Security Directory

S

Stadt Wien

wien.at

59

Stadt Wien operates the official website for the city of Vienna, Austria, providing comprehensive information, services, news, and event details to residents and visitors. The site serves as a central hub for municipal services including administrative procedures, health information, cultural events, and public transportation. It holds a strong market position as the authoritative source for city-related information and services. Technically, the website employs modern web technologies including JavaScript modules and custom web components, ensuring a responsive and accessible user experience across devices. The site is well-optimized for SEO and mobile use, with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of trustworthiness and professionalism, suitable for a government entity.

W

wohnfonds_wien

hauskunft-wien.at

47

Hauskunft is a municipal service operated by wohnfonds_wien, providing free and subsidized consulting for building renovations and energy efficiency upgrades in Vienna. The website offers comprehensive information about their services, including orientation consultations, future checks, and support for creating renovation concepts. The target audience includes homeowners, property managers, architects, and planners in Vienna. The service is well integrated with city initiatives like 'Raus aus Gas' and collaborates with partners such as the City of Vienna and klimaaktiv-gebaut.at. Technically, the website uses modern web technologies, including Matomo for privacy-friendly analytics and Swiper.js for interactive content. It is well optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and secure forms, though incident response and vulnerability disclosure information could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a government service.

W

wohnpartner

wohnpartner-wien.at

64

wohnpartner is a Vienna-based social service organization focused on fostering good community living in municipal housing. As part of Wohnservice Wien, it offers conflict mediation, social advice, and neighborhood engagement through various projects and events. The website reflects a mature digital presence built on TYPO3 CMS with a clear structure and good user experience. Privacy and cookie compliance are well implemented, including a consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, serving a government/non-profit sector audience effectively.

A

Allgemeine Zeitung

azonline.de

57

Allgemeine Zeitung is a regional German news publisher serving the Münsterland area, providing local, national, and cultural news content. The website offers news articles, ePaper subscriptions, and advertising services, targeting the general public in the region. It operates under the Zeitungsgruppe Münster umbrella, indicating a solid market position in regional media. Technically, the website employs modern JavaScript libraries, consent management platforms, and analytics tools such as Google Tag Manager and FingerprintJS, reflecting a mature digital infrastructure. The site is mobile-optimized with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS and uses consent management for GDPR compliance but lacks explicit security headers and a vulnerability disclosure mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Dülmener Zeitung

dzonline.de

60

Dülmener Zeitung is a regional German news media outlet focused on local news, sports, culture, and community events primarily in Dülmen and the Münsterland region. The website offers news articles, e-paper subscriptions, and an online shop, positioning itself as a trusted local information source with a moderate-sized audience. The site is part of the Zeitungsgruppe Münster media group, indicating a stable market presence in regional media. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, FingerprintJS, and Consentmanager.net for cookie consent management. Hosting appears to be managed by ICS Media, with a well-structured site optimized for mobile devices and moderate performance. The site uses HTTPS and implements cookie consent mechanisms, reflecting a baseline compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses consent management but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is professionally designed and trustworthy for general audiences, with room for improvement in privacy transparency and security policy disclosures. The risk level is moderate with no critical issues detected.

F

Finanz Informatik

fi-update.de

40

The website fi-update.de serves as a platform for the FI Update 2025, a management event targeted at the leadership level within the Sparkassen-Finanzgruppe, a major financial group in Germany. The site primarily functions as an informational and event management portal, with a focus on finance professionals. The business is positioned as an enterprise-level entity within the finance sector, leveraging its parent company Finanz Informatik's brand and network. The content is concise and oriented towards event promotion and user engagement through social media channels such as LinkedIn and Instagram. Technically, the website employs modern web technologies including JavaScript, CSS, and the PrimeReact framework. It integrates etracker analytics with respect for Do Not Track settings, indicating a moderate level of digital maturity and privacy awareness. The site is hosted with DNS services provided by DomainControl (GoDaddy), suggesting a professional hosting environment. Performance and mobile optimization are basic but functional, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and includes some privacy-conscious analytics configurations. However, it lacks explicit security headers and cookie consent mechanisms, which are important for compliance and protection. No forms or direct contact information are present on the main page, limiting data exposure risks but also reducing user engagement options. The absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency and preparedness indicators. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected. Strategic improvements in security headers, privacy compliance, and user contact options would enhance trust and compliance. The business credibility is supported by consistent branding and legitimate domain registration, but the content and technical implementation could be further developed to improve user experience and security posture.

The website www.icloud.com is the official web portal for Apple's iCloud service, a cloud storage and cloud computing platform integrated deeply within the Apple ecosystem. It offers users access to photos, mail, notes, documents, and other personal data synced across Apple devices. The site is professionally designed with consistent branding and clear navigation, targeting Apple device users and general consumers seeking secure cloud services. The business model is subscription-based with free and paid tiers, positioning Apple as a leading technology provider in consumer cloud services. Technically, the site employs modern web technologies including strict Content-Security-Policy headers, HTTPS encryption, and Apple proprietary JavaScript libraries. The infrastructure is hosted on Apple’s own platforms, ensuring high performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates strong best practices such as strict CSP, HTTPS enforcement, and restricted form actions. However, it lacks visible cookie consent mechanisms and publicly available security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the site is trustworthy and professional with a high security posture and excellent business credibility. The absence of WHOIS data is likely due to privacy protections common for large corporations. Strategic recommendations include adding explicit cookie consent, publishing security policies, and providing vulnerability disclosure information to enhance transparency and compliance.

The website jb-fotografie.de represents a small photography business specializing in family photos, passport photos, portrait, and wedding photography services primarily targeting a German-speaking audience. The site content is minimal but relevant to the business domain, with basic branding and a simple user interface. The technical infrastructure is based on a shared hosting platform (hpage), utilizing standard HTML, CSS, and JavaScript without advanced frameworks or CMS beyond the hosting provider's platform. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no privacy or cookie policies, which impacts compliance and trust. No contact information or forms are present, limiting user engagement and transparency. Overall, the site is functional but basic, with moderate risk due to missing security and privacy best practices.

archive.is is a web archiving service established in 2012 that allows users to capture and preserve snapshots of web pages permanently. The service targets general internet users who require a reliable method to archive web content. The website is currently protected by a CAPTCHA security check, indicating the presence of a Web Application Firewall or similar security mechanism to mitigate automated access and abuse. This security layer restricts direct access to the site's content, limiting the ability to fully analyze the website's features and policies. Technically, the site uses standard web technologies including HTML5 and JavaScript, with Google reCAPTCHA integrated for bot protection. The domain is hosted by Hetzner Online GmbH and uses HTTPS, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present on the landing page, and no contact or business information is disclosed, which impacts the site's transparency and compliance posture.

H

Hetzner Online GmbH

your-objectstorage.com

78

Hetzner Online GmbH is a well-established German hosting and data center operator founded in 1997, offering a broad range of IT infrastructure services including dedicated servers, cloud hosting, and scalable S3-compatible Object Storage solutions. The company emphasizes GDPR compliance, sustainability through 100% green electricity, and transparent pricing models. Their Object Storage product targets businesses and private customers needing flexible, secure, and scalable storage solutions with pay-as-you-go billing. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and uses SilverStripe CMS. It integrates Matomo analytics for privacy-conscious user tracking and provides a responsive, accessible, and well-structured user experience. The hosting is self-managed by Hetzner, ensuring good performance and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and secures forms with CSRF tokens. However, explicit security headers are not clearly visible in the HTML, and no dedicated security or incident response pages are found. The WHOIS data for the domain is unavailable, which limits domain registration trust analysis but does not detract from the professional presentation and trust signals on the site. Overall, Hetzner Online demonstrates a strong security posture, excellent privacy compliance, and a mature business model. Strategic recommendations include publishing explicit security policies, enhancing security headers, and providing clear incident response contacts to further strengthen trust and compliance.

S

Startseite » Studierzimmer Münster

studierzimmer-muenster.de

35

Studierzimmer Münster is a community-driven campaign focused on facilitating affordable student housing in the city of Münster, Germany. The website serves as a platform to connect landlords, investors, and students seeking housing, emphasizing social support and local collaboration. The campaign is supported by local institutions including the City of Münster, University of Münster, Fachhochschule Münster, and Studentenwerk Münster, indicating strong community ties and trust. Technically, the website is built on the SilverStripe CMS platform, utilizing standard web technologies such as HTML5, CSS, JavaScript, and jQuery. The site demonstrates moderate performance and basic mobile optimization. However, there is room for improvement in accessibility and SEO optimization. The hosting is provided by kasserver.com, a known hosting provider. From a security perspective, the site uses HTTPS as indicated by the base URL, but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms with sensitive inputs are present on the homepage, reducing immediate risk exposure. The absence of vulnerability disclosure and incident response information suggests limited security maturity. Overall, the website is a trustworthy and professional community resource with moderate technical and security posture. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance with data protection regulations.

J

JurGrad gGmbH

jurgrad.de

61

JurGrad gGmbH is a specialized educational institution affiliated with the University of Münster, offering part-time master's degree programs and certificate courses primarily in legal studies. The website reflects a professional and well-maintained digital presence, targeting professionals seeking advanced legal education. The business model focuses on continuing education with a strong academic foundation and practical relevance. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates robust cookie consent management via Cookiebot, alongside analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie policies and GDPR adherence. Overall, the site demonstrates a trustworthy and credible online presence suitable for its educational mission.

Z

Zinngrube Ehrenfriedersdorf

zinngrube-ehrenfriedersdorf.de

43

Zinngrube Ehrenfriedersdorf operates as a regional mining heritage museum in Germany, offering guided tours, exhibitions, educational programs, and event hosting. The website is well-structured, professionally designed, and targets families, tourists, and educational groups interested in mining history. It is affiliated with the Zweckverband Sächsisches Industriemuseum, indicating a stable institutional backing. Technically, the site runs on TYPO3 CMS with Matomo analytics, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

K

KIDS Regio c/o Deutsche Kindermedienstiftung Goldener Spatz

kids-regio.org

52

KIDS Regio is a German non-profit organization operating under the Deutsche Kindermedienstiftung Goldener Spatz, focusing on children's media and film festivals. The website serves as a platform for events like the KIDS Regio Forum and provides publications and networking opportunities for professionals in the children's media sector. The organization targets a niche audience involved in young audience film festivals and media education. Technically, the website is built on WordPress with common plugins such as LayerSlider and Real Cookie Banner Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with good content quality and clear navigation. Security-wise, the site uses HTTPS and a GDPR-compliant cookie consent mechanism but lacks DNSSEC and some advanced security headers, which are recommended for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with no signs of adult or questionable content.

V

VGBND

vgbnd.tv

59

VGBND is a media production network established in 2002, offering high-end production services across South America, Spain, Switzerland, and the USA. The company targets media professionals and advertising agencies, positioning itself as a quality-focused service provider with an international footprint. The website showcases a portfolio of projects with rich multimedia content, reflecting a professional and consistent brand image. Technically, the site is built on modern JavaScript frameworks (Vue.js and Nuxt.js) and integrates analytics tools such as Google Tag Manager and Microsoft Clarity. Hosting details are not explicit, but DNS is managed via NS1.net. Security posture is adequate with HTTPS enforced, though improvements are recommended in DNSSEC and security headers. Privacy compliance is supported by a cookie consent mechanism and a basic cookie policy, with GDPR considerations evident. Contact information is primarily via a web form and social media channels, with no direct emails or phone numbers disclosed. The domain is newly registered in 2024 with privacy protection, which contrasts with the company's founding year, suggesting a recent domain acquisition or rebranding. Overall, the website is professional, secure, and compliant, with room for enhanced security policies and transparency.

L

LITES STUDIOS

litesstudios.com

53

LITES STUDIOS operates a specialized underwater and water stage filming facility based in Brussels, Belgium. The company offers advanced water stages with features such as moveable floors, overhead cranes, floodable studio floors, and large sound stages, targeting film and media production professionals. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix technologies and polyfills. The site is mobile optimized and uses HTTPS, but lacks advanced security headers and privacy compliance mechanisms. No WHOIS registration data is available, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the security posture is moderate with room for improvement in privacy and contact transparency.

H

HappierLeads

happierleads.com

66

HappierLeads is a B2B SaaS company specializing in identifying, qualifying, and engaging anonymous website visitors to generate high-quality leads. The platform targets sales, growth, and marketing teams, offering a proprietary identification method that surpasses traditional reverse IP lookup technologies. The company operates a subscription model with a free 30-day trial and a monthly fee thereafter. Technically, the website is built on Webflow and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity. The site is hosted with Cloudflare DNS but lacks DNSSEC and security headers, which are recommended for enhanced security. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, well-branded, and content-rich, though it could improve transparency and compliance documentation.

F

Football Agency Cup GmbH

agency-cup.com

56

Football Agency Cup GmbH operates a well-established football tournament event for Germany's marketing and creative agencies, positioning itself as the largest industry event of its kind since 1988. The website is professionally designed using the Wix platform, offering good content quality and user experience tailored to its target audience. However, the technical infrastructure is basic with moderate performance and limited advanced SEO or accessibility features. Security posture is average with no evident security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Overall, the digital maturity is moderate with room for improvement in security and compliance.

H

Hopp Foundation for Computer Literacy & Informatics gGmbH

hopp-foundation.de

50

The Hopp Foundation for Computer Literacy & Informatics gGmbH is a small non-profit organization based in Germany focused on promoting digital education in the Rhein-Neckar metropolitan region. Their website offers comprehensive information about workshops, teaching materials, and support services for teachers, school leaders, students, and parents. The foundation emphasizes practical and innovative learning formats to foster digital literacy and informatics skills. Technically, the website is built on a modern stack with Kirby CMS, uses JavaScript libraries for UI enhancements, and is hosted on a domain managed by DomainControl. The site is mobile-optimized, well-structured, and provides clear navigation and professional design. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No tracking or advertising scripts were detected, reflecting a privacy-conscious approach. WHOIS data is minimal but consistent with a legitimate educational entity. Overall, the website is trustworthy, professional, and well-suited for its educational mission.

E

Esri

arcgisonline.com

64

Esri's ArcGIS Online platform provides a comprehensive SaaS solution for geographic information system (GIS) services, enabling users to connect people, locations, and data through interactive maps and spatial analysis tools. The website reflects a mature enterprise-level service with a clear focus on GIS professionals and organizations requiring mapping and data visualization capabilities. The platform is positioned as a leading geospatial technology provider with a strong brand presence and consistent messaging. Technically, the website employs a mature JavaScript stack including the Dojo Toolkit and Esri's own JS API, alongside modern Calcite components for UI. While the technology is somewhat dated, it remains functional and optimized for web and mobile use. The site demonstrates good SEO and basic accessibility features, though there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, explicit security headers are not evident in the provided data, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is strong with comprehensive policies linked, though no cookie consent mechanism is detected. The absence of direct contact emails or phone numbers on the main page suggests a controlled communication approach via official Esri channels. Overall, the website is trustworthy and professional, with a solid business credibility score. The missing WHOIS data is a notable anomaly but likely due to registry privacy or restrictions rather than malicious intent. Strategic recommendations include enhancing security headers, publishing incident response details, improving accessibility, and implementing cookie consent mechanisms to further strengthen compliance and user trust.

N

Northwestern University Knight Lab

knightlab.com

57

Northwestern University Knight Lab is an academic and research community focused on advancing journalism and media innovation through exploration, experimentation, and open-source storytelling tools. The Lab serves a diverse audience including students, educators, journalists, and media makers, providing tools, classes, and research initiatives that push the boundaries of storytelling and media technology. The Lab is well-positioned as a leader in media innovation with strong ties to Northwestern University and a global user base for its open-source projects. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including Google Analytics for tracking. The site is mobile-optimized with good SEO and accessibility basics, hosted likely on Northwestern's infrastructure or associated CDNs. However, there is room for improvement in security headers and privacy compliance, as no explicit privacy or cookie policies are found, and no cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities in the provided content. The absence of security headers and privacy policies are notable gaps. The WHOIS data is unavailable, typical for edu subdomains, but the domain's affiliation with Northwestern University and consistent website content support legitimacy. Overall, the site demonstrates a solid security posture but could enhance compliance and transparency. The overall risk is low given the academic nature and reputable affiliation, but strategic improvements in privacy, security headers, and user consent would strengthen trust and compliance.

H

Hostinger

hostinger.in

71

Hostinger is a globally recognized web hosting provider offering a wide range of services including shared hosting, VPS, cloud hosting, domain registration, and AI-powered website building tools. The company targets individuals, small to medium businesses, and agencies seeking reliable and scalable online presence solutions. Their website demonstrates a mature digital infrastructure with modern frameworks such as Vue.js and Nuxt.js, and integrates advanced analytics and marketing tools like Google Tag Manager and Amplitude. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is noted but likely due to registry restrictions or privacy measures common among large hosting providers. Overall, Hostinger's website reflects a professional, trustworthy, and technically sound platform suitable for its market segment.

S

Setup Type

setuptype.com

57

Setup Type is a Slovak-based design studio and type foundry specializing in font creation, branding, and lettering services. Founded in 2009 by Ondrej Jób, the company targets creative professionals and agencies seeking high-quality typographic and branding solutions. The website reflects a niche market position with a strong focus on design aesthetics and font retail. Technically, the website employs modern web technologies including HTTPS, Google Analytics, and cookie consent mechanisms, providing a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social media presence support business credibility. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and enhanced security practices.

B

Bundesanstalt für Materialforschung und -prüfung (BAM)

bam.de

61

The Bundesanstalt für Materialforschung und -prüfung (BAM) is a German federal scientific research institute specializing in material research and testing. It operates under the Federal Ministry for Economic Affairs and Energy and serves a broad audience including researchers, industry professionals, and government entities. The website provides comprehensive scientific content, official portals, and public services related to material safety and technology transfer. Technically, the site uses modern web technologies with good mobile optimization and accessibility. Security posture is strong with HTTPS and privacy-respecting analytics (Matomo) that anonymize user data and require consent. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site reflects a professional, trustworthy government entity with excellent content quality and privacy compliance.

D

DRI and Syloé

produhost.net

51

The website serves as a login portal for ÉVA Pilote, an extranet management platform developed collaboratively by DRI and Syloé. It targets business users who require tailored tools to manage hosted applications and services, including eco-indicators for digital sobriety. The platform positions itself as a niche B2B SaaS solution with a focus on visibility and control over application environments. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap, delivering a responsive and professional user interface. However, the absence of visible security headers and unclear SSL status suggests moderate security maturity. The lack of privacy and cookie policies indicates gaps in compliance with data protection regulations. WHOIS data is missing, raising concerns about domain registration legitimacy despite the professional appearance and partner affiliations. Overall, the site is functional and business-focused but requires improvements in security posture and compliance documentation.

M

Musikvertrieb AG

musikvertrieb.ch

52

Musikvertrieb AG is a Swiss independent music distributor and record label with a long history dating back to 1935. The company focuses on marketing and distributing national and international artists and labels, including partnerships with notable entities such as PIAS and muve recordings. The website reflects a professional presence in the media industry, targeting music industry professionals and independent artists. Technically, the site is built on WordPress using the Brooklyn theme, leveraging modern web technologies and asynchronous loading of analytics and tracking scripts. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

Net Oxygen Sàrl

ticketack.com

48

Ticketack is a Swiss-based company offering a comprehensive ticketing and point of sale solution tailored for festivals, cinemas, concert halls, leisure centers, restaurants, bars, and retail businesses. Established in 2014, the company positions itself as a reliable and flexible provider with a strong client base and notable partnerships, including Eventival. The website is professionally designed, multilingual (French and English), and provides clear contact information and business details. The technical infrastructure is built on WordPress with modern plugins and technologies, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and policies are missing. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website reflects a trustworthy and professional business with room for improvement in privacy and security transparency.

W

waldbach medien

waldbachmedien.ch

50

waldbach medien is a small Swiss technology company specializing in web development, digital media, and consulting services with over 20 years of experience. The company targets businesses and organizations seeking tailored internet solutions including responsive websites, webshops, multimedia presentations, and IoT device development. Their market position is that of a niche local specialist in Winterthur, Switzerland, offering a broad range of digital services supported by a proprietary CMS platform (WebZen). The website reflects a professional and consistent brand image with clear navigation and relevant content.

E

Etat de Genève

ge.ch

70

The website www.ge.ch is the official online portal for the République et canton de Genève, serving as the authoritative source for government information, public services, and administrative procedures for residents and businesses in the Canton of Geneva, Switzerland. It offers comprehensive access to official news, e-demarches (online administrative procedures), publications, and institutional information, positioning itself as a critical government communication and service platform. Technically, the site is built on the Drupal CMS platform, leveraging modern web technologies including responsive design, JavaScript, and Matomo analytics for user tracking with consent. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Hosting details are not explicitly stated but are likely managed by government infrastructure. From a security perspective, the site enforces HTTPS and uses a consent-based cookie banner compliant with GDPR. While explicit security headers are not visible in the HTML, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page is noted as an area for improvement. The WHOIS data confirms the domain is registered to the official government entity, reinforcing legitimacy. Overall, the site is highly trustworthy, professionally designed, and well-maintained, with strong privacy compliance and a clear focus on public service. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

C

Commerzbank

commerzbank.com

64

Commerzbank's group website serves as the corporate portal for one of Germany's major banking institutions. The site provides information about the bank's corporate identity and services, targeting corporate clients, investors, and the general public interested in the bank's operations. The website demonstrates a professional design with consistent branding and a moderate level of technical maturity, including the use of modern web technologies and a cookie consent mechanism to comply with privacy regulations. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of explicit privacy policy and terms of service in the provided content suggests areas for improvement in privacy compliance and transparency. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy online presence.

D

Doris Ossberger

wortklaviatur.at

45

The website wortklaviatur.at represents a small personal business operated by Doris Ossberger, offering writing and educational services with a focus on clear communication and accessibility. The site is built on WordPress using the Neve theme and incorporates modern web technologies such as Google Fonts and emoji support. The content is well-structured, professionally presented, and targets German-speaking users, primarily in Austria. The business model is service-oriented, catering to individuals and organizations seeking writing and teaching assistance. Technically, the site performs moderately well with good mobile optimization and SEO practices, though some improvements in accessibility could be made. Security posture is adequate with HTTPS enabled but lacks important security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No contact emails or phone numbers are directly visible, relying on a contact form for communication. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

SmileReef is a small e-commerce business specializing in eco-friendly surf hats with integrated helmets, targeting environmentally conscious surfers. The company emphasizes sustainability by using recycled ocean plastics and supports reef conservation with a portion of sales. The website is professionally designed on the Shopify platform, featuring customer reviews and multi-language support, indicating a moderate level of digital maturity. Technically, the site uses modern web technologies and is hosted on Google Cloud via Shopify, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. WHOIS data shows anomalies such as a future domain creation date and country mismatch, which slightly reduce trustworthiness but do not negate the overall legitimacy. Privacy compliance is addressed with policies and cookie consent mechanisms. Overall, the site presents a trustworthy and professional e-commerce presence with room for improvement in security transparency and domain registration consistency.

F

Fondazione Valore

fondazionevalore.org

60

Fondazione Valore is a non-profit foundation established in 2022 in Italy, focused on promoting circular economy principles by facilitating donations of goods, services, and skills to reduce waste and recover social and economic value. The organization collaborates with third sector entities, businesses, and public institutions to foster sustainable development and social impact. Their key services include surplus donations, skills volunteering, urban regeneration, and training programs. The website reflects a clear mission and target audience aligned with sustainability and social responsibility. Technically, the website is built on WordPress with Elementor, hosted via Register SpA, and employs modern web technologies ensuring good mobile optimization and SEO practices. The site uses HTTPS and includes a cookie consent mechanism compliant with GDPR, though it lacks advanced security headers and DNSSEC, which are recommended for enhanced security. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a moderate security posture with secure forms and no exposed sensitive data. However, the absence of DNSSEC and security headers suggests room for improvement. Incident response and vulnerability disclosure information are not present, which could be addressed to improve trust and compliance. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy. The website content is safe for general audiences, with no adult or questionable material. The site provides a professional user experience with clear navigation and relevant content, though contact information is limited to a form and physical address without direct emails or phone numbers. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security.txt file, and providing incident response contacts to enhance security and compliance posture.

A

AIESEC International Inc.

aiesec.it

42

AIESEC Italia is a well-established non-profit youth organization focused on leadership development through international exchange programs such as volunteering, internships, and teaching abroad. The website reflects a professional and consistent brand presence targeting young people and students interested in global leadership experiences. The organization has a strong market position with global reach and recognized affiliations with UN bodies. Technically, the website uses modern JavaScript libraries and tracking tools, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some security headers and explicit privacy and terms policies. Cookie consent is implemented via Usercentrics CMP, indicating GDPR awareness. Overall, the website is trustworthy and professional with room for improvement in privacy transparency and security hardening.

I

Istituto Italiano della Donazione (IID)

istitutoitalianodonazione.it

55

Istituto Italiano della Donazione (IID) is a well-established Italian non-profit organization founded in 2004 that promotes transparency, credibility, and honesty in charitable donations. It certifies non-profit organizations with quality marks to foster donor trust and organizes events such as DonoDay to raise awareness. The website targets donors, non-profit associations, and enterprises interested in safe donation practices. Technically, the site uses a custom CMS with JavaScript, AJAX, and integrates social media SDKs and Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO, with good content quality and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data confirms domain legitimacy with consistent registration since 2004. Overall, the site is trustworthy and professional but could improve security and privacy compliance.

A

Amazon.com, Inc.

aboutamazon.com

63

The website www.aboutamazon.com serves as Amazon.com's official corporate news and information portal, providing breaking news, company updates, and insights into Amazon's innovations, workplace culture, sustainability efforts, and community impact. It targets a broad audience including consumers, investors, employees, and media professionals. The site reflects Amazon's position as a global leader in e-commerce, cloud computing, and technology services, showcasing key services such as AWS, retail operations, devices, and entertainment. Technically, the site is built on modern web technologies including React and Next.js, with a strong focus on performance, mobile optimization, and accessibility. It employs advanced tracking and analytics tools like Adobe Alloy and Adobe DTM, and integrates comprehensive SEO and metadata strategies to enhance discoverability. The content is rich, professionally curated, and regularly updated, supporting a high-quality user experience. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements multiple security headers to protect users. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not prominently available, representing an area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates a mature digital presence with strong business credibility and security posture. The absence of WHOIS data is noted but does not detract from the site's legitimacy given its official branding and content. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing security contact transparency to further strengthen trust and compliance.

S

Sitejet (part of WebPros International GmbH)

sitejet.io

66

Sitejet Studio is a professional SaaS platform focused on providing website building, project management, and client collaboration tools primarily for agencies and freelancers. The company operates under WebPros International GmbH and has been established since 2013, positioning itself as a competitive player in the web design technology sector. The platform offers a comprehensive suite of services including a no-code website builder, integrated project management, customer portals, SEO tools, and e-commerce capabilities, aiming to streamline workflows and reduce design time significantly. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Visual Website Optimizer, alongside a consent management platform (Usercentrics) to comply with privacy regulations. The site is well-optimized for mobile devices, SEO-friendly, and demonstrates good accessibility practices. Hosting details are not explicitly disclosed, but the platform includes secure hosting features as part of its offering. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. The WHOIS data is unavailable due to privacy protection or query failure, which slightly reduces trust but is justified for this business type. No critical vulnerabilities or suspicious content were detected. Overall, Sitejet Studio presents a trustworthy and professional web presence with strong business credibility and technical maturity. Strategic improvements include publishing explicit privacy and security policies, enhancing security headers, and providing vulnerability disclosure information to further strengthen trust and compliance.

M

Monte Cavallo

montecavallo.com

51

Monte Cavallo is a regional tourism website focused on promoting the Monte Cavallo ski and hiking area near Vipiteno in South Tyrol, Italy. The site offers information about skiing, sledding, hiking, and family-friendly outdoor activities, targeting tourists and families interested in alpine experiences. The business model revolves around tourism services including ticket sales and accommodation bookings. The website is professionally designed with consistent branding and multilingual support, reflecting a good level of digital maturity. Technically, it uses modern web technologies and a proprietary CMS (Consisto.CMS), with integrated analytics and consent management tools. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy and terms of service pages. WHOIS data is not publicly available, which slightly reduces trustworthiness but does not strongly indicate malicious intent. Overall, the site is safe, well-structured, and suitable for general audiences interested in tourism in the region.

V

Vacanze a Vipiteno - Racines - Colle Isarco Il top in Alto Adige

vipiteno-racines.it

44

The website www.vipiteno-racines.it is a regional tourism portal focused on promoting the Vipiteno-Racines-Colle Isarco area in northern Italy's Alto Adige region. It provides visitors with information about skiing, hiking, cultural highlights, accommodation booking, and local events. The site targets tourists interested in alpine vacations and outdoor activities. Technically, it uses a proprietary CMS (Consisto.CMS), integrates Google Tag Manager and Google Analytics for tracking, and employs responsive design techniques for mobile optimization. However, it lacks visible privacy and cookie policies, and no explicit contact information or security policies are found in the provided content. Security headers are not detected, and the domain uses privacy protection in WHOIS, which is common but reduces transparency. Overall, the site is functional and professionally designed but could improve in privacy compliance and security posture.

Testudo Srl is an Italian boutique software company specializing in custom software development, innovative SaaS products, and strategic consulting. The company targets businesses seeking tailored digital solutions to improve operational efficiency and market competitiveness. Their website showcases a strong client portfolio including major brands across various sectors such as logistics, insurance, manufacturing, and professional services, positioning them as a reputable player in the technology industry. Technically, the website is built using modern frameworks like Next.js and React, delivering fast performance, excellent mobile optimization, and good SEO practices. Security-wise, the site enforces HTTPS and includes essential security headers, reflecting a mature security posture. However, the absence of WHOIS registration data and lack of direct contact emails or phone numbers slightly reduce trust. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it would benefit from publishing explicit security policies and incident response contacts.

The website ww38.siements.com is a parked domain with no active business content. It primarily serves as a landing page indicating the domain is for sale, with affiliate links to domain marketplaces. The domain name is a misspelling of a well-known brand, which raises suspicion of typo-squatting or phishing intent. The technical infrastructure is minimal, relying on basic HTML, JavaScript, and iframes loading external content from potentially suspicious domains. No privacy, cookie, or terms of service policies are present, and no contact or business information is provided. Security posture is weak, with no HTTPS enforcement or security headers detected. WHOIS data is unavailable, indicating the domain is either unregistered or privacy-protected, further reducing trustworthiness.

EXPERT Elektrofachhandel operates as a large regional electrical retail chain in Austria, with a strong physical presence across 180 stores and an online platform. The business focuses on selling electrical appliances, providing electrical installation services, and offering repair and maintenance. The website reflects a professional retail business model targeting general consumers in Austria. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, with integration of third-party services like Klarna for payments and Google Tag Manager for analytics. The site is mobile optimized and has good SEO practices, though accessibility is basic. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the business claims. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

U

UNIQA Österreich Versicherungen AG

uniqa.at

61

UNIQA Österreich Versicherungen AG is a leading Austrian insurance company offering a broad range of insurance, pension, and investment products. With over 3.6 million customers, it holds a strong market position in Austria's finance sector. The website reflects a professional and trustworthy brand image, targeting the general Austrian public seeking insurance and financial services. The business model focuses on providing innovative insurance solutions and financial planning products. Technically, the website employs modern frameworks such as Angular and Bootstrap, integrates Adobe Experience Platform for marketing and analytics, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response contacts are not prominently published. WHOIS data confirms the domain's legitimacy and consistency with the company's business claims. Overall, the site is well-designed, secure, and compliant with GDPR requirements, making it a reliable digital presence for UNIQA.

A

Avvenire

avvenire.it

67

Avvenire.it is a well-established Italian media website providing news and multimedia content primarily in Italian. The site targets a general audience interested in current events and media content. Technically, the website employs modern web technologies including Nuxt.js framework, Tailwind CSS for styling, and is hosted on Microsoft Azure CDN infrastructure, ensuring good performance and scalability. The site integrates Cookiebot for cookie consent management and uses Google Tag Manager and Matomo for analytics, indicating a moderate level of user tracking and privacy compliance. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks explicit security headers and published security policies, which could be improved to enhance security posture. Overall, the site is professional and trustworthy with no signs of blocking or WAF interference, but it would benefit from publishing comprehensive privacy and security policies to improve compliance and user trust.

O

Olsberg SPI

o-spi.com

61

Olsberg SPI is a specialized international consultancy focused on the creative industries, particularly the global screen sector. The company offers strategic advisory and consultancy services to public and private sector clients, aiming to foster sustainable growth and demonstrate impact in a competitive environment. The website is professionally designed using Squarespace, featuring clear navigation and relevant content about their services, projects, and news. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status. Security posture is moderate with HTTPS enabled but lacking advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a credible business front but would benefit from enhanced transparency and security practices.

I

In Good Spirits

ingoodspirits.at

56

In Good Spirits Vertriebsgesellschaft is a small Austrian company specializing in the distribution of spirits, sparkling wines, and non-alcoholic beverages primarily targeting the gastronomy and retail sectors in Austria. Their website reflects a professional and consistent brand presence, showcasing a diverse product portfolio with detailed descriptions. The company leverages WordPress CMS with SEO optimizations but lacks some advanced security and compliance features. Technically, the site is moderately performant and mobile-optimized, though it could benefit from enhanced accessibility and security headers. Security posture is adequate with HTTPS enforced but missing several best practice headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the website is trustworthy and suitable for mature audiences given its alcohol-related content.

L

Liferay, Inc.

liferay.com

72

Liferay, Inc. is a well-established enterprise technology company specializing in digital experience platforms (DXP) that enable businesses to build portals, intranets, and websites with integrated content management and collaboration features. The company targets enterprise customers and developers, offering a comprehensive platform with strong market positioning. The website reflects a mature digital infrastructure with modern technologies such as React, Alloy UI, and OAuth2 for authentication. Analytics and marketing tools are implemented with privacy compliance in mind. Security posture is strong with HTTPS, CSP, and no visible vulnerabilities, though some security headers could be explicitly published. The absence of WHOIS data reduces domain transparency but is likely due to privacy or registry policies rather than malicious intent. Overall, the website is professional, secure, and trustworthy, supporting Liferay's reputation as a leader in the DXP market.

F

Plesk Obsidian 18.0.72

fondonegri.it

61

The website is a login portal for Plesk Obsidian 18.0.72, a commercial web hosting control panel software widely used by hosting providers and administrators. The page is designed primarily for authenticated users to access hosting management features. The business behind the software is positioned as a technology provider in the web hosting industry, targeting hosting service providers and web administrators. The site content is minimal, focusing on login functionality with cookie consent mechanisms in place, but lacks visible privacy policies or contact information on this page. Technically, the site uses the Plesk UI library, JavaScript frameworks like Prototype.js and RequireJS, and standard web technologies. The page is moderately optimized for mobile and accessibility but lacks advanced SEO features. Security-wise, the site uses HTTPS (implied by URL), includes CSRF protection tokens, and password input controls, but no explicit security headers were detected in the HTML content. DNSSEC is not enabled for the domain, which is a recommended improvement. The domain is well-established, created in 2000, indicating legitimacy. Overall, the security posture is moderate with room for improvement in security headers and explicit privacy/security policies. The site is safe with no adult or questionable content. No WAF or blocking mechanisms were detected, allowing full content access. The lack of visible business contact details and privacy policy on this page limits privacy compliance scoring. Strategic recommendations include enabling DNSSEC, adding security headers, and providing clear privacy and security policies linked from the login page.

T

Thomas Werner

spassmitdaten.de

44

Spass mit Daten is a German-language curated link directory and blog focused on data science, data visualization, and open data. The site provides categorized links to data sources, tools, background information, and guides, targeting data professionals, researchers, and hobbyists interested in open data. The business operates as a small, content-driven resource without direct commercial offerings. Technically, the site is built using the Hexo static site generator with the Icarus theme, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and libraries like jQuery and Moment.js. Hosting is provided by Schlund Technologies, and the site uses HTTPS with good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner. No contact information or formal security policies are published, limiting direct user engagement and incident response readiness. Overall, the website is professional, trustworthy, and safe, with minimal tracking and no advertising. The domain registration is consistent with the website's history and hosting provider, supporting legitimacy. Strategic improvements in security and privacy compliance would enhance trust and resilience.

C

Code for Germany

codefor.de

50

Code for Germany is a non-profit civic tech network focused on promoting open data, open government, and digital sustainability in Germany. It operates through a community of approximately 300 volunteers organized in local labs and an online platform. The organization is coordinated by the Open Knowledge Foundation Deutschland e.V. and is part of the global Code for All network. Their key services include developing open source software and hardware projects, supporting municipalities in digital transformation, and advocating for transparent and sustainable digital policies. Technically, the website is built using the Hugo static site generator, employs Matomo for privacy-conscious analytics, and is well-optimized for performance and mobile devices. Security posture is solid with HTTPS and minimal tracking, though improvements are recommended in security headers and explicit cookie consent. Overall, the website is professional, trustworthy, and serves a clear community and civic purpose.