Security Directory

S

S AM Schweizerisches Architekturmuseum

sam-basel.org

49

S AM Schweizerisches Architekturmuseum is a Swiss cultural institution dedicated to architecture, located in Basel. The website provides information about exhibitions, events, educational programs, and a shop, targeting architecture enthusiasts and the general public interested in cultural heritage. The museum maintains a professional online presence with multilingual support and active social media channels. Technically, the site is built on Drupal 7 with modern JavaScript libraries and uses Cookiebot for GDPR-compliant cookie management. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and CMS updates. WHOIS data is unavailable due to privacy or query failure, but the website content and contact details support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

W

Weyell Zipse

weyellzipse.ch

44

Weyell Zipse is a Swiss architecture studio specializing in architectural design, competitions, exhibitions, and academic guest critiques. The firm has a strong presence in Switzerland and Germany, with a portfolio including schools, residential buildings, and public spaces. Their market position is that of an established, award-winning practice engaged in both professional projects and academic discourse. Technically, the website is built on WordPress with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

R

Rocket Ruby

rocketruby.ch

51

Rocket Ruby is a small, established visual communication studio based in Basel and Luzern, Switzerland, operating since 2011. The company specializes in comprehensive design solutions including corporate design, web development, infographics, and book design, targeting businesses and organizations seeking professional visual communication services. The website reflects a consistent and professional brand image with a portfolio of diverse projects demonstrating their expertise. Technically, the site is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is provided via email and physical address, but no phone or social media links are available. Overall, the website is trustworthy and professional, with room for improvement in security and privacy transparency.

S

SpeedAdmin ApS

speedadmin.dk

60

SpeedAdmin ApS operates a specialized SaaS platform focused on managing accounts and services for music and cultural schools primarily in Denmark and other Nordic countries. The platform facilitates school selection and login for a wide range of educational institutions, indicating a mature and established business with a strong regional presence since 2006. The website serves as a login portal with a clean, professional design and good mobile optimization, supporting accessibility through linked documentation. Technically, the site uses common web technologies such as jQuery and Bootstrap, with custom scripts and styles, delivering moderate performance and a user-friendly experience. Security posture is adequate with HTTPS in use, but lacks DNSSEC and explicit security headers, and no visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site contains no adult or questionable content and targets a general audience of educational institutions and users.

K

Krombacher Brauerei

krombacher.de

60

Krombacher Brauerei is a leading premium brewery in Germany, specializing in the production and marketing of beer products with a strong emphasis on brewing craftsmanship and environmental responsibility. The website targets adult consumers, enforcing an age gate to comply with legal requirements for alcohol-related content. The business model focuses on manufacturing and retail within the beverage industry, maintaining a strong market position in Germany. The site content is professional, well-branded, and consistent with the company's premium image. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details are explicitly identified. Security posture is solid with HTTPS enforced and age verification implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong due to the presence of a comprehensive privacy policy and cookie consent mechanism. Business credibility is high, supported by consistent branding and legitimate WHOIS data. The site is safe for its intended adult audience, with no suspicious or malicious content detected. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and adding a vulnerability disclosure or security.txt file to improve transparency and security maturity.

The Gemeinsame Ethikkommission der Hochschulen Bayerns (GEHBa) serves as the joint ethics commission for Bavarian universities, providing ethical review and evaluation of research projects involving human subjects. It operates as a specialized non-profit academic body, ensuring compliance with ethical and legal standards in research. The website clearly targets researchers and academic staff within Bavarian higher education institutions, offering information on application procedures and contact details. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and hosted on AWS infrastructure, indicating a mature digital presence. The use of Matomo analytics with Do Not Track enabled reflects a privacy-conscious approach. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in implementing security headers and visible cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its academic mission.

The Association of the Bavarian Universities of Applied Sciences (UAS), represented by Hochschule Bayern e.V., is a significant educational organization combining academic education with applied research and development across Bavaria. It encompasses 19 universities, serving approximately 120,000 students including a substantial international cohort. The association offers a broad spectrum of degree programs and maintains extensive partnerships with companies and universities worldwide, positioning itself as a key player in regional higher education. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as Swiper and Drawer for UI components, and Font Awesome for icons. The site is mobile-optimized with good navigation and SEO practices. Analytics are handled via Matomo with Do Not Track enabled, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism. No security policy or incident response information is published, which could be improved to enhance trust and compliance. The WHOIS data is privacy protected, which is justified for this type of organization. Overall, the website is professional, trustworthy, and serves its educational mission well. Strategic improvements in security headers, privacy notices, and incident response transparency would further strengthen its posture.

L

Lange Nacht der Wissenschaften (LNDW)

langenachtderwissenschaften.de

49

Lange Nacht der Wissenschaften (LNDW) is a well-established science event organizer based in Berlin, Germany, with a 25-year history. The website serves as an information hub for the event, targeting science enthusiasts, visitors, media, and partners. It provides event details, news, partner information, and newsletter subscription services. The organization appears to be a medium-sized entity operating in the education and non-profit sectors, with a strong local presence and community engagement. Technically, the website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The site uses Matomo analytics configured for privacy by disabling cookies, and it implements a cookie consent banner compliant with GDPR requirements. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, confirming legitimacy and consistent domain age. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security policy transparency and security header implementation.

E

Ethos Media Group srl

secsolutionforum.it

64

Secsolutionforum is a professionally managed digital event platform organized by Ethos Media Group srl, targeting security industry professionals in Italy. The website promotes a digital event scheduled for April 2025, focusing on the convergence of physical and logical security, offering tailored training, workshops, and networking opportunities. The platform serves as a key aggregator for industry knowledge, professional growth, and market insights within the security sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR standards. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the website is trustworthy, professionally designed, and well-positioned in its niche, with strong branding consistency and clear business information.

Imagofilm is an independent film production company based in Lugano, Switzerland, with a history dating back to the 1980s. The company focuses on producing cinematic works including documentaries and cultural exhibitions, targeting a general audience interested in regional and artistic film content. Their market position is niche, serving the Swiss and Italian-speaking cultural sectors with a small-sized operation. The website reflects this with professional design, clear navigation, and relevant content highlighting recent films, news, and exhibitions. Technically, the website employs a custom PHP-based platform with common front-end libraries such as jQuery, Bootstrap, and Swiper.js. While the site is mobile-optimized and performs moderately well, it uses outdated JavaScript libraries that pose security risks. SEO and accessibility are basic but functional. No major CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which impacts GDPR compliance and overall security posture. The absence of incident response contacts and security policies further limits its security maturity. No critical vulnerabilities or exposed sensitive data were detected, but updating libraries and implementing security best practices is recommended. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and privacy compliance improvements to reduce risk and increase user trust.

N

NETZ HALLE GmbH

netzhalle.de

60

NETZ HALLE GmbH operates as a regional energy network operator in Halle (Saale), Germany, providing essential services such as electricity, gas, and heat network connections, metering, and customer support. The company is part of the larger Stadtwerke Halle group, which includes various utility and service subsidiaries. The website reflects a professional and regionally focused utility provider with clear service offerings and customer engagement channels. Technically, the website employs a legacy CMS (SixCMS) with common JavaScript libraries like jQuery and Modernizr, enhanced by user consent management via Usercentrics and analytics through Matomo. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to be managed by EVH, consistent with the regional focus. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or vulnerability disclosure. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen compliance and security posture.

P

Prager Frühling

prager-fruehling-magazin.de

51

Prager Frühling is a German political magazine focused on themes of freedom and socialism, targeting a politically left-leaning audience. The website offers multiple content formats including magazine issues, podcasts, blogs, and newsletters, positioning itself as a niche media outlet within the German political discourse. The business model centers on content publishing and community engagement through digital channels. Technically, the site is built on the KONTEXT-CMS platform, leveraging JavaScript libraries such as jQuery, RoyalSlider, and Modernizr, with hosting and DNS managed by Warenform. While the site uses HTTPS and includes basic SEO and accessibility features, some technologies are outdated and there is no cookie consent mechanism, which is a GDPR compliance gap. Security posture is moderate with no visible vulnerabilities but lacks published security policies or incident response contacts. Overall, the site is professionally presented with consistent branding and moderate trust indicators but could improve in privacy compliance and security transparency.

A

AV-Studio GmbH

halle365.de

58

halle365.de is a regional leisure and event portal focused on the city of Halle (Saale) and its surrounding region. Operated by AV-Studio GmbH, the website provides comprehensive information on theater, concerts, sports, cinema, exhibitions, parties, and family-friendly activities. It serves residents and visitors seeking cultural and leisure activities, positioning itself as a key regional information source with advertising and ticket sales as primary business models. The website is professionally designed with consistent branding and good content quality.

M

Ministerium für Schule und Bildung des Landes Nordrhein-Westfalen

bildungsland.nrw

64

The website www.schulministerium.nrw is the official digital presence of the Ministry for Schools and Education of North Rhine-Westphalia, Germany. It serves as a comprehensive information portal for education stakeholders including students, teachers, and parents. The site offers detailed content on school organization, education policies, legal frameworks, press releases, and various educational services. It is well-positioned as a government entity with a strong market presence in the public education sector of NRW. Technically, the website is built on Drupal CMS, leveraging modern web technologies such as Bootstrap for responsive design, Matomo for privacy-respecting analytics, and accessibility features. The site demonstrates good performance and SEO practices, with mobile optimization and clear navigation. From a security perspective, the site enforces HTTPS, respects user privacy with cookie consent mechanisms, and avoids exposing sensitive data. While explicit security headers are not fully confirmed, the overall security posture is strong with no evident vulnerabilities. The WHOIS data is privacy protected but consistent with official government use, supporting the domain's legitimacy. Overall, the website is a trustworthy, professional, and well-maintained government portal with excellent content quality and compliance with privacy regulations. It poses low risk and serves its public service mission effectively.

Quart Online is a German-language academic magazine focused on the intersection of religion, science, society, and culture. It operates primarily as a subscription-based publication offering quarterly issues and an online archive. The website is professionally designed using WordPress with a consistent brand identity and clear navigation, targeting a general audience interested in scholarly discourse on religion and related societal topics. Technically, the site employs modern web technologies and plugins, ensuring good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its niche audience.

The Katholische Männerbewegung der Erzdiözese Wien is a small non-profit religious organization focused on men's spiritual engagement and community activities within the Vienna region. Their website serves as a portal for event announcements, spiritual resources, and organizational information, targeting men and families interested in faith-based activities. The site is built on WordPress using the Customizr theme and incorporates modern JavaScript libraries such as jQuery and Modernizr, indicating a moderate level of technical maturity. Performance and mobile optimization are adequate, with good navigation and content relevance. Security posture is acceptable with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, supporting the organization's mission effectively.

T

TGZ Halle Technologie- und Gründerzentrum Halle GmbH & Bio-Zentrum Halle GmbH

weinberg-campus.de

47

The Weinberg Campus - Technologiepark website represents a well-established technology and innovation hub located in Halle, Germany. The organization supports startups, researchers, and companies primarily in the fields of Digital Health and Smart Green Technology by providing infrastructure, advisory services, and networking opportunities. The website is professionally designed, content-rich, and targets a broad audience including entrepreneurs, investors, and the regional business community. Technically, the site is built on Drupal CMS, hosted by Alfahosting, and employs modern web technologies such as Matomo for analytics and CookiesJSR for cookie consent management. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although some advanced security headers and explicit security policies are absent. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements, making it a credible digital presence for the organization.

The Deutscher Verlagspreis website represents an official German federal government cultural initiative aimed at supporting and awarding independent publishers in Germany. The site provides comprehensive information about the award, participation, jury, and prize winners, targeting publishers and cultural stakeholders. The business model is government-funded, focusing on cultural promotion rather than commercial activities. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries such as jQuery and Modernizr to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and structured content. Security posture is solid with HTTPS enforced and basic session and CSRF protections, though some advanced security headers and policies are missing. Privacy compliance is good, with a cookie consent mechanism and a privacy policy in place, but no explicit terms of service or security policy pages were found. Overall, the site is trustworthy, professional, and safe for general audiences.

Arbeit und Kultur Saarland gGmbH is a well-established non-profit organization dedicated to supporting cultural actors and projects in the Saarland region of Germany. The organization provides advisory services, project initiation, funding, and networking opportunities to foster a vibrant cultural scene. Their website reflects a professional and consistent brand presence with a focus on cultural events and community engagement. Technically, the site is built on the ProcessWire CMS with modern frameworks like UIkit and includes cookie consent mechanisms to comply with GDPR. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or incident response policies. The domain registration data is minimal but consistent with a non-profit hosted on generic servers. Overall, the website is trustworthy, safe, and well-suited for its target audience.

D

Deniz, Gebauer, Junk, Langhammer GbR

warenform.de

51

WARENFORM GbR is a small, established German agency founded in 2001 specializing in communication solutions, design, and custom software development primarily for NGOs, political entities, unions, and media organizations. Their service offerings include consulting, corporate design, website development, print materials, event communication, and bespoke software applications. The company maintains a professional online presence with a well-structured website built on the KONTEXT-CMS platform, leveraging modern JavaScript libraries and Matomo analytics with privacy-conscious configurations. Security posture is solid with HTTPS and Content-Security-Policy headers, though improvements are recommended in cookie consent and formal security policies. Contact information is transparent and complete, including a published PGP key for secure communication. Overall, the website reflects a trustworthy and credible business with a moderate technical maturity and good compliance with privacy regulations.

D

Deniz, Gebauer, Junk, Langhammer GbR

warenform.net

10

WARENFORM GbR is a small German agency founded in 2001 specializing in communication solutions, design, and custom software development. Their client base includes political representatives, NGOs, unions, media, and companies, positioning them as a niche provider with a strong portfolio and trusted reputation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references. Technically, the site uses a custom CMS (KONTEXT-CMS) with a modern but somewhat dated JavaScript stack including jQuery and various plugins. Hosting appears to be managed by a partner IT company, o.open.de. Security posture is strong with HTTPS, Content-Security-Policy headers, and privacy-conscious Matomo analytics implementation. However, the site lacks an explicit cookie consent mechanism and formal incident response contact details. Overall, the site is well-maintained, trustworthy, and compliant with GDPR requirements.

T

Touch Medical Media

touchneurologyime.org

60

Touch Medical Media operates the touchNEUROLOGY platform, providing accredited continuing medical education (CME) content focused on neurology. The website targets healthcare professionals and neurologists, offering educational activities, journal articles, and clinical updates designed to improve patient outcomes. The business is positioned as a reputable niche medical education provider with CME accreditation and a consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and advertising integrations. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found on the analyzed page. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in security and privacy transparency.

T

Touch Medical Media Limited

touchoncologyime.org

59

Touch Medical Media Limited operates the touchONCOLOGY CME platform, providing accredited oncology and hematology continuing medical education content designed to improve patient outcomes. The website targets healthcare professionals and medical educators with a business model centered on online education and publishing. The platform is well positioned in the oncology CME niche with a consistent brand and strong digital presence. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook Pixel, and Borlabs Cookie for consent management. The site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service in the analyzed content. Overall, the website is professional, trustworthy, and safe for its intended audience.

T

Touch Medical Media

touchrespiratory.com

10

touchRESPIRATORY is a specialized online education platform providing CME-accredited learning resources and congress highlights for pulmonologists and respiratory healthcare professionals. The platform is operated by Touch Medical Media, a company established in 2015, positioning itself as a leading provider in respiratory medical education. The website offers journal articles, learning activities, and editorial content tailored to its professional audience. Technically, the site is built on WordPress and leverages modern web technologies including Google Tag Manager, DoubleClick, and social login plugins, indicating a mature digital infrastructure. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure communications. Security posture is generally good, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the provided content. The site integrates multiple analytics and advertising tools, maintaining good transparency and user tracking moderation. Overall, the website is professional, trustworthy, and well-positioned in its niche, with room for enhanced security and privacy policy disclosures.

T

touchOPHTHALMOLOGY

touchophthalmology.com

60

touchOPHTHALMOLOGY is a well-established online education platform specializing in ophthalmology. Founded in 2009, it offers a comprehensive range of learning resources, CME accredited activities, journal articles, and conference highlights targeted at ophthalmologists and eye care professionals. The website positions itself as a leading provider in this niche healthcare education market, supported by a consistent brand presence and active social media engagement. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various analytics and advertising tools. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS enabled and domain transfer restrictions in place; however, DNSSEC is not enabled and security headers are not evident. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. No direct contact emails or phone numbers are visible, which may impact user trust and compliance. Overall, the website is professional, content-rich, and trustworthy, but could benefit from enhanced privacy disclosures and security policies to improve compliance and user confidence.

T

Touch Medical Media

touchneurology.com

62

TouchNEUROLOGY is a well-established online education platform specializing in neurology, providing CME-accredited and independent learning resources targeted at neurologists and healthcare professionals. The website is professionally designed with excellent content quality and clear navigation, supporting its position as a trusted source in medical education. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various tracking and advertising tools, hosted with Cloudflare DNS services. Security posture is good with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected in the provided content. Overall, the site demonstrates high business credibility and trustworthiness with no signs of blocking or WAF interference.

T

Touch Endocrinology

touchendocrinology.com

59

Touch Endocrinology operates as a specialized online education platform providing CME-accredited learning resources and clinical updates for endocrinologists. Established since 2006, it holds a strong market position as a leading provider in the endocrinology healthcare education sector. The website offers a rich array of content including journal articles, congress highlights, and learning activities tailored to healthcare professionals. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Borlabs Cookie for consent management, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not yet implemented. Privacy compliance is partial with cookie consent mechanisms in place but lacking explicit privacy and terms of service pages. Overall, the site demonstrates high professionalism, trustworthiness, and user experience, supported by active social media presence and advertising transparency.

M

Medizinischer Fakultätentag (MFT)

omft.de

44

The website www.omft.de represents the Ordentlicher Medizinischer Fakultätentag (oMFT), a longstanding forum and event organizer for university medicine in Germany. It serves as a networking and discussion platform for medical faculties, healthcare policymakers, researchers, and students. The organization is part of the Deutsche Hochschulmedizin e.V., emphasizing its role in the healthcare and academic sectors. The site content is professional, well-structured, and targeted at a specialized audience in the medical education and research community. Technically, the website is built on WordPress and uses common JavaScript libraries such as jQuery, Modernizr, Swiper, and Fancybox to enhance user experience. The site is mobile-optimized and loads with moderate performance. SEO and accessibility features are basic but functional. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks visible security headers and published security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. The absence of a cookie consent mechanism may pose GDPR compliance risks. Overall, the website is credible and trustworthy, with clear contact information and consistent branding. Strategic improvements in security headers, privacy compliance, and incident response transparency are recommended to strengthen the security posture and regulatory adherence.

T

TGZ Halle Technologie- und Gründerzentrum Halle GmbH & Bio-Zentrum Halle GmbH

technologiepark-weinberg-campus.de

10

Weinberg Campus is a regional technology park and innovation hub located in Halle (Saale), Germany, focused on fostering startups, research institutes, and companies in sectors such as digital health and smart green technology. The organization provides rental spaces, consulting, and community engagement to support innovation and entrepreneurship. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of startups, researchers, and entrepreneurs. Technically, the website is built on the Drupal CMS platform, utilizing modern libraries such as Matomo for analytics, FontAwesome for icons, and FlexSlider for interactive content. The hosting provider is identified as Alfahosting based on nameserver data. The site is mobile-optimized, accessible, and performs moderately well, with proper SEO meta tags and cookie consent mechanisms in place. From a security perspective, the website enforces HTTPS and implements cookie consent, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's business claims, indicating legitimacy and a trustworthy domain registration. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements could include adding security headers, publishing a security policy, and providing direct contact information for incident response to enhance trust and security posture.

H

Helmholtz Association

hifis.net

67

HIFIS (Helmholtz Federated IT Services) is a specialized IT service provider focused on delivering digital infrastructure and software services to the Helmholtz Association, a major German research organization. The website presents a professional and comprehensive overview of their offerings including cloud services, identity management, software consulting, and training. The target audience primarily includes scientists, software engineers, cloud service providers, and IT support experts within the Helmholtz ecosystem. The organization is well positioned as a key facilitator of research IT services within Germany's scientific community. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging libraries such as FontAwesome and Modernizr for enhanced UI/UX. Hosting is provided by DESY, a reputable Helmholtz research center, ensuring reliable infrastructure. The site is mobile optimized, fast loading, and accessible, with good SEO practices. Analytics are implemented via Matomo with cookies disabled, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks visible security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. There is no published security policy or incident response information, which could be improved to strengthen trust and preparedness. Overall, the website is trustworthy, professional, and well-aligned with its institutional backing. The domain registration data corroborates the legitimacy and consistency of the service. Strategic improvements in privacy compliance and security transparency would further enhance the site's security posture and user trust.

Nutseo GmbH is a small Austrian online marketing agency specializing in search engine marketing, search engine optimization, pay-per-click campaigns, and search engine friendly web development. Established in 2012, the company positions itself as an experienced and knowledgeable partner for businesses seeking to improve their online visibility and digital marketing effectiveness. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients. Technically, the site uses modern JavaScript libraries, Google Analytics, and Tag Manager for tracking, hosted on DigitalOcean infrastructure. Security practices include CSRF tokens and cookie consent mechanisms, though some security headers and DNSSEC are not implemented. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website demonstrates good digital maturity and business credibility.

E

Eesti Turvaettevõtete Liit

etel.ee

50

Eesti Turvaettevõtete Liit (ETEL) is an established Estonian security industry association and training center founded in 2017. The organization provides a range of services including industry information, training, and qualification for security professionals. Their website targets security companies, service purchasers, and specialists, positioning ETEL as a key national player in the security sector. The site content is professional and well-structured, supporting their role as an information hub and training provider. Technically, the website is built on the Voog CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and public security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

archives communales genevoises

archivescommunales.ch

60

The website archivescommunales.ch serves as an intercommunal archival portal for several Geneva municipalities, providing access to archival inventories and descriptions. It targets researchers, local officials, and citizens interested in municipal archives. The platform is built on Drupal CMS and leverages common JavaScript libraries such as jQuery, YUI, and Bootstrap, indicating a moderately modern technical infrastructure. The site offers multilingual support and a clear navigation structure, though mobile optimization and accessibility are basic. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No contact information or incident response policies are published, limiting transparency. The domain uses privacy protection for WHOIS data, which is justified given the public service nature of the site. No advertising or tracking technologies were detected, suggesting minimal user tracking. Overall, the website is functional and professionally presented with good content relevance and trust indicators appropriate for a government archival service. However, improvements in security headers, privacy compliance, and contact transparency would enhance its security posture and user trust. The risk level is moderate with no critical vulnerabilities detected in the provided data.

T

touchINFECTIOUS DISEASES

touchinfectiousdiseasesime.org

61

touchINFECTIOUS DISEASES operates a specialized online platform delivering accredited continuing medical education (CME) focused on infectious diseases. The platform offers a range of educational content including journal articles, conference coverage, and learning activities designed to improve clinical practice and patient outcomes. The business targets healthcare professionals and clinicians seeking up-to-date infectious disease knowledge. The website is built on WordPress, leveraging modern web technologies and integrates multiple tracking and advertising tools to support its business model. Hosting and domain services are provided by Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and explicit security policies are recommended. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service documentation. Overall, the site presents a professional, trustworthy, and content-rich resource for its audience.

C

Cinefile

cinefile.ch

54

Cinefile is a Swiss-based streaming platform specializing in arthouse movies, documentaries, cinema, and children's films. Founded in 2018, it offers a curated selection of films via subscription and pay-per-view models, complemented by a Swiss cinema guide and DVD/Blu-Ray rental service. The platform targets film enthusiasts seeking quality and curated content, primarily within Switzerland. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and secure login forms, but lacks some advanced security headers and a dedicated security policy page. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

tirol kliniken gmbh

tirol-kliniken.at

62

Tirol Kliniken GmbH is the largest healthcare provider in Western Austria, offering a wide range of hospital and patient services including neurology, healthcare education, and media communication. The website reflects a professional and comprehensive digital presence targeting patients, healthcare professionals, and the general public in the Tirol region. The business model is focused on public healthcare service provision with a strong market position in the region. Technically, the website uses a custom ColdFusion-based CMS with common JavaScript libraries such as jQuery and Modernizr. The site is moderately performant with good mobile optimization and accessibility features. SEO and navigation are well implemented, supporting a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. The use of an older jQuery version may pose minor risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy and professionally maintained, with recommendations to enhance security headers, update libraries, and publish incident response information to further strengthen security posture and compliance.

U

Universitätsmedizin Bayern (UMB) e.V.

unimedizin-bayern.de

45

Universitätsmedizin Bayern (UMB) e.V. is a non-profit association representing the collaboration of Bavarian university medical faculties and university hospitals. Founded in 2017, it aims to promote cooperation in teaching, research, and patient care across six locations in Bavaria. The website serves as an informational and representative platform targeting academic, clinical, and political stakeholders within the Bavarian healthcare ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries, offering a professional and responsive user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are absent. Overall, the site reflects a trustworthy and credible organization with a clear mission and professional presentation.

I

Investitionsbank des Landes Brandenburg (ILB)

ilb.de

61

The Investitionsbank des Landes Brandenburg (ILB) is a regional development bank focused on promoting and financing public and private investment projects within Brandenburg, Germany. The institution offers a broad portfolio of funding programs across sectors such as economy, infrastructure, labor, and housing. The website reflects a well-established public entity with a clear mission to support regional development through financial products and advisory services. The target audience includes private companies, public clients, individuals, associations, universities, and chambers, indicating a comprehensive service scope. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. The presence of a consent management platform (Klaro) and integration with Google Analytics demonstrates a mature digital infrastructure with privacy compliance in mind. The site is mobile-optimized and features clear navigation and professional design, supporting excellent user experience. From a security perspective, the site enforces HTTPS and uses bot protection (Friendly Captcha) and session management via Apache Tomcat. While no explicit security headers were detected in the HTML content, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the site could improve by publishing a security.txt file and providing explicit incident response contacts. Overall, the ILB website is a trustworthy, professional platform representing a government-affiliated financial institution. It balances user experience, privacy, and security effectively, supporting its role as a key regional development bank. Strategic recommendations include enhancing HTTP security headers, formalizing vulnerability disclosure processes, and increasing transparency on data retention policies to further strengthen security and compliance.

B

Bundesamt für Kartographie und Geodäsie

geodatenzentrum.de

62

The Bundesamt für Kartographie und Geodäsie operates the Geodatenzentrum website as a central platform for providing official geospatial data, maps, software, and web services primarily for German governmental and professional users. The site serves as a key distribution point for both free and licensed geodata, supporting compliance with national and European data standards such as INSPIRE. Technically, the website is built on a Magento eCommerce framework with legacy JavaScript libraries including Prototype.js and jQuery 1.12.4, alongside geospatial libraries like OpenLayers. While the site uses HTTPS and CAPTCHA protections, some outdated libraries and missing security headers present moderate security risks. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is professionally designed, consistent in branding, and trustworthy as a government resource.

T

touchDERMA

touchderma.com

56

touchDERMA is a specialized healthcare education platform focused on dermatology, providing clinical updates, conference coverage, and learning activities for healthcare professionals. Founded in 2023, it targets dermatologists and medical researchers with free access to curated medical content. The website is built on WordPress and leverages modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site implements cookie consent mechanisms but lacks explicit privacy and terms of service policies in the accessible content. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no public security or incident response policies are found. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Movies That Matter

moviesthatmatter.nl

58

Movies That Matter is a well-established non-profit organization based in the Netherlands, focused on promoting human rights awareness through film festivals, educational programs, and international collaborations. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content relevant to its mission. Technically, the site is built on WordPress with modern analytics and marketing integrations, maintaining good performance and mobile optimization. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though some advanced security headers and explicit policies could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate entity.

D

Duke University

duke.edu

66

Duke University is a prestigious private research university based in the United States, offering a wide range of undergraduate, graduate, and professional education programs. The website reflects its comprehensive academic offerings, research initiatives, global partnerships, and community engagement. The target audience includes students, faculty, staff, alumni, and researchers. The university maintains a strong market position as a leading educational institution with extensive resources and services. Technically, the website employs modern web technologies, including JavaScript libraries, Google Tag Manager, and Microsoft Clarity for analytics, and implements a cookie consent mechanism to comply with privacy regulations. The site is well-structured, mobile-optimized, and accessible, providing a professional user experience.

F

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş.

foxcrofthotels.com

59

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş. operates in the hospitality sector, likely providing hotel and tourism services in Turkey. The website is currently a minimal 'Coming Soon' placeholder page with very limited content and no interactive features or detailed business information. The target audience appears to be potential customers or visitors interested in hospitality services, but the site does not yet provide sufficient information to engage or convert visitors. Technically, the website uses basic web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr. It is hosted behind Cloudflare DNS services, but no detailed hosting or CMS information is available. The site shows basic mobile optimization and accessibility but lacks SEO optimization and advanced technical features. Performance is moderate given the minimal content. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, no security headers are detected, and no privacy or cookie policies are present. There are no forms or data collection points to assess for input security. The domain registration is consistent with the business and country, registered in 2020 with a reputable Turkish registrar. Overall security posture is weak due to missing best practices and policies. The overall risk is moderate given the minimal content and lack of security and privacy features. Strategic improvements should focus on enabling HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers and SEO. These steps will improve trust, compliance, and user engagement.

F

fit4internet

fit4internet.at

10

fit4internet is an Austrian non-profit association dedicated to raising digital competences across Austria. The organization provides a comprehensive digital competence framework (DigComp AT), self-assessment tools, certification and accreditation services, and a course catalog to support lifelong learning in digital skills. The website reflects a professional and consistent brand with a clear focus on education and digital literacy. It targets a broad audience including the general public, education providers, and portal users interested in digital competence development. The business model revolves around standardization, evaluation, and certification of digital skills, positioning fit4internet as a key player in Austria's digital education landscape. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and various UI and analytics libraries such as Matomo and Pinpoll. The site uses a custom CMS and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility compliance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit security policy or incident response information is publicly available. Overall, the website is trustworthy, professionally maintained, and aligned with its educational mission. The WHOIS data confirms legitimacy and consistency with the website's Austrian association identity. There are no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and enhancing accessibility standards to improve inclusivity and compliance.

F

Flyeye

sudtirol360.it

50

Virtual Südtirol is a small hospitality-focused business offering augmented reality virtual tours of the Alto Adige region in Italy. The company, branded as Flyeye, provides immersive virtual experiences to tourists and hospitality clients to enhance travel planning and marketing efforts. The website is professionally designed using Incomedia WebSite X5 Pro and integrates modern analytics tools such as Matomo and Google Analytics, with GDPR-compliant privacy and cookie policies in place. Contact information is clearly presented, including a contact form, phone number, email, and physical address in Meran, Italy. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency.

E

Emitel Srl

emitel.it

52

Emitel Srl is an established Italian telecommunications company founded in 1998, providing tailored telecom and IT security solutions primarily to businesses and professionals. Their offerings include VOIP and cloud telephony, connectivity services, networking infrastructure, cybersecurity, and energy management solutions. The company emphasizes GDPR compliance and integrated security both physical and digital. Technically, the website is built on Drupal 8 with modern web technologies and includes a cookie consent mechanism, reflecting a mature digital presence. Security posture is solid with HTTPS and DNSSEC enabled, though some HTTP security headers are missing and incident response details are not publicly disclosed. Overall, Emitel presents a professional and trustworthy business profile with clear contact information and partner affiliations.

D

Deutsche Leasing AG

deutsche-leasing.com

65

Deutsche Leasing AG operates as a leading asset finance partner primarily serving the German Mittelstand (SMEs). The company offers a broad range of leasing and financing solutions including machinery, mobility, IT leasing, and sustainable financing options. The website reflects a mature enterprise with a strong market position and comprehensive service portfolio. Technically, the site employs a modern JavaScript stack with consent management and analytics tools, ensuring good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and secure login forms, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the professional web presence. Strategic recommendations include enhancing security headers and clarifying domain registration details.

B

Bluesound Deutschland

bluesound-deutschland.de

64

Bluesound Deutschland operates as a specialized distributor and information portal for high-resolution wireless multiroom audio products in the German market. The company offers a range of streaming speakers, stereo components, and home cinema solutions, leveraging the BluOS platform for seamless music streaming. Positioned as a niche player, Bluesound Deutschland targets audiophiles and tech-savvy consumers seeking premium audio experiences. The website reflects a mature digital presence with localized content, product catalogs, and a network of authorized dealers. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good SEO and user experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the technology sector.

T

The Eli and Eydthe Broad Foundation

broadfoundation.org

62

The Eli and Edythe Broad Foundation is a well-established philanthropic organization focused on entrepreneurship for the public good in education, science, and the arts. Founded in 1999, it operates primarily in the United States with a large organizational size and a strong market position supported by flagship initiatives and a 50-year history of giving. The website reflects a professional and consistent brand image, targeting non-profit organizations, educational institutions, and the general public interested in philanthropy. Technically, the site is built on WordPress and leverages modern JavaScript libraries and optimization tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the website is trustworthy and safe, with no adult or questionable content detected.