Security Directory

W

WSW Wuppertaler Stadtwerke GmbH

wsw-online.de

55

WSW Wuppertaler Stadtwerke GmbH is a regional utility company based in Germany, providing reliable energy supply and innovative mobility solutions primarily to private customers, businesses, and young people. The company holds a strong market position in the Wuppertal region, offering electricity, gas, district heating, public transport services, and e-mobility solutions. Their digital presence is built on the TYPO3 CMS platform, integrating modern technologies such as Google Tag Manager, Usercentrics for consent management, and Mouseflow for analytics, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and compliant with GDPR, supporting a high level of trust and user experience.

I

InPost sp. z o.o.

inpost.pl

71

InPost sp. z o.o. operates a comprehensive parcel delivery and logistics platform primarily serving individual customers and businesses in Poland. The company is a market leader in parcel lockers (Paczkomat®) and courier services, offering a wide range of shipping options including international shipments and fulfillment services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses Drupal CMS, integrates Google Tag Manager and Didomi for consent management, and employs modern JavaScript frameworks. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data confirms domain legitimacy and long-term operation since 2006. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

C

Ceneo - porównaj ceny i opinie - RTV, AGD, smartfony, laptopy

ceneo.pl

67

Ceneo.pl is a leading Polish price comparison and product review platform specializing in consumer electronics, home appliances, and various retail categories. The website offers users the ability to find products, compare prices across multiple online shops, and read reviews to make informed purchasing decisions. It targets Polish consumers and operates as a large-scale e-commerce service provider in Poland. Technically, the site employs modern JavaScript frameworks such as RequireJS and Preact, integrates with Google Analytics and Microsoft Application Insights for tracking and performance monitoring, and uses Google Tag Manager for marketing and analytics management. The site is well-structured with good SEO practices and mobile optimization. Security-wise, the site enforces HTTPS and uses anti-forgery tokens and CAPTCHA v3 for form protection, though explicit security headers are not evident in the HTML content. Privacy and cookie policies are not clearly found in the provided content, indicating room for improvement in compliance transparency. WHOIS data for the domain is not publicly available, which is typical for commercial Polish domains but limits direct verification of registrant details. Overall, Ceneo.pl presents a professional, trustworthy, and technically mature e-commerce platform with moderate privacy compliance and good security posture.

G

Garden SPA s. r. o.

gardenspa.sk

60

Garden SPA s.r.o. operates a professional e-commerce website specializing in garden furniture, whirlpools, saunas, wooden flooring, and related accessories primarily targeting Slovak consumers and businesses. The company maintains a showroom in Bratislava and offers a broad product catalog with a focus on quality and design. The website is built on the PrestaShop platform, utilizing common web technologies such as jQuery and Google Tag Manager, and includes cookie consent mechanisms compliant with GDPR. Security posture is generally good with HTTPS enforced and no visible critical vulnerabilities, though some improvements are possible in updating libraries and adding security headers. Overall, the site presents a trustworthy and professional retail presence with clear contact information and partner affiliations.

E

What to do today - Eventland

eventland.eu

57

Eventland.eu is a European event discovery platform that provides users with up-to-date information on concerts, festivals, parties, sporting events, and other activities across multiple European cities. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. SEO optimization is evident through the use of the Yoast SEO plugin and comprehensive meta tags. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, though the absence of explicit privacy policies and terms of service indicates room for improvement in compliance and transparency. No blocking or WAF mechanisms were detected, allowing full content accessibility.

Č

Čtyři dny, z.s.

ctyridny.cz

46

Čtyři dny, z.s. operates a well-established international contemporary art festival in Prague, focusing on theater, dance, and exhibitions. The organization targets a broad audience interested in cultural and artistic events, maintaining a strong presence in the Czech cultural scene with over two decades of history. The website reflects a professional and consistent brand image, with comprehensive content and active event promotion. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced plugins for GDPR compliance and cryptographic security. The security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good digital maturity and compliance with privacy regulations. No critical vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the organization's profile, indicating high legitimacy.

Palác Akropolis is a well-established cultural venue and club based in Prague, Czech Republic, with a domain age dating back to 1999. The website serves as a platform to showcase a diverse range of cultural events including music concerts, theater performances, jazz sessions, and other artistic projects. It targets a broad audience interested in cultural and nightlife activities. The business model revolves around event hosting, ticket sales, and cultural programming, positioning itself as a key player in the local cultural scene. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and a cookie consent management tool, ensuring compliance with privacy regulations such as GDPR. The site is mobile optimized and offers a good user experience with clear navigation and professional design. While no major CMS is detected, the site appears to be custom-built or uses a proprietary system. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular categories. However, some security headers like X-Frame-Options and Content Security Policy are not explicitly present, which could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner. Overall, the website is trustworthy, professional, and compliant with relevant privacy laws. It effectively supports the business goals of Palác Akropolis by providing event information, ticketing options, and engaging content. Strategic recommendations include enhancing security headers, continuing to monitor third-party scripts, and possibly adding explicit contact emails and phone numbers for improved user trust and support.

The U.S. Securities and Exchange Commission (SEC) operates the website www.sec.gov as the official federal government portal for securities regulation, investor protection, and market oversight. The site provides comprehensive resources including filings search, rulemaking activities, enforcement news, and educational materials targeted at investors, businesses, and market participants. The SEC is a large, enterprise-level government agency with a long-standing history dating back to 1934, reflected in the authoritative and professional content presented on the site. Technically, the website is built on the Drupal CMS platform, leveraging the U.S. Web Design System (USWDS) for accessibility and responsive design. It integrates modern analytics and tracking tools such as Google Tag Manager and YouTube APIs, ensuring a rich user experience with fast performance and excellent mobile optimization. The site is hosted likely on government infrastructure or via Akamai CDN, ensuring reliability and security. From a security perspective, the site enforces HTTPS and demonstrates good security practices including secure forms and no visible vulnerabilities. While explicit security headers were not fully confirmed in the provided content, the overall posture is strong, consistent with a government entity. Privacy and cookie policies were not explicitly found in the provided HTML snippet, which slightly impacts privacy compliance scoring. Overall, the SEC website is a highly credible, trustworthy, and professionally maintained government resource. It effectively serves its mission to protect investors and maintain market integrity. Strategic recommendations include publishing explicit privacy and cookie policies prominently, ensuring all security headers are set, and maintaining vigilance on third-party scripts to uphold security standards.

Homerun is a Netherlands-based technology company specializing in applicant tracking and human resource management software designed for modern teams. Their SaaS platform offers a user-friendly and visually appealing ATS and HR toolset that streamlines hiring, leave tracking, employee data management, and team insights. The company targets growing teams and HR professionals seeking an efficient and personal approach to recruitment and team management. Homerun positions itself as a niche provider with a strong emphasis on user experience and brand culture, supported by positive customer testimonials and high ratings on independent review platforms.

D

Deník N

novydenik.com

62

Deník N is an independent Czech daily news media outlet established in 2015, offering subscription-based and advertising-supported news content primarily targeting the Czech-speaking general public. The website demonstrates a solid market position as a trusted independent news source with a consistent brand presence and good content quality. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Google Analytics, OneSignal for notifications, and Didomi for consent management, reflecting a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though explicit security headers and a published security policy are absent, indicating room for improvement. Overall, the site is trustworthy, privacy-conscious, and professionally maintained, with no signs of malicious activity or content safety concerns.

V

Visicod

visicod.com

60

Visicod is a French digital communication agency specializing in bespoke website creation, SEO and SEA services, and personalized client support. Established since 2008, it serves artisans, small and medium enterprises across France with a focus on clear, effective digital solutions. The website demonstrates a professional and modern digital presence with strong client testimonials and transparent service offerings. Technically, the site uses modern web technologies, includes cookie consent mechanisms, and integrates Google Analytics for performance tracking. Security posture is good with HTTPS and privacy compliance, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection or recent registration, but the website content and structure indicate a legitimate and trustworthy business. Overall, Visicod presents a credible and professional digital agency profile with room for minor technical security enhancements.

I

Instituto de Estudios Cajasol

institutocajasol.com

56

Instituto de Estudios Cajasol is a well-established business school based in Sevilla, Spain, offering professional master’s degrees, postgraduate courses, and corporate training primarily targeting professionals and students in Andalucía. The institution has a strong regional presence with a domain registered since 2006, reflecting its longevity and market position. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience and strong SEO performance. Technically, the site leverages WordPress with popular plugins and integrates multiple marketing and analytics tools, including Google Tag Manager and Outbrain, indicating a mature digital marketing strategy. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and consistent branding.

P

Pilsner Urquell

pilsner-urquell.cz

46

Pilsner Urquell is a historic and well-established beer brand originating from the Czech Republic, with a founding year of 1842. The website serves as a marketing and informational platform targeting adult consumers, enforcing strict age verification to comply with legal requirements for alcohol promotion. The brand maintains a consistent and professional online presence with clear branding and user engagement features such as cookie consent and analytics tracking. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel, ensuring effective marketing and user behavior analysis. The website is secured with HTTPS and includes mechanisms to protect underage users from accessing restricted content. However, the absence of WHOIS data and lack of explicit security and incident response policies represent gaps in transparency and security posture. Overall, the site is professionally designed and functional, but could improve in areas of security documentation and contact availability.

V

VERMONT Services Slovakia s. r. o.

vermont.cz

63

Vermont.cz is a professional e-commerce website representing a premium international fashion brand offering clothing and accessories for men, women, and children. The site features multiple well-known trademarks and brands, providing a comprehensive online shopping experience supported by physical stores in the Czech Republic. The business model focuses on retail sales with value-added services such as free shipping over a threshold and gift vouchers. Technically, the website employs modern JavaScript frameworks like Vue.js and Inertia.js, integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel, and maintains good SEO and mobile optimization standards. Security-wise, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data for the domain is a notable gap in trust assessment but does not detract from the professional presentation and operational maturity of the business. Overall, Vermont.cz presents a secure, user-friendly, and content-rich platform suitable for its retail audience.

S

Selectra

comparaiso.cl

62

Comparaiso.cl is a Chile-based online platform specializing in comparing telecommunications services including internet, mobile, fixed phone, and television plans. It operates under the parent company Selectra, providing consumers with comprehensive options to select the best plans suited to their needs. The website is well-positioned in the Chilean market, partnering with major telecom providers and offering additional services such as speed tests and streaming platform information. Technically, the site is built on Drupal 10, integrates Google Tag Manager for analytics, and uses Cloudflare DNS, reflecting a modern and maintainable infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is good, with clear privacy and cookie policies linked to the parent domain. Overall, the site presents a professional and trustworthy front to users, with clear contact channels and consistent branding.

S

Selectra India

selectra.in

67

Selectra India operates a comprehensive online platform focused on providing consumers in India with detailed comparisons of mobile, broadband, DTH, and OTT plans. The website is well-structured, leveraging Drupal 10 CMS and modern web technologies to deliver a user-friendly experience. It targets Indian telecom consumers seeking to make informed decisions about their telecom services. The platform positions itself as a trusted partner in telecom decision-making, offering consulting and plan recommendations. Technically, the site uses Google Fonts, Google Tag Manager, and Google Adsense for analytics and monetization, with a cookie consent mechanism in place to comply with privacy regulations. Security posture is solid with HTTPS enforced, though some security headers and explicit privacy policies are missing. No signs of WAF or content blocking were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site is professional, trustworthy, and provides valuable telecom information, but could improve privacy transparency and contact availability.

S

Selectra

selectra.es

72

Selectra is a well-established online platform specializing in helping consumers and businesses in Spain save money on utility bills such as electricity, gas, internet, mobile, alarms, insurance, and solar energy. The company positions itself as a trusted advisor with a large user base and multiple service offerings, supported by a professional and user-friendly website. The technical infrastructure is modern, leveraging Drupal CMS, Google Analytics, and other contemporary web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

S

Selectra Italia S.r.l.

selectra.net

69

Selectra Italia S.r.l. operates a comprehensive online platform focused on comparing and facilitating activation of home utilities and telecom services in Italy, including electricity, gas, internet, mobile, insurance, and pay-TV. The company targets residential and business customers seeking cost savings and convenience through expert consultation and online tools. The website is well-established, with a domain age since 2007 and significant user traffic and customer base. Technically, the site is built on Drupal 10, employs modern analytics and marketing tools, and is hosted with reputable providers, ensuring moderate to good performance and mobile optimization. Security posture is adequate with HTTPS and domain protection flags, but lacks visible security headers and DNSSEC. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site demonstrates high business credibility with strong trust signals but could improve transparency and security practices.

S

Selectra

selectra.ie

59

Selectra Ireland is a well-established utility and broadband comparison service operating since 2019 in Ireland, part of a larger international group founded in 2016. The company provides consumers with personalized advice and tools to compare and switch energy, broadband, waste, alarm, and insurance providers, aiming to save money on household bills. Their business model relies on affiliate commissions from partner providers, while offering a free service to customers. The website demonstrates a strong market position with a consistent brand and positive customer trust signals such as high Trustpilot and Google reviews. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and Google Analytics for tracking. It is hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. The site includes GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature digital infrastructure. However, some security best practices like DNSSEC and HTTP security headers could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. No critical vulnerabilities or malware indicators were found. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. Overall, the security posture is solid but could benefit from enhanced DNS security and published security policies. The overall risk assessment is low, with no blocking or WAF challenges detected. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing incident response contacts to further strengthen trust and compliance.

C

CallMePower

callmepower.be

56

CallMePower is a Belgian energy-focused service platform established in 2014, offering consumers multilingual support to save on their energy bills. The website is built on Drupal 10 and hosted by OVH, employing modern web technologies and tracking tools such as Google Tag Manager and Pagesense. The site demonstrates good design quality, mobile optimization, and accessibility, providing a positive user experience. However, it lacks explicit privacy policies, terms of service, and contact information, which are critical for trust and compliance. Security posture is adequate with HTTPS and cookie consent mechanisms but could be improved by adding security headers and incident response details. Overall, the site is safe, professional, and moderately trustworthy but would benefit from enhanced transparency and security practices.

C

Clint Agency

clintagency.com

60

Clint Agency is a French digital design agency specializing in product, service, brand, and website design. Founded in 2012, it serves businesses seeking innovative and meaningful digital solutions. The website is professionally designed, mobile-optimized, and rich in content showcasing their services and client projects. Technically, the site uses modern technologies including Webflow CMS, Google Tag Manager, and Axeptio for cookie consent, hosted with OVH and Cloudflare DNS. Security posture is strong with HTTPS and domain locks, though DNSSEC is not enabled. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market niche.

A

Agefiph

agefiph.fr

61

Agefiph is a French non-profit association dedicated to supporting employment development for persons with disabilities. The organization provides financial aids, services, and training to individuals, employers, and training actors. The website is professionally designed using Drupal 10, with modern analytics and marketing tools integrated, including Matomo, Google Analytics, Hotjar, and AB Tasty. It features comprehensive cookie consent management and clear navigation tailored to multiple user profiles. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by official social media presence and related partner domains. Overall, the site is a trustworthy and authoritative resource in its sector.

M

Museum Kampa

museumkampa.cz

44

Museum Kampa is a well-established modern art museum located in Prague, Czech Republic, focusing on Central European modern art and preserving the collection of Jan and Meda Mládková. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and frameworks, showing moderate performance and good mobile optimization. Security posture is strong with HTTPS enabled and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie consent mechanism. Overall, the site is trustworthy and serves its audience effectively.

Tesco Stores SR, a.s. operates a comprehensive retail supermarket website serving Slovakia, offering online grocery shopping, loyalty programs (Clubcard), and various promotional offers. The website is professionally designed with a strong brand presence and clear navigation, targeting general consumers in Slovakia. The business model focuses on retail sales both in physical stores and online, supported by a loyalty program to enhance customer retention. The site is part of the larger Tesco PLC group, a major player in the retail sector. Technically, the website uses modern frameworks such as React and Next.js, integrates analytics and performance monitoring tools like Google Analytics and New Relic, and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital infrastructure suitable for an enterprise retail business.

Deník N operates as a reputable Czech news media outlet providing fast and reliable news updates across various categories including politics, economy, culture, and sports. The website demonstrates a solid market position within the Czech Republic's media landscape, targeting a general audience interested in current affairs. Technically, the site leverages modern web technologies such as React and integrates privacy and advertising SDKs to manage user consent and deliver personalized content. The presence of HTTPS and security headers indicates a good security posture, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service reduces overall compliance confidence. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy transparency and security documentation.

C

Camalot

camalot.be

52

Camalot is a specialized high-end digital cinema rental company based in Vilvoorde, Belgium, with an additional presence in Amsterdam, Netherlands. The company focuses on providing premium digital cinema equipment and related services to film production professionals. Their market position is that of a niche provider catering to a professional audience requiring advanced camera and cinema technology. The website reflects a professional business model centered on equipment rental and support services, targeting media production companies and professionals in the region. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Google Fonts, built on the P5 Webtemplate framework. Hosting is provided by team.blue nl B.V., a reputable registrar and hosting provider. The site is mobile optimized with good SEO practices and structured data markup, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements a Content Security Policy header. Google Analytics is configured with IP anonymization, enhancing privacy. However, the site lacks a visible cookie consent mechanism and does not publish explicit security or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, Camalot's website is trustworthy and professional, with a solid security posture and good business credibility. Strategic recommendations include implementing explicit cookie consent, publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to ensure ongoing security and compliance.

Svět kulturistiky is a Czech media website operated by Watch Star Media s.r.o., focusing on bodybuilding, fitness, nutrition, and health content. The site offers articles, training advice, and nutrition tips targeting fitness enthusiasts and bodybuilders primarily in the Czech Republic. The business operates as a niche media outlet with a small company size and a long-established domain since 1998. Technically, the website is built on WordPress with modern libraries such as jQuery and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and presents content professionally with good navigation and SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

C

Curated Capital & Planning LLC

curatedcp.com

58

Curated Capital & Planning LLC is a specialized financial advisory firm focusing on remarried baby boomers with blended families. The company offers fee-only, fiduciary financial planning and investment management services, operating virtually across the United States. The website is professionally designed, with clear branding and trust indicators such as CFP certification and industry memberships. Technically, the site uses modern web technologies including Bootstrap, jQuery, and MailerLite for marketing and forms, hosted on Zephyr CMS. The site is mobile optimized and performs moderately well. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site is safe, professional, and trustworthy for its target audience. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing terms of service and incident response policies, and verifying domain registration details to improve legitimacy and trust.

A

Artisan Financial Planning

artisanfinancialplanning.com

60

Artisan Financial Planning is a specialized financial advisory firm offering flat-fee financial planning and investment management services tailored specifically for musicians, performing artists, and creatives. The company positions itself as an affordable, transparent, and client-aligned alternative to traditional asset-based fee advisors, emphasizing simplicity and empathy in its service delivery. The website content is professionally crafted, targeting a niche market segment with clear messaging and trust signals such as professional certifications and media features. Technically, the website is built on a modern stack including jQuery, Bootstrap, Font Awesome, and Zephyr CMS. It integrates marketing and analytics tools such as Google Tag Manager, MailerLite, and Plausible Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which could impact privacy compliance. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, though the professional presentation and certifications mitigate some concerns. Overall, the website presents a low-risk profile with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response policies, and clarifying domain registration details to enhance trust and compliance.

O

Objective Wealth

objectivewealthfp.com

63

Objective Wealth is a small financial advisory firm specializing in tax-conscious comprehensive financial planning and investment management. The website presents a professional image with clear descriptions of services including financial and retirement planning, investment management, tax planning and preparation, and small business retirement plans. The firm targets individuals and small businesses seeking personalized financial guidance. The website is built on a modern technical stack including jQuery, Bootstrap, FontAwesome, and uses Zephyr CMS. Tracking technologies such as Google Tag Manager and Facebook Pixel are implemented for analytics and marketing purposes. Security posture is moderate with HTTPS usage implied, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trust. No forms or direct contact information were found in the provided content, limiting user engagement options. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and verified domain registration information.

V

Virage Média

liner-communication.fr

47

Virage Média is a French digital marketing agency specializing in web creation, SEO, and SEA campaigns, targeting businesses seeking to enhance their online presence. The company offers tailored digital solutions including website development, search engine optimization, and targeted advertising campaigns to support business growth. The website demonstrates a mature digital infrastructure leveraging WordPress with Elementor, integrated with multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and HubSpot. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website and domain registration data indicate a legitimate, professional small agency with a strong regional presence in France.

France.fr is the official tourism website for France, providing comprehensive information about French destinations, culture, and travel experiences. It targets international tourists and travelers interested in exploring France's wonders. The site is well-branded, multilingual, and professionally designed, reflecting its role as a government-backed informational portal. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and engaging user experience. It integrates Google Tag Manager for analytics and Axeptio for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. The absence of WHOIS data is notable but may be due to registry policies for .fr domains. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

A

Atout France

atout-france.fr

57

Atout France is the official French government agency dedicated to developing and promoting tourism both domestically and internationally. The website presents a comprehensive range of services including market analysis, sustainable tourism initiatives, innovation support, professional training, and event organization. It targets tourism professionals and stakeholders aiming to enhance France's tourism sector. Technically, the site is built on Drupal CMS, employs modern web technologies, and integrates privacy and analytics tools such as Google Tag Manager and Axeptio for cookie consent. The design is professional, mobile-optimized, and accessible, reflecting the French government's digital standards. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to AFNIC policies, but the official branding and content strongly indicate legitimacy. Overall, the site is a trustworthy, well-maintained government resource for tourism stakeholders.

M

MerchantPro

merchantpro.com

66

MerchantPro is a SaaS eCommerce platform provider offering a comprehensive suite of tools for merchants to create, manage, and grow online shops and marketplaces. With over 15 years of experience and more than 5000 merchants worldwide, the company positions itself as a stable and scalable solution for businesses of all sizes. The website reflects a professional and modern digital presence, emphasizing performance, security, and customer support. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and LinkedIn Insight for analytics and marketing, with responsive design and good SEO practices. Security posture is solid with HTTPS and secure cookie settings, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, but no direct company contact emails or phone numbers are provided, relying instead on contact forms and social media channels.

UnfoldWP is a small technology business specializing in the development and sale of premium multipurpose WordPress themes. Founded in 2022 and based in Nepal, the company targets WordPress users, bloggers, and developers seeking high-quality, customizable themes. Their business model revolves around theme sales, starter templates, and bundled plans, positioning themselves as a niche provider with a focus on design quality and user experience. The website reflects a professional and consistent brand image with strong trust indicators such as user testimonials and a money-back guarantee. Technically, the website is built on WordPress 6.8.3, utilizing modern technologies including jQuery, Google Tag Manager, LiteSpeed Cache for lazy loading, and SEO plugins like All in One SEO. The site demonstrates excellent performance, mobile optimization, and SEO practices, contributing to a fast and accessible user experience. Hosting details are not explicitly identified, but the presence of LiteSpeed assets suggests a performant hosting environment. From a security perspective, the site enforces HTTPS with excellent SSL configuration and follows best practices by avoiding exposed sensitive data and vulnerable libraries. However, it lacks visible security headers and does not publish formal security or incident response policies. No cookie consent mechanism is present, which is a compliance gap for GDPR. The WHOIS data is consistent with the website's claims, showing transparent registration without privacy protection, reinforcing legitimacy. Overall, UnfoldWP presents a low-risk profile with a strong business and technical foundation. Strategic improvements include implementing cookie consent, publishing security policies, and enhancing security headers to elevate compliance and security posture. These steps will further strengthen trust and regulatory adherence.

M

Musée La Piscine de Roubaix

roubaix-lapiscine.com

55

Musée La Piscine de Roubaix is a cultural institution and museum located in France, dedicated to art and industry. It serves a broad audience including tourists, art enthusiasts, and local visitors, offering exhibitions, educational activities, and virtual tours. The museum is supported by the City of Roubaix and various partners, positioning it as an important regional cultural entity. The website reflects this with professional design, consistent branding, and clear navigation. Technically, the site is built on WordPress with common plugins and libraries, providing moderate performance and basic mobile optimization. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policies are published. The WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and partner affiliations strongly indicate legitimacy. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in security transparency and accessibility.

Z

Zenith Lille

zenithdelille.com

56

Zénith de Lille is a regional entertainment venue in Lille, France, offering a diverse program of concerts, shows, and corporate events for the 2024/2025 season. The website is built on WordPress and integrates modern technologies such as jQuery, Slick Carousel, and analytics tools like Piwik PRO and Google Tag Manager. The site presents a professional design with good navigation and mobile optimization, targeting general public and event organizers. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and external partnerships suggest a legitimate business. Strategic recommendations include improving security headers, adding cookie consent, publishing clear privacy and terms pages, and verifying domain registration details.

T

TPF Consultores

tpf.pt

51

TPF Consultores is a well-established Portuguese consulting company specializing in project design and supervision, primarily in the energy and transportation sectors. With over 45 years of experience and a significant workforce, the company positions itself as a leader in infrastructure consulting and project management. Their website reflects a professional and consistent brand image, targeting business and public sector clients internationally. Technically, the website employs modern web technologies and tracking tools, including Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and some recommended security headers, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

T

TPF Engenharia

tpfengenharia.com.br

42

TPF Engenharia is a well-established multinational engineering consultancy company with over 55 years of experience, primarily operating in Brazil. The company offers a broad range of services including project development, consulting, management, supervision, and innovation solutions, serving sectors such as transportation, energy, and real estate. Their market position is strong, supported by recognized certifications like ISO 9001, 14001, 45001, and Great Place To Work. The website reflects a professional and trustworthy brand with comprehensive content and clear contact information. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations. It employs Google Tag Manager for analytics and has a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, though performance is moderate. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some HTTP security headers and a formal security policy or incident response contact. Overall, the security posture is solid with room for improvement in security headers and vulnerability disclosure. The domain WHOIS data aligns well with the business claims, indicating legitimacy and consistency. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include enhancing HTTP security headers, publishing a security policy and incident response contacts, and implementing a security.txt file to facilitate vulnerability reporting. These steps will strengthen trust and compliance while maintaining the company's strong market presence.

iREPORT s.r.o. operates a Czech-language online music and style magazine providing news, concert photo reports, reviews, interviews, video and audio content, exclusive CD/DVD supplements, and contests. The website targets music enthusiasts primarily in the Czech Republic and offers a rich multimedia experience with frequent content updates and an active event calendar. The business model is focused on media publishing with advertising revenue streams and audience engagement through contests and social media. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, and various tracking and advertising scripts such as Google Analytics, Hotjar, and Rubicon Project. The site is mobile optimized and uses HTTPS with a good SSL configuration. Consent management is implemented via Didomi and CPEX CMP, supporting GDPR compliance. However, the site lacks some advanced security headers and explicit contact or security policy information. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but could improve by adding more comprehensive security headers and publishing incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional appearance and operation of the website. Overall, the website is well-designed, content-rich, and compliant with privacy regulations, but the missing domain registration data and limited security policy transparency present moderate risks. Strategic improvements in security posture and transparency would enhance trust and compliance.

C

Cargo

cargocollective.com

61

Cargo is a technology company operating a site builder platform tailored for designers and artists. The platform focuses on enabling creatives to showcase their work and connect with potential clients and peers. The business operates in a niche market segment with a clear target audience and offers key services including site building tools, templates, and a community network. The website is professionally designed with good content relevance and user experience, although it lacks explicit privacy and cookie policies. Technically, the site uses modern JavaScript frameworks, including React, and is hosted on Amazon AWS infrastructure. Analytics and advertising tools such as Google Tag Manager and Reddit Ads Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Overall, the site is legitimate and functional but could improve compliance and security transparency.

Z

Zlatá Firma

zlatafirma.eu

58

Zlatá Firma is a Slovak business award platform recognizing top-rated companies based on customer reviews aggregated from reliable sources such as Google Maps and Facebook. The platform promotes these companies by listing them and allowing them to use the Zlatá Firma logo and marketing packages. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its target audience of Slovak businesses and customers. Technically, the site uses modern JavaScript and Google Tag Manager for analytics and marketing, with HTTPS enforced ensuring secure communications. However, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced privacy compliance. The WHOIS data is privacy protected by EURid, which is typical for EU domains, and no suspicious patterns were detected, supporting the legitimacy of the domain. Overall, the site presents a moderate to good security posture with room for improvement in privacy and security best practices.

R

Rieker Holding AG

rieker.com

67

Rieker Holding AG is a well-established European footwear manufacturer with a history spanning approximately 150 years. The company operates globally under the brands Rieker and remonte, offering fashionable shoes that emphasize comfort and functionality. Their business model includes manufacturing, retail through online shops, and a dedicated B2B portal for dealers. The website reflects a mature digital presence with multilingual support and clear navigation, targeting consumers seeking quality leisure footwear. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Google reCAPTCHA for bot protection. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned policies. The extensive use of third-party analytics and advertising pixels indicates a comprehensive marketing strategy with good transparency. Overall, the website presents a professional, trustworthy, and secure digital front for Rieker Holding AG. The lack of WHOIS data for the subdomain limits domain registration verification but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and compliance.

Loire Atlantique Développement operates as a regional economic development organization focused on facilitating business growth and real estate development within the Loire-Atlantique region of France. The website serves as a portal for entrepreneurs and businesses seeking commercial properties, business parks, and economic news relevant to the region. The organization positions itself as a key regional player supporting local economic infrastructure and business expansion. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization, Contact Form 7 for user inquiries, and Cookie Notice for GDPR-related compliance. The site integrates mapping technologies via Leaflet.js and Mapbox, and uses Google Analytics and Google Tag Manager for visitor tracking. The technical implementation is solid but could benefit from enhanced security headers and improved mobile optimization. From a security perspective, the site employs HTTPS and a cookie consent mechanism, indicating baseline security and privacy awareness. However, the absence of advanced security headers and incident response information suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It provides clear contact information and complies with basic privacy and cookie regulations. Strategic enhancements in security and privacy policies would further strengthen its risk profile and user trust.

P

Pustit k vodě

pustitkvode.cz

9

Pustit k vodě is a regional tourism website focused on promoting water-related activities and attractions in Central Bohemia, Czech Republic. The site offers comprehensive information on recreational boating, water sports, tourist destinations, cultural events, accommodation, and dining options. It targets tourists and recreational visitors interested in exploring the region from the water perspective. The website is well-branded and supported by partnerships with regional authorities and tourism organizations, enhancing its credibility and market position. Technically, the website is built on WordPress with modern web technologies including Yoast SEO for optimization, Google Tag Manager for analytics, and Lottie animations for enhanced user experience. The site is mobile-optimized and features good navigation and content structure. Security is adequately addressed with HTTPS, security headers, and cookie consent mechanisms, although no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a notable concern, limiting the ability to verify domain legitimacy and ownership details. Despite this, the website's content quality, partnerships, and compliance with GDPR through privacy and cookie policies suggest a legitimate and professional operation. Overall, the site presents a moderate risk profile with recommendations to improve transparency around security policies and contact information.

P

Performing Arts Forum

performingartsforum.ie

38

Performing Arts Forum is a well-established non-profit organization dedicated to strengthening and advocating for the performing arts community in Ireland. With a history dating back to the late 1990s, it serves over 300 members including theatre, dance, opera production companies, venues, festivals, and individual artists. The organization offers a comprehensive range of services including advocacy, resource provision, job and opportunity listings, networking events, and a Green Arts initiative focused on sustainability. The website reflects a professional and consistent brand image, targeting performing arts professionals and organizations in Ireland.

F

Független előadó‑művészeti szövetség

fesz.org

50

The Független Előadó-művészeti Szövetség (FESZ) is a Hungarian non-profit organization dedicated to supporting independent performing arts creators and groups. The website serves as a professional platform to communicate their mission, activities, membership, and projects. The site is built on Drupal 11 and integrates modern analytics and tracking tools such as Google Tag Manager and Barion Pixel. While the website is well-structured and content-rich, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. The security posture is adequate with HTTPS enforced, but could be improved by adding security headers and publishing security policies. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection.

B

Berger-Levrault

berger-levrault.fr

71

Berger-Levrault is a reputable international software publisher headquartered in France, specializing in software solutions for public administrations, healthcare, education, and industry sectors. The company positions itself as a trusted provider with a focus on reliability and compliance. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager, complemented by a robust consent management system via Didomi, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, secure, and trustworthy, supporting the company's market position effectively.

C

Conseil National des Villes et Villages Fleuris (CNVVF)

villes-et-villages-fleuris.com

52

The website represents the Conseil National des Villes et Villages Fleuris (CNVVF), a well-established French national label promoting sustainable urban development and quality of life in municipalities. It supports nearly 4,700 communes with certification and expert guidance, emphasizing environmental preservation and citizen well-being. The site is professionally designed, mobile-optimized, and uses a modern technology stack including Bootstrap, jQuery, and various UI libraries. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and published policies. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. Overall, the domain is legitimate and stable, hosted by OVH with consistent WHOIS data.

O

Office de tourisme d'Auxerre et de l'Auxerrois

ot-auxerre.fr

59

The website www.ot-auxerre.fr represents the official tourism office for Auxerre and the Auxerrois region in Bourgogne, France. It provides comprehensive tourism information including guided tours, accommodation, dining, leisure activities, and event agendas. The site targets tourists and visitors interested in cultural, historical, and natural attractions in the region. The business model focuses on promoting regional tourism and supporting local hospitality services. The website is professionally designed with multi-language support and rich multimedia content, reflecting a mature digital presence for a regional tourism office. Technically, the site is built on WordPress using the Woody theme and incorporates modern JavaScript libraries such as jQuery, Swiper.js, Flatpickr, and Leaflet for maps. It integrates Google Tag Manager for analytics and employs a cookie consent framework, indicating awareness of privacy regulations. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. No WHOIS registrant data was found, which reduces trustworthiness from a domain registration perspective. However, the professional content and consistent branding suggest legitimacy. There are no signs of malware or phishing. Overall, the website is a well-constructed regional tourism portal with strong content and technical implementation but would benefit from enhanced privacy disclosures, security headers, and transparent domain registration information to improve trust and compliance.