Storck, targeting general consumers primarily in the Netherlands and surrounding European markets. The website serves as a product showcase and promotional platform for Knoppers Wafel and Knoppers Bar products, providing ingredient information and customer engagement through a contact form. The brand maintains consistent and professional digital branding with a focus on product marketing and consumer interaction. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as RequireJS and AOS for enhanced user experience. The site is mobile-optimized and includes SEO best practices with structured data (JSON-LD) and Open Graph metadata. Analytics are handled via Piwik, indicating a moderate level of user tracking balanced with privacy compliance. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms domain legitimacy and alignment with the brand's corporate identity. Overall, the website presents a secure, professional, and user-friendly platform for the Knoppers brand, with recommendations to enhance security transparency and accessibility to further strengthen trust and compliance.

K

Knoppers

knoppers.hu

69

Knoppers.hu is the official Hungarian website for the Knoppers brand, a confectionery product line owned by the Storck company. The website serves primarily as a brand marketing and product information portal, targeting general consumers interested in Knoppers wafer and chocolate bars. It features multiple language versions and links to partner brand sites, indicating a well-established market presence in Hungary and the broader region. The business model focuses on product promotion and consumer engagement rather than direct e-commerce. Technically, the site is built on TYPO3 CMS with modern frontend technologies including RequireJS and AOS for animations. It supports progressive web app features and is mobile optimized with good SEO practices. The site loads moderately fast and provides a good user experience with clear navigation and professional design. Analytics are implemented via Piwik, respecting privacy compliance with a cookie consent mechanism. From a security perspective, the website enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms domain legitimacy with consistent registrant information matching the brand owner, Storck, and no privacy protection masking. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic improvements could include adding security headers, publishing a security policy, and providing direct security incident contact information to enhance trust and security posture.

K

Knoppers

knoppers.de

72

Knoppers is a well-established German confectionery brand specializing in breakfast snack products such as Knoppers Schnitte, Riegel, and Goodies. The website serves as a product showcase and brand marketing platform, targeting general consumers interested in confectionery products. It is part of the larger Storck group, which is reflected in the branding and partner links. The website is built on TYPO3 CMS and incorporates modern web technologies including PWA features and JavaScript libraries for enhanced user experience. The site is mobile-optimized and uses structured data for SEO and social media integration. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not published. Overall, the site demonstrates a professional and trustworthy online presence consistent with a large retail brand.

S

Storck

mamba.pl

63

Mamba.pl is a professionally maintained website representing the Mamba brand of fruit-flavored dissolvable gums, owned by the well-known confectionery company Storck. The site targets a general audience including children and adults who enjoy sweet treats, offering product information, promotions, and limited edition releases. The website is built on TYPO3 CMS and uses modern JavaScript libraries, indicating a mature and stable technical infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner adhering to GDPR standards. However, the absence of WHOIS data for the domain reduces trust slightly, though the association with Storck mitigates this concern. Overall, the website is trustworthy, professional, and well-positioned in the retail confectionery market.

S

Storck

mamba.at

65

The website www.mamba.de is a professionally designed brand site for Mamba, a fruit-flavored chewy candy product under the Storck company umbrella. It targets a general German-speaking audience with product information, brand marketing, and consumer engagement content. The site uses TYPO3 CMS and modern JavaScript libraries, including RequireJS, Lodash, and jQuery, with Piwik PRO for analytics. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-aligned policies and consent banners. Business credibility is high due to consistent branding and linkage to the parent company Storck. Overall, the site is trustworthy and safe for general audiences.

H

Helexia

helexia.com.br

55

Helexia is a Brazilian company specializing in energy solutions with a focus on sustainable and renewable energy projects. The website is professionally designed using WordPress with Elementor and optimized with Yoast SEO, targeting business clients in the energy sector. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a credible business presence but would benefit from enhanced security and compliance documentation.

M

Mission H

mission-h.org

56

Mission H is a French educational non-profit project focused on promoting social cohesion, anti-racism education, and cultural diversity awareness among youth. It operates through interactive exhibitions, thematic educational toolkits, and international collaborations such as the Erasmus+ program. The website content is rich, well-structured, and targeted primarily at educational institutions and youth audiences. Technically, the site uses basic web technologies hosted on Infomaniak servers, with moderate performance and basic mobile optimization. Security posture is average, with domain transfer protections but lacking DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited but includes a valid organizational email. Overall, the site is trustworthy and professional but could improve in security and compliance aspects.

I

Ifremer

monlopindemer.fr

58

Ifremer is a French public research institute specializing in marine science and technology. The analyzed webpage presents the 'Mon lopin de mer' educational project aimed at raising awareness about ocean ecosystems and encouraging preservation actions among students and the public. The website is professionally designed, well-structured, and mobile-optimized, reflecting a mature digital presence. Technically, it uses Drupal CMS with modern web standards and security best practices including HTTPS and security headers. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. Business credibility is high due to official government branding, partnerships, and certifications. WHOIS data is unavailable, likely due to privacy or registry response, but this does not detract from the site's legitimacy given its governmental nature. Overall, the site is trustworthy, secure, and serves an important educational mission.

F

Faire Autrement

faire-autrement.fr

55

Faire Autrement is a French cultural festival and biennale focused on citizen and innovative ecological experiences, aiming to promote harmonious and sustainable living. The website is built on the Wix platform, leveraging Wix's hosting and standard JavaScript and CSS technologies. The site presents a professional design with good mobile optimization and basic SEO features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data suggests privacy protection for the domain registration, which is common for event-based websites. Overall, the site is legitimate and safe but would benefit from enhanced privacy and security policies to improve trust and compliance.

P

Kurzy a školení PRVNÍ POMOCI

pomahej-kvalitne.cz

44

The website pomahej-kvalitne.cz represents a small Czech business specializing in first aid training courses and workshops. Their offerings include basic and extended first aid courses, specialized training for schools and families, and AED defibrillator usage training. The business targets firms, schools, and individuals, positioning itself as a niche educational provider in the Czech Republic. The website is built on WordPress and hosted by cesky-hosting.eu, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Contact information is minimal, limited to a Facebook social media link without explicit emails or phone numbers on the main page. The domain registration is consistent with the business profile and founded in 2022, indicating legitimacy. Overall, the site is professional and relevant but could improve compliance and security practices.

S

SPECTRUM

spectrumstore.com

74

SPECTRUM is an established Italian e-commerce retailer specializing in graffiti art supplies including spray paints, markers, and accessories. The website positions itself as a community supporter with over 20 years of experience, targeting graffiti artists and enthusiasts. The business operates on the Shopify platform, leveraging modern e-commerce technologies and Cloudflare DNS services. The website demonstrates good design quality, clear navigation, and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic with a cookie consent mechanism but lacks a published privacy policy or terms of service. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

České modelky s.r.o. is a Czech Republic based modeling and promotional services agency operating since 2006. The company specializes in providing hostesses, models, plus size models, live mannequins, and promotional staff for events and advertising campaigns. Their website reflects a well-established local business with a strong database of over 22,000 women and girls aged 16-40. The business targets companies and event organizers in the Czech Republic and Slovakia seeking professional promotional personnel. Technically, the website uses modern frontend technologies including Bootstrap and jQuery, with a responsive design and basic SEO optimizations. Security posture is moderate with HTTPS implied and a cookie consent mechanism implemented, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are directly provided on the main page, which slightly impacts user trust and contactability. Overall, the website is professional and trustworthy with room for improvement in security and privacy transparency.

The website renault.no is currently inaccessible due to a Vercel Security Checkpoint blocking content access. The page displays a message indicating failed browser verification and provides a link for the website owner to fix the issue. Due to this block, no business-related content, metadata, or contact information is available for analysis. The site appears to be hosted on Vercel and uses Astro framework technology. Without access to the actual website content, it is impossible to assess the business model, services, or market position. The security posture cannot be evaluated beyond the presence of the security checkpoint, which itself indicates some level of bot or threat mitigation. Overall, the site is currently non-functional for end users and requires resolution of the security checkpoint to enable further analysis.

V

Vorwerk Hellas

vorwerk.gr

62

Vorwerk Hellas operates as the official distributor and e-commerce platform for Thermomix® kitchen appliances in Greece. The website offers product information, live demonstrations, consultant recruitment, and direct sales, targeting Greek consumers interested in innovative kitchen technology. The business is positioned as a medium-sized retail entity under the global Vorwerk Group umbrella, with a consistent brand presence and active social media engagement. Technically, the website is built on the Shopify platform, leveraging modern JavaScript libraries and marketing pixels for analytics and advertising. It demonstrates good performance, mobile optimization, and accessibility features. The presence of structured data and comprehensive metadata supports SEO efforts. From a security perspective, the site enforces HTTPS and employs CAPTCHA for form protection. While explicit security headers are not evident in the HTML, no critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance, though incident response and security policy details are not publicly available. Overall, the website presents a professional, trustworthy, and secure online presence suitable for its retail business model. Strategic improvements in security header implementation and incident response transparency could further enhance its security posture.

K

Kalmoya.com

kalmoya.com

10

Kalmoya.com is a specialized service provider focused on Concrete5 CMS development and support, targeting entrepreneurs and small to medium businesses. The website presents a professional and consistent brand image, offering retainers, custom development, and support services tailored to business growth and website management. The technical infrastructure leverages modern web technologies including Concrete CMS, JavaScript APIs, and Google Analytics for performance and user insights. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet regulatory standards. The domain's WHOIS data is missing, raising concerns about registration legitimacy, but the website's professional appearance and client testimonials support its credibility. Overall, the site is well-designed and functional but would benefit from enhanced transparency and security practices.

E

Expertises Climat

expertisesclimat.fr

11

Expertises Climat is a French non-profit association founded in 2022, dedicated to bridging scientific research and media to enhance public debate on ecological urgency. The organization federates over 200 researchers and experts, supporting journalists and promoting scientific expertise in media coverage of climate issues. Their partnerships with reputable institutions such as ADEME and CNRS reinforce their credibility and influence in the environmental sector. Technically, the website is built on WordPress with modern web technologies including Google Fonts, FontAwesome, and the Complianz GDPR plugin for privacy compliance. The site is well-optimized for mobile devices, has good SEO practices, and uses HTTPS with secure cookie consent mechanisms. Google Tag Manager is used for analytics, indicating moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the organization's profile, showing a consistent and legitimate domain registration. Overall, the website presents a professional, trustworthy, and privacy-conscious platform for its niche audience. Strategic improvements could include enhanced security headers and publicly available security policies to further strengthen trust and compliance.

C

Coop-médias SCIC SA

coop-medias.org

10

Coop-médias is a French citizen cooperative established in 2024 that supports, promotes, and defends independent media through citizen investment starting at 100 euros, offering tax benefits. Positioned as the first cooperative of its kind in France, it aims to finance independent media, increase their visibility, and defend media independence in public discourse. The website is professionally designed, mobile-optimized, and rich in relevant content targeting citizens interested in democratic and independent information. Technically, it is built on WordPress with modern plugins for GDPR compliance and tracking, including Facebook Pixel and Google Analytics, all integrated with user consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is incomplete, limiting domain trust verification, but the website's professionalism and transparency support its legitimacy. Overall, Coop-médias presents a credible and well-structured platform for cooperative investment in media independence.

A

Atelier Anamorphose / Agence Anamorphose

anamorpho.se

10

Anamorphose is a French hybrid social enterprise combining an artistic association and a social mission agency focused on inclusion, upcycling, and artistic rehabilitation of objects and spaces. The company targets artists, enterprises, local authorities, and associations, positioning itself as a niche player in the Lyon metropolitan area. The website is built on WordPress with a modern tech stack including Alpine.js and Leaflet.js, hosted by OVH.net. It features GDPR-compliant cookie consent and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS and cookie management, though DNSSEC is not enabled and some security headers are missing. No critical vulnerabilities or exposed sensitive data were found. The domain is newly registered but consistent with the business profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

S

Storck

mamba.de

65

The website www.mamba.de is a professionally maintained brand site for Mamba, a fruit-flavored chewy candy brand under the Storck company. It targets a general German-speaking audience with product information, brand marketing, and consumer engagement content. The site uses TYPO3 CMS and modern JavaScript libraries, including RequireJS, Lodash, and jQuery, and integrates Piwik PRO for analytics. The technical infrastructure is modern and mobile-optimized, with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is trustworthy and well-positioned in the retail confectionery market.

S

Storck

nimm2.at

74

The website www.nimm2.at represents the Austrian presence of the Storck brand 'nimm2', a well-established confectionery brand specializing in vitamin-enriched sweets and candies. The site serves as a consumer-facing platform providing product information, brand storytelling, and engagement through inspiration and ideas. It targets a general audience including families and consumers interested in vitamin candy products. The website is part of a larger corporate ecosystem under Storck, linking to multiple sister brand domains, indicating a strong market position in the confectionery retail sector in Austria. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as RequireJS, jQuery, and Lodash, and integrates Piwik PRO for analytics and tag management. The site is mobile-optimized with responsive design and good SEO practices. Performance is moderate, with asynchronous loading of scripts and media assets. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data for the domain is unavailable due to NIC.AT restrictions, limiting full verification of domain registration details, but the website's branding and content strongly indicate legitimacy. Overall, the site presents a professional, trustworthy brand presence with good privacy compliance and moderate security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing direct contact information for incident response. These steps would strengthen trust and compliance further.

S

Storck

toffifay.us

66

Storck is a well-established confectionery company with a global presence, offering products such as Toffifay, a unique confection combining caramel, hazelnut, and chocolate. The website reflects a professional brand image with consistent branding and clear product information targeted at a general audience. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response policies are absent. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection.

P

Patriot Program

patriotprogram.cz

54

Patriot Program is a regional media platform focused on providing a comprehensive calendar and search engine for cultural, sports, and social events in the Moravskoslezský kraj region of the Czech Republic. The website offers event listings, articles, and a downloadable magazine, targeting a broad audience including families, seniors, and cultural enthusiasts. The platform supports user-generated event creation and maintains active social media channels on Facebook and YouTube. Technically, the website is built using modern web technologies including Next.js and React, hosted on DigitalOcean infrastructure, and optimized for mobile devices with good performance and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy compliance pages indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the professional presentation and content quality suggest a legitimate business. Overall, the site scores well on content and technical implementation but needs to enhance privacy compliance and transparency to improve trust and security posture.

G

Gab

gab.com

68

Gab is a social networking platform emphasizing free speech and individual liberty. It operates a subscription model with Gab PRO, which grants VPN and proxy access to its site. The website is moderately mature with a domain age dating back to 1998, hosted via Cloudflare, and uses modern web technologies including React and Matomo analytics. The VPN policy page clearly states restrictions on VPN/proxy usage to protect the community from malicious actors. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is limited as no privacy or cookie policies are present on this page. Overall, the site is functional and professional but could improve transparency and security practices.

T

theprotocol.it

theprotocol.it

67

theprotocol.it is a specialized online job portal focused on the IT sector in Poland, providing daily updated job offers and resources for both candidates and employers. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and user-friendly experience. It maintains a strong security posture with HTTPS, DNSSEC, and security headers, ensuring safe browsing for users. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance, and does not provide explicit contact information, which may affect user trust and compliance. Overall, the site is professionally designed and well-positioned in its niche market but should enhance its privacy compliance and transparency to improve trust and legal adherence.

L

Latvijas Sabiedriskais medijs

lsm.lv

56

LSM.lv is the official Latvian public media news portal operated by Latvijas Sabiedriskais medijs. It provides trusted news content including video, audio, and written articles primarily in Latvian with multilingual support for Russian, English, Ukrainian, Belarusian, and Polish. The platform serves as a key information source for the Latvian public and covers a wide range of topics including national and international news, culture, sports, and weather. The website demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks, analytics tools, and a cookie consent mechanism to comply with privacy regulations. Security posture is strong with HTTPS enforced and bot protection via Google reCAPTCHA, although explicit privacy and security policies are not found in the provided content. Overall, the site is professional, well-branded, and trustworthy, serving a large audience with high-quality content.

A

lift | Data-Driven iGaming Advertising Platform

admedo.com

64

The website lift.win presents a data-driven advertising platform tailored for the iGaming industry, focusing on player acquisition and lifetime value maximization through machine learning. The platform targets iGaming operators and positions itself as a niche solution within the advertising technology sector. Technically, the site employs modern frameworks such as Next.js and React, with integrations of HubSpot marketing and analytics tools, indicating a mature digital infrastructure. Security posture is moderate; HTTPS is implied, but no explicit security headers or policies are found, and WHOIS data is unavailable, which limits full trust assessment. Overall, the site is professional and functional but would benefit from enhanced privacy and security disclosures to improve compliance and trust.

U

U Mistra Mydláře

umistramydlare.cz

55

U Mistra Mydláře is a small family-owned business based in the Czech Republic specializing in handmade soaps, shampoos, shaving foams, and scented gifts. Established in 2012, the company emphasizes natural ingredients without chemical preservatives or dyes, targeting customers who value artisanal and natural skincare products. Their market position is that of a niche regional player with a loyal customer base, supported by certifications such as the regional product certificate and registration in the European Cosmetic Products Notification Portal (CPNP). Technically, the website is built on the Webnode CMS platform and utilizes modern web technologies including JavaScript, CSS, and HTML5. It leverages AWS Cloudfront CDN for hosting static assets and integrates Google Tag Manager for analytics and Smartsupp for live chat support. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. From a security perspective, the website enforces HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, although the website content and business information appear legitimate and consistent. Overall, the website presents a professional and trustworthy front for a small artisanal business but would benefit from enhanced security headers, improved privacy compliance mechanisms, and transparency in domain registration details to strengthen its security posture and trust signals.

L

Linkila Technologies Inc.

linkila.com

10

Linkila Technologies Inc. operates a branded short URL service that enables businesses and marketers to create custom short URLs with their own domains, enhancing brand identity and click-through rates. The platform offers dynamic visitor routing, retargeting pixel integration, deep linking for mobile apps, and real-time analytics, positioning itself as a niche SaaS provider in the URL management and marketing analytics space. The website is professionally designed with clear navigation and good mobile optimization, targeting small to medium-sized businesses seeking advanced link management solutions. Technically, the website employs modern web technologies including JavaScript, Google Fonts, and integrates third-party services such as Trustpilot for reviews and Google Analytics alongside Ackee for visitor tracking. Hosting and DNS are managed via Cloudflare, providing reliable performance and security benefits. The site is custom-built without a common CMS, indicating a tailored solution. Performance and SEO are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No security policy or incident response information is publicly available, and cookie consent mechanisms are absent, indicating partial privacy compliance. The domain WHOIS data is consistent with the business profile, showing a legitimate registration since 2020. Overall, Linkila presents a trustworthy and professional online presence with a solid technical foundation and moderate security posture. Strategic enhancements in privacy compliance, security headers, and incident response transparency would further strengthen its risk profile and customer trust.

The website kopkatalogs.lv serves as a shared electronic catalog platform for nine national-level libraries in Latvia, leveraging the Ex Libris ALEPH integrated library system. It targets library users including students, researchers, and the general public seeking access to Latvian library resources. The platform is positioned as a key national service facilitating unified catalog access and user authentication. Technically, the site employs JavaScript, Matomo, and Google Analytics for tracking, and is hosted with DNS services on Microsoft Azure. The site uses HTTPS for secure login but lacks visible security headers and cookie consent mechanisms, indicating room for security and privacy improvements. The privacy policy is linked to an official government domain, supporting GDPR compliance, though cookie consent is absent. Overall, the site is functional with moderate technical maturity and basic content quality, suitable for its educational sector role.

F

FORTHEM Alliance

forthem-alliance.eu

65

FORTHEM Alliance is a European network of nine multidisciplinary public research universities focused on fostering cooperation across languages, borders, and disciplines to address societal challenges and skills shortages in Europe. The alliance provides various mobility programs, digital learning platforms, research innovation services, and collaborative labs targeting students, staff, researchers, and public organizations. The website reflects a well-structured and content-rich platform that supports the alliance's educational and research mission. Technically, the website leverages modern web technologies including React and Next.js, delivering a responsive and moderately performant user experience. The site is accessible and SEO optimized, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The domain WHOIS data is privacy protected by EURid, which is common for .eu domains and justified for this non-profit educational alliance. No suspicious patterns or vulnerabilities were detected. Overall, the website demonstrates a trustworthy and professional presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy and incident response information, and enhancing accessibility features to further strengthen the website's security and compliance posture.

The website indica.org.in/lander is currently a minimal placeholder or parking page with very limited content. It primarily loads a React-based frontend with no visible business information, contact details, or policies. The presence of Google Adsense scripts indicates an intent to monetize traffic, but no substantive content or services are offered. The technical infrastructure is basic, relying on React and hosted on WSImg's platform, with no detected CMS or advanced SEO features. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No forms or user data collection mechanisms are present, reducing immediate privacy risks but also indicating low engagement. Overall, the site lacks credibility and trust signals, making it unsuitable for business or user interaction in its current state.

C

CentreForMuseums

centreformuseums.in

59

CentreForMuseums is a non-profit initiative focused on revitalizing the museum sector in India through research, management strategies, digital engagement, and sustainability planning. The organization targets museums, cultural institutions, and professionals seeking to modernize and enhance visitor experiences. The website is built on the Squarespace platform, featuring professional design and moderate performance with good mobile optimization. Security measures include HTTPS with HSTS, but the site lacks explicit privacy and cookie policies, which impacts compliance. Contact information is minimal, with only an Instagram social media link provided. Overall, the site presents a credible and focused cultural non-profit with room for improvement in privacy compliance and contact transparency.

V

Vojtěch Nedvěd

vn1.cz

47

Vojtěch Nedvěd operates a professional web development service primarily focused on creating websites and e-shops for a variety of clients. The business is positioned as a small independent developer based in the Czech Republic, with a portfolio showcasing diverse projects including programming, coding, design, and copywriting services. The website is well-structured, visually consistent, and targets local Czech businesses and individuals seeking custom web solutions. Technically, the site employs modern web standards including HTML5, CSS3, JavaScript, and integrates Google Fonts and Font Awesome for styling. It uses Google Analytics and Tag Manager for visitor tracking, hosted on Wedos, a reputable Czech hosting provider. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no formal security or privacy policies are published. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but would benefit from improved privacy compliance and security best practices.

T

The Epoch Times

theepochtimes.com

71

The Epoch Times is a large US-based media company providing breaking news, in-depth reporting, and video content focused on politics, culture, and world events. It operates a subscription and donation-based business model, targeting a general audience seeking independent news free from bias. The company maintains a strong online presence with social media integration and offers an e-Newspaper platform. Technically, the website is built on modern frameworks such as React and Next.js, leveraging CDNs and optimized image formats for fast performance and excellent mobile responsiveness. SEO and accessibility are well implemented, contributing to a professional user experience. From a security perspective, the site enforces HTTPS and includes multiple security headers, indicating a strong security posture. However, the absence of explicit privacy policies, terms of service, and incident response information represents compliance gaps. The lack of WHOIS data reduces domain trustworthiness but does not detract from the professional appearance and content quality. Overall, the website presents a low risk with good technical and content quality but would benefit from enhanced transparency and compliance documentation to improve trust and privacy compliance.

I

inpublic technology s.r.o. | informační panely

inpublictechnology.cz

52

The website www.inpublictechnology.cz is a Wix-hosted site with minimal visible content and no accessible business or contact information. The lack of WHOIS data prevents verification of domain registration legitimacy. The site uses standard Wix scripts and polyfills but lacks privacy, cookie, or terms of service policies, and no contact or social media links are present. Technical infrastructure is basic with moderate performance and mobile optimization. Security posture is weak due to absence of security headers and no visible incident response or security policies. Overall, the site appears incomplete or underdeveloped, limiting trust and business credibility.

S

SKY Media s.r.o.

skymedia.cz

50

SKY Media s.r.o. is a Czech Republic-based internet agency specializing in web development, e-commerce solutions, SEO, and online marketing services. The company targets businesses and individuals seeking professional digital presence and marketing support. Their website demonstrates a professional design with clear navigation and a portfolio of client references, indicating a stable market position as a small but established technology service provider. Technically, the website uses a custom CMS (SKY:CMS) and integrates modern web technologies including Google Analytics, Google reCAPTCHA, and Microsoft Clarity for analytics and security. The site is HTTPS secured with valid SSL certificates and shows good mobile optimization and SEO practices. However, some security headers are missing, and no explicit privacy or cookie policies are found, which could be improved. From a security perspective, the site employs standard protections such as HTTPS and CAPTCHA on forms, but lacks published security policies or incident response contacts. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly reduces trustworthiness. Overall, the security posture is good but could benefit from enhanced transparency and header implementation. The overall risk is moderate with no critical vulnerabilities detected. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or security policy to improve compliance and trust. The business appears credible and professional, with a solid technical foundation and clear contact information.

Zahadyshop.cz is a Czech e-commerce website specializing in the sale of printed and electronic magazines focused on mysteries, paranormal phenomena, health, and conspiracy theories. The business operates under the WEXBO brand, with a domain registered since 2013, indicating a stable presence in the niche media market. The website targets Czech-speaking audiences interested in mysticism and related topics, offering subscriptions and individual magazine sales. Technically, the site uses a proprietary CMS (WEXBO), modern web technologies including Google Fonts and Google Analytics, and is optimized for desktop and mobile users. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is basic but adequate, with clear privacy and cookie policies and GDPR references. Overall, the site presents a professional and trustworthy e-commerce platform with good user experience and content relevance.

T

TROPICANA - La Plage | Restaurant de plage par la Tarte Tropézienne

tropicanalaplage.com

38

The website 'TROPICANA - La Plage' represents a beach restaurant business associated with the Tarte Tropézienne brand, targeting general public and tourists in France. The site provides information about their hospitality and food services but lacks detailed business and contact information. Technically, the site is built on WordPress using the Divi theme, with moderate performance and good mobile optimization. However, the security posture is weak due to missing security headers and lack of HTTPS verification in the provided data. Privacy compliance is minimal, with no visible privacy or cookie policies, and no GDPR compliance indicators. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible and safe for general audiences but requires significant improvements in security, privacy, and business transparency to enhance trust and compliance.

M

Myli

myli.io

63

Myli is a French SaaS company specializing in AI-powered e-reputation and customer acquisition platforms tailored for multi-location businesses, particularly in the hospitality, retail, and services sectors. The company positions itself as a leader in the French market, trusted by a significant portion of top fast food chains and recognized across various industries. Their platform offers integrated tools such as review management, presence optimization, SEO-optimized store locators, and gamification features to enhance local marketing efforts. Technically, the website is built using modern frameworks like React and Next.js, ensuring good mobile optimization, accessibility, and SEO practices. The site loads with moderate performance and employs privacy-respecting analytics (plausible.io). Security-wise, HTTPS is enforced, but explicit security headers and incident response policies are not publicly documented, suggesting room for improvement. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. The business credibility is high, supported by client testimonials, partnerships, and consistent branding. Strategically, Myli should enhance its security transparency by publishing incident response and vulnerability disclosure policies and implementing additional security headers. These steps will strengthen trust and compliance, supporting its market leadership and growth ambitions.

M

Malakoff Humanis

malakoffhumanis.com

68

Malakoff Humanis is a large French mutual social protection group specializing in health, provident, savings, and retirement services. The organization targets both individuals and enterprises within France, offering comprehensive social protection and accompaniment services. The website is professionally designed using Drupal 10, incorporating modern web technologies and marketing tools such as Abtasty and TagCommander. The technical infrastructure supports moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are needed in security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy page detected. WHOIS data is missing or unavailable, which reduces trustworthiness but the website content and structured data strongly indicate a legitimate entity. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

S

Service Public d’Information en Santé

sante.fr

63

Santé.fr is the official French public health information portal managed under the Ministry of Health. Established in 2016, it serves as a comprehensive and reliable source of health information for the general public and health professionals. The website offers extensive editorial content, a large directory of health professionals and establishments, and personalized health advice services. It is positioned as a leading government-backed health information platform in France. Technically, the site is built on Drupal CMS with modern frontend technologies including Vue.js and FontAwesome. It implements strong privacy and cookie consent mechanisms using tarteaucitron.js and supports mobile and accessibility standards well. The site is served over HTTPS with no detected blocking or WAF interference, indicating good operational maturity. From a security perspective, the site enforces HTTPS and secure login via OpenID Connect but lacks explicit HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, Santé.fr presents a trustworthy, professional, and secure public health information service with excellent content quality and user experience. The domain WHOIS data is not publicly available, consistent with government domain privacy practices, and the site aligns well with its stated mission and branding.

S

Storck

merci.com

71

The merci.com website represents the official brand site for the merci chocolate product line, owned by the Storck company. It serves as a retail and brand information platform showcasing a variety of chocolate products, crafting ideas, and brand storytelling. The site targets general consumers interested in gifting chocolates and maintains consistent branding aligned with the parent company. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes a cookie consent mechanism and privacy policy, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. WHOIS data is unavailable or protected, which slightly reduces domain trust but the overall professional presentation and corporate linkage support legitimacy. The site is accessible without WAF or blocking mechanisms.

The website zezdravotnictvi.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to any business content or information. The domain is registered since 2019 under REG-INTERNET-CZ with Cloudflare nameservers, indicating a Czech Republic origin. No visible business description, contact details, or policies are present on the landing page, limiting the ability to assess the company's market position or services. Technically, the site uses Cloudflare's security and CDN services but lacks visible SEO, accessibility, or security headers in the provided HTML content. The security posture is partially supported by Cloudflare's WAF but lacks transparency in policies and contact channels. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the blocked content and missing information.

V

VITESTIN přímo od výrobce

vitestin.cz

50

The website vitestin.cz appears to be a small-scale business site hosted on the Wix platform, likely related to health or supplements given the domain name and branding. The site is accessible without any WAF or security challenge, but lacks critical business and security information such as WHOIS registrant data, privacy policies, cookie consent mechanisms, and contact details. Technically, it uses Wix's Thunderbolt framework and standard web technologies, with moderate mobile optimization and basic SEO features. Security posture is minimal with no advanced headers or policies detected. Overall, the site presents a basic online presence but lacks transparency and compliance features expected for trust and regulatory adherence.

I

IML spol. s r.o.

gimmexin.cz

50

IML spol. s r.o. operates the website gimmexin.cz, promoting and selling Gimmexin, a patented immunity support syrup targeted at both children and adults. The company positions itself within the healthcare supplement market in the Czech Republic, focusing on natural ingredients like turmeric and organic germanium to support immune function. The website serves as an informational and e-commerce platform, linking to pharmacy partners for purchase. Technically, the site is built on the SKY:CMS platform, employs modern web technologies, and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks visible security headers and formal security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security disclosures and domain registration transparency.

The website novinyvm.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This prevents extraction of any meaningful business, contact, or policy information from the site. The domain is registered since 2007 with a Czech registrar REG-WEDOS and uses Cloudflare name servers, indicating a legitimate and established domain. However, the lack of visible content and policies limits the ability to assess the business model, services, or compliance posture. Technically, the site uses Cloudflare's security and CDN infrastructure, but no additional security headers or frameworks are evident in the HTML content. Privacy and cookie policies are absent, and no contact information or forms are present beyond the security challenge. The site does not contain any adult or questionable content based on the available data. Overall, the site appears to be protected by Cloudflare's WAF, but this also restricts content visibility and analysis.