Security Directory

K

K2 Consultancy Ltd

k2cm.co.uk

61

K2 Consultancy Ltd operates the website www.k2cm.co.uk, providing specialized construction management services in the UK. Their business model focuses on delivering end-to-end construction management solutions that enhance financial control, risk mitigation, and collaboration among clients, design teams, and construction teams. The company positions itself as a flexible and innovative partner in complex building projects, supported by ISO certifications and a portfolio of high-profile projects. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and multimedia content, reflecting a mature digital presence. Security posture is good with HTTPS enforced and secure forms, though some security headers and consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the construction sector.

W

Walker Sime

walkersime.co.uk

61

Walker Sime is a UK-based multi-disciplinary construction consultancy established in 2000, offering professional services such as quantity surveying and project management. The company positions itself as a trusted and well-liked consultancy within its niche, targeting clients who require expert construction consultancy services. The website reflects a professional business model with consistent branding and good content quality, supporting its market position. Technically, the website is built on WordPress using modern technologies including WPBakery Page Builder, Google Analytics, and LinkedIn Insight tags, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

O

Otak

otak.com

55

Otak, Inc. is a professional integrated design and project delivery firm specializing in architecture, engineering, environmental consulting, planning, and project management services. The company emphasizes sustainability, integrity, and community engagement as core values, serving government agencies, developers, and communities primarily in the United States. Their market position is that of a medium-sized, reputable firm with a strong focus on delivering community-centric projects and sustainable solutions. Technically, the website is built on WordPress with a modern technology stack including Google Analytics, Google Tag Manager, and various performance and SEO optimization plugins. The site is well-optimized for mobile devices, features good accessibility, and demonstrates excellent SEO practices. The infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers, a published security policy, and incident response contact information. The absence of WHOIS domain registration data raises some concerns about domain transparency, although the website content and social media presence support its legitimacy. Overall, Otak presents a professional and trustworthy online presence with minor gaps in security transparency and domain registration information. Strategic improvements in security policy publication and domain WHOIS transparency would enhance trust and compliance.

U

US Green Building Council California

usgbc-la.org

53

US Green Building Council California (USGBC-CA) is a regional non-profit organization dedicated to advancing sustainability, green building, climate action, and environmental justice within California. Founded in 2023, it serves sustainability professionals and advocates by providing resources, networking opportunities, and certification programs aimed at transforming the built environment. The organization positions itself as a leader in the energy and sustainability sector within the state, leveraging partnerships and community engagement to drive impact. Technically, the website is built on WordPress CMS, enhanced with NitroPack for performance optimization, and uses modern web technologies including jQuery, Google Tag Manager, and Font Awesome. The site demonstrates good mobile optimization, fast loading times, and solid SEO practices. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. From a security perspective, the site enforces HTTPS and employs domain status protections to prevent unauthorized domain changes. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or vulnerability disclosure page, which are areas for improvement. Social media presence and structured data markup enhance trust and visibility. Overall, the website is professional, trustworthy, and well-positioned within its niche. The absence of explicit privacy and cookie policies slightly reduces privacy compliance scores. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to strengthen security posture and compliance.

SoCal NOMA is a regional chapter of the National Organization of Minority Architects focused on advancing education and careers for historically underrepresented groups in architecture and allied design professions. The organization offers educational programs, professional development, advocacy, and community engagement primarily in Southern California. Their website reflects a small non-profit with a clear mission and active community involvement. Technically, the site is built on WordPress, using modern libraries such as jQuery, Bootstrap, and Smart Slider 3, hosted on Bluehost. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the organization's history and supports legitimacy.

Architecture for Communities Los Angeles (ACLA) is a small non-profit organization dedicated to inspiring and empowering communities in Los Angeles through architecture education, events, and engagement. Their website serves as a hub for promoting community events, student exhibitions, scholarships, and sustainability initiatives. The organization targets students, architects, and community members interested in architecture and social impact within the Los Angeles region. The site reflects a consistent brand and professional presentation aligned with their mission. Technically, the website is built on WordPress with WooCommerce for donations and event registrations, leveraging common libraries such as jQuery, RoyalSlider, and Slick Carousel. Hosting is provided by InMotion Hosting, and the site uses HTTPS with a good SSL configuration. SEO and mobile optimization are well addressed, though accessibility features are basic. Analytics are implemented via Google Analytics and Jetpack Stats, but the Google Analytics plugin is not fully configured. From a security perspective, the site enforces HTTPS and uses domain transfer protections. However, it lacks DNSSEC and important security headers like Content-Security-Policy. No cookie consent mechanism is present, which may impact GDPR compliance. Payment processing is handled securely via Authorize.Net CIM. No incident response or security policy is published, and no vulnerability disclosure or security.txt file is found. Overall, the website is safe, professional, and trustworthy with a moderate security posture. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, completing analytics configuration, and publishing security policies to enhance compliance and trust.

J

JUNG KOREA ELECTRIC CO., LTD.

jungswitch.co.kr

50

JUNG KOREA ELECTRIC CO., LTD. operates a corporate website representing the premium German electrical switch brand JUNG in Korea. The company offers customized electrical switch products and smart floor heating control systems, targeting residential and commercial customers. The website showcases global project references and provides access to an online store, reflecting a medium-sized business with a focus on energy sector products. The digital presence is professionally designed with responsive layouts and modern JavaScript libraries, supporting a good user experience across devices. However, the technical infrastructure lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the site is functional, trustworthy, and business-focused but would benefit from enhanced security and privacy features.

L

LEI Register

leikode.no

70

LEI Register is an official Legal Entity Identifier registration agent operating in Norway, providing fast and reliable LEI code issuance and renewal services. The company positions itself as a trusted intermediary partnering with accredited Local Operating Units (LOUs) such as Ubisecure Oy and Nasdaq CSD SE, ensuring compliance with global LEI standards. The website targets Norwegian legal entities requiring LEI codes for regulatory and financial transparency purposes. The business model revolves around facilitating LEI registrations, renewals, and providing related certificates and badges to demonstrate compliance and transparency.

C

Charles Dickens Museum

dickensmuseum.com

68

The Charles Dickens Museum operates as a well-established cultural and educational institution located in London, dedicated to preserving and promoting the legacy of Charles Dickens. The website serves as both an informational portal and an e-commerce platform offering museum tickets, educational resources, events, and themed merchandise. The museum targets a broad audience including tourists, educators, students, and literary enthusiasts. The business model is primarily non-profit with revenue streams from admissions, retail sales, and memberships. The museum holds a reputable market position supported by cultural funders and charity status. Technically, the website is built on the Shopify platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Hosting and domain registration are consistent with a legitimate, long-standing organization. From a security perspective, the site enforces HTTPS, uses secure Shopify checkout, and implements client transfer protection on the domain. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information, which are areas for improvement. Privacy compliance is strong with GDPR-consistent cookie consent and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and secure online presence for the Charles Dickens Museum, with minor recommendations to enhance security transparency and DNS security. The risk profile is low, and the site effectively supports the museum's mission and business objectives.

T

The Quality Assurance Agency for Higher Education

qaa.ac.uk

72

The Quality Assurance Agency for Higher Education (QAA) is a UK-based independent charity and the expert quality body for tertiary education. It provides impartial regulatory and collaborative quality assurance and enhancement services across the UK and internationally. The organization is trusted by governments, funding bodies, and higher education providers, offering services such as membership, accreditation, training, and sector resources. The website reflects a mature, professional entity with a clear focus on education quality and standards. Technically, the website is built on the Sitefinity CMS platform, leveraging modern analytics tools including Google Analytics and Microsoft Clarity, and employs Google Tag Manager for marketing and tracking. The site is mobile-optimized, accessible, and well-structured with comprehensive navigation and content. Security certifications such as ISO 27001 and Cyber Essentials are prominently displayed, indicating a strong commitment to information security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers and a public security policy or incident response contact are not found, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and organization present a low-risk profile with high trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy and incident response details, and implementing a vulnerability disclosure program to further strengthen security and transparency.

CosmoCaixa Barcelona is a science museum operated by Fundación “la Caixa”, a well-established non-profit foundation in Spain. The website serves as an educational platform offering exhibitions, conferences, and divulgative activities aimed at the general public interested in science. The site is professionally designed, localized in Spanish, and uses a modern CMS platform (Liferay) with integrated analytics and cookie consent mechanisms. The domain is long-standing and registered transparently, reflecting a mature and credible organization. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the website is trustworthy and serves its educational mission effectively.

I

Institut der Deutschen Zahnärzte

idz.institute

53

The Institut der Deutschen Zahnärzte (IDZ) is a reputable German dental research institute affiliated with the Bundeszahnärztekammer (BZÄK) and the Kassenzahnärztliche Bundesvereinigung (KZBV). It focuses on oral epidemiology, health economics, dental profession research, and related fields, providing valuable studies such as the German Oral Health Studies (DMS). The website is professionally designed, content-rich, and well-structured, targeting a broad audience interested in dental health research and policy. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is good with HTTPS and secure form handling, though some security headers are missing and no explicit security policies are published. WHOIS data is unavailable due to malformed queries or registry restrictions, but the website's content and affiliations strongly support its legitimacy. Overall, the site represents a trustworthy and authoritative source in the dental research sector in Germany.

A

AGROLA AG

agrola.ch

53

AGROLA AG is a Swiss energy and mobility company providing a broad range of products and services including heating oil, wood pellets, electricity, electromobility charging solutions, and solar energy systems. The company targets both residential and commercial customers within Switzerland, positioning itself as a reliable regional partner in energy and mobility sectors. The website reflects a mature digital presence with clear navigation, professional design, and multilingual support (German and French). Technically, the site employs modern web technologies such as Bootstrap, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a moderate to advanced digital infrastructure. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is partially met with a comprehensive privacy policy available, but lacks a visible cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

Datawrapper GmbH

datawrapper.de

61

Datawrapper GmbH operates a professional SaaS platform focused on enabling users to create interactive and responsive data visualizations such as charts, maps, and tables without coding. The company serves a broad audience including media organizations, enterprises, and public service entities, with a strong market position evidenced by notable clients like the UN and New York Times. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern performance optimizations and privacy-conscious analytics (Matomo). Security posture is strong with HTTPS enforced and privacy policies clearly presented, though some security headers could be improved. Overall, the domain registration and hosting setup are consistent and trustworthy. The site demonstrates good compliance with GDPR and cookie consent requirements, supporting a high level of business credibility.

K

Knipp Medien und Kommunikation GmbH

irondns.net

67

ironDNS® is a specialized DNS service provider operated by Knipp Medien und Kommunikation GmbH, established in 2009 in Germany. The company focuses on delivering secure and compliant DNS infrastructure services to corporates, registrars, and registries. Their offerings include DNS provisioning APIs (SOAP and REST), control panel access, DNSSEC support, and advanced DNS features such as Zone Lock and ANAME records. The website reflects a professional and consistent brand presence with clear navigation and relevant business content.

B

Bank für Kirche und Diakonie eG

kd-onlinespende.de

52

KD-onlineSpende is a donation portal operated by the Bank für Kirche und Diakonie eG, targeting nonprofit organizations and donors primarily in Germany. The platform facilitates online donations for charitable projects, providing an intuitive and cost-effective service for its users. The website is professionally designed, with clear navigation and relevant content focused on donation projects and institutional registration. Technically, the site is built on the Contao CMS and uses modern JavaScript libraries such as jQuery and Modernizr, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. The site does not employ advertising or extensive tracking, aligning with its nonprofit focus.

O

Online Now! GmbH

online-now.de

10

Online Now! GmbH is a specialized digital agency based in Berlin, Germany, focusing on TYPO3 CMS development, responsive web design, and social media integration. The company positions itself as a certified TYPO3 integrator with a strong portfolio of reference projects, offering end-to-end services including consulting, design, programming, hosting, and support. Their target audience primarily consists of businesses and organizations seeking professional web solutions with a focus on usability and mobile optimization. Technically, the website is built on TYPO3 CMS with PHP and JavaScript technologies, incorporating modern libraries such as jQuery and bxSlider for UI components. The site demonstrates good mobile responsiveness, accessibility, and SEO practices. Analytics are implemented via Google Analytics and Matomo, with privacy-conscious configurations such as IP anonymization and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs cookie consent banners to comply with GDPR. However, explicit HTTP security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website and domain exhibit a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration is consistent with the business, though registrant details are protected per DENIC policy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

V

Vieser Norge

vieser.no

58

Vieser Norge is a regional branch of a Finnish manufacturer specializing in floor drains since 1973. The website targets Norwegian customers and professionals interested in modern floor drainage solutions. The company maintains a consistent brand presence with regional partner sites in Finland, Estonia, and Sweden. Technically, the site is built on WordPress with WooCommerce and uses modern technologies such as Bootstrap and jQuery, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent banner and links to detailed privacy policies. However, the site lacks visible contact information and formal security or incident response policies, which could be enhanced to improve trust and compliance. Overall, the website is professional, secure, and compliant, serving its business purpose effectively.

I

Input interior

inputinterior.no

59

Input interior is a leading independent interior furnishing group in the Nordic region, specializing in tailored solutions for offices, hospitality, education, and healthcare sectors. The company operates multiple showrooms and maintains a strong digital presence with comprehensive content and social media engagement. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent management, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Input interior presents a trustworthy and credible business front with strong market positioning in the Nordic interior furnishing industry.

T

TreCe

trece.se

54

TreCe is a Swedish company specializing in office storage and recycling solutions designed to integrate seamlessly with office interiors. Their website presents a professional and well-structured digital presence built on WordPress with WooCommerce, leveraging modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance. The site targets businesses and organizations seeking flexible and user-friendly storage and sorting solutions for office and public environments. Technically, the website is well-optimized for mobile devices and includes standard tracking and consent mechanisms, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some advanced security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain www.trece.se reduces trustworthiness from a domain registration perspective, though the website content and structure appear legitimate and professional. Overall, the site is safe for general audiences and provides a solid foundation for business operations, but would benefit from enhanced transparency in privacy and security documentation.

AB Hyllteknik is a well-established Swedish manufacturer specializing in strong and flexible shelving and sken systems since 1957. The company serves B2B customers primarily in the Nordic region, including offices, schools, libraries, and furniture resellers. Their product portfolio includes office furniture, library shelving, school cloakroom furniture, and related interior systems. The website reflects a mature business with a consistent brand presence and a clear market position as a leader in their niche. Technically, the site uses a modern tech stack with popular JavaScript libraries, CDN hosting, and standard analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic with cookie usage disclosed but lacking a formal privacy policy and consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's long history.

L

LAUFEN

laufen.no

62

LAUFEN is a company specializing in high-quality Swiss bathroom products and design solutions, targeting consumers and professionals interested in premium bathroom furnishings. The website reflects a medium-sized retail business with a consistent and professional brand presence, offering a wide range of bathroom products including toilets, sinks, showers, and furniture. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies and standard analytics tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages, as well as contact information for security incidents or data protection officers. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the site itself appears trustworthy and professional. Overall, the website scores well in content quality and security posture but should improve privacy compliance and business credibility transparency.

I

INR

inr.no

71

INR is a Scandinavian bathroom furnishing company offering customizable, high-quality products such as shower solutions, bathroom furniture, mirrors, storage, mixers, and towel warmers. The company targets consumers seeking stylish and functional bathroom designs with a focus on Scandinavian aesthetics. Their market position is that of an established brand with Swedish production and long-term warranties, emphasizing quality and design. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and Swiper.js for UI components. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and security policies. Security posture is good with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

The website Zukunft Allschwil serves as an official municipal platform for the community of Allschwil, Switzerland, focusing on the revision of zoning regulations and the settlement road network plan. It targets local residents, businesses, and stakeholders interested in urban development and planning. The site provides detailed project timelines, team information, and opportunities for public participation, reflecting a transparent and community-oriented approach. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and privacy compliance mechanisms such as cookie consent. From a security perspective, the site shows good practices but could improve by implementing security headers, cookie policies, and explicit GDPR compliance statements. No incident response or vulnerability disclosure information is provided, which could be enhanced to build trust. Overall, the site is trustworthy, professional, and serves its municipal purpose effectively.

S

Steve Edge Design Ltd.

steve-edgeshop.com

46

Steve Edge Design Ltd. operates the Steve Edge Shop, an e-commerce platform specializing in artist-created merchandise such as posters, books, and badges. The business targets art enthusiasts and collectors, offering unique design products with personal significance. The website is built on WordPress with WooCommerce, leveraging modern web technologies and tracking tools like Google Analytics and Tag Manager. The site is mobile-optimized and provides clear navigation and professional design, supporting a positive user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the site's professional appearance and active social media presence. Security posture is moderate with HTTPS enabled but lacks important security headers and cookie consent mechanisms, indicating room for improvement in compliance and protection. Overall, the site presents a trustworthy retail front but should address domain registration transparency and enhance security and privacy compliance to strengthen its credibility and user trust.

D

DFL Stiftung

dfl-stiftung.de

71

DFL Stiftung is a well-established German non-profit foundation founded in 2008, focused on supporting children, youth, and young sports talents through social and sports-related projects. The foundation leverages a strong network and expertise from professional football to promote social participation, healthy development, and elite sports success. The website reflects a professional and consistent brand presence with comprehensive content in German and English, targeting a broad audience interested in youth development and sports. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on AWS infrastructure, and employs SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Matomo. Security posture is good with HTTPS enforced, though some security headers and explicit policies are missing. Privacy compliance is adequate with a comprehensive privacy and cookie policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and aligned with its mission.

G

GKV-Spitzenverband

qs-reha.de

63

QS-Reha® is a government-backed quality assurance platform operated by the GKV-Spitzenverband, focusing on medical rehabilitation quality in Germany. The website provides comprehensive information about the quality assurance procedures, methodologies, and results for various medical indications, targeting healthcare providers and rehabilitation facilities. The platform serves as an official resource for quality data and facility comparisons, supporting transparency and improvement in rehabilitation services. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Matomo analytics hosted on their own domain to ensure privacy compliance. The site is mobile-optimized, accessible, and uses HTTPS with a cookie consent mechanism that respects GDPR requirements. Hosting appears to be managed by ITSG or GKV-Spitzenverband infrastructure, ensuring stable and secure delivery. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent management. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could enhance its security posture. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its government-mandated role effectively. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen trust and resilience.

G

GKV-Spitzenverband

gkv-gamsi.de

62

The website www.gkv-gamsi.de serves as the official portal for the GKV-Spitzenverband's pharmaceutical quick information service, providing detailed reports and data visualizations on pharmaceutical expenditures within the German statutory health insurance system. It targets healthcare professionals, policymakers, and stakeholders involved in the German healthcare sector. The site offers quarterly reports, procedural information, and regional target agreements, positioning itself as a trusted governmental information source in the healthcare domain. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Tableau Public for interactive data visualizations. It uses Matomo analytics hosted on its own servers, enhancing privacy compliance. The site is moderately optimized for mobile devices and accessibility, with a clear navigation structure and cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for statistics, and applies SameSite cookie attributes. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, indicating high legitimacy and trustworthiness. Overall, the website demonstrates a strong business credibility and technical foundation with good privacy compliance. Strategic improvements could include publishing a security policy, incident response information, and implementing additional security headers to enhance the security posture further.

G

GKV-Spitzenverband

gkv-datenaustausch.de

63

The GKV-Datenaustausch website is an official information portal operated by the GKV-Spitzenverband, the central association for statutory health insurance in Germany. It provides comprehensive and up-to-date information on electronic data exchange procedures and technical standards for healthcare providers, employers, and other stakeholders involved in the statutory health insurance system. The portal serves as a trusted resource for technical documentation, procedural guidance, and updates via RSS feeds, positioning itself as a key authoritative source in the healthcare data exchange domain. Technically, the website employs standard web technologies including JavaScript, jQuery, and Matomo analytics hosted on its own domain, reflecting a privacy-conscious approach to user tracking. The site is hosted on servers associated with ITSG, a recognized service provider for statutory health insurance IT services. The site demonstrates moderate performance and basic mobile optimization, with good accessibility and SEO practices. The presence of a cookie consent banner with granular options aligns with GDPR compliance requirements. From a security perspective, the site enforces HTTPS and uses secure cookie attributes, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of published security policies or incident response contacts suggests room for improvement in transparency and readiness. Overall, the security posture is solid but could be enhanced with additional best practices. The website is fully accessible without any WAF or blocking mechanisms, and the WHOIS data confirms the domain's legitimacy and consistency with the GKV-Spitzenverband organization. No suspicious patterns or privacy protections obscure the domain registration. The site does not contain any adult or questionable content and is suitable for a general audience. Strategic recommendations include publishing security and incident response policies, improving mobile optimization, and adding advanced security headers to strengthen the security posture further.

S

Sozialhelden e.V.

sozialhelden.de

68

Sozialhelden e.V. is a German non-profit organization dedicated to promoting inclusion and accessibility for people with disabilities. Founded in 2004 by Raúl Krauthausen and others, the organization engages in political campaigns, app development, consulting, and empowerment initiatives. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on their mission. The target audience includes people with disabilities, companies, media professionals, and the general public interested in disability mainstreaming. Technically, the site is built on Webflow CMS, hosted via Cloudflare, and uses modern web technologies including Matomo for analytics and Klaro for cookie consent, ensuring GDPR compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, well-maintained, and aligned with the organization's mission.

T

TelefonSeelsorge® Deutschland

telefonseelsorge.de

11

TelefonSeelsorge® Deutschland is a well-established non-profit organization providing free, anonymous, and competent counseling services across Germany. It operates under the responsibility of the Evangelical and Catholic churches and relies on a large volunteer base to offer telephone, chat, email, and on-site counseling, as well as a mobile app for crisis support. The organization is positioned as a trusted national service with strong church affiliations and a comprehensive digital presence including a YouTube channel and multiple contact options. Technically, the website is built on WordPress with modern plugins and scripts, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

KZBV - Kassenzahnärztliche Bundesvereinigung

kzbv.de

11

The KZBV (Kassenzahnärztliche Bundesvereinigung) is a large, government-related healthcare organization in Germany representing approximately 63,000 dentists involved in statutory dental care. It acts as the umbrella organization for the 17 regional dental associations, negotiating contracts with health insurers and shaping dental healthcare policy and services for about 70 million insured individuals. The website is professionally designed, content-rich, and targets dentists, patients, policymakers, and the press. It provides comprehensive information on legal frameworks, digitalization, quality promotion, and patient consultation services. Technically, the website is built on WordPress with modern plugins such as WooCommerce, Yoast SEO Premium, and Borlabs Cookie for privacy compliance. It uses jQuery and Swiper.js for interactive elements and is hosted likely by NetCologne based on DNS data. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and employs honeypot techniques to protect forms. However, explicit security headers are not detected in the provided data, and no dedicated security or incident response policies are published. No vulnerabilities or suspicious patterns were found, and the WHOIS data aligns well with the organization's identity, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular plugin audits to sustain security posture.

W

Whois Corp.

whois.co.kr

11

Whois Corp., operating the website whois.co.kr, is a leading South Korean domain registration and business IT solutions provider established in 1998. The company offers a comprehensive suite of services including domain registration, email solutions, cloud hosting, SSL certificates, groupware, and website creation. The website reflects a mature digital presence with professional design, clear navigation, and extensive service offerings targeting businesses and enterprises in South Korea. The company maintains strong trust signals such as ISMS certification and KISA privacy excellence, and serves major Korean corporations as clients. Technically, the website employs modern JavaScript libraries like jQuery, Owl Carousel, and Google Analytics for tracking and user experience enhancement. Hosting appears to be managed internally by Whois Corp., with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and domain status set to clientTransferProhibited, though DNSSEC is not implemented. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is robust with no evident vulnerabilities or exposed sensitive data. The WHOIS data is consistent and transparent, reinforcing the legitimacy of the domain and business. The website is fully accessible without WAF or blocking mechanisms, supporting a high trustworthiness rating. Strategic recommendations include implementing DNSSEC, enhancing security headers, and adding cookie consent to improve privacy compliance. This analysis concludes that Whois Corp. operates a professional, secure, and credible online presence suitable for its business domain and customer base.

CaixaForum is a cultural initiative operated by the Fundación Bancaria Caixa d'Estalvis i Pensions de Barcelona, "la Caixa", providing a wide range of cultural activities including exhibitions, workshops, and family events across multiple centers in Spain. The website reflects a well-established non-profit organization with a clear mission to promote culture to the general public. The digital infrastructure is built on the Liferay CMS platform, leveraging modern web technologies and third-party services such as Google Analytics and ReadSpeaker for accessibility and analytics. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Security posture is good with HTTPS enforced and domain registration showing strong legitimacy, although some improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and well-positioned within its cultural sector.

P

Paul Mellon Centre

paul-mellon-centre.ac.uk

73

The Paul Mellon Centre is a UK-based non-profit educational charity dedicated to supporting original research into the history of British art and architecture across all periods. The organization offers key services including research support, publishing, events, conferences, grants, and fellowships, targeting academics, researchers, and students interested in British art history. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its mission effectively. Technically, the site employs modern web technologies including JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of visible security headers and lack of published security policies suggest room for improvement. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, safe, and compliant with GDPR, but could enhance transparency by publishing contact and security-related policies.

C

Cornell University

cornell.edu

67

Cornell University is a prestigious Ivy League private research university offering comprehensive undergraduate, graduate, and professional education across multiple campuses including Ithaca, New York City, and Doha, Qatar. The institution is well-positioned in the education sector with a strong reputation for research and public engagement. The website reflects this stature with rich content, multimedia, and clear navigation targeting students, faculty, alumni, and the general public. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and tag management tools to optimize user experience and data collection. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and published security policies could enhance protection. Privacy compliance is robust with clear privacy and cookie policies and GDPR considerations. Overall, the site demonstrates high professionalism and trustworthiness consistent with a leading educational institution.

C

Cheltenham Civic Society

cheltcivicsoc.org

38

Cheltenham Civic Society is a small non-profit organization dedicated to promoting civic pride, heritage conservation, and high standards in urban design within Cheltenham, UK. The society operates as a registered charity and engages the community through campaigns, events, and acting as a formal consultee to the local planning authority. Their website reflects a well-structured and content-rich platform that supports their mission and community engagement efforts. Technically, the website is built on WordPress using modern plugins and libraries, with good SEO and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be enhanced. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its target audience effectively.

W

Welsh Government

gov.wales

73

The Welsh Government website serves as the official digital portal for the devolved government of Wales, providing comprehensive information and services across a broad range of policy areas including health, education, environment, and public services. It targets residents, businesses, and public sector organizations within Wales, positioning itself as an authoritative and trusted source of government information. The website's business model is focused on public service and information dissemination, with a large-scale operational footprint and consistent branding. Technically, the site is built on Drupal 11, leveraging modern web technologies such as jQuery and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The use of Sentry indicates proactive error monitoring. However, some security best practices like explicit security headers and a published security policy are absent. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a strong privacy posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official government entity, confirming legitimacy and trustworthiness. However, the absence of a security.txt file or incident response contact information suggests room for improvement in vulnerability disclosure and incident management. Overall, the website is professional, secure, and compliant with privacy regulations, making it a reliable resource for its audience. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

융

융코리아 일렉트릭(주)

jung-korea.com

64

융코리아 일렉트릭(주) is a Korean-based manufacturer and distributor specializing in premium electrical wiring devices and smart building automation solutions, representing the German brand JUNG. The company operates a professional e-commerce website hosted on the Cafe24 platform, targeting both B2B and B2C customers interested in high-quality electrical products and smart home/building solutions. Their market position is that of a premium brand distributor with a solid presence in Korea, supported by a comprehensive product catalog and active social media engagement. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Fullpage.js, and AOS for animations, with Google Analytics integrated for user tracking. The site is hosted on Cafe24, a popular Korean e-commerce platform, ensuring stable infrastructure but with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced DNS security (DNSSEC) and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy compliance to meet higher standards.

U

UIFA Japon - 国際女性建築家会議 日本支部

uifa-japon.com

57

UIFA Japon is the Japanese branch of the International Union of Women Architects, a non-profit organization dedicated to supporting women architects through international exchange, professional development, and information sharing. The website serves as an information portal for members and interested parties, offering newsletters, event information, and organizational details. The organization has a niche but established presence with a history dating back to 1992 in Japan and internationally since 1963. Technically, the website is built on WordPress using a modern theme and plugins, with responsive design and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact is primarily via a web form, with social media presence on Facebook and YouTube. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

D

Deutscher Säge- und Holzindustrie Bundesverband e. V. (DeSH)

holzkongress.de

62

The Deutscher Holzkongress website serves as a professional platform for the annual wood industry congress organized by the Deutscher Säge- und Holzindustrie Bundesverband e. V. (DeSH). It targets industry professionals, policymakers, and stakeholders in the wood and forestry sectors, providing detailed event information, speaker profiles, news updates, and sponsorship opportunities. The site is well-branded and consistent with the organization's identity, reflecting a medium-sized, established industry event in Germany. Technically, the site is built on WordPress with modern plugins for SEO, user management, and content presentation. It employs HTTPS and a cookie consent mechanism but lacks explicit privacy and terms of service pages, as well as security headers, which are areas for improvement. The security posture is moderate with no detected vulnerabilities or WAF blocking. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Respectzone

respectzone.org

52

Respectzone is a French non-profit organization dedicated to promoting respect and combating online violence, harassment, and hate. The organization provides educational interventions, legal aid, digital tools such as an app and MOOC, and awareness campaigns targeting schools, universities, social centers, local authorities, and companies. The website is professionally designed, multilingual, and actively maintained with clear navigation and calls to action including donation options. Technically, the site is built on WordPress with modern plugins and frameworks, uses HTTPS with good security headers, and implements privacy and cookie consent mechanisms. No critical security vulnerabilities or suspicious indicators were found. WHOIS data is unavailable due to privacy protection or query failure, which is common and justified for non-profit entities. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility.

M

Musée de la contrefaçon

musee-contrefacon.com

59

Musée de la contrefaçon is a specialized museum located in France, dedicated to educating the public about counterfeit goods, their history, and the importance of intellectual property. The museum offers exhibitions, guided tours, workshops, and educational resources targeting families, tourists, and groups. The website is built on WordPress with WooCommerce for ticketing and uses Piwik PRO for analytics. The technical infrastructure is modern and moderately performant, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protections, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, but could improve in privacy and security transparency.

K

Kirchenweb.ch GmbH

kirchgemeinde.ch

61

Kirchenweb.ch GmbH is a Swiss-based company specializing in digital services tailored for church communities, including mail forwarding with @ref-kirche.ch addresses, information portals, and church management systems. The company targets church organizations primarily within Switzerland, offering a niche service model focused on digital communication and administration solutions. Their market position is that of a specialized provider with a clear focus on the non-profit religious sector. Technically, the website employs a custom CMS platform supplemented by common JavaScript libraries such as jQuery, Typed.js, and Owl Carousel. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The infrastructure appears stable and functional, though there is room for improvement in modern security headers and enhanced privacy mechanisms. From a security perspective, the site enforces HTTPS and uses form validation and captcha to protect user inputs. However, it lacks explicit security headers and a formal vulnerability disclosure policy. Privacy compliance is partially addressed with a privacy policy and security policy pages, but cookie consent mechanisms and incident response contacts are missing. Overall, the security posture is adequate but could be strengthened to meet higher compliance standards. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response contacts, and enhancing accessibility. These steps will improve trust, compliance, and resilience against potential threats.

K

Kirchenweb.ch GmbH

kirchenweb.ch

67

Kirchenweb.ch GmbH is a Swiss-based company specializing in digital tools and management systems tailored for church communities and religious organizations. Their offerings include modern website publication, communication tools such as newsletters and SMS, collaboration platforms, administrative management, and building automation solutions. The company serves a niche market within Switzerland, boasting a solid client base with hundreds of active systems and extensive references. Technically, the website employs a custom CMS with modern JavaScript libraries like jQuery, Typed.js, and Owl Carousel, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and obfuscated emails, though improvements in security headers and cookie consent are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

K

Kassenärztliche Bundesvereinigung (KBV)

116117.de

56

The website www.116117.de is the official patient service platform operated by the Kassenärztliche Bundesvereinigung (KBV) in Germany, providing comprehensive medical on-call services, appointment booking, and healthcare information. It serves as a critical public healthcare resource, offering 24/7 telephone medical advice and digital tools such as symptom assessment and doctor search. The platform is well-positioned as the national gateway for non-emergency medical assistance, targeting patients across Germany. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with jQuery, hosted on Akamai CDN infrastructure for performance and reliability. The site is mobile-optimized, accessible, and SEO-friendly, with multilingual support and accessibility features such as sign language and easy language options. Privacy and cookie consent mechanisms are robustly implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent banners but lacks explicit security headers and public security policies or incident response disclosures. No vulnerabilities or sensitive data exposures were detected in the content. The WHOIS data and hosting details align with a legitimate, professionally managed government healthcare service domain. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with minor recommendations to enhance security headers and publish security policies. The risk profile is low, making it a reliable and safe resource for healthcare information and services in Germany.

A

ASTR

astr.fr

47

ASTR is a well-established French national groupement d'achats (purchasing group) and service provider for road transport companies, founded in 2000. It offers a broad range of services including fuel, toll badges, tires, spare parts, insurance, training, and more, targeting transport companies and professionals. The website reflects a mature business with a strong market position supported by over 800 shareholder companies and a large fleet and workforce. Technically, the site is built on WordPress with modern web technologies, optimized for SEO, accessibility, and mobile devices. Security posture is good with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected, indicating room for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and a transparent partner ecosystem.

G

Groupement FLO

groupement-flo.com

56

Groupement FLO operates as a French transport and logistics network comprising 110 member companies distributed across France. Established since 1993, it offers diversified services in seven transport and logistics sectors, emphasizing productivity and innovation. The website presents a professional and consistent brand image with comprehensive content including member listings, news updates, and service descriptions. Technically, the site is built on CMS Made Simple with modern JavaScript libraries and Google services integration, providing good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking some advanced security headers and explicit incident response policies. The absence of WHOIS registration data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the site is credible and business-focused but would benefit from enhanced transparency on domain registration and security policies.

A

Astre

astre.fr

61

Astre is a well-established European logistics and transportation network headquartered in France, providing tailored transportation, logistics, and palletized shipment solutions through its extensive member company network. The website reflects a professional and consistent brand image, targeting businesses requiring scalable and environmentally responsible supply chain services across Europe. Technically, the site is built on WordPress with modern JavaScript libraries and Google Analytics integration, offering good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosures are not published. Privacy compliance is moderate with a cookie consent mechanism but lacks a clearly accessible privacy policy. Overall, the domain WHOIS data is privacy protected, which is typical for .fr domains, and the website content aligns with legitimate business operations.

C

CM4all GmbH

cm4all.com

59

CM4all GmbH operates a mature software platform specializing in web application and website building solutions, primarily targeting small businesses and partners such as hosting providers and telecommunications companies. The company is part of the we22 group and has a strong market presence with millions of users worldwide. Their offerings include white-label web builders, hosting platforms, and service tools, supported by expert consulting and 24/7 support. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, delivering a responsive and professional user experience. Security posture is moderate with secure form handling and GDPR compliance evident, but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site demonstrates good digital maturity but would benefit from enhanced security practices and domain registration transparency.