Security Directory

A

ASKÖ Niederösterreich

askoenoe.at

48

ASKÖ Niederösterreich is a well-established regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Lower Austria. The organization offers a variety of projects, training programs, and community services aimed at athletes, sports clubs, and enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and several UI libraries, running on a custom CMS by Internetkonzepte.at. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy and cookie policies are implemented with GDPR compliance, and social media integration is active, primarily via Facebook. From a security perspective, the site uses HTTPS and has basic security best practices in place, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the website presents a low-risk profile with a solid foundation for business credibility and user trust. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance the security posture and compliance maturity.

A

ASKÖ Kärnten

askoe-kaernten.at

47

ASKÖ Kärnten is a well-established regional sports association based in Kärnten, Austria, focused on promoting diverse sports activities, fitness programs, and supporting local sports clubs. The organization targets sports enthusiasts and community members, providing events, courses, and youth development initiatives. The website reflects a professional and consistent brand presence with clear navigation and relevant content in German. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) with common JavaScript libraries and social media integration, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and incident response disclosures. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

A

ASKÖ Burgenland

askoe-burgenland.at

50

ASKÖ Burgenland is a regional non-profit sports association based in Austria, focused on promoting diverse sports activities, supporting local sports clubs, and organizing events and training programs. The organization serves athletes, trainers, and the general public within the Burgenland region, positioning itself as a key regional player in sports promotion and community engagement. The website reflects this mission with comprehensive content about services, events, and funding opportunities. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery, Owl Carousel, and Fancybox, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses trusted external libraries but lacks explicit security headers and published security policies. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical enhancements.

C

Caritas

kulturlegi.ch

57

KulturLegi.ch is a Swiss non-profit initiative operated by Caritas that provides a discount card to individuals with limited financial means, enabling access to over 4,200 offers in culture, sports, education, and health sectors across Switzerland. The website is well-branded, consistent, and targets socially disadvantaged groups to promote inclusion. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent and a comprehensive privacy policy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration aligns well with the business claims, enhancing trust and legitimacy.

X

XWiki SAS

xwiki.com

73

XWiki SAS is a well-established technology company specializing in open source knowledge management and collaboration software. With over 20 years of experience, it offers a range of standard and custom solutions including cloud hosting, support, and consulting services. The company serves a broad business audience, including large enterprises such as Amazon and Lenovo, positioning itself as a trusted provider in the enterprise wiki and collaboration market. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the XWiki platform with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain protection, and use of CAPTCHA, though explicit security policies and vulnerability disclosures are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high business credibility and technical maturity with moderate user tracking for analytics and marketing purposes.

A

ASKÖ Bundesorganisation

askoe.at

50

ASKÖ Bundesorganisation is the largest Austrian sports umbrella organization dedicated to promoting sports and physical culture across Austria. It serves a broad audience including sports clubs, athletes, and community members, offering services such as sports promotion, health-oriented activities, youth sports, education, and events. The organization maintains a strong network of regional subsidiaries and partners, reinforcing its market position in the non-profit sports sector. Technically, the website is built on the Internetkonzepte.at CMS and employs modern web technologies including jQuery, Font Awesome, and various UI and carousel libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the website enforces HTTPS and uses some best practices such as async script loading and no visible sensitive data exposure. However, it lacks explicit security headers and a published incident response policy. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a large non-profit organization. It is safe for general audiences and demonstrates good privacy and security hygiene, though there is room for improvement in security headers and incident response transparency.

Ö

ÖFT - Österr. Fachverband für Turnen

turnsport.at

49

Turnsport Austria is the official Austrian gymnastics federation representing approximately 450 clubs and over 90,000 members across multiple gymnastics disciplines. The organization serves both grassroots and elite sports communities, providing event organization, trainer licensing, and promoting safe sport and anti-doping initiatives. The website is well-structured, professionally designed, and provides comprehensive information and news relevant to its audience. Technically, the site uses a modern tech stack including jQuery, Font Awesome, and Owl Carousel, and is built on the Internetkonzepte.at CMS platform. It is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are lacking. Privacy compliance is strong with a clear privacy and cookie policy and consent mechanism. Overall, the site is trustworthy and credible, reflecting a mature non-profit sports federation.

G

Gesellschaft für Energie- und Gebäudemanagement Bonn mbH (EGM)

egm-bonn.de

61

Gesellschaft für Energie- und Gebäudemanagement Bonn mbH (EGM) is a regional energy service provider and subsidiary of Stadtwerke Bonn, specializing in sustainable energy solutions and contracting services for buildings in the Bonn/Rhein-Sieg area. Their offerings include planning, financing, construction, and operation of energy systems for residential, commercial, and public sector clients such as hospitals and schools. The website is built on TYPO3 CMS, featuring modern web technologies and good SEO and accessibility practices. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site reflects a professional and trustworthy business with clear contact channels and integration within a larger energy group.

S

Stadtwerke Bonn

swb-karriere.de

65

Stadtwerke Bonn operates as a regional public utility company in Germany, providing energy and transportation services. Their website, swb-karriere.de, serves as a comprehensive career portal targeting students, apprentices, professionals, and job seekers interested in joining the company. The portal offers detailed information on job openings, training programs, and employee testimonials, positioning the company as an attractive employer in the regional market. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and a cookie consent framework to ensure GDPR compliance. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though it lacks explicit security headers and a public security policy or incident response contact. Overall, the website demonstrates a strong security posture with room for improvement in transparency and security best practices. The domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clear incident response contacts to further strengthen trust and compliance.

B

BenefitWorld

benefitworld.at

67

BenefitWorld is an Austrian cashback and discount platform offering users cashback and savings across approximately 800 partner webshops, with a strong focus on travel and shopping. The website is built on Drupal 9 and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook SDK, and Mailchimp. The platform demonstrates a good level of digital maturity with mobile optimization and a professional design. Security posture is solid with HTTPS enforced, reputable SSL certificates, and security headers, although there is room for improvement in cookie consent mechanisms and published security policies. Overall, the site is trustworthy and well-positioned in the Austrian e-commerce cashback market.

B

Bank Austria

cashbackonline.at

62

The website cashbackonline.at is a cashback and discount platform affiliated with Bank Austria, targeting primarily Austrian customers interested in online shopping and travel deals. It offers cashback incentives across a wide range of partner shops and travel services, positioning itself as a value-added service for Bank Austria customers. The platform is built on Drupal 9 and employs modern web technologies including Google Tag Manager and Owl Carousel for enhanced user experience. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in cookie consent mechanisms and incident response transparency. The absence of WHOIS data limits domain trust assessment, but the website's branding and certifications indicate a legitimate and professional operation.

S

SWB Konzern - Stadtwerke-Bonn

swb-konzern.de

65

SWB Konzern - Stadtwerke-Bonn is a large regional utility and transportation company serving Bonn, Germany, providing essential services such as electricity, natural gas, water, district heating, and public transport. The company emphasizes sustainability and climate neutrality, reflected in its projects and communications. The website is built on TYPO3 CMS and integrates modern technologies like Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Stadtwerke Bonn

stadtwerke-bonn.de

67

Stadtwerke Bonn (SWB) is a large regional utility provider based in Germany, offering a comprehensive range of services including energy supply (electricity and gas), water, public transportation, waste management, and district heating. The company positions itself as a top local supplier with a strong commitment to sustainability and climate protection, targeting a broad audience including residential customers and families. Their business model integrates multiple utility and mobility services under the SWB brand, supported by several related domains and subsidiaries. Technically, the website is built on the TYPO3 CMS platform, employs modern web technologies such as JavaScript and Owl Carousel, and is hosted on reputable German infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a good user experience and professional design. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks publicly visible security policies and incident response contacts, which could be improved. Overall, the website demonstrates a mature digital presence with strong privacy compliance and trustworthy business credibility.

H

Hochschule der Bildenden Künste Saar

hbksaar.de

50

The Hochschule der Bildenden Künste Saar (HBKsaar) is a public higher education institution specializing in fine arts and design, located in Saarbrücken, Germany. The website serves as a comprehensive portal for prospective and current students, offering detailed information on academic programs, student services, events, and institutional news. The institution holds a solid regional position as an art university with a medium-sized footprint and a history dating back to 1970. Technically, the website is built on the Contao Open Source CMS platform, utilizing a range of front-end libraries including Bootstrap 3 and jQuery 1.11.2. While the site is generally well-structured, mobile-optimized, and accessible, some outdated libraries pose potential security risks. The hosting infrastructure appears to be university-affiliated, with nameservers linked to the German Research Network and Saarland University. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. No dedicated security or incident response policies are publicly available. Privacy compliance is strong, with a clear privacy policy and cookie management in place. Overall, the website is professional, trustworthy, and serves its educational mission effectively. Strategic improvements in updating third-party libraries and enhancing security headers would further strengthen its security posture and compliance.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

Hamburger Tennis-Verband e.V. is a regional non-profit sports association dedicated to promoting tennis activities in Hamburg, Germany. The website serves as an information hub for players, clubs, trainers, and tennis enthusiasts, offering event calendars, tournament details, training programs, youth development initiatives, and inclusion projects. The association maintains partnerships with recognized tennis organizations and sponsors, reinforcing its position as a key regional tennis authority. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap 3.3.5, Owl Carousel, and jQuery.mmenu for responsive and interactive UI elements. Google Tag Manager and Google Analytics are used for visitor tracking and analytics. The site is mobile-optimized with a clear navigation structure, though it lacks a known CMS and some modern security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security policies or incident response contacts are published, and security headers like CSP or HSTS are not detected. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, aligning with the organization's transparency. Overall, the website is professional, trustworthy, and well-suited for its audience, with room for improvement in security best practices and formal policy disclosures.

E

Evangelisch-reformierte Kirche des Kantons Basel-Stadt

erk-bs.ch

69

The Evangelisch-reformierte Kirche des Kantons Basel-Stadt website serves as the official online presence for the regional Protestant church in Basel-Stadt, Switzerland. It provides comprehensive information about church services, events, community programs, and pension fund management. The site targets church members and the local community, offering timely updates and resources in German. The business model is non-profit and community-oriented, focusing on religious and social services within the canton. Technically, the website is built on the kirchenweb.ch CMS platform, utilizing common web technologies such as jQuery and Owl Carousel. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes some security headers, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with domain registration details consistent with the organization's identity.

SoCal NOMA is a regional chapter of the National Organization of Minority Architects focused on advancing education and careers for historically underrepresented groups in architecture and allied design professions. The organization offers educational programs, professional development, advocacy, and community engagement primarily in Southern California. Their website reflects a small non-profit with a clear mission and active community involvement. Technically, the site is built on WordPress, using modern libraries such as jQuery, Bootstrap, and Smart Slider 3, hosted on Bluehost. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the organization's history and supports legitimacy.

W

Whois Corp.

whois.co.kr

11

Whois Corp., operating the website whois.co.kr, is a leading South Korean domain registration and business IT solutions provider established in 1998. The company offers a comprehensive suite of services including domain registration, email solutions, cloud hosting, SSL certificates, groupware, and website creation. The website reflects a mature digital presence with professional design, clear navigation, and extensive service offerings targeting businesses and enterprises in South Korea. The company maintains strong trust signals such as ISMS certification and KISA privacy excellence, and serves major Korean corporations as clients. Technically, the website employs modern JavaScript libraries like jQuery, Owl Carousel, and Google Analytics for tracking and user experience enhancement. Hosting appears to be managed internally by Whois Corp., with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and domain status set to clientTransferProhibited, though DNSSEC is not implemented. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is robust with no evident vulnerabilities or exposed sensitive data. The WHOIS data is consistent and transparent, reinforcing the legitimacy of the domain and business. The website is fully accessible without WAF or blocking mechanisms, supporting a high trustworthiness rating. Strategic recommendations include implementing DNSSEC, enhancing security headers, and adding cookie consent to improve privacy compliance. This analysis concludes that Whois Corp. operates a professional, secure, and credible online presence suitable for its business domain and customer base.

C

Cheltenham Civic Society

cheltcivicsoc.org

38

Cheltenham Civic Society is a small non-profit organization dedicated to promoting civic pride, heritage conservation, and high standards in urban design within Cheltenham, UK. The society operates as a registered charity and engages the community through campaigns, events, and acting as a formal consultee to the local planning authority. Their website reflects a well-structured and content-rich platform that supports their mission and community engagement efforts. Technically, the website is built on WordPress using modern plugins and libraries, with good SEO and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be enhanced. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its target audience effectively.

K

Kirchenweb.ch GmbH

kirchgemeinde.ch

61

Kirchenweb.ch GmbH is a Swiss-based company specializing in digital services tailored for church communities, including mail forwarding with @ref-kirche.ch addresses, information portals, and church management systems. The company targets church organizations primarily within Switzerland, offering a niche service model focused on digital communication and administration solutions. Their market position is that of a specialized provider with a clear focus on the non-profit religious sector. Technically, the website employs a custom CMS platform supplemented by common JavaScript libraries such as jQuery, Typed.js, and Owl Carousel. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The infrastructure appears stable and functional, though there is room for improvement in modern security headers and enhanced privacy mechanisms. From a security perspective, the site enforces HTTPS and uses form validation and captcha to protect user inputs. However, it lacks explicit security headers and a formal vulnerability disclosure policy. Privacy compliance is partially addressed with a privacy policy and security policy pages, but cookie consent mechanisms and incident response contacts are missing. Overall, the security posture is adequate but could be strengthened to meet higher compliance standards. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response contacts, and enhancing accessibility. These steps will improve trust, compliance, and resilience against potential threats.

K

Kirchenweb.ch GmbH

kirchenweb.ch

67

Kirchenweb.ch GmbH is a Swiss-based company specializing in digital tools and management systems tailored for church communities and religious organizations. Their offerings include modern website publication, communication tools such as newsletters and SMS, collaboration platforms, administrative management, and building automation solutions. The company serves a niche market within Switzerland, boasting a solid client base with hundreds of active systems and extensive references. Technically, the website employs a custom CMS with modern JavaScript libraries like jQuery, Typed.js, and Owl Carousel, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and obfuscated emails, though improvements in security headers and cookie consent are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

G

Groupement FLO

groupement-flo.com

56

Groupement FLO operates as a French transport and logistics network comprising 110 member companies distributed across France. Established since 1993, it offers diversified services in seven transport and logistics sectors, emphasizing productivity and innovation. The website presents a professional and consistent brand image with comprehensive content including member listings, news updates, and service descriptions. Technically, the site is built on CMS Made Simple with modern JavaScript libraries and Google services integration, providing good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking some advanced security headers and explicit incident response policies. The absence of WHOIS registration data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the site is credible and business-focused but would benefit from enhanced transparency on domain registration and security policies.

K

Komm.ONE

komm-one.net

70

Komm.ONE is a medium-sized IT service provider focused on delivering specialized solutions to municipal and state administrations in Baden-Württemberg, Germany. The company offers a range of services including consulting, cloud solutions, innovation management, and security services tailored for public sector clients. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at government entities. Technically, the site employs a modern technology stack with popular JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, leveraging Matomo analytics for privacy-conscious tracking. Overall, the domain registration details align well with the business profile, indicating legitimacy and trustworthiness.

N

Neudeck

neudeck.de

49

Neudeck is a well-established German family-owned business specializing in the international import and distribution of semi-finished wood products. Founded in 1946, it operates with over 180 employees, multiple locations, and a significant logistics fleet, serving primarily B2B customers in the wood manufacturing and construction sectors. The company emphasizes sustainability through FSC and PEFC certifications and maintains a professional digital presence with a modern WordPress-based website featuring SEO optimizations and multimedia content. Technically, the website uses a mature tech stack including Bootstrap and Borlabs Cookie for GDPR compliance, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a credible and trustworthy business with a strong market position in the manufacturing sector.

M

MIDI Europe S.r.l.

isuzutrucks.ro

62

The website is the official Romanian portal for Isuzu Trucks operated by MIDI Europe S.r.l., established in 2022. It provides comprehensive information about Isuzu truck models, sales, after-sales services, and dealer networks targeting businesses and individuals interested in commercial vehicles in Romania. The site is professionally designed with consistent branding and good content quality, supporting a medium-sized transportation sector business. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is strong with clear GDPR-aligned policies and user consent. Overall, the site is trustworthy and well-positioned in its market niche.

M

MIDI Europe S.r.l.

isuzutrucks.sk

61

The website is the official Slovak regional site for Isuzu trucks, operated by MIDI Europe S.r.l. It provides detailed product information, dealer locator services, customer support links, and media updates tailored for the Slovak market. The site targets commercial vehicle buyers and users, positioning itself as a key regional distributor within the broader Isuzu European network. The business model focuses on sales, after-sales service, and brand promotion in the transportation sector. Technically, the site is built on Drupal CMS with a modern front-end stack including jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and localized content. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS and enforces domain transfer restrictions. It includes GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security headers or incident response contacts are found, indicating areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site presents a professional and trustworthy digital presence with a solid business foundation. Strategic improvements in security headers, contact transparency, and SEO could further strengthen its posture and user trust.

M

MIDI Europe S.r.l.

isuzutrucks.pl

65

The website is the official Polish portal for ISUZU trucks, operated by MIDI Europe S.r.l. It provides detailed information about various ISUZU truck models, after-sales services, dealer networks, and customer advisory services. The site targets commercial vehicle buyers and fleet operators in Poland, positioning itself as a regional distributor and service provider for ISUZU commercial vehicles. The business is well-established, with the domain registered since 2008, reflecting a mature presence in the transportation sector. Technically, the website is built on the Drupal CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized with a responsive design and includes accessibility features, though these could be enhanced. Performance is moderate, with no critical errors or broken elements detected. SEO and metadata are basic but sufficient for the site's scope. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and there is no public security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The overall security posture is good but could be improved by adding security headers and publicly available security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its business purpose with clear navigation and relevant content. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance to further strengthen the site's security and user experience.

M

MIDI Europe S.r.l.

isuzutrucks.hu

62

The website is the official Hungarian portal for Isuzu Trucks, operated by MIDI Europe S.r.l. It serves as a regional distributor platform providing detailed information about Isuzu truck models, dealer locations, sales, after-sales services, and downloadable catalogs. The site targets commercial vehicle buyers and service customers in Hungary, positioning itself as a trusted regional representative of the Isuzu brand. The business model focuses on direct sales and support through a dealer network, emphasizing brand consistency and customer engagement. Technically, the website is built on the Drupal CMS platform, utilizing common front-end libraries such as jQuery, Bootstrap, and Font Awesome. Google Tag Manager is employed for analytics and marketing tracking, with a cookie consent mechanism in place to comply with GDPR requirements. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are present but could be enhanced. From a security perspective, the site uses HTTPS, but no explicit security headers were detected in the HTML content. The cookie consent banner indicates awareness of privacy regulations, and no sensitive data exposure or vulnerabilities were found in the analyzed content. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. Overall, the website presents a professional and trustworthy front for Isuzu Trucks in Hungary, with solid business credibility and compliance with privacy regulations. The technical and security posture is adequate but could benefit from enhancements to security best practices and accessibility. No critical issues or blocking mechanisms were detected, allowing full content analysis.

M

MIDI Europe S.r.l.

isuzutrucks.cz

63

The website is the official Czech Republic portal for Isuzu Trucks, operated by MIDI Europe S.r.l. It provides comprehensive information about Isuzu's commercial truck offerings, sales and service networks, and customer support. The site targets commercial vehicle buyers and operators within the Czech market, positioning itself as a regional distributor and service provider for Isuzu trucks. The business model focuses on vehicle sales, after-sales service, and customer engagement through digital content and brochures. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and a professional design. Performance is moderate, with room for improvement in SEO and accessibility. The hosting and domain registration are stable and consistent with the business's operational history. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The privacy and cookie policies are comprehensive and clearly presented. Overall, the website presents a low-risk profile with a good level of professionalism and compliance. Strategic improvements in security headers, incident response transparency, and SEO could enhance the site's security posture and digital maturity.

D

Dinas Lingkungan Hidup Provinsi Sumatera Utara

dlhsumaterautara.id

51

The website dlhsumaterautara.id serves as the official online presence of the Environmental Agency of North Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within North Sumatra and operates as a government public service platform. The domain registration aligns with the website's launch year, indicating a new but legitimate government initiative. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, with Cloudflare DNS services. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced SEO and accessibility features, and no CMS or backend platform is explicitly identified. From a security perspective, HTTPS is properly implemented, and the domain status clientTransferProhibited adds a layer of domain security. However, the absence of DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options represents areas for improvement. No privacy or cookie policies are present, which impacts compliance with data protection standards. Overall, the website is trustworthy and safe for general audiences, with no adult or explicit content detected. The lack of privacy and cookie policies and some security best practices lowers the overall security and compliance score. Strategic improvements in these areas would enhance the site's security posture and user trust.

D

DLH Provinsi Sumatera Selatan

dlhsumateraselatan.id

49

The website dlhsumateraselatan.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of South Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management and policies. The site targets residents and stakeholders within the province, functioning as a government information dissemination platform. Technically, the site employs standard web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The design and content quality are basic but functional, with moderate mobile optimization and navigation clarity. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data shows inconsistencies with a future domain creation date and a private registrar, raising legitimacy concerns. Overall, the site is accessible and safe for general audiences but requires improvements in security and privacy compliance to enhance trust and resilience.

D

Dinas Lingkungan Hidup Provinsi Sumatera Barat

dlhsumaterabarat.id

51

The website dlhsumaterabarat.id serves as the official online presence of the Environmental Agency of West Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within West Sumatra and operates as a government service platform. The domain registration and website content are consistent with a legitimate government entity, with a domain age and copyright year of 2025, indicating a relatively new but official site. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, hosted behind Cloudflare DNS services. The site is mobile optimized with good navigation and content quality. However, it lacks some advanced SEO and accessibility features. Security-wise, HTTPS is properly implemented, but DNSSEC is not enabled and no security headers are detected in the HTML content. There is no visible privacy or cookie policy, which is a compliance gap, especially for GDPR and similar regulations. Overall, the security posture is moderate with room for improvement in DNS security and privacy compliance. The site does not use analytics or advertising scripts, which reduces privacy risks but also limits marketing insights. Contact information is clearly provided, enhancing business credibility. The content is safe for general audiences with no adult or explicit material detected. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and considering incident response contact details to improve trust and compliance.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Utara

dlhsulawesiutara.id

50

The website dlhsulawesiutara.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of the Sulawesi Utara province in Indonesia. It provides environmental news, public announcements, documents, and contact information aimed at residents and stakeholders interested in environmental governance. The site is positioned as a government information hub with a medium organizational size and a focus on public service. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services, and supports HTTPS for secure communications. However, it lacks advanced DNS security features like DNSSEC and does not implement security headers, which could be improved to enhance security posture. The WHOIS data presents inconsistencies, notably a future domain creation date and a registrant that is a registrar company rather than the government entity, which lowers trustworthiness but does not necessarily indicate malicious intent. No privacy or cookie policies are present, indicating a gap in compliance with modern privacy standards. Overall, the site is functional, professional, and safe for general audiences but would benefit from enhanced security and privacy compliance measures.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Tenggara

dlhsulawesitenggara.id

49

The website dlhsulawesitenggara.id serves as the official online presence of the Environmental Agency of Southeast Sulawesi Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within the province and operates as a government service platform. Technically, the website employs common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security-wise, HTTPS is enabled, but the absence of DNSSEC and security headers reduces the overall security posture. The WHOIS data presents inconsistencies, including a future domain creation date and a registrant organization that does not align with the government entity, which raises questions about domain ownership authenticity. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. Overall, the website is functional and safe for general audiences but requires improvements in security, privacy compliance, and domain legitimacy to enhance trust and professionalism.

D

DLH Provinsi Sulawesi Tengah

dlhsulawesitengah.id

41

DLH Provinsi Sulawesi Tengah operates as the official environmental agency for Central Sulawesi Province, Indonesia, providing public information, news, and services related to environmental management. The website serves residents, government officials, and environmental stakeholders with updates, documents, and contact channels. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Cloudflare DNS services, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS enabled but lacks advanced DNS security and published policies. WHOIS data shows inconsistencies that warrant caution but do not directly undermine the site's legitimacy. Overall, the site is functional and trustworthy for its intended audience but requires improvements in privacy compliance and security best practices.

M

MIDI Europe Srl per Isuzu Svizzera

isuzu.ch

63

The website is the official Swiss portal for Isuzu vehicles, operated by MIDI Europe Srl for Isuzu Switzerland. It provides detailed information on Isuzu's D-Max models and trucks, dealer locations, customer support, and product catalogs. The site targets consumers and businesses interested in Isuzu vehicles within Switzerland and neighboring regions. The business model focuses on automotive sales and after-sales services, positioning itself as a regional distributor with a medium-sized market presence. Technically, the website is built on Drupal 7 CMS, utilizing common JavaScript libraries such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO is basic but functional, and the site uses HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no published security or incident response policies are available. There are no visible vulnerabilities or exposed sensitive data in the provided content. The WHOIS data aligns well with the business entity, indicating legitimacy and consistency. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance. Recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO for a more robust security posture and user experience.

K

Komm.ONE

komm.one

73

Komm.ONE is a public law institution and IT service provider dedicated to supporting municipalities across Baden-Württemberg, Germany. The organization develops and operates software and IT services tailored for local government administration, positioning itself as a key regional player in the public sector IT market. Their offerings include consulting, cloud services, security, innovation management, and training, targeting municipal administrations and public entities. The website reflects a professional and consistent brand image aligned with their mission. Technically, the website is built on a modern stack including jQuery, Bootstrap, and specialized CMS templates, with good mobile optimization and accessibility features. The presence of a cookie consent mechanism and Matomo analytics indicates a mature digital infrastructure with privacy considerations. Performance is moderate, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content strongly indicate legitimacy as a public institution. Overall, Komm.ONE presents a trustworthy and professional online presence with room for improvement in transparency around security policies and incident response. The risk level is low, and the site is suitable for its target audience of public sector entities.

Y

Yetkin Mercan-Çağlayansoy | Web Consulting

yc-webconsulting.de

64

Yetkin Mercan-Çağlayansoy | Web Consulting is a small, local German web consulting and social media advisory business based in Köln. The company offers modern, secure, and responsive website creation services alongside social media consulting and support, targeting small business owners and professionals. The website demonstrates a professional presence with clear contact information, client references, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on DomainControl nameservers, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent management, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

WebThinker GmbH is a small German technology service provider specializing in web design, online marketing, web development, tracking, analysis, and consulting. The company holds reputable certifications such as Google Partner and Shopware Partneragentur, positioning it well in the digital services market. Their website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the business demonstrates legitimacy and trustworthiness with clear contact information and positive customer testimonials.

M

MVB GmbH

vlb.de

46

MVB GmbH operates the VLB (Verzeichnis Lieferbarer Bücher), a central platform for automated exchange of product information in the German-speaking book industry. The website serves key stakeholders including bookstores, publishers, self-publishers, and service providers, offering services such as order clearing (IBU), reference databases, and subscription discounts. The platform holds a strong market position as an authoritative source in its sector. Technically, the website employs modern web technologies including Bootstrap, Owl Carousel, and Google Tag Manager, hosted on Anexia infrastructure. It features responsive design, good SEO, and accessibility standards, with a cookie consent mechanism ensuring privacy compliance. The site is well-structured and professionally designed, providing a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR. The WHOIS data aligns with the business entity, reinforcing legitimacy. Strategic improvements in security transparency and incident response readiness would further strengthen the platform's reliability.

P

Pensionskasse der Bank J. Safra Sarasin

pkbjss.ch

46

The website www.pkbjss.ch represents the pension fund of Bank J. Safra Sarasin, providing information primarily to its members. The site is multilingual (German, English, French) and offers a secure member login portal hosted externally. The business is a niche financial entity focused on pension fund management for bank employees in Switzerland. The website content is basic but consistent with the business purpose, with limited direct contact information and no visible advanced security or privacy features beyond HTTPS. Technically, the site is built on WordPress with common libraries such as jQuery and Owl Carousel. It is moderately optimized for mobile and SEO but lacks advanced accessibility and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of marketing or user behavior insights. Security posture is adequate with HTTPS enforced and external secure login, but the absence of security headers and cookie consent mechanisms are notable gaps. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

P

Pflegezentrum Rotacher

pz-rotacher.ch

56

Pflegezentrum Rotacher is a Swiss healthcare provider specializing in elderly care services including long-term, short-term, dementia, psychiatric, and transitional care. The organization serves residents primarily in the Dietlikon, Wallisellen, and Wangen-Brüttisellen communities. Their website reflects a regional healthcare provider with a clear focus on quality care and community integration. The business model centers on providing comprehensive care services recognized by local health authorities and insurers. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as jQuery and Owl Carousel. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. No critical security issues or blocking mechanisms were detected. The domain WHOIS data aligns well with the business, supporting legitimacy. Recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to improve trust and security maturity.

G

Göttingen Marketing GmbH

einkaufen-in-goettingen.de

65

The website 'Einkaufen in Göttingen' is a professionally developed local city marketing platform operated by Göttingen Marketing GmbH. It serves as a comprehensive shopping and event guide for residents and visitors of Göttingen, focusing on retail, gastronomy, cultural events, and city services. The platform leverages modern web technologies including WordPress and Elementor, with integrations for maps and user consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements, making it a reliable resource for its target audience.

S

SWB Bus und Bahn

swb-busundbahn.de

61

SWB Bus und Bahn is a large regional public transportation provider based in Bonn, Germany, operating bus and tram services with a focus on sustainable mobility and customer service. The company is part of the SWB Konzern group and offers a variety of ticketing options, real-time traffic updates, and mobility apps. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Owl Carousel, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

L

Landessportverband Schleswig-Holstein e.V.

lsv-sh.de

11

The Landessportverband Schleswig-Holstein e.V. is a regional non-profit sports association dedicated to supporting sports clubs and organizations in Schleswig-Holstein, Germany. The website provides comprehensive information about the association's services, including sports promotion, education, funding opportunities, and community projects. It targets sports clubs, volunteers, and sports enthusiasts within the region. The organization holds a strong market position as the leading sports association in Schleswig-Holstein, supported by reputable partners and sponsors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Owl Carousel for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. Privacy compliance is robust, featuring GDPR-compliant privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent tools, with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's commitment to transparency and community engagement. Strategic recommendations include publishing a dedicated security policy, incident response information, and enhancing security headers to further strengthen the security posture.

D

Deutscher Schwimm-Verband e. V.

dsv.de

59

The Deutscher Schwimm-Verband e. V. (DSV) is a well-established non-profit sports federation founded in 1886, representing swimming sports across Germany. It unites regional swimming associations and supports approximately 600,000 members in around 2,500 clubs. The organization focuses on promoting swimming disciplines, organizing competitions, and enforcing anti-doping policies in cooperation with national agencies. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its institutional stature. Technically, the website employs a modern CMS (AmphiCMS), uses JavaScript libraries such as jQuery and Owl Carousel, and implements lazy loading for performance optimization. Hosting is managed via DomainControl.com, and the site is secured with HTTPS and cookie consent mechanisms, indicating good digital maturity. Accessibility and SEO practices are well addressed, supporting a broad user base including mobile users. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks explicit security headers like Content-Security-Policy and does not publish vulnerability disclosure or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Overall, the DSV website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and maintaining regular security audits to sustain compliance and trust.

S

Sport- und Erlebnisdorf Hinsbeck des Landessportbundes Nordrhein-Westfalen e.V.

hinsbeck.nrw

60

Sport- und Erlebnisdorf Hinsbeck, operated by the Landessportbund Nordrhein-Westfalen e.V., provides sports, leisure, and accommodation services primarily targeting clubs, school classes, and families in the NRW region of Germany. The website is professionally designed with a strong emphasis on accessibility, user experience, and comprehensive content about their offerings including accommodations, sports activities, and event hosting. Technically, the site uses modern JavaScript libraries, a consent management platform, and multimedia content to engage users effectively. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates strong compliance with GDPR and privacy regulations, providing clear contact and legal information. The domain registration details align well with the business entity, supporting high legitimacy and trustworthiness.

S

Sport- und Tagungszentrum Hachen

hachen.nrw

60

Sport- und Tagungszentrum Hachen is a well-established sports and conference center located in the Sauerland region of Germany, operated under the Landessportbund Nordrhein-Westfalen e.V. The website effectively communicates its offerings including accommodation, sports activities, seminars, and event hosting targeted at sports clubs, school groups, and families. The business holds a strong regional position with a clear focus on sports and educational hospitality services. Technically, the website is built on AmphiCMS with modern JavaScript libraries such as jQuery and Owl Carousel, and employs a professional consent management platform ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is user-friendly, accessible, and professionally maintained, reflecting a trustworthy and credible organization.