Security Directory

W

Web & SEO

webandseo.fr

45

Web & SEO is a French web business and affiliate marketing platform focused on helping individuals and professionals launch and grow online businesses, particularly niche sites and affiliate marketing ventures. The website offers a range of services including coaching, SEO audits, netlinking, and online courses. It positions itself as a niche authority in the French-speaking digital marketing space. Technically, the site is built on WordPress with modern optimizations and uses structured data for SEO enhancement. The security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, serving a small but focused market segment.

L

LadyGeekGeek Web Design

ladygeekgeek.com

34

LadyGeekGeek Web Design is a small freelance web design business based in Holywood and Belfast, Northern Ireland, specializing in bespoke, accessible, and responsive WordPress websites. The company has a strong market position serving local and international clients, including notable organizations such as Queen's University Belfast and Belfast Film Festival. The website showcases a professional portfolio and detailed service offerings, emphasizing user experience and content strategy. Technically, the site is built on WordPress, hosted by BigWetFish, and optimized for performance, mobile responsiveness, and accessibility. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

Arts Council IE

artscouncil.ie

74

The Arts Council / An Chomhairle Ealaíon is the national government agency responsible for funding, developing, and promoting the arts in Ireland. It operates as a medium-sized government entity with a strong market position as the primary arts funding body in the country. The website clearly targets artists, arts organizations, and the general public interested in arts and culture, offering funding schemes, flagship programs, and resources to support the arts sector. The content is professionally curated, well-structured, and accessible, reflecting the organization's commitment to transparency and engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Gravity Forms, ensuring good SEO, accessibility, and user interaction capabilities. Hosting is provided by HEAnet, a reputable Irish academic network provider, which aligns with the organization's national scope. The site demonstrates good mobile optimization and moderate performance, with room for improvement in security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs security plugins to mitigate common threats. However, it lacks some advanced HTTP security headers and does not publicly disclose incident response or vulnerability disclosure policies. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy, professional, and secure digital presence for the Arts Council, supporting its mission effectively while maintaining good compliance and technical standards.

UnfoldWP is a small technology business specializing in the development and sale of premium multipurpose WordPress themes. Founded in 2022 and based in Nepal, the company targets WordPress users, bloggers, and developers seeking high-quality, customizable themes. Their business model revolves around theme sales, starter templates, and bundled plans, positioning themselves as a niche provider with a focus on design quality and user experience. The website reflects a professional and consistent brand image with strong trust indicators such as user testimonials and a money-back guarantee. Technically, the website is built on WordPress 6.8.3, utilizing modern technologies including jQuery, Google Tag Manager, LiteSpeed Cache for lazy loading, and SEO plugins like All in One SEO. The site demonstrates excellent performance, mobile optimization, and SEO practices, contributing to a fast and accessible user experience. Hosting details are not explicitly identified, but the presence of LiteSpeed assets suggests a performant hosting environment. From a security perspective, the site enforces HTTPS with excellent SSL configuration and follows best practices by avoiding exposed sensitive data and vulnerable libraries. However, it lacks visible security headers and does not publish formal security or incident response policies. No cookie consent mechanism is present, which is a compliance gap for GDPR. The WHOIS data is consistent with the website's claims, showing transparent registration without privacy protection, reinforcing legitimacy. Overall, UnfoldWP presents a low-risk profile with a strong business and technical foundation. Strategic improvements include implementing cookie consent, publishing security policies, and enhancing security headers to elevate compliance and security posture. These steps will further strengthen trust and regulatory adherence.

L

La Cave aux Poètes

caveauxpoetes.com

57

La Cave aux Poètes is a well-established cultural concert venue located in Roubaix, France, with a history spanning approximately 30 years. The website serves as a digital presence to promote concerts and cultural events, targeting a general audience interested in music and local cultural activities. The business model revolves around event hosting and community engagement, positioning itself as a key player in the local hospitality and entertainment sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, and several plugins for SEO, GDPR compliance, and interactive content. The site demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security posture is moderate with HTTPS enabled and domain status protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

L

L'aéronef

aeronef.fr

59

L'aéronef is a non-profit cultural association based in Lille, France, specializing in organizing concerts and music-related cultural projects. Established in 2016, it holds a reputable position in the regional cultural scene, supported by partnerships with governmental and cultural institutions. The website serves as a platform for event promotion and ticketing, targeting a general audience interested in music and culture. Technically, the site is built on Drupal 11, employs Matomo for analytics, and uses modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and token-based ticketing, though explicit security policies and cookie consent mechanisms are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and privacy mechanisms are recommended.

M

Musée La Piscine de Roubaix

roubaix-lapiscine.com

55

Musée La Piscine de Roubaix is a cultural institution and museum located in France, dedicated to art and industry. It serves a broad audience including tourists, art enthusiasts, and local visitors, offering exhibitions, educational activities, and virtual tours. The museum is supported by the City of Roubaix and various partners, positioning it as an important regional cultural entity. The website reflects this with professional design, consistent branding, and clear navigation. Technically, the site is built on WordPress with common plugins and libraries, providing moderate performance and basic mobile optimization. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policies are published. The WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and partner affiliations strongly indicate legitimacy. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in security transparency and accessibility.

Z

Zenith Lille

zenithdelille.com

56

Zénith de Lille is a regional entertainment venue in Lille, France, offering a diverse program of concerts, shows, and corporate events for the 2024/2025 season. The website is built on WordPress and integrates modern technologies such as jQuery, Slick Carousel, and analytics tools like Piwik PRO and Google Tag Manager. The site presents a professional design with good navigation and mobile optimization, targeting general public and event organizers. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and external partnerships suggest a legitimate business. Strategic recommendations include improving security headers, adding cookie consent, publishing clear privacy and terms pages, and verifying domain registration details.

T

Tourcoing Jazz Festival

tourcoing-jazz-festival.com

57

Tourcoing Jazz Festival is a well-established cultural event organizer specializing in jazz and related music genres in the Hauts-de-France region of France. Founded in 1986, it has a strong regional presence and offers a variety of concerts, masterclasses, and cultural activities. The website is professionally designed using WordPress and integrates modern marketing and analytics tools such as Sendinblue and Google Analytics. The festival maintains active social media channels and provides clear contact information for ticketing and programming inquiries. Security posture is adequate with HTTPS enabled, though improvements are recommended in DNSSEC and security headers. Privacy and cookie policies are present, supporting GDPR compliance, but cookie consent mechanisms could be enhanced. Overall, the website reflects a credible and trustworthy organization with a solid digital presence.

S

Seniorêva

senioreva.com

43

Seniorêva is a French event organizer specializing in senior-focused events, notably the Seniorêva Salon scheduled for October 2025 in Lille. The website presents a professional and consistent brand image, targeting seniors with a clear event program and partner ecosystem. The business operates primarily in event organization and communication within the regional market of Lille, France. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and Helix Ultimate, hosted by OVH sas, a reputable provider. The site is mobile-optimized and includes essential privacy and cookie compliance features, reflecting moderate digital maturity. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and DNSSEC, which are recommended for enhancement. Overall, the site is trustworthy, with clear contact channels and social media presence, but could improve in security and compliance transparency.

The website transpole.fr currently returns a 502 Bad Gateway error served by Microsoft Azure Application Gateway, indicating backend server or configuration issues that prevent content delivery. Due to this, no business content, metadata, or contact information is accessible for analysis. The domain is well-established, registered since 1997 with a reputable registrar and consistent WHOIS data, suggesting a legitimate transportation-related business likely operating in France. However, the lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. The hosting on Microsoft Azure indicates a modern cloud infrastructure, but the current outage represents a critical availability risk. Security posture cannot be evaluated due to missing headers and lack of HTTPS confirmation. Privacy and cookie policies are absent, and no contact or incident response information is available. Overall, the site is currently non-functional, resulting in a low AI score and incomplete analysis.

H

Hello Lille Site officiel de l'Agence d'attractivité de la MEL

hellolille.eu

59

Hello Lille is the official agency promoting the attractiveness of the Métropole Européenne de Lille, targeting businesses, event organizers, and students. The website serves as a comprehensive portal to discover opportunities for implantation, events, and education in Lille. The technical infrastructure is modern, leveraging WordPress with a custom Woody theme and multiple JavaScript libraries for interactive and responsive user experience. The site supports multiple languages, enhancing its international reach. Security posture is solid with HTTPS and consent management implemented, though improvements are needed in security headers and explicit privacy policies. Overall, the website is professional, trustworthy, and well-positioned to serve its audience effectively.

T

TPF

tpfingenieria.com

50

TPF is a large, international multidisciplinary engineering consultancy headquartered in Spain, with a presence in over 45 countries through multiple subsidiaries. The company offers a broad range of engineering services including consultancy, design, asset management, project supervision, and quality control, targeting businesses and public sector clients. Their market position is strong, supported by a diversified portfolio and global reach. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as jQuery and GSAP, and integrates privacy-conscious analytics via Plausible. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as DNSSEC and security headers are missing. Security posture is moderate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

T

TPF

tpf.ro

46

TPF is a well-established global multidisciplinary engineering consultancy headquartered in Belgium, active in over 40 countries with a strong portfolio in environment and water, transport and mobility, and building and cities sectors. The company offers a broad range of services including consultancy, design, technical asset management, and project management. It holds a reputable market position, evidenced by its ENR Top 50 ranking and BREEAM Excellent certifications. The website reflects a mature digital presence built on Drupal 10 with modern JavaScript libraries and a privacy-conscious analytics approach using Plausible. However, explicit privacy and cookie policies are missing, representing a compliance gap. Security posture is moderate with no visible security headers and no incident response or vulnerability disclosure information published. Contact information is clearly provided, enhancing business credibility.

T

TPF Consultores

tpf.pt

51

TPF Consultores is a well-established Portuguese consulting company specializing in project design and supervision, primarily in the energy and transportation sectors. With over 45 years of experience and a significant workforce, the company positions itself as a leader in infrastructure consulting and project management. Their website reflects a professional and consistent brand image, targeting business and public sector clients internationally. Technically, the website employs modern web technologies and tracking tools, including Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and some recommended security headers, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

T

TPF Pyramide Ingénierie

tpfpyramide.ma

40

TPF Pyramide Ingénierie is a Moroccan engineering company specializing in multi-disciplinary project management and technical consulting services, including structural engineering, fluids, electricity, project economics, and diagnostics. The company is ISO 9001 certified and operates as part of the larger TPF Group, positioning itself as a trusted local engineering firm. Their website reflects a professional image with clear service offerings and contact information, targeting construction and real estate sectors. Technically, the website employs a modern tech stack with Bootstrap and various JavaScript libraries to enhance user experience. Hosting is provided by Heberjahiz, and the domain registration is consistent and transparent. The site is mobile-optimized and offers good navigation, though SEO and accessibility could be improved. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. The domain uses HTTPS, but SSL configuration details are unknown. No forms or analytics scripts were detected, indicating minimal data collection and tracking. Incident response and vulnerability disclosure information are absent. Overall, the website is safe and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

T

TPF Engineering Private Limited

tpfepl.com

49

TPF Engineering Private Limited is an engineering company operating primarily in the energy sector, offering engineering services and project management solutions. The website presents a professional business presence targeting industrial and corporate clients. The technical infrastructure is based on WordPress with the Divi theme, utilizing Google Fonts and Google Analytics for tracking. The site is mobile optimized and has moderate performance. Security posture is adequate with HTTPS enabled and basic tracking opt-out mechanisms, but lacks advanced security headers and visible privacy or cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy and security transparency.

C

C.E. Testing Company Pvt. Ltd.

cetestindia.com

43

C.E. Testing Company Pvt. Ltd. is a multidisciplinary engineering consulting firm based in India, specializing in geotechnical engineering, bridge design, highway engineering, surveying, and geophysical testing. Established in 1985, the company has built a strong market position as a leading consultancy with a medium-sized operation and is a member of the multinational TPF Group. Their key services cater primarily to infrastructure developers and government agencies in the energy and transportation sectors. Technically, the website employs legacy JavaScript libraries such as jQuery 1.4.0 and several plugins for UI elements, indicating a need for modernization. The site has moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident from the HTML content. From a security perspective, the company demonstrates compliance with multiple ISO standards (9001, 14001, 45001) and holds NABL accreditation for its laboratory services, which are strong trust indicators. However, the website lacks visible security headers, uses outdated JavaScript libraries with known vulnerabilities, and does not display privacy or cookie policies, which are compliance gaps. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content itself appears professional and trustworthy. Overall, the website is functional and informative but requires technical and security improvements to enhance trustworthiness and compliance. Strategic recommendations include updating legacy scripts, implementing security headers, adding privacy and cookie policies, and verifying domain registration details to strengthen legitimacy.

I

IM-PACT

im-pact.fr

48

IM-PACT is a specialized consulting firm focused on Building Information Modeling (BIM) services, targeting professionals and companies involved in digital construction modeling. The website presents a professional and consistent brand image, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The technical infrastructure is modern but lacks some advanced security configurations and privacy compliance features. Security posture is moderate with no detected blocking mechanisms or WAF, but absence of security headers and privacy policies lowers the overall security rating. The domain WHOIS data is unavailable, which reduces trustworthiness and raises moderate concerns about domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

T

TPF Engenharia

tpfengenharia.com.br

42

TPF Engenharia is a well-established multinational engineering consultancy company with over 55 years of experience, primarily operating in Brazil. The company offers a broad range of services including project development, consulting, management, supervision, and innovation solutions, serving sectors such as transportation, energy, and real estate. Their market position is strong, supported by recognized certifications like ISO 9001, 14001, 45001, and Great Place To Work. The website reflects a professional and trustworthy brand with comprehensive content and clear contact information. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations. It employs Google Tag Manager for analytics and has a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, though performance is moderate. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some HTTP security headers and a formal security policy or incident response contact. Overall, the security posture is solid with room for improvement in security headers and vulnerability disclosure. The domain WHOIS data aligns well with the business claims, indicating legitimacy and consistency. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include enhancing HTTP security headers, publishing a security policy and incident response contacts, and implementing a security.txt file to facilitate vulnerability reporting. These steps will strengthen trust and compliance while maintaining the company's strong market presence.

The website tpf-utilities.fr represents a small French business named Le Relais Internet, offering domain management, web hosting, SEO, and email redirection services. The business appears to be established since 2007 with a consistent domain registration and hosting aligned with its branding. However, the website itself is minimalistic, using a frameset to redirect users to an external page, with very limited visible content and no modern web technologies detected. The lack of privacy, cookie policies, and contact information indicates a low level of digital maturity and compliance. Security posture is weak due to absence of HTTPS and security headers, exposing the site to potential risks. Overall, the website is functional but lacks professionalism and trust signals, which may impact user confidence.

T

TPF Engineering

tpfengineering.be

39

TPF Engineering is a large, established multidisciplinary engineering consultancy headquartered in Belgium, operating globally with subsidiaries in multiple countries. The company provides engineering design, construction, and operational services primarily targeting large public and private organizations. The website is built on Drupal 10 and hosted by OVH, featuring modern technologies such as jQuery, GSAP, and Fancybox. The site is professionally designed, mobile-optimized, and offers clear navigation and relevant content including news, projects, and company information. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal privacy/cookie policies. Analytics usage is minimal and privacy-friendly, but GDPR compliance could be improved by adding explicit policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate presence.

iREPORT s.r.o. operates a Czech-language online music and style magazine providing news, concert photo reports, reviews, interviews, video and audio content, exclusive CD/DVD supplements, and contests. The website targets music enthusiasts primarily in the Czech Republic and offers a rich multimedia experience with frequent content updates and an active event calendar. The business model is focused on media publishing with advertising revenue streams and audience engagement through contests and social media. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, and various tracking and advertising scripts such as Google Analytics, Hotjar, and Rubicon Project. The site is mobile optimized and uses HTTPS with a good SSL configuration. Consent management is implemented via Didomi and CPEX CMP, supporting GDPR compliance. However, the site lacks some advanced security headers and explicit contact or security policy information. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but could improve by adding more comprehensive security headers and publishing incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional appearance and operation of the website. Overall, the website is well-designed, content-rich, and compliant with privacy regulations, but the missing domain registration data and limited security policy transparency present moderate risks. Strategic improvements in security posture and transparency would enhance trust and compliance.

Libuše Dlabola Pražáková is an artist based in Semily, Czech Republic, showcasing her paintings and art cycles through a professionally designed portfolio website. The site targets art enthusiasts and potential collectors, providing a clear presentation of her work and contact details for inquiries. The business model is focused on promotion and potential sales of artwork, with a niche local/regional market position. Technically, the website uses Materialize CSS framework, Google Fonts, and Material Icons, delivering a responsive and visually appealing experience. The site performs moderately well with good mobile optimization and basic accessibility features. However, there is no detected CMS or hosting provider information, and no advanced technical frameworks are used. From a security perspective, the site lacks important security headers and privacy-related policies, which lowers its security posture. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the legitimate content and contact information. No forms or tracking scripts are present, minimizing data collection risks but also indicating limited user engagement features. Overall, the website is a good quality artist portfolio with moderate technical maturity and low security compliance. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

S

Sharp Type

sharptype.co

67

Sharp Type is a specialized global digital type foundry offering custom and retail typefaces for various design applications including print, digital, and environmental design. The company targets designers, brands, and publications seeking high-quality and multiscript font solutions. The website demonstrates a mature technical infrastructure built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the website presents a professional and trustworthy digital presence with a high level of content quality and user experience.

G

Good Type Foundry AS

goodtypefoundry.com

58

Good Type Foundry AS is a small, award-winning Norwegian type foundry specializing in retail and custom typefaces for digital and print use. The company operates an e-commerce platform built on WordPress and WooCommerce, offering a wide range of font products and custom design services. Their market position is niche but reputable, supported by a client list including notable organizations and a consistent brand presence. The website is professionally designed with good content quality and clear navigation, targeting designers and creative professionals. Technically, the website leverages a modern WordPress stack with WooCommerce for e-commerce functionality, enhanced by plugins such as CleanTalk Anti-Spam and Mailchimp integration. Performance and mobile optimization are good, though some accessibility features could be improved. The site uses HTTPS but lacks DNSSEC and certain security headers, indicating room for security enhancements. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and anti-spam measures but lacks visible security policies, incident response information, and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, supporting legitimacy. Overall, the website presents a low risk profile with moderate security posture and good business credibility. Strategic improvements in security headers, privacy compliance, and published policies would enhance trust and compliance.

V

Velvetyne

velvetyne.fr

58

Velvetyne is a small, France-based open source font collective specializing in the design and distribution of libre fonts. The website serves as a platform to showcase their font projects, offer custom font services, and promote workshops. The target audience includes typography enthusiasts, designers, and the open source community. The business model revolves around open source font creation and community engagement. Technically, the website is built on the ProcessWire CMS and hosted by Alwaysdata. It uses standard web technologies such as HTML5, CSS, and SVG for font previews. The site demonstrates good design quality, mobile optimization, and clear navigation, although accessibility features are basic. Performance is moderate, with no evident use of advanced analytics or tracking. From a security perspective, the site lacks visible security headers and published security policies. There is no privacy or cookie policy, nor any incident response or vulnerability disclosure information. The domain is well-registered with a reputable registrar and has been active since 2010, supporting the legitimacy of the business. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, Velvetyne presents a trustworthy and professional presence in its niche, but it would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

K

KOMETA

kometa.xyz

64

KOMETA is an independent type design studio specializing in progressive retail and custom typefaces. Founded in 2022, the company operates a professionally designed website showcasing their retail font collections and bespoke typography services. The target audience includes designers, studios, and brands seeking unique and expressive fonts. The business model focuses on retail font sales and custom typography projects, positioning KOMETA as a niche player in the type foundry market. Technically, the website is built using modern frameworks such as Nuxt.js and is hosted via Cloudflare, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain registrar protections, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

C

Cargo

cargocollective.com

61

Cargo is a technology company operating a site builder platform tailored for designers and artists. The platform focuses on enabling creatives to showcase their work and connect with potential clients and peers. The business operates in a niche market segment with a clear target audience and offers key services including site building tools, templates, and a community network. The website is professionally designed with good content relevance and user experience, although it lacks explicit privacy and cookie policies. Technically, the site uses modern JavaScript frameworks, including React, and is hosted on Amazon AWS infrastructure. Analytics and advertising tools such as Google Tag Manager and Reddit Ads Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Overall, the site is legitimate and functional but could improve compliance and security transparency.

Z

Zlatá Firma

zlatafirma.eu

58

Zlatá Firma is a Slovak business award platform recognizing top-rated companies based on customer reviews aggregated from reliable sources such as Google Maps and Facebook. The platform promotes these companies by listing them and allowing them to use the Zlatá Firma logo and marketing packages. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its target audience of Slovak businesses and customers. Technically, the site uses modern JavaScript and Google Tag Manager for analytics and marketing, with HTTPS enforced ensuring secure communications. However, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced privacy compliance. The WHOIS data is privacy protected by EURid, which is typical for EU domains, and no suspicious patterns were detected, supporting the legitimacy of the domain. Overall, the site presents a moderate to good security posture with room for improvement in privacy and security best practices.

C

Coqui Shoes Canada Ltd.

coqui.ca

63

Coqui Shoes Canada Ltd. operates an e-commerce platform specializing in footwear retail across Canada, offering products for children, men, and women. The website is built on WordPress with WooCommerce, providing a structured shopping experience with categorized products and customer engagement features such as product warranty and return policies. The company appears to be a small-sized business founded in 2016, targeting general consumers seeking footwear online. Technically, the website leverages a modern CMS and e-commerce stack with plugins enhancing product display and filtering. The hosting is provided by a Slovakian provider (websupport.sk), and the site uses HTTPS with Google reCAPTCHA for form security. However, DNSSEC is not enabled and security headers are absent, indicating room for improvement in security hardening. From a security perspective, the site demonstrates basic best practices but lacks advanced security policies and incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is evident. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, DNSSEC, and privacy consent mechanisms would enhance its security posture and compliance. The domain registration is privacy protected but consistent with a legitimate small business, supporting the site's credibility.

Jana Shoes is a German-based e-commerce retailer specializing in women's footwear, operating under the Wortmann Group umbrella. The website presents a professional and user-friendly shopping experience with a focus on comfort and fashion. The brand targets comfort-oriented female consumers with a broad product range and emphasizes quality and customer satisfaction. Technically, the site leverages Salesforce Commerce Cloud and integrates modern tracking and marketing tools, maintaining good performance and mobile optimization. Security posture is strong with HTTPS, secure payment options, and bot protection, though explicit incident response and vulnerability disclosure mechanisms are absent. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the retail footwear market.

M

MANIK – obuv, s.r.o.

manikobuv.sk

60

Manik – obuv, s.r.o. is a Slovak family-owned company specializing in the manufacture and direct sale of domestic footwear since 1992. The company has a strong market presence in Slovakia with a recognized brand and a focus on quality and customer satisfaction. Their e-commerce website is built on the Shoptet platform, integrating modern tracking and marketing tools such as Google Analytics and Facebook SDK, while maintaining GDPR compliance through cookie consent and privacy policies. The website offers clear contact channels and product information, targeting Slovak customers seeking comfortable home footwear. Technically, the site is well-structured with good mobile optimization and moderate performance, though some legacy libraries like jQuery 1.11.3 could be updated for security. Security posture is solid with HTTPS and CSRF protections, but could be enhanced by adding security headers and explicit incident response policies. Overall, the website reflects a professional and trustworthy retail business with room for minor technical and security improvements.

A

ara shoes

ara-shoes.sk

49

ara shoes operates an official e-commerce platform specializing in premium women's footwear and accessories in the Czech Republic. The website showcases a well-structured product catalog with clear branding and a focus on quality and customer convenience, including free shipping and in-store pickup options. Technically, the site is built on PrestaShop with modern frontend technologies and includes structured data for SEO benefits. Security measures include HTTPS and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is addressed through a cookie consent banner and a basic cookie policy page. However, the absence of WHOIS data and explicit contact information limits full trust assessment. Overall, the site presents a professional and functional online retail experience with moderate technical and security maturity.

L

Lee Cooper

leecooper.com

64

Lee Cooper is a historic British denim brand with a legacy dating back to 1908. The website presents the brand's heritage and identity but is hosted on the Wix platform with minimal content and lacks critical business and security information. The technical infrastructure relies on Wix's CMS and standard web technologies but includes suspicious external scripts from unknown domains, raising potential security concerns. The absence of WHOIS registration data for the domain www.leecooper.com is a significant red flag, suggesting possible domain registration issues or privacy obfuscation. Security posture is basic with no advanced headers or policies detected, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site appears functional for brand marketing but requires improvements in security, compliance, and legitimacy transparency.

C

CAPRICE

capriceshoes.com

63

CAPRICE is an established international footwear retail brand operating an e-commerce platform targeting primarily women and men interested in fashionable shoes and accessories. The website is built on a modern e-commerce platform (Salesforce Commerce Cloud) and supports multiple country and language versions, indicating a mature digital presence. The site offers a wide range of products including seasonal collections and innovative footwear technologies. Technically, the site uses modern JavaScript libraries, tag management, and A/B testing tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is basic with a cookie consent banner but lacks visible privacy and terms of service pages. Overall, the site is professional and trustworthy with moderate tracking and analytics in place.

T

Tamaris

tamaris.com

61

Tamaris.com is the official online shop for the Tamaris brand, specializing in women's shoes, handbags, and jewellery. The website targets fashion-conscious women primarily in Finland and other European markets. It operates on a mature e-commerce platform (Salesforce Commerce Cloud) with a comprehensive product catalog and user-friendly navigation. The site integrates multiple marketing and analytics tools to enhance customer engagement and conversion. Security measures such as HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms are in place, though DNSSEC is not enabled, representing a minor security gap. The domain's WHOIS data confirms a long-standing and legitimate presence since 1999, reinforcing trust in the brand.

R

Rieker Holding AG

rieker.com

67

Rieker Holding AG is a well-established European footwear manufacturer with a history spanning approximately 150 years. The company operates globally under the brands Rieker and remonte, offering fashionable shoes that emphasize comfort and functionality. Their business model includes manufacturing, retail through online shops, and a dedicated B2B portal for dealers. The website reflects a mature digital presence with multilingual support and clear navigation, targeting consumers seeking quality leisure footwear. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Google reCAPTCHA for bot protection. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned policies. The extensive use of third-party analytics and advertising pixels indicates a comprehensive marketing strategy with good transparency. Overall, the website presents a professional, trustworthy, and secure digital front for Rieker Holding AG. The lack of WHOIS data for the subdomain limits domain registration verification but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and compliance.

The website polden-puckham.org.uk currently presents a security verification page that blocks direct access to its main content. This page uses Google reCAPTCHA v3 to verify visitors are not bots, indicating the presence of a Web Application Firewall or similar security mechanism. Due to this, no business-specific content, contact information, or policies are accessible for analysis. The domain is registered since 2001 with 20i Ltd, suggesting a legitimate and long-standing registration. However, the lack of accessible content limits the ability to assess the company's market position or services. Technically, the site uses modern frontend technologies such as Bootstrap 5.3.3 and Google reCAPTCHA, but lacks visible security headers and privacy compliance indicators. Overall, the site’s security posture benefits from bot protection but requires improvements in transparency and compliance once content is accessible.

P

Pesticide Action Network UK

pan-uk.org

64

Pesticide Action Network UK (PAN UK) is a non-profit organization dedicated to eliminating hazardous pesticides, reducing pesticide dependence, and promoting ecologically sound alternatives to chemical pest control. The organization targets environmental advocates, policymakers, and the general public interested in sustainable agriculture and environmental health. The website reflects a focused mission with clear messaging and consistent branding, positioning PAN UK as a credible environmental advocacy group within the UK. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, ConvertKit, and Instagram Feed, indicating a moderate level of digital maturity. The site employs HTTPS and includes analytics tools like Google Analytics and Hotjar for user behavior insights. Mobile optimization and SEO practices are good, though accessibility features could be enhanced. From a security perspective, the site uses HTTPS but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found in the provided data. WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness but does not negate the legitimacy suggested by the website content. Overall, PAN UK presents a professional and trustworthy online presence with room for improvement in privacy transparency, security headers, and WHOIS data clarity. Strategic enhancements in these areas would strengthen their security posture and compliance standing.

L

Loire-Atlantique développement

lad-sela.fr

42

Loire-Atlantique développement is a public engineering agency serving local governments and project stakeholders in the Loire-Atlantique department of France. The agency provides expertise in urban planning, construction, architecture, environmental sustainability, and tourism development. It positions itself as a regional leader in supporting territorial development and improving quality of life. The website reflects a professional and consistent brand image with clear service offerings and target audiences including elected officials, professionals, and the general public. Technically, the site is built on WordPress using modern plugins such as Yoast SEO and Elementor, hosted by NUXIT, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its public agency role.

Loire Atlantique Développement operates as a regional economic development organization focused on facilitating business growth and real estate development within the Loire-Atlantique region of France. The website serves as a portal for entrepreneurs and businesses seeking commercial properties, business parks, and economic news relevant to the region. The organization positions itself as a key regional player supporting local economic infrastructure and business expansion. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization, Contact Form 7 for user inquiries, and Cookie Notice for GDPR-related compliance. The site integrates mapping technologies via Leaflet.js and Mapbox, and uses Google Analytics and Google Tag Manager for visitor tracking. The technical implementation is solid but could benefit from enhanced security headers and improved mobile optimization. From a security perspective, the site employs HTTPS and a cookie consent mechanism, indicating baseline security and privacy awareness. However, the absence of advanced security headers and incident response information suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It provides clear contact information and complies with basic privacy and cookie regulations. Strategic enhancements in security and privacy policies would further strengthen its risk profile and user trust.

S

Sempleo Corporate

sempleo.com

67

Sempleo Corporate is a French web agency specializing in affordable turnkey website creation services primarily targeting small municipalities, associations, and small businesses. Founded in 1995, the company offers subscription-based web packages starting at 15€/month, emphasizing simplicity, all-inclusive support, and French-based solutions. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap, Firebase, and Matomo analytics, with a strong focus on privacy compliance through explicit cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though lacking explicit security policies or incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business content and trust indicators suggest a legitimate operation. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency.

P

POP

pop-incub.org

57

POP is a French social incubator focused on supporting socially engaged entrepreneurs and collectives in the Nouvelle Aquitaine region. The organization offers structured accompaniment programs to help project leaders develop skills, structure their initiatives, and build networks to create socially impactful enterprises. The website reflects a strong regional presence with clear mission statements and community engagement. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted by OVH sas, a reputable French hosting provider. Security measures include HTTPS and Google reCAPTCHA v3, though additional HTTP security headers and DNSSEC are recommended to enhance protection. Privacy compliance is partially addressed with a privacy policy but lacks visible cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

E

Emergence Périgord

emergence-perigord.fr

9

Emergence Périgord is a regional non-profit incubator focused on supporting social and solidarity economy (ESS) projects and social innovation in the Dordogne region of France. The organization offers structured programs including pre-incubation, incubation, and a 'Fabrique à initiatives' to help entrepreneurs validate ideas, develop solutions to social and environmental challenges, and launch impactful enterprises. The website is professionally designed using WordPress and the Divi theme, with good mobile optimization and clear navigation. However, the absence of a published privacy policy and terms of service, as well as missing WHOIS data, limits the overall trust and compliance posture. The site uses HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and incident response information.

N

Nová síť z.s.

novasit.cz

10

Nová síť z.s. is a Czech non-profit cultural network dedicated to supporting live culture across various regions of the Czech Republic. The organization operates multiple projects aimed at fostering artistic collaboration, supporting emerging artists, and promoting cultural cooperation. Their website reflects a professional and consistent brand presence, targeting cultural organizations and individuals involved in the arts sector. Technically, the site is built on WordPress with a modern theme and multilingual capabilities, ensuring good accessibility and SEO optimization. Security posture is solid with HTTPS enforced and secure forms, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data transparency slightly reduces trust but is common for non-profit entities. Overall, the website is well-structured, content-rich, and safe for general audiences.