Security Directory

C

Conservatoire national des arts et métiers

cnam.fr

53

The Conservatoire national des arts et métiers (Cnam) is a well-established French public higher education institution dedicated to lifelong learning, scientific and technical culture dissemination, and research. The website reflects a mature digital presence with extensive content covering education, research, culture, and regional and international activities. The institution targets students, professionals, and researchers, offering a broad range of services including micro-certifications, MOOCs, and cultural exhibitions. Technically, the site uses modern JavaScript libraries and a custom CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website's branding, certifications, and content strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

T

Toulouse INP-ENSIACET

ensiacet.fr

53

ENSIACET is a French engineering school specializing in the transformation of matter and energy, offering multiple engineering diplomas and masters programs. It is part of the Toulouse INP group and maintains strong partnerships with governmental and educational institutions. The website is professionally designed, content-rich, and targets prospective students, researchers, and industry partners. The technical infrastructure is based on Ametys CMS with common JavaScript libraries and includes a cookie consent mechanism and Matomo analytics for privacy-conscious tracking. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the presence of official certifications and partner links supports legitimacy. Overall, the site is well-maintained, compliant with GDPR, and provides clear contact information.

U

UNIVERSEH

universeh.eu

44

UNIVERSEH is a European Space University dedicated to providing high-level education and research programs focused on space studies. It operates as a consortium of European universities and research institutions, offering courses, mobility programs, and research projects to students, researchers, staff, stakeholders, and citizens interested in space and humanity. The website reflects a well-structured and professionally designed platform with a clear focus on education and research in the space sector. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, and it integrates Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not detected and incident response information is absent. Overall, the domain registration is consistent with the business purpose, registered through BELNET, a reputable academic registrar. The site maintains a strong social media presence, enhancing its trustworthiness and outreach.

G

Groupe INP

groupe-inp.fr

53

Groupe INP is a consortium of public engineering and management schools in France, offering high-quality education and research opportunities across multiple regions including Brittany, Bordeaux, Clermont-Ferrand, Grenoble, Nancy, and Toulouse. The group emphasizes professional training, scientific excellence, and strong ties with industry and international partners. The website reflects a well-structured educational institution with clear branding and a focus on student engagement and admissions. Technically, the site uses a custom CMS (K-Sup), modern web technologies, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but the site content and branding strongly indicate legitimacy. Overall, the site is professional, accessible, and trustworthy for its target audience.

A

American Society of Transplantation

livingdonortoolkit.com

56

The Living Donor Toolkit website serves as a specialized educational platform providing comprehensive financial and medical resources for individuals considering living organ donation. Affiliated with the American Society of Transplantation and sponsored by Novartis, the site targets potential living donors and their families, offering detailed toolkits and chapters to support informed decision-making. The website holds a strong position as a trusted non-profit healthcare resource in the transplantation community. Technically, the site is built on Drupal 7 with integration of common web technologies such as jQuery, Adobe DTM, Google Tag Manager, and Typekit fonts. While the site demonstrates good design quality, clear navigation, and moderate performance, mobile optimization and accessibility are basic and could be improved. The use of multiple third-party marketing and tracking tools indicates moderate user tracking. From a security perspective, HTTPS is properly implemented, but the absence of explicit security headers and lack of visible privacy and cookie policies reduce the overall security posture and privacy compliance. The missing WHOIS data for the domain raises transparency concerns, although the professional affiliation and sponsorship lend credibility. No WAF or blocking mechanisms were detected, and content is fully accessible. Overall, the website is a credible and valuable resource for its target audience but would benefit from enhanced privacy disclosures, improved security headers, and better transparency regarding domain registration to strengthen trust and compliance.

AST Partner Connect is a professional platform operated by the American Society of Transplantation, providing transplant healthcare professionals with access to educational content, clinical trials, career opportunities, and partner resources. The platform serves as a bridge between healthcare professionals and industry partners, facilitating knowledge sharing and professional development in transplantation. The website is well-branded, consistent, and targets a specialized audience in the healthcare sector. Technically, the site uses common web technologies such as jQuery, Vimeo API, and Select2, hosted likely on AWS infrastructure. The design is professional and mobile-optimized, though accessibility and SEO could be improved. Security posture is moderate with no evident critical vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. WHOIS data is transparent and consistent with the organization's profile, enhancing trustworthiness. Overall, the site is a credible and useful resource for its target audience.

H

Hotel Košice DoubleTree by Hilton

doubletree-kosice.com

58

Hotel Košice DoubleTree by Hilton operates as a prominent hospitality provider located in the heart of Košice, Slovakia. Affiliated with the global Hilton brand, it offers accommodation, conference facilities, event hosting, and gastronomy services. The website reflects a professional and consistent brand image targeting travelers, business clients, and event organizers. The business model focuses on delivering premium hospitality experiences with loyalty program integration and additional VIP services. Technically, the website is built on WordPress with Elementor, optimized for SEO and mobile responsiveness, and incorporates modern web technologies including Google Analytics and reCAPTCHA for security. Security posture is strong with HTTPS enforcement and form protections, though explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises legitimacy concerns that should be investigated further. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

K

KOSTKA footbike

kostkatretroller.de

59

KOSTKA footbike is a well-established Czech manufacturer and retailer of scooters for adults, children, seniors, and specialized uses such as mushing. The company has a strong market presence in the Czech Republic with over 25 years of tradition, offering a wide range of products and services including a Try & Buy program and customization options. The website is professionally designed, mobile-optimized, and provides comprehensive product information and customer support resources. Technically, the site runs on the PrestaShop e-commerce platform with modern JavaScript libraries and tracking tools integrated. Security posture is strong with HTTPS, security headers, and consent management in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

K

KOSTKA footbike

kostkafootbike.com

49

KOSTKA footbike is a well-established Czech manufacturer and retailer specializing in scooters for adults, children, and specialized uses such as mushing and seniors. The company emphasizes Czech production with over 20 years of tradition, offering a wide range of products and services including a Try & Buy rental program and a custom scooter configurator. The website is professionally designed, mobile-optimized, and provides rich content including blogs and community events, supporting a strong market presence in the micro-mobility retail sector. Technically, the website leverages a modern tech stack built on Prestashop CMS, integrating popular JavaScript libraries and marketing tools such as Google Tag Manager and Facebook Pixel. Performance and SEO are well addressed, with good accessibility and user experience. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Security posture is solid with HTTPS enforced, security headers implemented, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data and lack of explicit security policy or incident response information slightly reduce trustworthiness. Overall, the site is secure, professional, and trustworthy, though domain registration transparency should be improved. Strategically, the company should consider publishing a dedicated security policy and vulnerability disclosure page, and ensure domain registration data is publicly available to enhance credibility and trust.

Z

Zalando SE

zalando-lounge.cz

58

Lounge by Zalando is a well-established online outlet platform specializing in discounted fashion, home goods, and premium products, primarily targeting consumers in the Czech Republic and broader European markets. It operates under the Zalando SE group, a leading European e-commerce company. The website offers daily deals with discounts up to 75%, supported by a modern and responsive web infrastructure leveraging React and RequireJS, with strong SEO and accessibility features. Privacy and cookie consent are managed via Usercentrics, and error monitoring is handled by Sentry, indicating a mature digital operations environment. Security posture is robust with HTTPS enforcement and security headers, though direct contact information is not prominently displayed on the site. WHOIS data for the domain is unavailable or privacy protected, which is common for commercial entities but slightly reduces transparency. Overall, the site is professional, trustworthy, and well-positioned in the online retail sector.

Place à l'acte is a French platform dedicated to facilitating social engagement and community action by providing resources, inspiration, and tools for individuals to launch and develop societal projects. The website targets socially conscious individuals seeking to contribute or start initiatives locally or more broadly. Technically, the site uses a modern front-end framework (Foundation) and integrates Facebook Pixel for marketing and tracking purposes. Hosting is provided by Infomaniak Network SA, a reputable provider. Security posture is moderate with HTTPS enabled but lacking important security headers and cookie consent mechanisms, which impacts GDPR compliance and overall security maturity. The website is accessible with no blocking or WAF challenges detected, and WHOIS data is consistent and transparent, supporting legitimacy. Overall, the platform is well-positioned in its niche but should improve privacy and security practices to enhance trust and compliance.

S

Somfy

somfy.at

71

Somfy is a well-established company specializing in motorized shading solutions and smart home automation products. The website www.somfy.at serves the Austrian market with a comprehensive product catalog, e-commerce integration, and extensive customer support resources. The company targets private customers, professional partners, and technical planners, positioning itself as a leader in smart home technology and automation. The site is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website employs modern web technologies including responsive images, SVG icons, JSON-LD structured data, and uses Akamai CDN for performance optimization. The platform appears custom-built with a focus on user experience and SEO best practices. Security measures such as HTTPS, security headers, and privacy compliance mechanisms are well implemented, although explicit security policy and incident response pages are not found. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR. The absence of WHOIS data is noted but likely due to privacy protection, which is justified for a commercial brand site. Trust indicators such as Trusted Shops certification and active social media presence further enhance credibility. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Recommendations include publishing explicit security policies and vulnerability disclosure information to further enhance transparency and trust.

M

My Somfy Showroom

mysomfyshowroom.co.uk

48

My Somfy Showroom is a specialized digital platform showcasing Somfy motorized window treatment products and smart home integration solutions. The website targets Somfy customers, home automation enthusiasts, and Somfy experts, providing interactive product galleries, educational content, and resource downloads. The business operates primarily in the UK market and was established in 2022, reflecting a focused niche showroom model. Technically, the site employs AngularJS, jQuery, Bootstrap, and modern JavaScript libraries to deliver an interactive and mobile-optimized user experience. While the site uses HTTPS and DNSSEC for domain security, it lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The login and password reset forms indicate controlled access for Somfy experts, but no explicit contact information or incident response channels are provided. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security best practices.

Ú

ÚSTAV PRO STÁTNÍ KONTROLU VETERINÁRNÍCH BIOPREPARÁTŮ A LÉČIV

uskvbl.cz

53

Ústav pro státní kontrolu veterinárních biopreparátů a léčiv (ÚSKVBL) is a Czech government institute responsible for the regulation and state control of veterinary biopreparations and medicines. The website serves as an official portal providing access to databases of registered veterinary medicinal products, safety warnings, and professional information targeted primarily at veterinarians and applicants in the veterinary pharmaceutical sector. The site is positioned as a trusted national regulatory authority with a clear government mandate. Technically, the website is built on Joomla CMS and leverages modern web technologies including jQuery, Bootstrap, and Google Fonts. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a secure SSL configuration and implements a cookie consent mechanism compliant with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration trust analysis, but the official nature of the site, consistent branding, and domain-matching contact information support its legitimacy. No advertising or tracking scripts are present, indicating a privacy-conscious approach. Overall, the website is professional, secure, and compliant with privacy regulations, serving its role as a government regulatory platform effectively. Strategic improvements include adding security headers, publishing security policies, and enhancing WHOIS transparency to strengthen trust and security posture.

L

Logilys Inc.

jedonneenligne.org

65

JeDonneEnLigne.org is a French-language online donation platform initiative operated by Logilys Inc., targeting charitable organizations and donors primarily in Canada. The platform offers integrated online donation forms connected to the Prodon donor management software, enabling charities to manage donations without programming expertise. The business is positioned as a niche provider with a small company size and a mature domain presence since 2009. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Fonts, Font Awesome, Google reCAPTCHA, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and bot protection, but lacks DNSSEC and security headers, and no published security or incident response policies were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-branded, with clear contact information and social media presence. Recommendations include enhancing security headers, enabling DNSSEC, adding cookie consent, and publishing security policies to improve compliance and trust.

The website www.colibris-laboutique.org currently displays a maintenance page indicating that the online boutique is temporarily offline for updates. The lack of metadata, content, and business information suggests the site is either newly launched or undergoing redevelopment. The minimal content and absence of contact or policy pages limit the ability to assess the business comprehensively. Technically, the site uses basic CSS styling but lacks modern web technologies, security headers, and HTTPS enforcement, which are critical for e-commerce operations. The WHOIS data is unavailable due to a malformed response, preventing verification of domain ownership and legitimacy. This raises concerns about the trustworthiness and transparency of the domain registration. Overall, the site’s security posture is weak, with no visible security best practices implemented. Privacy compliance is absent, and no contact or incident response information is provided. The site is safe for general audiences but offers no business credibility or trust signals at this time.

P

Près de chez nous

presdecheznous.fr

55

Près de chez nous is a French collaborative platform focused on ecological and solidarity initiatives, providing a map-based directory to connect users with local sustainable resources. The website is designed with a consistent and professional aesthetic, optimized for mobile devices, and includes SEO-friendly metadata. The technical infrastructure relies on standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted by OVH, a reputable provider. User analytics are tracked via Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security practices.

C

Colibris Outils Libres

colibris-outilslibres.org

43

Colibris Outils Libres is a small-scale organization focused on providing free and open tools for project organization and collaboration. The website presents itself as a platform to help users organize and execute projects freely, targeting a general audience interested in open-source and collaborative tools. The domain has been registered since 2017 with a reputable registrar, indicating a stable presence. Technically, the website is built using modern frontend technologies including React and Gatsby, styled with Bootstrap. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, the technical implementation lacks advanced security headers and privacy compliance features, which are areas for improvement. From a security perspective, the site uses HTTPS but does not enable DNSSEC or implement common security headers, which reduces its security posture. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting transparency and compliance with regulations such as GDPR. Overall, the website is functional and trustworthy but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact information to improve user trust and regulatory adherence.

A

Association Colibris

colibris-lafabrique.org

46

La Fabrique des colibris is a French non-profit platform affiliated with the Association Colibris, dedicated to supporting collective projects aligned with ecological and social values. The platform offers free services to project initiators including visibility, volunteer recruitment, and resource sharing, funded primarily through donations. The website is well-branded, consistent, and targets a community of socially conscious individuals and groups in France. Technically, the site runs on Drupal 7 with embedded multimedia and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy transparency.

M

Mouvement Colibris

colibris-universite.org

46

The Université des Colibris is a French non-profit educational platform operated by the Mouvement Colibris, focused on empowering individuals and organizations to engage in ecological and social transition. The website offers a variety of MOOCs and training programs targeting citizens and professionals interested in sustainable development, governance, and community projects. The organization is well-established with a domain registered since 2016 and holds the Qualiopi certification, reinforcing its credibility in the education sector. Technically, the website is built on Drupal 7, utilizing JavaScript and Matomo analytics for user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data enhancing search visibility. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. The site tracks users moderately via Matomo, a privacy-friendly analytics tool. No vulnerabilities or exposed sensitive data were identified. Overall, the website presents a trustworthy and professional front for the educational services it offers, with room for improvement in security and privacy compliance to align with best practices and regulatory requirements.

U

UP COOP

up.coop

59

UP COOP operates the website up.coop, providing payment solutions focused on enhancing the well-being of employees and citizens through targeted purchasing power products such as meal vouchers, cultural and service checks, and social aid solutions. The company is positioned as a leader in France's multi-enseigne gift and payment solutions market, targeting SMEs, HR professionals, commercial directors, and employee committees. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern marketing and analytics tools including Google Tag Manager, Piano Analytics, and Didomi for consent management. Security posture is good with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. The domain registration data is consistent with the business identity and country, supporting legitimacy. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

N

Novaxia Groupe

novaxia.fr

43

Novaxia Groupe is a French real estate company specializing in sustainable and impact-driven real estate investment and urban recycling projects. The group operates through two main subsidiaries: Novaxia Investissement, which manages real estate investment funds focused on responsible and durable assets, and Novaxia Développement, which leads urban recycling projects transforming obsolete tertiary real estate into housing and mixed-use developments. The company positions itself as a leader in sustainable real estate savings in France, targeting investors seeking to align financial returns with environmental and social impact. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, Piano Analytics, and LinkedIn Insight Tag. It employs HTTPS with good SSL configuration and uses Google reCAPTCHA to secure forms. The site is well-optimized for mobile devices and accessibility, with comprehensive privacy and cookie policies that comply with GDPR requirements. From a security perspective, while HTTPS and form protections are in place, the site lacks explicit security headers and published security policies or incident response information. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and regulatory disclosures support trustworthiness. Overall, the website demonstrates a mature digital presence with moderate tracking and good privacy compliance. Strategically, Novaxia should enhance its security posture by implementing recommended HTTP security headers, publishing a security policy, and providing incident response contacts. Addressing the WHOIS data gap or clarifying domain registration details would improve trust and credibility. These steps will strengthen the company's digital security and compliance, supporting its market position as a responsible real estate investment leader.

B

Biocoop

biocoop.fr

68

Biocoop is a leading French retail network specializing in organic, local, seasonal, and fair trade products. The company operates both physical stores and an e-commerce platform, targeting consumers interested in sustainable and ethical consumption. The website is professionally designed, leveraging Magento as its e-commerce platform, and integrates modern JavaScript libraries and analytics tools such as Piano Analytics and New Relic for performance monitoring. Privacy compliance is addressed through the use of OneTrust cookie consent mechanisms and a comprehensive privacy policy in French. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust analysis, but the overall digital presence suggests a legitimate and established business.

B

Banque des Territoires

banquedesterritoires.fr

65

Banque des Territoires is a major French public financial institution affiliated with Groupe Caisse des Dépôts, focused on supporting territorial actors in project development and financing. The website reflects a professional and comprehensive digital presence with clear navigation, modern technologies, and strong GDPR compliance. The technical infrastructure is based on Drupal CMS with integration of consent management and analytics tools, indicating a mature digital setup. Security posture is good with HTTPS, consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. The absence of WHOIS data reduces trust slightly but the website's affiliation and content quality support legitimacy. Overall, the site is well-positioned to serve its public sector audience with relevant financial and territorial services.

F

FORUM MONDIAL DE l'ÉCONOMIE SOCIALE ET SOLIDAIRE

bordeauxgsef2025.org

60

The website bordeauxgsef2025.org represents the official online presence for the 7th Global Social and Solidarity Economy Forum scheduled in Bordeaux, France, from October 29 to 31, 2025. It serves as an informational and promotional platform targeting governments, institutions, ESS actors, and the general public interested in social economy initiatives. The site provides comprehensive event details, program highlights, partner information, and multilingual support, reflecting a well-established international event organizer in the non-profit sector. Technically, the site is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and cookie consent management, hosted by OVH sas, a reputable French provider. Security posture is good with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO, with moderate tracking and good privacy compliance.

E

Epoch Times Tiếng Việt

epochtimesviet.com

58

Epoch Times Tiếng Việt is the Vietnamese language edition of the international Epoch Times media group, providing news, cultural, health, and global affairs content to Vietnamese-speaking audiences. The website is part of a large media organization with a presence in multiple countries and languages, positioning itself as a trusted source emphasizing truth and tradition. Technically, the site is built on WordPress with modern SEO and push notification integrations, offering a good user experience with mobile optimization and structured data for search engines. Security posture is adequate with HTTPS and basic best practices, but lacks some security headers and formal privacy documentation. The absence of WHOIS data reduces transparency but aligns with privacy protection or recent registration. Overall, the site is professional and trustworthy, though improvements in privacy compliance and contact transparency are recommended.

Q

QS Arab Forum 2025

qsarabforum.com

51

The website portal.qshesummits.com/event/qsarabforum2025/home serves as an online registration portal for the QS Arab Forum 2025 event. It is hosted on the Cvent event management platform, leveraging modern JavaScript frameworks such as React. The site targets professionals and attendees interested in the QS Arab Forum, providing event registration and management services. The business model centers on event facilitation rather than direct commercial sales. The website content is basic but functional, with moderate branding consistency and no explicit business entity information disclosed. Technically, the site uses a modern tech stack including React and integrates Google Analytics and Google Tag Manager for tracking. The performance is moderate with basic mobile optimization and accessibility features. The site uses HTTPS and nonce attributes on scripts, indicating some security awareness, but lacks visible security headers and explicit privacy or cookie policies. From a security perspective, the site shows moderate posture with no critical vulnerabilities detected in the provided data. However, the absence of privacy policies, contact information, and security headers reduces compliance and trustworthiness. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but limits domain legitimacy verification. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is a functional event registration portal with moderate technical maturity but limited transparency on privacy and security policies. Strategic improvements in privacy compliance, security headers, and contact information would enhance trust and security posture.

Q

QS GEN

qs-gen.com

70

QS GEN operates as a specialized global education news platform delivering timely and relevant content focused on higher education developments worldwide. The website targets academics, education professionals, and students by providing news, features, and insights related to universities and educational trends. The platform is built on WordPress, leveraging common web technologies and third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site demonstrates good content quality, professional design, and consistent branding aligned with its niche. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and transparent, supporting the site's legitimacy.

Q

QS Quacquarelli Symonds Limited

edudatasummit.com

68

EduData Summit is a globally recognized event organized by QS Quacquarelli Symonds Limited, focusing on the intersection of education and data analytics. The 2025 event is scheduled in Singapore, targeting a professional audience of educators, data scientists, and institutional leaders. The website is built on WordPress with modern plugins and provides comprehensive event information, speaker details, and registration options. The technical infrastructure is solid with Cloudflare DNS and HTTPS, though DNSSEC is not enabled. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Security posture is good but could be improved with additional headers and vulnerability disclosures. Overall, the site reflects a mature digital presence with strong business credibility and moderate technical sophistication.

F

Flexity

flexity.ro

53

Flexity.ro is a Romanian e-commerce website specializing in yoga, pilates, ayurveda, and wellness products. It positions itself as the largest online yoga store in Romania, offering a wide range of products including clothing, mats, accessories, and supplements. The website targets yoga and wellness enthusiasts primarily in Romania, with sister sites serving neighboring countries. The business model is retail e-commerce with free shipping incentives and a focus on timely delivery. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook SDK for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some security headers and explicit security policies. WHOIS data is privacy protected, which is common for e-commerce sites, and no suspicious patterns were detected. Overall, the site is legitimate and professionally maintained, though improvements in privacy policy visibility and security headers are recommended.

F

Flexity

flexity.hr

60

Flexity.hr is a specialized e-commerce platform focused on yoga, pilates, ayurveda, and wellness products. The website offers a broad range of related goods including mats, clothing, accessories, and natural cosmetics, targeting yoga practitioners and wellness enthusiasts primarily in the Croatian and regional markets. The business operates under a small-sized model with a recent founding date in 2021, supported by a consistent domain registration and hosting provider based in Slovakia. The site is part of a regional network of sister sites serving multiple Central European countries. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and analytics. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is solid with HTTPS enforcement, standard security headers, and cookie consent mechanisms, although it lacks a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable online retail destination for its niche audience.

F

Flexity

flexity.hu

58

Flexity is a Hungary-based e-commerce retailer specializing in yoga, pilates, ayurveda, meditation, and wellness products. The company operates a professional multilingual website targeting regional markets including Slovakia, Czech Republic, Croatia, and Romania. Their product range includes yoga mats, clothing, Tibetan singing bowls, supplements, and related accessories. The business model is focused on online retail with customer account management and order tracking features. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern analytics and marketing tools such as Google Analytics, Facebook SDK, and CJ Affiliate. The site is secured with HTTPS and employs standard security headers, with a cookie consent mechanism compliant with GDPR. However, no explicit security policy or incident response information is publicly available. Overall, the website demonstrates a good balance of content quality, technical implementation, and security posture, suitable for a medium-sized regional retailer.

F

Flexity

flexity.sk

58

Flexity is a Slovakia-based e-commerce retailer specializing in yoga, pilates, ayurveda, and wellness products. It positions itself as the largest yoga e-shop in Slovakia, offering a wide range of products including clothing, mats, accessories, and supplements. The website is professionally designed with good navigation and content relevance, targeting yoga and wellness enthusiasts primarily in Slovakia and neighboring countries. Technically, the site uses the Shoptet e-commerce platform, integrates multiple analytics and marketing tools such as Google Analytics, Facebook SDK, and CJ Affiliate, and is hosted via Amazon Cloudfront CDN. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates a mature digital presence with good business credibility and trust indicators.

K

Knoppers

knoppers.ch

67

Knoppers is a well-established confectionery brand operating under the parent company Storck, targeting general consumers with a focus on product information and marketing for their wafers, bars, and goodies. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

K

Knoppers

knoppers.ro

63

Knoppers.ro is the official Romanian website for the Knoppers confectionery brand, owned by the parent company Storck. The site serves as a marketing and informational platform showcasing Knoppers products such as Napolitana and Baton, targeting general consumers interested in confectionery products. The website is well-branded, consistent, and professionally designed, providing product details, promotional content, and links to related Storck brands. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries including RequireJS and Swiper.js, and uses Piwik (Matomo) for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and includes accessibility features, though some areas like security headers could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks publicly disclosed security policies or incident response contacts. WHOIS data is privacy protected by ROTLD, which is common for Romanian domains, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained, with room for enhanced security transparency and contact information clarity.

K

Knoppers

knoppers.pl

63

Knoppers is a confectionery brand website focused on promoting its wafer and bar products in Poland. The site is professionally designed using TYPO3 CMS and provides detailed product categories and promotional content. It is part of the Storck group, a well-known confectionery company, which enhances its market credibility. The website targets general consumers interested in confectionery snacks and offers a clean, navigable user experience with mobile optimization and structured data for SEO. Technically, the website employs modern web technologies including TYPO3 CMS, RequireJS, and Piwik analytics. It uses HTTPS with good SSL configuration, though lacks explicit security headers. The site includes cookie consent mechanisms and a privacy policy indicating GDPR compliance. However, no direct contact emails or phone numbers are published, and no explicit security or incident response policies are found. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements could be made by adding security headers and incident response contacts. The WHOIS data is unavailable due to registry restrictions, which is common for .pl domains, but the website's professional presentation and linkage to the parent company Storck support its legitimacy. Overall, the website is a credible, well-maintained brand site with good content quality and privacy compliance, suitable for consumer engagement. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for improved trust and compliance.

K

Knoppers

knoppers.nl

65

Knoppers is a well-established confectionery brand operating under the parent company Storck, targeting general consumers primarily in the Netherlands and surrounding European markets. The website serves as a product showcase and promotional platform for Knoppers Wafel and Knoppers Bar products, providing ingredient information and customer engagement through a contact form. The brand maintains consistent and professional digital branding with a focus on product marketing and consumer interaction. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as RequireJS and AOS for enhanced user experience. The site is mobile-optimized and includes SEO best practices with structured data (JSON-LD) and Open Graph metadata. Analytics are handled via Piwik, indicating a moderate level of user tracking balanced with privacy compliance. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms domain legitimacy and alignment with the brand's corporate identity. Overall, the website presents a secure, professional, and user-friendly platform for the Knoppers brand, with recommendations to enhance security transparency and accessibility to further strengthen trust and compliance.

K

Knoppers

knoppers.hu

69

Knoppers.hu is the official Hungarian website for the Knoppers brand, a confectionery product line owned by the Storck company. The website serves primarily as a brand marketing and product information portal, targeting general consumers interested in Knoppers wafer and chocolate bars. It features multiple language versions and links to partner brand sites, indicating a well-established market presence in Hungary and the broader region. The business model focuses on product promotion and consumer engagement rather than direct e-commerce. Technically, the site is built on TYPO3 CMS with modern frontend technologies including RequireJS and AOS for animations. It supports progressive web app features and is mobile optimized with good SEO practices. The site loads moderately fast and provides a good user experience with clear navigation and professional design. Analytics are implemented via Piwik, respecting privacy compliance with a cookie consent mechanism. From a security perspective, the website enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms domain legitimacy with consistent registrant information matching the brand owner, Storck, and no privacy protection masking. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic improvements could include adding security headers, publishing a security policy, and providing direct security incident contact information to enhance trust and security posture.

K

Knoppers

knoppers.fr

63

Knoppers.fr is the official French website for the Knoppers brand, a confectionery product line specializing in wafers and bars. The site is part of the Storck group, a well-established confectionery company. The website provides product information, promotional content, and customer contact options primarily through a contact form. The site targets general consumers interested in light, crispy snack products. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Piwik analytics for user tracking. The site is mobile-optimized and presents a professional, consistent brand image. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data is unavailable, likely due to privacy protection, but the domain appears legitimate and consistent with the brand's online presence. Overall, the site demonstrates moderate digital maturity and good compliance with privacy regulations.

K

Knoppers

knoppers.de

72

Knoppers is a well-established German confectionery brand specializing in breakfast snack products such as Knoppers Schnitte, Riegel, and Goodies. The website serves as a product showcase and brand marketing platform, targeting general consumers interested in confectionery products. It is part of the larger Storck group, which is reflected in the branding and partner links. The website is built on TYPO3 CMS and incorporates modern web technologies including PWA features and JavaScript libraries for enhanced user experience. The site is mobile-optimized and uses structured data for SEO and social media integration. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not published. Overall, the site demonstrates a professional and trustworthy online presence consistent with a large retail brand.

S

Storck

mamba.pl

63

Mamba.pl is a professionally maintained website representing the Mamba brand of fruit-flavored dissolvable gums, owned by the well-known confectionery company Storck. The site targets a general audience including children and adults who enjoy sweet treats, offering product information, promotions, and limited edition releases. The website is built on TYPO3 CMS and uses modern JavaScript libraries, indicating a mature and stable technical infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner adhering to GDPR standards. However, the absence of WHOIS data for the domain reduces trust slightly, though the association with Storck mitigates this concern. Overall, the website is trustworthy, professional, and well-positioned in the retail confectionery market.

S

Storck

mamba.at

65

The website www.mamba.de is a professionally designed brand site for Mamba, a fruit-flavored chewy candy product under the Storck company umbrella. It targets a general German-speaking audience with product information, brand marketing, and consumer engagement content. The site uses TYPO3 CMS and modern JavaScript libraries, including RequireJS, Lodash, and jQuery, with Piwik PRO for analytics. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-aligned policies and consent banners. Business credibility is high due to consistent branding and linkage to the parent company Storck. Overall, the site is trustworthy and safe for general audiences.

A

ARTE Radio

arteradio.com

42

ARTE Radio is a well-established French podcast platform affiliated with the ARTE media group, offering a rich catalog of cultural and documentary audio content. The website demonstrates a high level of content quality, professional design, and user experience, targeting a broad audience interested in podcasts related to culture, society, and music. Technically, the site uses modern frameworks such as Next.js and React, ensuring good mobile optimization and accessibility. However, the security posture is moderate due to the absence of visible security headers and privacy policies. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the strong brand association with ARTE. Overall, the site is trustworthy and professional but would benefit from improved transparency in privacy and security practices.

H

Helexia

helexia.com.br

55

Helexia is a Brazilian company specializing in energy solutions with a focus on sustainable and renewable energy projects. The website is professionally designed using WordPress with Elementor and optimized with Yoast SEO, targeting business clients in the energy sector. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a credible business presence but would benefit from enhanced security and compliance documentation.

H

Helexia España

helexia.es

55

Helexia España is a medium-sized company specializing in energy solutions focused on solar energy, energy efficiency, and electric mobility for businesses in Spain. The company operates as part of the Helexia Group and offers financing, installation, and management of solar self-consumption projects to help companies reduce their carbon footprint and energy costs. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions. Technically, the site runs on WordPress with modern plugins and analytics integrations, ensuring a moderate performance and good SEO. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. WHOIS data is unavailable due to query restrictions, limiting domain trust verification. Overall, the site presents a trustworthy and professional business presence with room for improvement in privacy and security transparency.

H

Helexia Portugal

helexia.pt

57

Helexia Portugal is a medium-sized company specializing in designing, implementing, managing, and investing in integrated green energy solutions aimed at decarbonizing industries and promoting sustainability. The company holds a strong market position with notable clients across various sectors such as food and beverage, ceramics, industry, retail, and tourism. Their services include energy self-consumption, energy efficiency, electric mobility, energy management, and audits and certifications. The website reflects a professional and consistent brand image with comprehensive content and clear navigation tailored to business clients seeking sustainable energy solutions. Technically, the website is built on WordPress with Bootstrap 5 and integrates modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight Tag. It employs consent management for cookies and demonstrates good SEO and accessibility practices. The site is mobile-optimized and performs moderately well. From a security perspective, the website uses HTTPS with a good SSL configuration and employs cookie consent mechanisms. While explicit security headers are not fully detailed, no vulnerabilities or exposed sensitive data were detected. The absence of a security.txt file and incident response contacts suggests room for improvement in vulnerability disclosure and incident management. Overall, the website is trustworthy, professional, and compliant with GDPR, with a strong focus on sustainability and energy transition. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving incident response transparency to further strengthen security posture and trust.

H

Helexia Italy

helexia.it

65

Helexia Italy is a medium-sized company specializing in renewable energy solutions, particularly photovoltaic systems, energy efficiency, and energy asset management. As a subsidiary of Helexia SA, it leverages over 13 years of international experience to provide end-to-end services including financing, construction, and management of energy projects. The company targets businesses and organizations aiming for sustainable energy transition. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, it is built on WordPress with modern plugins and marketing integrations such as HubSpot and Google Analytics, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and demonstrates strong business credibility through testimonials and partnerships.

H

Helexia

helexia.be

65

Helexia is a Belgian company specializing in guiding businesses through their energy transition towards sustainable solutions. The company offers a comprehensive portfolio of services including energy savings, energy production, consultancy, monitoring, and maintenance. Their website reflects a mature digital presence built on WordPress with Elementor and Yoast SEO, indicating a focus on usability and search engine optimization. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though there is room for improvement in security headers and explicit security policies. The WHOIS data is restricted due to registry policies, but the domain and website content align well, suggesting legitimacy. Overall, Helexia presents a professional and trustworthy online presence suitable for its target audience of businesses seeking sustainable energy solutions.