Security Directory

C

CH Media

chmedia.ch

58

CH Media is a leading Swiss media company with a strong presence in the German-speaking region, operating approximately 70 brands across print, radio, TV, streaming, and digital platforms. Founded in 1836, it is a well-established family-run business emphasizing independent journalism and regional engagement. The website reflects a professional and comprehensive digital presence, showcasing their brands, services, and career opportunities. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and integrates Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is trustworthy, well-branded, and compliant with GDPR privacy policies.

O

Occupational Safety and Health Administration

osha.gov

66

The Occupational Safety and Health Administration (OSHA) is a U.S. federal government agency under the Department of Labor dedicated to ensuring safe and healthy working conditions by setting and enforcing standards and providing training, outreach, education, and assistance. The website serves as a comprehensive resource for employers, workers, and safety professionals, offering regulatory information, enforcement data, training resources, and contact channels. It holds a strong market position as the authoritative source for occupational safety and health in the United States. Technically, the website is built on Drupal 10 with modern frameworks such as Bootstrap and integrates Google services for analytics and translation. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate likely due to the extensive content and third-party integrations. The site uses HTTPS with strong SSL configuration and includes security headers, but could enhance security posture by adding more explicit headers and publishing vulnerability disclosure information. Security-wise, OSHA's website shows a mature security posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a cookie consent mechanism and explicit incident response contact information, which are areas for improvement to align with privacy regulations and best practices. The WHOIS data is unavailable, which is typical for government .gov domains, but the domain's legitimacy is strongly supported by official branding and consistent government affiliation. Overall, the website is professional, trustworthy, and well-maintained, serving its public service mission effectively. Strategic recommendations include implementing cookie consent, publishing security policies and incident response contacts, and enhancing security headers to further strengthen trust and compliance.

P

Paul Scherrer Institute PSI

psi.ch

71

The Paul Scherrer Institute (PSI) is Switzerland's largest research center for natural and engineering sciences, focusing on Matter and Material, Energy and the Environment, and Human Health. It operates large-scale research facilities and provides proton therapy services, positioning itself as a leading institution in scientific research and healthcare. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting researchers, industry partners, patients, and the general public. Technically, the site is built on Drupal 10 with modern web technologies and integrates Matomo analytics with privacy-conscious configurations. Security posture is strong with HTTPS and privacy-respecting analytics, though explicit security policies and vulnerability disclosures are not evident. Overall, PSI demonstrates high business credibility and trustworthiness with transparent contact information and organizational details.

A

American Hotel & Lodging Association

ahla.com

69

The American Hotel & Lodging Association (AHLA) operates a comprehensive and professionally designed website serving as the central hub for the U.S. hotel industry's advocacy, resources, events, and membership services. The site demonstrates a mature digital presence with extensive content, including policy guides, event calendars, industry initiatives, and partner networks. Technically, the website is built on Drupal 10 with modern front-end libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, HubSpot, and Microsoft Clarity, indicating a data-driven approach to user engagement and marketing. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers and incident response policies are not clearly published. No critical vulnerabilities or exposed sensitive data were detected in the accessible content. Privacy compliance is well addressed with a comprehensive cookie policy and privacy documentation, supporting GDPR compliance. The absence of WHOIS data limits domain registration transparency, but the website's professional content and industry partnerships strongly support its legitimacy. Overall, AHLA's website reflects a robust and credible industry association platform with strong business credibility, good technical implementation, and a solid security posture. Strategic improvements could include publishing explicit security policies, incident response contacts, and enhancing security headers to further strengthen trust and compliance.

S

Storage Networking Industry Association (SNIA)

snia.org

72

The Storage Networking Industry Association (SNIA) operates a comprehensive website focused on developing global standards and delivering education related to data technologies. The organization positions itself as an expert authority in data storage and management, serving a large membership base of over 3,000 professionals. The website offers extensive resources including technical specifications, educational libraries, events, and membership services, targeting technology professionals and enterprises in the storage industry. Technically, the site is built on Drupal 10 with Commerce 2, integrates Google Tag Manager for analytics, and uses LiveChat for customer engagement. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital presence. Security-wise, the website enforces HTTPS and includes some security best practices, though explicit security headers and a cookie consent mechanism are absent. WHOIS data is unavailable due to malformed query results, but the website's professional presentation and organizational transparency support its legitimacy. Overall, the site demonstrates a strong security posture and business credibility with minor areas for improvement in privacy compliance and security header implementation.

S

Storage Networking Industry Association (SNIA)

storagedeveloper.org

71

The SNIA Developer Conference website represents a well-established industry association focused on data technology education and collaboration. The site provides comprehensive information about the conference, including detailed speaker profiles, agenda, sponsorship opportunities, and news updates. The target audience includes software engineers, product managers, CTOs, and other IT professionals involved in data technology. Technically, the site is built on Drupal 10 with modern web technologies, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and some security practices, though visible security headers and privacy policies are lacking. WHOIS data is incomplete, which slightly impacts trustworthiness but the professional content and branding strongly support legitimacy. Overall, the site is professional, content-rich, and trustworthy with room for improvement in privacy compliance and security transparency.

S

State of Colorado

colorado.gov

63

The website colorado.gov serves as the official online portal for the State of Colorado, providing residents, businesses, and visitors with access to government services, information, and resources. It is positioned as a key digital gateway for state government interactions and public information dissemination. The site leverages modern web technologies including Drupal 10 CMS, Alpine.js, and Font Awesome icons, alongside analytics tools such as Siteimprove and Crazy Egg to monitor performance and user engagement. The technical infrastructure reflects a moderate to good level of digital maturity with mobile optimization and SEO considerations in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities in the provided content, though the absence of security headers and explicit security policies suggests room for improvement. Overall, the site is trustworthy and professional, consistent with its role as a government portal, but could enhance privacy compliance and incident response transparency to further strengthen user trust and regulatory adherence.

O

Office of Apprenticeship

apprenticeship.gov

62

Apprenticeship.gov is an official U.S. Department of Labor website serving as a comprehensive resource for apprenticeship opportunities, benefits, and industry support. It targets career seekers, employers, and educators, providing tools such as apprenticeship job finders, verification services, and educational resources. The site is well-branded with consistent government identity and offers a professional user experience with clear navigation and relevant content. Technically, the site is built on Drupal 10, integrates Google Analytics and government analytics tools, and uses modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though explicit security headers and policies are not published. Privacy compliance is limited by the absence of visible privacy and cookie policies. Overall, the site is trustworthy, authoritative, and serves its government mandate effectively.

E

emeis

emeis.com

68

emeis is a healthcare services provider operating in over 20 countries, specializing in personalized care and support for individuals with physical, cognitive, or mental fragilities. The company is positioned as a significant player in the healthcare sector with a large workforce and is associated with the parent company Orpea. The website is professionally designed using Drupal 10, integrating modern technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good digital maturity with mobile optimization, accessibility, and SEO best practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. WHOIS data is unavailable or inconsistent, likely due to privacy protection or domain registration under a different entity, but the website content and business information indicate legitimacy. Overall, the site presents a trustworthy and professional online presence with moderate to high compliance with privacy regulations.

U

U.S. Election Assistance Commission

eac.gov

67

The U.S. Election Assistance Commission (EAC) is a federal government agency dedicated to improving election administration and supporting voters and election officials across the United States. The website serves as a comprehensive resource hub offering election management guidelines, voter information, election technology certification, research data, and grant management resources. It targets election officials, voters, researchers, and government stakeholders, positioning itself as the authoritative federal entity in election assistance. Technically, the website is built on Drupal 10 and employs modern web technologies including jQuery, Flexslider, and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS exclusively, ensuring secure connections, and integrates social media channels for broader engagement. From a security perspective, the site follows best practices such as HTTPS enforcement and secure external linking. However, explicit security headers are not clearly visible in the HTML, and there is no visible cookie consent mechanism or vulnerability disclosure policy. WHOIS data is unavailable, which is typical for .gov domains, but this limits domain registration transparency. Overall, the site exhibits a strong security posture appropriate for a government agency. The overall risk assessment is low given the official nature, secure infrastructure, and absence of suspicious content. Strategic recommendations include implementing explicit cookie consent for privacy compliance, publishing a vulnerability disclosure policy, enhancing security headers, and providing incident response contact information to further strengthen trust and compliance.

C

Carnegie Mellon University

cmu.edu

70

Carnegie Mellon University is a prestigious private global research university based in Pittsburgh, USA, recognized among the top 20 universities in the United States. It offers a broad range of undergraduate, graduate, and continuing education programs with a strong emphasis on technology, artificial intelligence, and interdisciplinary research. The university has a large faculty body, notable alumni, and a history of pioneering contributions to AI and robotics. The website reflects a mature digital presence with comprehensive academic and campus life information targeting students, faculty, alumni, and researchers. Technically, the website is built on Drupal 10 CMS and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and a vulnerability disclosure policy. The WHOIS data is unavailable, which is typical for .edu domains due to registry policies, but the domain and content strongly indicate legitimacy. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, serving as a key digital asset for Carnegie Mellon University.

K

KRO-NCRV

kro-ncrv.nl

64

KRO-NCRV is a prominent Dutch public broadcasting organization dedicated to producing mission-driven media content aimed at fostering a fairer, greener, and kinder society. The website serves as a comprehensive portal for their television, radio, podcast, and online content offerings, targeting a broad Dutch-speaking audience interested in socially conscious programming. The organization appears well-established within the Dutch media landscape, with strong branding consistency and a professional online presence. Technically, the website is built on Drupal 10, leveraging modern web technologies including lazy loading for images, Google Tag Manager for analytics, and Hotjar for user behavior insights. The site is mobile-optimized and accessible, with good SEO practices evident. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not publicly visible. Overall, the site demonstrates a mature digital infrastructure and a high level of professionalism. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, slightly detracts from privacy compliance and user trust. No signs of malicious content or blocking mechanisms were detected, indicating a safe and accessible platform.

L

Leidos

leidos.com

75

Leidos is a large enterprise technology company specializing in innovative solutions for national security, healthcare, defense, and critical infrastructure sectors. With a workforce of approximately 47,000 employees, Leidos delivers advanced IT, engineering, and scientific services to government and commercial customers worldwide. The website reflects a mature, professional digital presence with comprehensive information about their business, markets, capabilities, and insights. Technically, the site is built on Drupal 10 and integrates modern web technologies including Google Tag Manager and social media embeds, supporting good performance and accessibility. Security posture is strong with HTTPS, security headers, and secure form handling, although explicit incident response and vulnerability disclosure information is not prominently available. The WHOIS data for the domain is unavailable, which is unusual but does not detract from the legitimacy indicated by the website content and branding. Overall, Leidos demonstrates a high level of digital maturity and business credibility.

N

National Oceanic and Atmospheric Administration

noaa.gov

69

The National Oceanic and Atmospheric Administration (NOAA) is a U.S. Department of Commerce agency dedicated to providing authoritative information and services related to weather, climate, oceans, coasts, fisheries, satellites, research, marine and aviation, charting, sanctuaries, and education. The website serves a broad audience including the general public, researchers, government entities, and educators, positioning NOAA as the primary federal source for oceanic and atmospheric data and services. Technically, the website is built on Drupal 10 CMS with a modern JavaScript stack including jQuery, Handlebars.js, and various UI libraries. The site demonstrates excellent mobile optimization, accessibility, and SEO practices. It employs secure HTTPS connections and integrates multiple analytics and tracking tools such as Google Tag Manager and DigitalGov analytics, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and secure form practices but lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or redacted, which is typical for U.S. government .gov domains, and does not detract from the site's legitimacy. Overall, NOAA's website is a highly professional, secure, and trustworthy government resource with comprehensive content and strong branding. Strategic improvements could include adding explicit security headers, publishing a vulnerability disclosure policy, and enhancing cookie consent mechanisms to further strengthen privacy compliance.

The U.S. Department of Commerce operates the official government website commerce.gov, providing authoritative information on commerce policies, economic data, news, and resources for businesses and communities. The site serves a broad audience including U.S. citizens, businesses, and government stakeholders, positioning itself as a key federal resource for economic growth and opportunity. Technically, the website is built on Drupal 10, employs modern web standards, and integrates analytics tools such as Google Tag Manager and DigitalGov Analytics. The site is mobile-optimized and accessible, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and maintains privacy and vulnerability disclosure policies, though it lacks some advanced security headers and a cookie consent mechanism. The absence of WHOIS data is consistent with .gov domain practices and does not detract from the site's legitimacy. Overall, the website demonstrates a strong security posture and professional presentation suitable for a federal government entity.

M

Massachusetts Technology Collaborative

nemicroelectronics.org

65

The Northeast Microelectronics Coalition (NEMC) is a regional technology hub under the Massachusetts Technology Collaborative, focused on advancing microelectronics innovation and industry leadership in the Northeastern United States. The website highlights grant programs such as the PROPEL Program, membership opportunities, workforce development, and industry news, positioning NEMC as a key facilitator in the semiconductor ecosystem. The organization appears to be relatively new, founded in 2023, with a clear mission to support semiconductor companies and stakeholders through funding and collaboration. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Google Tag Manager for analytics and Google reCAPTCHA for form security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital infrastructure. Performance is moderate, with good SEO and navigation clarity. From a security perspective, the site uses HTTPS and has implemented spam prevention on forms. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. No explicit security or incident response policies are published, and privacy compliance mechanisms such as cookie consent banners are absent, which may pose compliance risks. Overall, the website demonstrates a professional and trustworthy presence with strong business credibility. Strategic recommendations include enhancing security posture by enabling DNSSEC and security headers, publishing privacy and security policies, and implementing cookie consent mechanisms to improve compliance and user trust.

M

Massachusetts Technology Collaborative

masscybercenter.org

68

MassCyberCenter is a government-affiliated cybersecurity collaborative under the Massachusetts Technology Collaborative, focused on enhancing economic growth through cybersecurity ecosystem outreach and resiliency within Massachusetts. The website serves as a hub for cybersecurity workforce development, grants, resources, events, and a jobs board targeting municipalities, small businesses, non-profits, and cybersecurity professionals. The organization holds a strong regional market position as a key resource for cybersecurity initiatives in the Commonwealth. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting details are limited but the domain registrar is Network Solutions, LLC, with a domain age consistent with the organization's founding. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned to serve its audience. Strategic improvements in security headers, DNSSEC, and privacy consent would further strengthen its posture.

C

Common Sense Media

commonsense.org

68

Common Sense Media is a leading nonprofit organization dedicated to making the digital world safer and healthier for children and families. Their services include media ratings, educational resources, advocacy for tech accountability, and research on digital well-being. The organization targets families, educators, and policymakers, positioning itself as a trusted authority in child digital safety and education. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on Drupal 10 with PHP 8.3.26, leveraging modern web technologies including Google Tag Manager, Google Analytics, and OneTrust for consent management. The site is mobile-optimized, accessible, and employs security best practices such as HTTPS, CAPTCHA on forms, and content security policies. Performance is moderate, with CDN usage enhancing delivery. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR compliance indicators, and user consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present and could be improved. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a nonprofit organization focused on child safety and education. The lack of WHOIS data is likely due to privacy protection, which is justified for this business type. No signs of malicious or suspicious activity were detected.

V

Visa S.p.A. s.u.

nettuno-irrigazione.com

68

Nettuno Irrigazione, a division of Visa S.p.A. s.u., is a well-established Italian manufacturer specializing in irrigation motor pumps, hose reel irrigators, and water transfer pumps for agricultural, dewatering, and mining sectors. With over 40 years of experience, the company offers customizable, high-performance solutions emphasizing energy efficiency and reliability. The website reflects a mature digital presence with multilingual support and clear business communication. Technically, the site is built on Drupal 10, integrates Google Analytics and reCAPTCHA for security and tracking, and provides a user-friendly experience with good mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Overall, Nettuno presents a credible and professional business front with transparent contact channels and compliance with privacy regulations.

V

Visa S.p.A.

visarent.it

67

Visa Rent, a division of Visa S.p.A., is a well-established provider of rental power generation equipment and lighting towers in Italy. With a fleet exceeding 500 machines and four operational sites, the company offers comprehensive energy solutions tailored for temporary and emergency needs. Their services include advanced generator sets with parallel synchronization capabilities, accessories, and 24/7 technical support. The website demonstrates a mature digital presence built on Drupal 10, with good SEO, accessibility, and privacy compliance. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, Visa Rent presents a trustworthy and professional business with strong market positioning in the energy rental sector.

E

Europa-Park GmbH & Co Mack KG

europapark.de

70

Europa-Park GmbH & Co Mack KG operates one of Europe's leading theme parks and resorts, offering a wide range of entertainment, accommodation, and event hosting services. The website provides comprehensive information about the park, its water world Rulantica, and related services, targeting families, tourists, and event organizers. The business is well-established with a strong market position in the hospitality and entertainment sectors in Germany. Technically, the website is built on Drupal 10, leveraging modern web technologies and compliance tools such as OneTrust for cookie consent and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, although explicit security and incident response policies are not prominently published. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility.

C

CERN

visit.cern

66

The website visit.cern is the official visitor portal for CERN Science Gateway, providing comprehensive information about visiting CERN, including exhibitions, events, educational resources, and support opportunities. The site targets a broad audience including families, educational groups, and science enthusiasts, positioning itself as a leading educational and scientific outreach platform. The business model is non-profit, aligned with CERN's mission as a premier international scientific research organization. Technically, the site is built on Drupal 10 with modern web technologies such as Bootstrap, jQuery, and Matomo analytics, hosted on CERN's infrastructure, delivering fast and mobile-optimized performance with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is well addressed with a clear data privacy page and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, reflecting CERN's reputable brand and mission.

C

CERN

home.cern

68

CERN is a globally recognized intergovernmental scientific research organization specializing in fundamental physics. The website serves as a comprehensive portal for scientific research, educational resources, news, and events related to particle physics. It targets scientists, educators, and the general public interested in physics and science. The site is professionally designed, well-branded, and provides rich, relevant content with clear navigation and mobile optimization. Technically, the website is built on Drupal 10 CMS, utilizing modern JavaScript libraries such as Owl Carousel and Prism.js, and employs Matomo for privacy-conscious analytics. The site is hosted securely with HTTPS and enforces clientTransferProhibited status on the domain, though DNSSEC is not enabled, representing a minor security gap. Security posture is solid with HTTPS and some security best practices, but lacks explicit security headers and a public vulnerability disclosure or security.txt file. Privacy compliance is partial due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is available primarily via contact forms and physical address, with no direct emails or phone numbers exposed. Overall, the website is trustworthy, authoritative, and well-maintained, with recommendations to improve privacy compliance and DNS security to enhance user trust and security posture.

C

CERN

cern.ch

68

CERN is a globally recognized intergovernmental scientific research organization specializing in fundamental physics. The website serves as a comprehensive portal for scientific information, news, events, and educational resources targeting scientists, educators, and the general public. It maintains a strong market position as a leader in particle physics research and public outreach. The technical infrastructure is modern, leveraging Drupal 10 CMS and open-source technologies, with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not publicly visible. Privacy and cookie policies are not clearly presented, indicating room for compliance improvement. Overall, the website is professional, trustworthy, and content-rich, reflecting CERN's authoritative status in science.

F

Federal Trade Commission

ftc.gov

76

The Federal Trade Commission (FTC) is a U.S. government agency dedicated to protecting consumers and promoting competition. The website serves as the official digital presence, offering resources such as fraud reporting, consumer alerts, and legal information. It targets American consumers, businesses, and legal professionals, positioning itself as the primary federal authority in consumer protection and antitrust enforcement. The site reflects a mature, enterprise-level government entity with a long history dating back over 100 years. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery UI and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and SEO practices. The infrastructure appears robust and professionally maintained, with no signs of technical debt or performance bottlenecks. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. It uses trusted analytics and marketing tools with privacy considerations. The presence of security policies, incident response contacts, and vulnerability disclosure programs indicates a mature security posture aligned with government standards. Overall, the FTC website is a highly credible, secure, and well-maintained government resource. It effectively balances transparency, user experience, and compliance, making it a trustworthy platform for consumer protection information and services.

U

University of Pennsylvania

upenn.edu

68

The University of Pennsylvania operates a comprehensive and professionally designed website that serves as a digital gateway for students, faculty, staff, alumni, and the general public. The site offers extensive academic, research, and community information, reflecting its status as a prestigious Ivy League institution. The technical infrastructure leverages modern web technologies including Drupal 10 CMS, Google Analytics, and Google Tag Manager, ensuring a robust and scalable platform. Multimedia content such as embedded videos and rich imagery enhance user engagement. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies, though cookie consent mechanisms are not explicitly detected. Overall, the website demonstrates high business credibility and trustworthiness, supporting the university's brand and mission effectively.

C

Centre national de la recherche scientifique (CNRS)

cnrs.fr

63

The Centre national de la recherche scientifique (CNRS) is a leading French governmental research organization active across all scientific disciplines. The website reflects a mature digital presence with comprehensive scientific content, innovation initiatives, and societal challenges addressed. The organization targets researchers, academics, enterprises, and the general public interested in science and innovation. Technically, the site is built on Drupal 10, uses Matomo for analytics, and implements a consent management platform (Axeptio) for GDPR compliance. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit incident response contacts are missing. The WHOIS data is unavailable, likely due to registry privacy policies, but the website's branding and external references strongly support legitimacy. Overall, the site is professional, trustworthy, and well-optimized for users.

L

Loterie Romande

entraide.ch

61

Soutien Loterie Romande is a professional non-profit platform dedicated to distributing the proceeds of the Loterie Romande to public utility institutions active in various domains within Suisse Romande. The website serves as an authoritative regional platform providing information about beneficiaries, contribution requests, and institutional communication. The platform leverages modern web technologies including Drupal 10, Google Tag Manager, and reCAPTCHA to ensure a secure and user-friendly experience. The site is well-structured, multilingual, and optimized for mobile devices, reflecting a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates high trustworthiness and professionalism suitable for its non-profit mission.

U

U.S. Department of Health and Human Services

healthypeople.gov

54

The website odphp.health.gov/healthypeople is an official U.S. government health promotion platform under the Office of Disease Prevention and Health Promotion, part of the U.S. Department of Health and Human Services. It provides data-driven national health objectives and resources aimed at improving public health over the next decade. The site targets a broad audience including the general public, health professionals, and policymakers, offering tools, priority health areas, and evidence-based resources. The business model is a government public health initiative focused on education and data dissemination. Technically, the site is built on Drupal 10 CMS and leverages modern web technologies such as Google Tag Manager and OverlayScrollbars. It demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in explicit security headers and cookie consent mechanisms. Analytics usage is moderate, primarily through Google Analytics via GTM, with privacy policies linked to authoritative HHS pages. From a security perspective, the site enforces HTTPS and links to a vulnerability disclosure policy, indicating a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and incident response contact details suggests areas for enhancement. WHOIS data is minimal and incomplete, typical for .gov domains, but the domain's legitimacy is strongly supported by the official content and branding. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations to improve privacy compliance and security headers to further strengthen its posture.

O

Office of the Assistant Secretary for Health

health.gov

72

The Office of the Assistant Secretary for Health (OASH) operates as a key component of the U.S. Department of Health and Human Services, providing leadership on health policy, programs, and initiatives aimed at improving the health and well-being of Americans. The website serves as an authoritative source for health information, advisory committees, grants, and career opportunities, targeting a broad audience including the general public, health professionals, and government stakeholders. The site maintains a strong market position as an official government resource with comprehensive content and clear navigation. Technically, the website is built on Drupal 10 and leverages the U.S. Web Design System (USWDS) to ensure accessibility, mobile responsiveness, and consistent branding. Integration with Google Tag Manager and Digital Analytics Program indicates moderate user tracking and analytics capabilities. Performance is moderate with good SEO and accessibility features, though there is room for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS with a valid SSL certificate and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for enhancement. The presence of a vulnerability disclosure policy is a positive indicator, though incident response contact details are not found. Privacy compliance is partial, with a comprehensive privacy policy but no detected cookie consent mechanism. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality consistent with a U.S. government health agency. Strategic improvements in DNS security, security headers, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

Medicaid.gov is the official U.S. government website dedicated to providing comprehensive information and resources about Medicaid and the Children's Health Insurance Program (CHIP). It serves a broad audience including U.S. residents seeking healthcare coverage information, state agencies, healthcare providers, and policymakers. The site is authoritative and well-positioned as the primary source for Medicaid and CHIP program details, federal policy guidance, and state resources. Technically, the website is built on Drupal 10, leveraging modern web technologies such as FontAwesome for icons and Tealium Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to an excellent user experience. Security-wise, the site enforces HTTPS and uses official .gov branding, which are strong trust indicators. However, explicit security headers and privacy-related policies such as privacy and cookie policies with consent mechanisms are not evident in the provided content, representing areas for improvement. Overall, the domain appears legitimate and trustworthy, consistent with a U.S. government entity, despite limited WHOIS data availability. Strategic recommendations include enhancing security headers, publishing clear privacy and cookie policies, and providing vulnerability disclosure information to strengthen security posture and user trust.

C

Centers for Medicare & Medicaid Services

insurekidsnow.gov

39

InsureKidsNow.gov is an official U.S. government website managed by the Centers for Medicare & Medicaid Services (CMS), providing comprehensive information and resources about Medicaid and the Children's Health Insurance Program (CHIP) for children and teens. The site targets parents and caregivers seeking free or low-cost health and dental coverage options, offering tools such as a dentist locator, outreach materials, and mental health resources. It holds a strong market position as a trusted government resource with authoritative content and consistent branding. Technically, the website is built on Drupal 10 with integration of modern frameworks like Bootstrap and USWDS, ensuring mobile responsiveness, accessibility, and good SEO practices. The site uses various analytics and performance monitoring tools such as Tealium and Boomerang, and loads content securely over HTTPS. While the site lacks explicit cookie consent mechanisms and some security headers, it follows best practices for secure forms and data handling. From a security perspective, the site benefits from the inherent trust of the .gov domain and HTTPS encryption. No vulnerabilities or exposed sensitive data were detected in the content. However, improvements could be made by adding security headers, publishing a vulnerability disclosure policy, and providing incident response contacts. The WHOIS data is not publicly available, consistent with .gov domain privacy policies, but the domain expiry and usage align with legitimate government operations. Overall, InsureKidsNow.gov demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. It effectively serves its mission to inform and assist families in accessing health coverage for children, with a solid technical foundation and secure environment.

U

U.S. Small Business Administration

sba.gov

71

The U.S. Small Business Administration (SBA) is a federal government agency dedicated to supporting America's small businesses by providing access to funding, counseling, disaster assistance, and federal contracting opportunities. The website serves as a comprehensive portal for entrepreneurs and small business owners to access resources, learn about SBA programs, and connect with local assistance partners. The SBA holds a strong market position as the official government entity for small business support in the United States, targeting a broad audience of small business stakeholders. Technically, the SBA website is built on Drupal 10 and leverages modern web technologies including the U.S. Web Design System (USWDS), Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML. The lack of visible security headers and absence of a vulnerability disclosure policy are areas for enhancement. The WHOIS data is incomplete, likely due to .gov domain registry policies, but the domain and content strongly indicate legitimacy and trustworthiness. Overall, the SBA website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include adding security headers, implementing cookie consent, and publishing incident response and vulnerability disclosure information to further enhance trust and compliance.

U

U.S. General Services Administration

sam.gov

70

SAM.gov is the official U.S. government platform managed by the General Services Administration, providing comprehensive services related to federal contracting, entity registration, federal assistance, wage determinations, and federal hierarchy data. It serves as a critical resource for businesses and entities seeking to engage with the federal government. The platform is well-established, with a domain age dating back to 2004, and is positioned as a trusted authoritative source in the government procurement ecosystem. Technically, SAM.gov leverages Drupal 10 CMS, integrates with Google Analytics and Tag Manager for analytics, and uses AWS for DNS hosting. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and has domain transfer protections, but could improve by enabling DNSSEC and publishing explicit security headers and incident response information. Privacy compliance is partially addressed with clear privacy and terms policies, though cookie consent mechanisms are absent. Overall, SAM.gov exhibits a strong security posture and high business credibility, with recommendations to enhance transparency and security controls further.

A

Agency for Healthcare Research and Quality

ahrq.gov

68

The Agency for Healthcare Research and Quality (AHRQ) is a U.S. government agency under the Department of Health and Human Services focused on advancing healthcare quality, safety, accessibility, and affordability through research, data analytics, and funding programs. The website serves healthcare professionals, researchers, policymakers, and the public by providing authoritative resources, tools, and publications. It holds a strong market position as an official government source for healthcare research and quality improvement. Technically, the website is built on Drupal 10 and incorporates modern web technologies including Google Tag Manager, Google Analytics, Leaflet.js, and D3.js for data visualization. The site is mobile-optimized, accessible, and well-structured with good SEO practices. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses some security headers, though it lacks explicit Content Security Policy and other advanced headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy and cookie policy present but no explicit consent mechanism. WHOIS data is incomplete but the .gov domain and content strongly support legitimacy. Overall, the site is professional, trustworthy, and safe with a high AI score of 87. Recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

A

Advanced Research Projects Agency for Health (ARPA-H)

arpa-h.gov

60

ARPA-H is a U.S. government research funding agency established in 2022 focused on transformative biomedical and health breakthroughs. The agency supports high-impact projects ranging from molecular to societal health solutions. The website reflects a professional government presence with clear branding, comprehensive content, and a focus on funding opportunities and partnerships. Technically, the site is built on Drupal 10 with modern web standards, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS, domain transfer protection, and a linked vulnerability disclosure policy, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is partial with a comprehensive privacy policy but no cookie consent mechanism. Contact information is limited to a subscription form and social media links, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy, well-maintained, and aligned with its government mission.

C

Centers for Medicare & Medicaid Services

cms.gov

74

Centers for Medicare & Medicaid Services (CMS) is a key U.S. federal government agency responsible for administering Medicare, Medicaid, and related healthcare programs. The website serves as a comprehensive resource for beneficiaries, providers, and stakeholders, offering detailed information on enrollment, coverage, regulations, quality programs, and compliance. The site is well-branded with official government indicators and uses a modern Drupal 10 CMS platform with professional design and navigation. Technically, the site employs HTTPS and integrates tag management via Tealium, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and government trust signals, though explicit security headers and incident response contacts are not evident in the provided content. WHOIS data is incomplete, typical for government domains, but does not detract from the site's legitimacy. Privacy and cookie policies are not clearly found in the snippet, suggesting an area for improvement. Overall, CMS.gov is a highly credible, authoritative government website with excellent content quality and user experience.

C

Centers for Medicare & Medicaid Services

medicare.gov

72

Medicare.gov is the official U.S. government website managed by the Centers for Medicare & Medicaid Services (CMS). It provides comprehensive information and services related to Medicare health insurance for people aged 65 or older and younger individuals with disabilities. The site offers key functionalities such as plan comparison, account management, provider lookup, fraud reporting, and customer support including live chat. It serves as a trusted authoritative source for Medicare-related information in the United States. Technically, the website is built on Drupal 10 CMS and leverages modern web technologies including Font Awesome icons, YouTube API for video content, and Tealium for tag management and analytics. The site is well-optimized for mobile devices and accessibility, featuring structured data (JSON-LD) for enhanced SEO and rich search results. Performance is moderate with asynchronous script loading to improve user experience. From a security perspective, the site enforces HTTPS and employs secure form practices including consent checkboxes. However, explicit security headers such as Content-Security-Policy and cookie consent mechanisms are not detected, representing areas for improvement. The WHOIS data is unavailable due to the .gov domain nature, but the domain's legitimacy is strongly supported by official branding, content, and government affiliation. Overall, Medicare.gov demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. It effectively serves its target audience with clear navigation, relevant content, and multiple contact channels. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to further strengthen trust and compliance.

V

visitBerlin

visitberlin.de

51

visitBerlin.de is the official tourism portal for Berlin, offering comprehensive information on sightseeing, hotels, events, tickets, and travel offers. The website targets tourists and visitors seeking detailed and reliable travel information about Berlin. It holds a strong market position as an authoritative source for Berlin tourism, providing multilingual content and a user-friendly experience. The business model focuses on tourism promotion and ticket sales, supported by a large-scale digital platform.

Q

Qualtrics

qualtrics.com

76

Qualtrics is a leading enterprise software company specializing in experience management solutions that leverage AI to optimize customer, employee, and market research experiences. The company offers a SaaS platform widely recognized for its comprehensive suite of tools designed to improve business outcomes through actionable insights. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on Drupal 10 with modern JavaScript frameworks and integrates advanced personalization and consent management technologies, ensuring a fast and responsive user experience across devices. Security posture is robust, with HTTPS enforced, multiple security headers, and compliance with major standards such as ISO 27001 and HIPAA. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Qualtrics demonstrates high business credibility and trustworthiness, supported by certifications and active community engagement.

F

Fundraising Regulator

fundraisingregulator.org.uk

73

The Fundraising Regulator is an independent UK regulatory body overseeing charity fundraising standards across England, Wales, and Northern Ireland. It aims to improve fundraising practices and restore public trust, offering services such as complaint handling, registration, and proactive regulation. The website is professionally designed, well-structured, and targets charitable organizations, fundraisers, and the general public interested in ethical fundraising. Technically, the site is built on Drupal 10, uses Google Tag Manager for analytics, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a public security policy could enhance trust. Overall, the site is trustworthy, compliant with privacy regulations, and provides comprehensive information relevant to its sector.

R

Race Forward

raceforward.org

66

Race Forward is a non-profit organization dedicated to advancing racial justice through policies, institutions, and culture. The organization provides training, resources, and advocacy to communities and public institutions, with a strong focus on government partnerships such as the Government Alliance on Race and Equity (GARE) and the Federal Initiative to Govern for Racial Equity (FIRE). Their market position is that of a recognized leader in racial equity advocacy with a medium-sized organizational footprint. The website is built on Drupal 10, leveraging modern web technologies and Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enabled and secure forms, though the absence of security headers and explicit cookie consent mechanisms are areas for improvement. WHOIS data is unavailable due to privacy protection, which is typical for non-profits, and the website content and external partnerships support the legitimacy of the domain. Overall, the site demonstrates a strong commitment to its mission with professional digital presence but could enhance privacy compliance and security best practices.

J

Joseph Rowntree Foundation

jrf.org.uk

52

The Joseph Rowntree Foundation is a well-established UK non-profit organization dedicated to reducing poverty and supporting social justice. Their website reflects a professional and comprehensive digital presence, offering extensive research, reports, and partnership opportunities. The organization targets policymakers, researchers, and the general public interested in poverty alleviation. Technically, the site is built on Drupal 10, employs modern web standards, and is optimized for mobile devices. Security posture is strong with HTTPS and consent management, though explicit security headers should be verified server-side. The WHOIS data query failed due to querying the subdomain instead of the domain, but the website's legitimacy is supported by charity registration numbers and consistent branding. Overall, the site demonstrates a mature digital infrastructure and trustworthy business presence.

D

DNS Operations, Analysis, and Research Center (DNS-OARC)

dns-oarc.net

56

DNS-OARC is a well-established non-profit organization founded in 2004 that serves as a trusted platform for DNS operators, implementors, and researchers to collaborate on DNS operational issues, share data, and coordinate responses to attacks. The organization hosts workshops, provides analysis, and develops tools to support the DNS community. Their website reflects a professional and community-oriented approach with regular event announcements and resources for members. Technically, the site is built on Drupal 10 with good mobile optimization and accessibility, though some security best practices such as DNSSEC and security headers are not fully implemented. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The domain registration is consistent and legitimate, with a long history and appropriate domain status protections. Overall, DNS-OARC demonstrates strong business credibility and community trust but could improve its security posture and privacy compliance.

A

AMAG

media-corner.ch

55

AMAG Medienportal serves as the official media and press release platform for AMAG, a major automotive group in Switzerland. The portal provides news, press releases, and media resources for AMAG and its associated automotive brands including Volkswagen, Audi, SEAT, ŠKODA, CUPRA, and Volkswagen Nutzfahrzeuge. The website targets media professionals, partners, and customers interested in automotive industry developments and AMAG's corporate activities. The business model focuses on corporate communication and brand promotion within the automotive and sustainable mobility sectors. Technically, the website is built on Drupal 10 CMS, utilizing modern JavaScript libraries such as jQuery and lightGallery, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and includes a comprehensive cookie consent mechanism powered by OneTrust, reflecting a mature digital infrastructure. Performance is moderate, with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the domain's legitimacy and consistency with the business claims, reinforcing trustworthiness. Overall, AMAG Medienportal is a professional, secure, and compliant corporate media platform with strong branding consistency and good user experience. Strategic improvements could include enhancing security headers, publishing security policies, and adding incident response contacts to further strengthen trust and compliance.

E

European Union

europa.eu

70

The European Union's official website serves as a comprehensive portal providing detailed information about the EU's functions, principles, priorities, history, and member states. It targets a broad audience including EU citizens, researchers, policymakers, and the general public. The site is authoritative and well-positioned as the primary source of EU-related information, offering multilingual content and extensive contact options. Technically, the website is built on Drupal 10, leveraging modern web technologies and EU-specific webtools services. It demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. Hosting is likely managed by European Commission infrastructure, ensuring reliability and performance. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance aligned with GDPR. While some standard security headers are present, there is room for improvement by adding additional headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, the website is highly trustworthy and professional, with a strong focus on transparency, user privacy, and accessibility. The lack of WHOIS data is typical for EU subdomains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and security.

A

AMAG Press

vwpress.ch

48

The website www.vwpress.ch serves as the official Volkswagen media portal for Switzerland, operated by AMAG Press. It provides comprehensive press releases, event information, and media stories related to Volkswagen vehicles and brand activities targeted primarily at media professionals and Volkswagen enthusiasts in Switzerland. The site is well-branded, consistent, and professionally maintained, reflecting a medium-sized corporate entity within the transportation and media sectors. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries and cookie consent mechanisms, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent implemented, though explicit security policies and incident response information are not published. Overall, the site is trustworthy, with no suspicious WHOIS data or blocking mechanisms detected.

H

Hôpitaux Universitaires Genève

hug.ch

65

Hôpitaux Universitaires Genève (HUG) is a prominent university hospital in Geneva, Switzerland, providing a wide range of medical services including surgery, outpatient consultations, and specialized care. It also engages in research and education in close collaboration with the University of Geneva Faculty of Medicine. The website reflects a well-established institution with a strong market position as a national and international reference in healthcare. The target audience includes patients, their families, and healthcare professionals. The business model is public healthcare with academic and research components. Technically, the website is built on Drupal 10, uses modern web technologies, and integrates analytics via Piwik PRO. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though it lacks some public security policies and cookie consent mechanisms. WHOIS data confirms legitimacy and consistency with the institution's identity. Overall, the website is professional, trustworthy, and comprehensive, serving its audience effectively.

A

Advanced Sterilization Products, Inc.

sterradsterilityguide.com

63

The STERRAD Sterility Guide website serves as a specialized online tool for healthcare professionals and customers of STERRAD sterilization systems, providing an up-to-date database of devices compatible with STERRAD claims. The site is professionally designed using Drupal 10 CMS, with a clear focus on usability, mobile optimization, and accessibility. It integrates standard privacy and cookie consent mechanisms, reflecting a mature approach to user data protection. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional appearance and consistent branding. Security posture is generally good with HTTPS enforced and secure login forms, but the lack of explicit security headers and published security policies suggests room for improvement. Overall, the site is a credible resource within the healthcare sterilization niche but would benefit from enhanced transparency around domain registration and security policies.

A

Advanced Sterilization Products, Inc.

asp.com

71

Advanced Sterilization Products, Inc. (ASP) is a leading healthcare company specializing in infection prevention and sterilization products. The company offers a broad portfolio including terminal sterilization systems, sterilization monitoring, and high-level disinfection solutions, targeting healthcare professionals and institutions. ASP is positioned as a market leader with strong branding and a comprehensive product offering, supported by its parent company Fortive Corporation. The website reflects a professional and well-structured digital presence with multi-regional support and extensive product information. Technically, the website is built on Drupal 10 with modern web technologies such as jQuery, Bootstrap, and AOS for animations. It demonstrates good performance, mobile optimization, and accessibility features. The site uses HTTPS and integrates tracking tools like Google Tag Manager and Facebook Pixel, with clear privacy and cookie policies indicating GDPR compliance. From a security perspective, the site enforces HTTPS and secure form handling but lacks explicit security headers and a public security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the strong corporate branding and external references mitigate concerns. Overall, the website is a secure, professional, and compliant digital asset for ASP, with recommendations to enhance security headers and publish a vulnerability disclosure policy to further improve trust and security posture.