Security Directory

F

Fondazione Cologni dei Mestieri d’Arte ETS

fondazionecologni.it

52

Fondazione Cologni dei Mestieri d’Arte ETS is a small Italian non-profit foundation dedicated to preserving and promoting traditional and contemporary artisan craftsmanship. The website serves as a cultural hub featuring interviews, news, events, and editorial content aimed at artisans and cultural enthusiasts. The foundation maintains a professional online presence with clear contact information, social media integration, and a GDPR-compliant privacy and cookie policy. Technically, the site is built on the concrete5 CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Analytics. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and formal security policies. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the foundation's identity, indicating legitimacy and trustworthiness.

The website www.governo.it serves as the official online presence of the Italian Government's Presidency of the Council of Ministers. It provides comprehensive information about government activities, news, agendas, transparency, and public communications. The site targets Italian citizens, government officials, and international observers, positioning itself as a trusted source of official government information. The business model is public service and information dissemination, with a strong emphasis on transparency and accessibility. Technically, the site is built on Drupal 7 with a suite of JavaScript libraries including jQuery 1.7, Moment.js, and Matomo analytics for privacy-conscious user tracking. While the technology stack is somewhat dated, it remains functional and supports a moderate performance level. The site is mobile-optimized and includes basic accessibility features, though there is room for improvement. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed, and the site lacks a dedicated security policy or incident response contact. The WHOIS data confirms the domain's legitimacy as an official government entity, enhancing trustworthiness. Overall, the site demonstrates a high level of professionalism, content quality, and compliance with privacy regulations. Strategic recommendations include updating the technology stack, enhancing security headers, and publishing explicit security and incident response policies to further strengthen the security posture and user trust.

U

UNIV - Unione Nazionale Imprese di Vigilanza e Servizi di Sicurezza

univigilanza.it

37

UNIV - Unione Nazionale Imprese di Vigilanza e Servizi di Sicurezza is a prominent Italian national association representing private security companies. The organization provides legal, fiscal, and union assistance to its members and acts as a liaison with public authorities. The website reflects a mature and professional presence with clear communication of its services, partner affiliations, and recent news updates. The target audience includes private security firms and public sector stakeholders in Italy. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

The website www.governo.it serves as the official online presence of the Italian Government Presidency of the Council of Ministers. It provides comprehensive information about the government structure, news, agendas, transparency, and public communications. The site targets Italian citizens, government officials, media, and international observers, functioning as a public service platform for disseminating government-related information. Technically, the site is built on Drupal 7 CMS, utilizing several JavaScript libraries such as jQuery, Moment.js, and Underscore.js. It employs Matomo analytics for privacy-conscious user tracking and features a cookie consent mechanism compliant with EU regulations. The site is mobile-optimized with good accessibility and SEO practices, although some modernization of libraries is advisable. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses cookie consent banners. However, it lacks visible security policies and incident response contacts, and some security headers are missing. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as an official government entity. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. Recommendations include publishing dedicated security and incident response policies, upgrading outdated libraries, and enhancing security headers to further strengthen the security framework.

F

Faiat Service srl

italyhotels.it

55

Italy Hotels operates as an established online hotel booking platform specializing in accommodations throughout Italy. The website offers a broad inventory of over 20,000 hotels, targeting travelers seeking convenient and comprehensive booking options. The platform integrates interactive features such as maps and sliders to enhance user experience. Technically, the site employs a traditional web stack with jQuery, jQuery UI, and other JavaScript libraries, some of which are outdated and may pose security risks. The site is mobile-optimized and includes basic SEO and accessibility features. Security posture is moderate, with HTTPS implied but lacking explicit security headers and updated libraries. Privacy and cookie policies are present, indicating GDPR awareness, though contact information and incident response details are not publicly available. Overall, the site is professional and trustworthy but would benefit from technical and security improvements.

I

InfoCamere

infocamere.it

62

InfoCamere is a well-established Italian government-related organization founded in 1997, focused on digital innovation services for Chambers of Commerce and public administration. The website clearly communicates its mission to bridge businesses and public administration through digital platforms and services. It holds a strong market position as a key national player in this niche, offering official data services, digital identity solutions, and enterprise management platforms. The content is professionally presented, targeting Italian businesses and public sector entities. Technically, the website employs modern web technologies including Matomo analytics configured with privacy considerations, Flickity for UI components, and a custom CMS. The site is mobile optimized, accessible, and SEO-friendly with comprehensive metadata and structured data. Security posture is strong with HTTPS, DNSSEC, and privacy-aware analytics, though it lacks some advanced security headers and explicit cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, though it could improve transparency around incident response and vulnerability disclosure.

R

Rete Blu S.p.a

radioinblu.it

53

Rete Blu S.p.a operates the InBlu2000 radio platform, providing a wide range of radio programs, podcasts, and live streaming services primarily targeting Italian-speaking audiences interested in news, culture, and religious content. The website is professionally designed with consistent branding and a clear navigation structure, reflecting a mature digital presence in the Italian media sector. Technically, the site is built on WordPress with common libraries such as jQuery and Modernizr, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The domain registration data aligns well with the business claims, supporting the legitimacy of the site. Overall, the platform demonstrates a solid media broadcasting service with good business credibility and moderate technical sophistication.

U

Universität Münster

uni-muenster.de

55

Universität Münster is a large, well-established public university in Germany, offering high-quality interdisciplinary research and education. It serves a broad academic audience including students, researchers, and alumni, with a strong emphasis on excellence clusters and international cooperation. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content. Technically, the site uses a mature CMS (IMPERIA), modern JavaScript libraries, and respects privacy with Matomo analytics configured to honor Do Not Track. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and cookie consent mechanisms are recommended. Overall, the domain registration and hosting align with the university's identity, supporting high legitimacy and trust.

C

con terra GmbH

conterra.de

64

con terra GmbH is a German-based technology company specializing in customized GIS and GeoIT solutions for both private sector and public administration clients. The company holds a strong market position as a platinum partner of leading GIS and data integration technology providers such as Esri and Safe Software. Their website reflects a professional and modern digital presence, showcasing their key services including GIS solutions, GeoIT integration, services, and training. The target audience is primarily businesses and government entities requiring advanced geoinformation systems and digital transformation support. Technically, the website is built on Drupal CMS with modern web technologies including Google Tag Manager and Cookiebot for consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Performance is moderate with no critical technical issues detected. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. From a security and compliance perspective, the site demonstrates GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. However, there is no visible incident response or vulnerability disclosure information. WHOIS data aligns with the website's legitimacy, showing consistent domain registration and no privacy protection, supporting trustworthiness. Overall, con terra GmbH presents a credible, professional, and secure online presence suitable for its business domain. Strategic improvements could focus on enhancing security headers, publishing security policies, and providing incident response contacts to further strengthen trust and compliance.

D

Digital Hub münsterLAND e.V.

digitalhub.ms

50

Digital Hub münsterLAND e.V. is a regional digital innovation hub based in Münster, Germany, focused on fostering digital business models and innovation through collaboration between SMEs, startups, and the tech community. The organization offers a broad range of services including startup matching, accelerator programs, coworking spaces, and community events, positioning itself as a key player in the Münsterland digital ecosystem. The website reflects a professional and well-structured digital presence with clear navigation and rich content tailored to its target audiences of Mittelstand companies, startups, and tech enthusiasts. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, jQuery, and Matomo analytics, ensuring a responsive and accessible user experience. The site is served over HTTPS with a cookie consent mechanism in place, demonstrating attention to privacy compliance. However, some security best practices like explicit security headers and secure form submission methods could be improved. From a security perspective, the site shows a good baseline with HTTPS and cookie consent but lacks visible security headers and formal incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and active community engagement. Overall, the website is a trustworthy and well-maintained digital platform supporting the regional innovation ecosystem. Strategic improvements in security headers, form handling, and transparency around security policies would further enhance its security posture and trustworthiness.

C

CSVnet - Associazione centri di servizio per il volontariato

csvnet.it

10

CSVnet is a well-established Italian non-profit association founded in 2005 that represents and supports volunteer service centers nationally and at the European level. The organization provides a wide range of services including training, consulting, event organization, and information dissemination to non-profit organizations and volunteers. The website reflects a mature digital presence with a Joomla CMS platform, integrated analytics, and a comprehensive cookie consent mechanism compliant with GDPR. The site is professionally designed with clear navigation and good mobile optimization, targeting operators and governance of CSV members as well as the broader volunteer community. Security posture is solid with HTTPS and privacy compliance, though there is room for improvement in security headers and incident response transparency. Overall, CSVnet demonstrates strong business credibility and trustworthiness in the non-profit sector.

I

IIC-INTERSPORT International Corporation GmbH

intersport.com

66

Intersport International Corporation GmbH operates a global sports retail platform with a strong presence across multiple countries, as evidenced by the extensive country-specific links on their website. The company positions itself as a leader in the sports retail sector, offering products and services tailored to diverse markets. The website is professionally designed, mobile-optimized, and provides clear navigation to localized shops and corporate information. Technically, the site leverages WordPress CMS with a modern JavaScript stack and is hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is well addressed with visible cookie consent mechanisms and comprehensive legal pages. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a mature digital presence with a solid security posture and trustworthy business credibility.

S

SIGIC - The Slovenian Music Information Center

musicslovenia.si

41

Music Slovenia is a consortium of Slovenian musical institutions dedicated to promoting Slovenian music both nationally and internationally. The website serves as a platform to connect various stakeholders in the Slovenian music scene, offering news, event information, playlists, tours, and showcases. The organization targets musicians, cultural institutions, and music enthusiasts interested in Slovenian music. The business model focuses on cultural promotion and collaboration facilitation within the music industry niche. Technically, the website employs a modern but somewhat dated technology stack including jQuery 2.2.4, Bootstrap, and various UI libraries. It uses HTTPS with good SSL configuration but lacks security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Analytics are handled via Plausible Analytics, indicating a privacy-conscious approach but lacking cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but misses important security headers and formal security policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosure or security contact information is provided, which could be improved to enhance trust and compliance. The domain registration data is consistent and appropriate for the business, supporting legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility but requires improvements in privacy compliance and security best practices to reach higher maturity levels.

F

Finitium GmbH

finitium.de

62

Finitium GmbH is a small, regionally focused financial services company specializing in real estate financing and modernization in the Rhein-Main area of Germany. The company offers personalized consulting and tailored financing solutions including construction financing, follow-up financing, modernization loans, and energy certificates. Their market position is strengthened by over 100 customized financing solutions annually and an independent approach with access to multiple banking partners. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action for scheduling consultations and submitting financing applications. Technically, the site uses modern web technologies including Google Tag Manager and Leaflet.js, hosted on rzone.de infrastructure. Security posture is good with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, though some improvements like security.txt and enhanced accessibility could be made. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site projects high trustworthiness and professionalism appropriate for its business sector.

D

designverign GmbH

designverign.de

61

designverign GmbH is a well-established marketing and design agency based in Düsseldorf, Germany, operating since 1996. The company specializes in strategy, corporate design, e-commerce solutions including Onlineshop development, and performance marketing services targeting B2B clients and manufacturers. Their market position is solid within the German E-commerce and marketing sectors, offering comprehensive digital and offline branding solutions. The website reflects a professional and consistent brand image with clear service offerings and client references.

D

Digital Hub münsterLAND e.V.

muensterland.digital

53

Digital Hub münsterLAND e.V. is a regional digital innovation community based in Münster, Germany, focused on fostering collaboration between SMEs, startups, and tech professionals. The organization offers a variety of services including startup matching, accelerator programs, coworking spaces, and events to support digital business model development and innovation in the Münsterland region. The website reflects a well-established community hub with active engagement through events, stories, and newsletters. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is moderate with cookie consent and CSRF tokens implemented, but lacks explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the professional presentation and active social presence support legitimacy. Overall, the site is well-designed, content-rich, and serves its target audience effectively.

M

manitu GmbH

manitu.de

59

manitu GmbH is a well-established German hosting provider offering professional webhosting, dedicated root servers, and domain registration services. With 28 years of experience and an own data center in Germany, the company emphasizes high-quality service, German data protection compliance, and climate-neutral operations. Their target audience includes private users, companies, and organizations seeking reliable hosting solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on their own infrastructure, ensuring fast performance and good SEO. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

R

Remmers

remmers.com

73

Remmers GmbH is a well-established German family-owned company specializing in innovative system solutions for the construction and woodworking industries. With over 75 years of tradition, the company offers a broad portfolio including building protection, wood coatings, and floor protection products. The website is professionally designed, multilingual, and targets a diverse audience including construction professionals, architects, investors, and end consumers. Technically, the site uses modern JavaScript frameworks, SAP Commerce as CMS, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, secure login forms, and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and business information.

S

Stadt Köln

stadt-koeln.de

62

The website www.stadt-koeln.de is the official digital presence of the city administration of Cologne, Germany. It serves as a comprehensive portal for residents and visitors to access municipal services, news, event information, and contact details. The site is well-structured, multilingual, and provides key functionalities such as online appointment booking and access to various public service departments. The target audience primarily includes local citizens, businesses, and visitors seeking official information and services. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and Modernizr, with analytics powered by Matomo and eTracker. The site is hosted on German infrastructure with anycast DNS servers, ensuring reliable access. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting good security hygiene. However, there is no visible cookie consent mechanism, and no explicit security or incident response policies are published, which are areas for improvement to enhance compliance and transparency. The use of an outdated jQuery version may pose potential risks if not regularly patched. Overall, the website is trustworthy, professional, and serves its governmental function effectively. Strategic recommendations include implementing a cookie consent banner, publishing security policies, updating JavaScript libraries, and adding a vulnerability disclosure channel to strengthen security posture and regulatory compliance.

S

Stackbox GmbH

stackbox.co

71

Stackbox GmbH is a specialized software solutions and consulting company focused on the eMobility sector, primarily serving businesses in energy and transportation. The company offers tailored services including business process design, IT solution architecture, system integrations, and operations support. Their market position is strengthened by a decade of experience and notable clients such as IONITY and Hubject. The website reflects a professional and consistent brand image with clear communication of services and team expertise. Technically, the website employs modern frameworks like Bootstrap and integrates analytics tools such as Amplitude with session replay capabilities, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Performance is moderate with good SEO practices. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance trust and compliance.

The Missouri Botanical Garden is a well-established non-profit organization focused on botanical research, conservation, education, and providing a public garden experience. The website reflects a mature digital presence with comprehensive content, including event information, educational programs, visitor services, and donation opportunities. The organization targets a broad audience including families, researchers, students, and garden enthusiasts. Technically, the website is built on ASP.NET WebForms with DNN CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a professional user experience with clear navigation and rich multimedia content. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, despite the absence of detailed WHOIS data due to privacy protection.

L

Liveurope

liveurope.eu

53

Liveurope is a well-established pan-European cultural initiative dedicated to supporting concert venues and promoting European music diversity. The organization operates across 24 countries with 23 venues and thousands of concerts supported, positioning itself as a key player in the European music and cultural sector. The website reflects a professional, content-rich platform with comprehensive news, stories, and event information targeted at music venues, artists, and cultural audiences. Technically, the site is built on Drupal 10, leveraging modern web technologies and analytics tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

Tremagi S.r.l. is a family-owned Italian holding company operating in the energy sector, aiming to be a major player in the Italian electricity and gas market. The company operates through multiple subsidiaries including Illumia, Wekiwi, E-wide, and EnergyUp, serving over one million customers. The website presents a professional corporate image with detailed company history, team members, and subsidiary information, targeting private and business energy consumers in Italy. Technically, the site is built on WordPress using common JavaScript libraries and is moderately optimized for mobile and performance. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. No forms or direct contact emails are visible, limiting direct user engagement. Overall, the site is trustworthy and professional but should enhance privacy compliance and security practices.

R

Rai

raiplaysound.it

64

RaiPlay Sound is the digital audio platform of Rai, Italy's public broadcaster, offering live radio streaming, podcasts, and audiobooks. The platform targets a broad audience interested in Italian radio content and digital audio entertainment. It provides user account features for personalized experiences and supports mobile applications on iOS and Android. The website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and integration with major analytics and advertising services. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting the organization's commitment to user data protection. Security posture is strong with HTTPS enforcement and standard best practices, though explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, RaiPlay Sound presents a professional, trustworthy, and user-friendly digital media service.

C

card complete Service Bank AG

cardcomplete.com

73

card complete Service Bank AG is a leading Austrian financial services provider specializing in credit cards, prepaid cards, and comprehensive payment solutions for private and corporate customers. The company positions itself as a fully integrated card service provider, managing everything from product development to acceptance devices and transaction processing. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information targeted primarily at Austrian customers. Technically, the site employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and ReadSpeaker for accessibility enhancements. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and provides a detailed cookie consent mechanism aligned with GDPR requirements. However, no explicit security policy or incident response contact is publicly available. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness, though the website content and branding strongly indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and transparency of security policies.

F

Frogs & Friends e.V.

frogs-friends.org

50

Frogs & Friends e.V. is a German non-profit organization dedicated to amphibian conservation and public awareness through innovative media and interactive content. The website serves as an educational platform offering rich multimedia resources, project videos, exhibitions, and opportunities for citizen participation. The organization targets a general audience interested in environmental conservation and amphibians. Technically, the website employs AngularJS, integrates YouTube APIs, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized with good navigation and content quality, though accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response policies. WHOIS data is unavailable due to privacy protection, which is typical for non-profits. Overall, the site is trustworthy, professional, and safe for general audiences.

W

wowyup

wowyup.agency

45

The website wowyup.agency represents a small digital agency offering services such as digital marketing, product photography, and web presentations. The site is minimalistic with limited content and lacks detailed business or contact information, which constrains its market positioning and trust signals. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, Bootstrap, and some animation libraries like Velocity.js and PhotoSwipe for galleries. However, the site lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak due to absence of visible security headers and no evidence of HTTPS enforcement from the provided data. Privacy and cookie policies are missing, and no contact or incident response information is available, which impacts compliance and user trust. WHOIS data is privacy protected by Identity Digital, which is common for small agencies but limits transparency. Overall, the site is functional but basic, with room for significant improvements in security, compliance, and business credibility.

R

Rheine. Tourismus. Veranstaltungen. e. V.

rheine-tourismus.de

53

Rheine. Tourismus. Veranstaltungen. e. V. is a local tourism and event promotion organization serving the city of Rheine, Germany. The website provides comprehensive information on sightseeing, events, guided tours, booking options, and local services aimed at tourists and residents. The organization operates as a non-profit association with a focus on enhancing visitor experience and promoting local culture and attractions. The website is well-structured with clear navigation and a professional design consistent with its branding. Social media integration and contact details reinforce its community presence. Technically, the website employs modern web technologies including ExtJS, Swiper.js, Font Awesome, and a consent management system (Klaro). It is hosted with CDN support and uses HTTPS with basic security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Analytics usage is minimal and privacy compliant, with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS and uses secure forms for login. However, it lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the website's local tourism focus, showing no suspicious patterns. Overall, the website presents a low-risk profile with good content quality and technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance. The site is suitable for general audiences and does not contain adult or questionable content.

L

Laëtis

laetis.fr

44

Laëtis is a French digital agency specializing in creating interactive and user-friendly digital solutions tailored to sectors such as tourism, local development, agriculture, environment, and e-commerce. The company targets clients focused on efficiency and sustainable territorial development, offering custom web and online collaborative applications. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in French. Technically, the website is built on Drupal CMS with modern JavaScript libraries including jQuery, RequireJS, and Modernizr. It employs HTTPS with good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no detailed security or incident response policies are published. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent but lacks visible advanced security headers and incident response information. The absence of WHOIS data limits domain trust assessment, though the site content and structure suggest a legitimate business. No vulnerabilities or exposed sensitive data were identified in the provided content. Overall, Laëtis presents a professional and trustworthy digital presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

S

SHEMA

shema.fr

51

SHEMA is a French regional public-private mixed economy company specializing in urban development, public facility construction, and business real estate in Normandy. It serves local authorities and economic actors with a strong regional presence and a portfolio of ongoing projects. The website reflects a professional and well-structured digital presence with clear business information and modern technology use. The technical infrastructure is based on WordPress with performance optimizations and privacy compliance mechanisms in place. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and incident response contacts. WHOIS data is missing, which slightly impacts trust but the overall legitimacy is supported by the website content and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details.

I

Institut national de l’information géographique et forestière

ign.fr

61

The Institut national de l’information géographique et forestière (IGN) is a French government entity specializing in the production and dissemination of geographic and forestry data. The website serves a diverse audience including individuals, professionals, public policy actors, educators, and students. It offers a comprehensive range of cartographic services, data access, and applications, positioning itself as the authoritative national geographic data provider in France. The business model is public service-oriented, focusing on data accessibility and support for various user needs. Technically, the website is built on Drupal 10, leveraging modern web technologies such as JavaScript and CSS, with good mobile optimization and accessibility features. The site demonstrates moderate performance and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of publicly available WHOIS data is typical for .fr domains and does not detract from the legitimacy of the site. The presence of official contact information, social media channels, and comprehensive policies further enhance credibility. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.

L

Les Enfoirés

enfoires.fr

60

Les Enfoirés is a prominent French non-profit organization focused on social aid and fundraising through charity concerts and merchandise sales. The website serves as the official platform to engage supporters, partners, and the general public with information about events, news, and donation opportunities. The organization leverages a modern WordPress-based infrastructure with integrations such as Google Tag Manager and OneTrust for cookie consent, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data limits domain trust verification but does not detract from the site's apparent legitimacy and professional presentation.

V

videezy

videezy.com

59

Videezy is an online platform providing free and premium stock video footage, 4K videos, and After Effects templates targeted at videographers and content creators. The site operates a freemium business model, offering a community-driven resource for video content. The platform is well-branded and professionally designed, with a consistent user experience and clear navigation. Technically, the website employs modern JavaScript libraries, analytics tools, and monitoring services, indicating a mature digital infrastructure. However, some technical aspects such as security headers and privacy policies are lacking or not detected in the provided content. The security posture is moderate with HTTPS enforced and CSRF protections, but missing some best practices and incident response information. Overall, the website is safe for general audiences and maintains a moderate trust level, though the absence of WHOIS registration data reduces domain transparency and trustworthiness.

K

Koalice proti palmovému oleji

stoppalmovemuoleji.cz

44

Koalice proti palmovému oleji is a Czech non-profit coalition established in 2013, dedicated to reducing global palm oil consumption and promoting local fat alternatives. The organization operates as an advocacy and educational platform, providing resources such as petitions, informational materials, event calendars, and community engagement opportunities. Their market position is solid within the Czech environmental NGO sector, supported by a network of 94 organizations and 141 members. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery, and integrates analytics tools like Google Analytics and Smartlook. However, the use of multiple jQuery versions and lack of visible security headers indicate areas for improvement. Security posture is moderate with no critical vulnerabilities detected but lacking advanced protections and compliance mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

M

Mulhouse Alsace Agglomération - m2A

m2a.fr

56

Mulhouse Alsace Agglomération (m2A) is a regional government entity serving 39 communes in the Mulhouse Alsace region of France. The website acts as the official portal for territorial development, public services, environmental initiatives, culture, tourism, and economic activities. It targets residents, local businesses, and stakeholders within the region, providing comprehensive information and access to services. The site is well-branded and professionally designed, reflecting its official status. Technically, the website is built on WordPress with a variety of plugins including Yoast SEO Premium, Elementor, and AngularJS for dynamic content. It integrates Google Analytics and Google Tag Manager for analytics and uses WP Rocket for performance optimization. The site is mobile-optimized and includes accessibility features, though some improvements could be made. The use of AngularJS 1.4.14 is outdated and may pose security risks. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no public security or incident response policies are found. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, though the website content and social media presence strongly indicate legitimacy. Overall, the website presents a solid digital presence for a government entity with good content quality and privacy compliance. Strategic recommendations include updating legacy libraries, enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and security posture.

G

Gouvernement Princier de Monaco

gouv.mc

67

The website www.gouv.mc is the official online portal of the Gouvernement Princier de Monaco, serving as the primary digital gateway for government information, public services, and news related to the Principality of Monaco. It targets a broad audience including citizens, residents, businesses, tourists, and international partners. The portal provides comprehensive access to government departments, legislative information, administrative procedures, and cultural and tourism content. Technically, the site employs modern JavaScript libraries and analytics tools such as Piwik (Matomo), with a custom or proprietary CMS likely used for content management. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and authoritative, consistent with its role as a government portal.

Fondation Hélène et Victor Barbour is a Swiss non-profit foundation dedicated to supporting social, educational, wildlife, church, and cultural initiatives primarily in Geneva. The website presents a clear focus on philanthropy with well-structured content and a professional design that targets a general audience interested in charitable activities. The foundation operates with a small organizational footprint and provides contact details including a physical address and phone number, enhancing trustworthiness. Technically, the website uses a custom-built frontend leveraging common JavaScript libraries such as jQuery, Modernizr, and GreenSock for animations, along with Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, suggesting a bespoke solution. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No forms or incident response policies are present, and no vulnerability disclosure mechanisms are found. The WHOIS data indicates privacy protection for the domain registrant, which is typical for small non-profits and does not raise immediate concerns. Overall, the website is functional, professional, and trustworthy for its intended philanthropic purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent data protection measures.

G

Générations Futures

generations-futures.fr

68

Générations Futures is a well-established French non-profit organization founded in 1996, dedicated to protecting future generations from pesticides and other chemical pollutants. The association is accredited by the Ministry of Ecology and recognized as a public interest organization. It operates primarily through advocacy, public awareness campaigns, scientific publications, and support for victims of pesticides. The website reflects a mature digital presence with comprehensive content, active social media engagement, and clear calls to action such as donations and volunteer recruitment. Technically, the website is built on WordPress with modern JavaScript libraries and CSS frameworks like Bootstrap. It employs cookie consent management via Tarteaucitron and integrates Google Analytics for traffic analysis. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are not explicitly detected in the HTML source. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices including encrypted connections and privacy compliance with GDPR. However, the absence of WHOIS data limits domain trust verification, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were found in the content. Overall, Générations Futures presents a trustworthy and professional online presence consistent with its mission as an environmental NGO. Strategic improvements in security headers, incident response transparency, and domain registration visibility would further enhance its security posture and trustworthiness.

T

Toerisme Oostende

visitoostende.be

58

The website www.visitoostende.be is the official tourism portal for the city of Oostende, Belgium. It provides comprehensive information on local attractions, events, dining, shopping, accommodation, and cultural experiences. The site targets tourists and visitors seeking to explore Oostende and offers multilingual support in Dutch, French, German, and English. The business model focuses on promoting tourism and local businesses through curated content and event listings. Technically, the site is built on Drupal 9, employs modern web technologies, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Ortto. Security measures include HTTPS, reCAPTCHA, and standard security headers, although some headers could be enhanced. The WHOIS data is restricted by DNS Belgium policy, limiting transparency but not detracting significantly from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure, with room for improvement in privacy policy visibility and explicit security headers.

D

Divadlo X10

divadlox10.cz

62

Divadlo X10 is a small cultural theatre organization based in Prague, Czech Republic, specializing in contemporary dramaturgy and provocative theatrical performances. The website presents a professional and well-structured digital presence with clear navigation, event listings, and social media integration. The technical infrastructure includes modern JavaScript libraries such as jQuery and Modernizr, with analytics tools like Google Analytics and Facebook Pixel implemented with privacy considerations such as IP anonymization and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and cookie consent in place, but lacks some advanced security headers and explicit privacy policy documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and partnerships with official cultural institutions support legitimacy. Overall, the website is suitable for its audience and business purpose but would benefit from improved transparency and security enhancements.

AT Computers a.s. operates the ATC Market website, a well-established e-commerce platform specializing in technology products such as computers, servers, and accessories. The company has a strong regional presence in Slovakia and the Czech Republic, supported by a network of partner retail sites. The website offers a comprehensive product catalog, user account features, and a mobile application, targeting both consumers and business customers. The business model focuses on retail and B2B sales with physical and online channels. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Owl Carousel, built on an ASP.NET MVC framework with a custom CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response contacts are provided. The domain registration is consistent with the business identity, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively.

AT Computers a.s. operates the ATC Market e-commerce platform, specializing in technology and electronic products such as computers, servers, accessories, and related IT equipment. The company targets both retail consumers and business clients primarily in the Czech Republic and Slovakia, supported by a network of partner companies and subsidiaries. The website demonstrates a mature digital presence with a comprehensive product catalog, mobile applications, and clear business information. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data limits domain trust analysis, but the overall business credibility and content quality support a positive risk assessment. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

D

Display Europe

displayeurope.eu

61

Display Europe is a European media platform that aggregates news and media content from various European sources, targeting media professionals, researchers, and the general public interested in European affairs. The platform offers search and filtering capabilities to access a wide range of media articles from partner sources. Technically, the website is built using modern web technologies including React and Next.js, with Apollo GraphQL for data management and Matomo for analytics. The site demonstrates good digital maturity with responsive design and moderate performance. Security-wise, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website is trustworthy and professionally maintained, with a strong European identity and co-funding from the European Union.

The website www.ekatalog.biz represents a professional B2B e-commerce platform provider focused on IT and digital technology sectors primarily serving Czech and Slovak markets. The business offers rapid deployment of customized e-shops with integrated product catalogs, order processing, and delivery services leveraging the extensive ATComputers stock. The site demonstrates a moderate level of digital maturity with use of modern frontend technologies such as Bootstrap and Modernizr, and a responsive design optimized for multiple device types. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS data indicate areas for improvement in security and compliance. Contact information is clearly presented, supporting business credibility. Overall, the site is functional and professional but would benefit from enhanced security posture and privacy compliance to strengthen trust and regulatory adherence.

L

League of European Research Universities

leru.org

68

The League of European Research Universities (LERU) operates as a prominent non-profit network of 24 leading European research universities focused on advancing innovative research and influencing science policy. The website clearly communicates its mission, activities, and publications targeted at policymakers, researchers, and academic stakeholders. The organization maintains a professional online presence with active social media channels and regularly updated content, reinforcing its market position as a key advocate for research-intensive universities in Europe. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and asynchronous script loading to optimize performance. The site is mobile responsive with good SEO and accessibility basics, although there is room for improvement in accessibility and security headers. The website is hosted securely over HTTPS with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site demonstrates a solid baseline with HTTPS and no evident security flaws. However, it lacks explicit security headers, a cookie consent mechanism, and published security policies or incident response contacts, which are important for compliance and trust. The WHOIS data is unavailable due to privacy protection or query failure, but this is typical for organizations of this nature and does not raise immediate concerns. Overall, the website is trustworthy, professionally maintained, and serves its audience well. Strategic improvements in privacy compliance, security policy transparency, and contact information availability would enhance its security posture and user trust.

G

Galerie výtvarného umění v Ostravě, p. o.

gvuo.cz

49

Galerie výtvarného umění v Ostravě, p. o. is the oldest regional art gallery in Ostrava, Czech Republic, established in 1952. It operates as a non-profit cultural institution under the Moravskoslezský kraj (Moravian-Silesian Region) and offers art exhibitions, educational programs, virtual tours, and an e-shop. The website reflects a well-established institution with a clear focus on art and culture, targeting the general public and educational sectors. The business model is centered on cultural enrichment and public engagement rather than commercial profit. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript libraries such as jQuery, Leaflet.js for maps, and Google Analytics for tracking. It uses the Shopnero CMS platform and is hosted by Active24. The site is mobile-optimized with good SEO practices and structured data enhancing search engine visibility. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong cultural and educational focus. Strategic improvements in security policies and accessibility could further enhance its posture and user trust.

A

Assemble

assemble.me

48

Assemble is a New Zealand-based SaaS company founded in 2008 that provides specialized software solutions for the film industry, focusing on audience building, website creation, and integrated marketing tools for filmmakers and distributors. The platform offers a CMS and CRM tailored for films, including features such as blogs, trailers, and online stores. The website reflects a niche market position with professional content and a clear value proposition targeting film professionals. Technically, the website uses a proprietary CMS with a tech stack including jQuery, Modernizr, Shadowbox.js, and integrates Google Analytics, Google Tag Manager, and New Relic for performance monitoring. Hosting and DNS are managed via Cloudflare, providing CDN and DNS services. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain, indicating some domain security awareness. However, DNSSEC is not enabled, and security headers are minimal, suggesting room for improvement. No privacy or cookie policies are present, which is a compliance gap. No contact information or incident response details are provided, limiting transparency. Overall, the website is professional and trustworthy with a solid business foundation but lacks in privacy compliance and advanced security practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

C

Clement Charleux – Ecrivain – Photographe

clementcharleux.com

42

The website clementcharleux.com serves as a personal portfolio and blog for Clement Charleux, a French writer and photographer. It features a variety of artistic content including blog posts, photo galleries, interviews, and travel stories. The site targets a general audience interested in art, literature, and photography, positioning itself as a niche personal brand rather than a commercial enterprise. The business model revolves around content publishing and personal branding without evident monetization mechanisms. Technically, the site is built on WordPress and employs common web technologies such as jQuery, Modernizr, and various plugins for enhanced user experience like infinite scrolling and social sharing. The site is moderately optimized for performance and mobile devices, with a good design quality and clear navigation. However, accessibility features are basic and SEO optimization is minimal. From a security perspective, the site uses HTTPS but lacks important security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. Contact information is available via a contact page and social media links, but no dedicated incident response or security contact channels are provided. Overall, the website is safe and trustworthy for general audiences, with no adult or explicit content. The domain uses privacy protection for WHOIS data, which is typical for personal sites. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing compliance and incident response readiness to improve trust and security posture.

R

Regiontourist.cz

region-tour.cz

41

Regiontourist.cz is a Czech Republic-focused online tourism platform that connects tourists with accommodation options, experiences, and travel tips. Founded in 2009, it serves a niche market by providing curated listings and content to help plan vacations and day trips within the country. The platform supports service providers such as accommodation owners and experience operators by offering promotional opportunities and customer acquisition channels. Technically, the website uses modern JavaScript libraries including jQuery and Bootstrap, integrates Google Tag Manager for analytics, and employs MailerLite for marketing. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Security-wise, the site enforces HTTPS but lacks some recommended security headers and explicit cookie consent mechanisms. No WHOIS data was found, which slightly reduces trustworthiness but the website content and social media presence indicate a legitimate business. Overall, the site is professional, user-friendly, and focused on family-friendly tourism content.

M

Milked

milked.film

52

Milked.film is a professionally presented documentary film website focused on exposing issues within New Zealand's dairy industry. The site targets a general audience interested in environmental and agricultural topics, leveraging social media and educational content to raise awareness. Technically, the site uses a modern tech stack including jQuery, Modernizr, and New Relic for monitoring, hosted on a platform powered by Assemble CMS. The website is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enforced but missing security headers and DNSSEC. Privacy compliance is basic with a privacy policy linked via the CMS provider but no cookie consent mechanism. Business credibility is supported by consistent branding and social media presence but limited direct contact information. Overall, the site is safe, trustworthy, and well-suited for its niche documentary purpose.