Security Directory

W

we22

we22.com

50

we22 is a German-based technology company specializing in software development, platform operations, and consulting services aimed at empowering small businesses through digital transformation. Their offerings include scalable website software, hosting, domain management, CRM integration, and white-label services, positioning them as a market leader in website creation and online marketing solutions for small enterprises. The company leverages a strong partner ecosystem including major industry and telecommunications firms to enhance its market reach and service quality. Technically, the website is built on TYPO3 CMS with modern frontend frameworks and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and GDPR compliant with clear cookie consent mechanisms and multiple contact forms integrated with Salesforce. Security posture is moderate with room for improvement in HTTP security headers and published security policies. WHOIS data is missing, which reduces domain trustworthiness and should be verified. Overall, the website and business present a professional and credible digital presence with a solid foundation for growth and customer engagement.

S

Stadtwerke Rheinfelden (Baden)

stadtwerke-rheinfelden.de

52

Stadtwerke Rheinfelden (Baden) is a regional municipal utility company providing essential water and heat supply services to the Rheinfelden community in Germany. The website clearly communicates their role as a reliable local service provider focused on citizen welfare. Their business model is that of a municipal utility, serving residential and commercial customers with sustainable and efficient energy and water solutions. The site features clear navigation, relevant content, and partner affiliations that reinforce their local market position. Technically, the website is built on the cEasy CMS platform and incorporates modern JavaScript libraries such as jQuery and Slick Carousel for UI elements. It uses Matomo for privacy-conscious analytics and includes accessibility features and mobile optimization. Hosting is managed via domaincontrol.com DNS, typical for small to medium enterprises. Performance is moderate with good SEO and metadata implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, it lacks a publicly available security policy and incident response contacts, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business identity, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence for a small municipal utility. Strategic improvements include publishing a dedicated security policy, incident response information, and enhancing security headers to strengthen the security posture further.

A

Abfallwirtschaft Landkreis Lörrach

abfallwirtschaft-loerrach-landkreis.de

51

Abfallwirtschaft Landkreis Lörrach is a government-operated waste management service provider serving the Landkreis Lörrach region in Germany. The website offers comprehensive information on waste collection schedules, container ordering, recycling, hazardous waste disposal, and related public services. It targets residents and businesses within the local jurisdiction, providing essential public service functions with a focus on environmental sustainability and regulatory compliance. The site is well-structured with clear navigation and relevant content tailored to its audience.

The website www.bebit-rheinfelden.de serves as a regional vocational orientation platform managed by WST Rheinfelden (Baden) GmbH. It provides students, companies, and schools with information on training opportunities, regional training companies, and vocational events. The site is positioned as a local educational resource with a focus on supporting regional workforce development. Technically, the site is built on the Contao Open Source CMS and uses modern JavaScript libraries such as jQuery and Rocksolid Slider. It implements HTTPS and a comprehensive cookie consent mechanism, reflecting a good level of digital maturity. Security measures include CSRF protection and cookie consent categories, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

Alliance Française de Bâle

af-bale.ch

55

The Alliance Française de Bâle is a small non-profit cultural association dedicated to promoting the French language and culture in the Basel region and surrounding border areas. The website serves as a platform to announce and organize francophone events such as conferences, guided visits, courses, theatre, cinema, concerts, and clubs. It targets French speakers and cultural enthusiasts locally, positioning itself as a niche cultural promoter within the community. Technically, the website is built on WordPress with common plugins such as Events Manager and uses jQuery for interactivity. The site is served over HTTPS with a valid SSL certificate, but lacks advanced security headers and cookie consent mechanisms. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO features. From a security perspective, the site enforces HTTPS but does not implement key HTTP security headers like CSP or HSTS. There is no visible privacy or cookie policy compliance mechanism, and no incident response or vulnerability disclosure information is provided. Analytics tracking is present via a plugin but not configured, indicating minimal user tracking. Overall, the website is trustworthy and professionally maintained for its purpose but would benefit from enhanced security practices and privacy compliance improvements to better protect users and meet regulatory requirements.

K

Komm.ONE

komm-one.net

70

Komm.ONE is a medium-sized IT service provider focused on delivering specialized solutions to municipal and state administrations in Baden-Württemberg, Germany. The company offers a range of services including consulting, cloud solutions, innovation management, and security services tailored for public sector clients. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at government entities. Technically, the site employs a modern technology stack with popular JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, leveraging Matomo analytics for privacy-conscious tracking. Overall, the domain registration details align well with the business profile, indicating legitimacy and trustworthiness.

G

GKV-Spitzenverband

gkv-spitzenverband.de

66

The GKV-Spitzenverband website serves as the official portal for Germany's statutory health and long-term care insurance umbrella organization. It provides comprehensive information on health insurance, care insurance, policy updates, research, and services for insured persons and healthcare providers. The site is well-structured, professionally designed, and offers content in German and English, targeting insured individuals, healthcare professionals, policymakers, and the public. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics with a strong emphasis on privacy and consent. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not explicitly published. Overall, the site reflects a mature digital presence consistent with a large, government-related healthcare entity.

N

Neudeck

neudeck.de

49

Neudeck is a well-established German family-owned business specializing in the international import and distribution of semi-finished wood products. Founded in 1946, it operates with over 180 employees, multiple locations, and a significant logistics fleet, serving primarily B2B customers in the wood manufacturing and construction sectors. The company emphasizes sustainability through FSC and PEFC certifications and maintains a professional digital presence with a modern WordPress-based website featuring SEO optimizations and multimedia content. Technically, the website uses a mature tech stack including Bootstrap and Borlabs Cookie for GDPR compliance, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a credible and trustworthy business with a strong market position in the manufacturing sector.

E

EVH GmbH & Co. KG

evholz.de

50

EVH GmbH & Co. KG operates as a purchasing alliance for wood dealers in Germany, established in 2012 and part of the hagebau group. The company focuses on optimizing purchasing conditions and supporting its members through a network of over 50 sales locations and more than 100 supplier relationships. The website reflects a professional business presence targeting wood dealers and suppliers, emphasizing collaboration and market strength. Technically, the website is built on the Contao CMS platform, utilizing jQuery and Rocksolid Slider for interactive elements. It is hosted with INWX and uses HTTPS with proper session and CSRF protections. The site is mobile-optimized with basic accessibility and SEO features, though some security headers could be improved. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not present. No vulnerabilities or suspicious elements were detected. WHOIS data aligns well with the business information, supporting domain legitimacy. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate technical sophistication. Recommendations include enhancing security headers, adding explicit security policies, and expanding analytics and marketing transparency for improved digital maturity.

F

Fepco International (Europe) NV

fepco.be

59

Fepco International (Europe) NV is a well-established European company specializing in the wholesale and sourcing of high-quality plywood and multiplex products. Founded in 1971, the company operates primarily in the manufacturing sector, serving importers and wholesalers across Europe with a strong presence in Belgium, Germany, the Netherlands, and France. Their business model focuses on large-scale procurement and logistics management to offer competitive pricing and reliable supply. The website reflects a professional and consistent brand image with multilingual support, targeting a B2B audience.

A

A&J HOLZZENTRUM – Andresen & Jochimsen GmbH & Co. KG

holzzentrum.de

55

A&J HOLZZENTRUM – Andresen & Jochimsen GmbH & Co. KG operates a specialized retail and online shop business focused on wood products, building materials, doors, and garden supplies primarily serving the Hamburg region in Germany. The company positions itself as Hamburg's largest selection provider in this sector, targeting both B2C and B2B customers. Their business model combines physical retail with an integrated e-commerce platform, leveraging Shopware technology to deliver a comprehensive shopping experience. Technically, the website is built on the Shopware CMS platform, enhanced with modern JavaScript libraries such as jQuery and integrated with marketing and customer service tools like Google Tag Manager, Superchat, and Trusted Shops widgets. The hosting is managed via 1&1 IONOS, with consistent domain registration and DNS configurations. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, supporting a positive user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates CAPTCHA on forms to mitigate automated abuse. While no critical vulnerabilities or exposed sensitive data were detected, the absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and preparedness. Privacy and cookie policies are present and include consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional front with solid business credibility and technical implementation. The risk profile is low, with recommendations focusing on enhancing security documentation, incident response readiness, and accessibility compliance to further strengthen the security posture and user trust.

D

DigiShop GmbH

kloepfer.de

60

Klöpfer Holzhandel operates a professional B2B e-commerce platform specializing in wood and wood-related construction materials, targeting professional tradespeople and commercial customers primarily in Germany. The website offers a comprehensive product catalog, planning tools, and customer account management features, positioning itself as a leading provider in the German wood trade market. Technically, the site uses a modern JavaScript stack with Bootstrap, jQuery, Slick Slider, and a ColdFusion backend, hosted likely on Deutsche Telekom infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published privacy or terms policies. No WAF or blocking mechanisms were detected, and no suspicious or adult content is present. Overall, the site is professional, trustworthy, and well-structured but could improve privacy transparency and security header implementation.

D

DigiShop GmbH

weltholz.de

59

Weltholz is a German-based wood import company specializing in high-quality timber and exclusive wood products for wholesale and retail customers. The website presents a professional and well-structured platform targeting B2B clients such as large and wood dealers. It offers a comprehensive product catalog, marketing support, and online tools like a terrace planner. Technically, the site uses a custom ColdFusion backend with modern frontend libraries including jQuery, Bootstrap, and Slick Slider, integrated with HubSpot and Google Analytics for marketing and analytics. The security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected and could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, well-branded, and professionally maintained.

M

MIDI Europe S.r.l.

isuzutrucks.ro

62

The website is the official Romanian portal for Isuzu Trucks operated by MIDI Europe S.r.l., established in 2022. It provides comprehensive information about Isuzu truck models, sales, after-sales services, and dealer networks targeting businesses and individuals interested in commercial vehicles in Romania. The site is professionally designed with consistent branding and good content quality, supporting a medium-sized transportation sector business. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is strong with clear GDPR-aligned policies and user consent. Overall, the site is trustworthy and well-positioned in its market niche.

M

MIDI Europe S.r.l.

isuzutrucks.sk

61

The website is the official Slovak regional site for Isuzu trucks, operated by MIDI Europe S.r.l. It provides detailed product information, dealer locator services, customer support links, and media updates tailored for the Slovak market. The site targets commercial vehicle buyers and users, positioning itself as a key regional distributor within the broader Isuzu European network. The business model focuses on sales, after-sales service, and brand promotion in the transportation sector. Technically, the site is built on Drupal CMS with a modern front-end stack including jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and localized content. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS and enforces domain transfer restrictions. It includes GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security headers or incident response contacts are found, indicating areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site presents a professional and trustworthy digital presence with a solid business foundation. Strategic improvements in security headers, contact transparency, and SEO could further strengthen its posture and user trust.

M

MIDI Europe S.r.l.

isuzutrucks.pl

65

The website is the official Polish portal for ISUZU trucks, operated by MIDI Europe S.r.l. It provides detailed information about various ISUZU truck models, after-sales services, dealer networks, and customer advisory services. The site targets commercial vehicle buyers and fleet operators in Poland, positioning itself as a regional distributor and service provider for ISUZU commercial vehicles. The business is well-established, with the domain registered since 2008, reflecting a mature presence in the transportation sector. Technically, the website is built on the Drupal CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized with a responsive design and includes accessibility features, though these could be enhanced. Performance is moderate, with no critical errors or broken elements detected. SEO and metadata are basic but sufficient for the site's scope. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and there is no public security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The overall security posture is good but could be improved by adding security headers and publicly available security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its business purpose with clear navigation and relevant content. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance to further strengthen the site's security and user experience.

M

MIDI Europe S.r.l.

isuzutrucks.hu

62

The website is the official Hungarian portal for Isuzu Trucks, operated by MIDI Europe S.r.l. It serves as a regional distributor platform providing detailed information about Isuzu truck models, dealer locations, sales, after-sales services, and downloadable catalogs. The site targets commercial vehicle buyers and service customers in Hungary, positioning itself as a trusted regional representative of the Isuzu brand. The business model focuses on direct sales and support through a dealer network, emphasizing brand consistency and customer engagement. Technically, the website is built on the Drupal CMS platform, utilizing common front-end libraries such as jQuery, Bootstrap, and Font Awesome. Google Tag Manager is employed for analytics and marketing tracking, with a cookie consent mechanism in place to comply with GDPR requirements. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are present but could be enhanced. From a security perspective, the site uses HTTPS, but no explicit security headers were detected in the HTML content. The cookie consent banner indicates awareness of privacy regulations, and no sensitive data exposure or vulnerabilities were found in the analyzed content. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. Overall, the website presents a professional and trustworthy front for Isuzu Trucks in Hungary, with solid business credibility and compliance with privacy regulations. The technical and security posture is adequate but could benefit from enhancements to security best practices and accessibility. No critical issues or blocking mechanisms were detected, allowing full content analysis.

M

MIDI Europe S.r.l.

isuzutrucks.cz

63

The website is the official Czech Republic portal for Isuzu Trucks, operated by MIDI Europe S.r.l. It provides comprehensive information about Isuzu's commercial truck offerings, sales and service networks, and customer support. The site targets commercial vehicle buyers and operators within the Czech market, positioning itself as a regional distributor and service provider for Isuzu trucks. The business model focuses on vehicle sales, after-sales service, and customer engagement through digital content and brochures. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and a professional design. Performance is moderate, with room for improvement in SEO and accessibility. The hosting and domain registration are stable and consistent with the business's operational history. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The privacy and cookie policies are comprehensive and clearly presented. Overall, the website presents a low-risk profile with a good level of professionalism and compliance. Strategic improvements in security headers, incident response transparency, and SEO could enhance the site's security posture and digital maturity.

funny-frisch.de is the official website of funny-frisch, a leading German snack brand known for its salty snack products. The site is branded under the parent company Intersnack Deutschland SE and positions itself as a market leader with a strong consumer focus in Germany. The website offers product information, brand storytelling, and consumer engagement through social media and campaigns. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries such as jQuery, Slick Slider, and WOW.js to deliver a responsive and visually appealing user experience. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, with contact primarily via a web form. Overall, the website is trustworthy, professional, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

B

Bundesliga International GmbH

bundesliga-international.com

70

Bundesliga International GmbH operates as the global marketing and media rights arm of the Bundesliga, Germany's premier football league. The company focuses on international sales of media rights, commercial partnerships, and marketing initiatives to engage football fans worldwide. The website reflects a professional and consistent brand presence aligned with the parent company DFL Deutsche Fußball Liga. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent implemented, though security headers are not evident and could be improved. The absence of WHOIS data for the domain is a notable anomaly, raising questions about domain registration transparency despite the site's legitimacy and official branding. Overall, the site is well-structured, GDPR compliant, and serves its business purpose effectively.

M

Muffin Group

muffingroup.com

59

Muffin Group is a well-established company specializing in premium WordPress themes and website building tools, notably Betheme and BeBuilder. The company targets WordPress users, developers, and agencies seeking versatile and feature-rich themes with extensive pre-built website demos and premium plugin integrations. Their market position is strong, supported by a large user base exceeding 300,000 satisfied customers and consistent product updates. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, though improvements in privacy transparency and security hardening are recommended.

G

Groupe Pole

groupe-pole.com

56

Groupe Pole operates as a network of specialized transporters focusing on pallet distribution and logistics across France and Europe. Established in 2009, the company leverages a collaborative business model to optimize delivery efficiency and environmental impact. Their market position is supported by a sizable network of 64 members and significant annual transport volumes. Technically, the website is built on Joomla! CMS with standard web technologies including jQuery, Bootstrap, and Google services, hosted by OVH sas. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

A

Atlas Estate Agents

atlasestateagents.co.uk

45

Atlas Estate Agents is a well-established real estate agency specializing in residential and commercial property sales, lettings, and management in Liverpool, UK. The company emphasizes competitive pricing, family business values, and customer service, positioning itself as a trusted local market player since 1965. Their website provides property search functionality, valuation requests, and detailed service information targeting buyers, sellers, landlords, and tenants in the Liverpool area. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Maps API, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Security measures include HTTPS enforcement and spam protection via reCAPTCHA, but lack certain HTTP security headers and cookie consent mechanisms. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal privacy/cookie consent banners indicates room for improvement in compliance and defense-in-depth. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain trust verification. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, the company should prioritize implementing security headers, cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance. Additionally, clarifying domain registration details and improving accessibility would further enhance their digital maturity and risk management.

D

Dinas Lingkungan Hidup Provinsi Sumatera Utara

dlhsumaterautara.id

51

The website dlhsumaterautara.id serves as the official online presence of the Environmental Agency of North Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within North Sumatra and operates as a government public service platform. The domain registration aligns with the website's launch year, indicating a new but legitimate government initiative. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, with Cloudflare DNS services. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced SEO and accessibility features, and no CMS or backend platform is explicitly identified. From a security perspective, HTTPS is properly implemented, and the domain status clientTransferProhibited adds a layer of domain security. However, the absence of DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options represents areas for improvement. No privacy or cookie policies are present, which impacts compliance with data protection standards. Overall, the website is trustworthy and safe for general audiences, with no adult or explicit content detected. The lack of privacy and cookie policies and some security best practices lowers the overall security and compliance score. Strategic improvements in these areas would enhance the site's security posture and user trust.

D

DLH Provinsi Sumatera Selatan

dlhsumateraselatan.id

49

The website dlhsumateraselatan.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of South Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management and policies. The site targets residents and stakeholders within the province, functioning as a government information dissemination platform. Technically, the site employs standard web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The design and content quality are basic but functional, with moderate mobile optimization and navigation clarity. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data shows inconsistencies with a future domain creation date and a private registrar, raising legitimacy concerns. Overall, the site is accessible and safe for general audiences but requires improvements in security and privacy compliance to enhance trust and resilience.

D

Dinas Lingkungan Hidup Provinsi Sumatera Barat

dlhsumaterabarat.id

51

The website dlhsumaterabarat.id serves as the official online presence of the Environmental Agency of West Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within West Sumatra and operates as a government service platform. The domain registration and website content are consistent with a legitimate government entity, with a domain age and copyright year of 2025, indicating a relatively new but official site. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, hosted behind Cloudflare DNS services. The site is mobile optimized with good navigation and content quality. However, it lacks some advanced SEO and accessibility features. Security-wise, HTTPS is properly implemented, but DNSSEC is not enabled and no security headers are detected in the HTML content. There is no visible privacy or cookie policy, which is a compliance gap, especially for GDPR and similar regulations. Overall, the security posture is moderate with room for improvement in DNS security and privacy compliance. The site does not use analytics or advertising scripts, which reduces privacy risks but also limits marketing insights. Contact information is clearly provided, enhancing business credibility. The content is safe for general audiences with no adult or explicit material detected. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and considering incident response contact details to improve trust and compliance.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Utara

dlhsulawesiutara.id

50

The website dlhsulawesiutara.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of the Sulawesi Utara province in Indonesia. It provides environmental news, public announcements, documents, and contact information aimed at residents and stakeholders interested in environmental governance. The site is positioned as a government information hub with a medium organizational size and a focus on public service. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services, and supports HTTPS for secure communications. However, it lacks advanced DNS security features like DNSSEC and does not implement security headers, which could be improved to enhance security posture. The WHOIS data presents inconsistencies, notably a future domain creation date and a registrant that is a registrar company rather than the government entity, which lowers trustworthiness but does not necessarily indicate malicious intent. No privacy or cookie policies are present, indicating a gap in compliance with modern privacy standards. Overall, the site is functional, professional, and safe for general audiences but would benefit from enhanced security and privacy compliance measures.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Tenggara

dlhsulawesitenggara.id

49

The website dlhsulawesitenggara.id serves as the official online presence of the Environmental Agency of Southeast Sulawesi Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within the province and operates as a government service platform. Technically, the website employs common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security-wise, HTTPS is enabled, but the absence of DNSSEC and security headers reduces the overall security posture. The WHOIS data presents inconsistencies, including a future domain creation date and a registrant organization that does not align with the government entity, which raises questions about domain ownership authenticity. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. Overall, the website is functional and safe for general audiences but requires improvements in security, privacy compliance, and domain legitimacy to enhance trust and professionalism.

D

DLH Provinsi Sulawesi Tengah

dlhsulawesitengah.id

41

DLH Provinsi Sulawesi Tengah operates as the official environmental agency for Central Sulawesi Province, Indonesia, providing public information, news, and services related to environmental management. The website serves residents, government officials, and environmental stakeholders with updates, documents, and contact channels. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Cloudflare DNS services, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS enabled but lacks advanced DNS security and published policies. WHOIS data shows inconsistencies that warrant caution but do not directly undermine the site's legitimacy. Overall, the site is functional and trustworthy for its intended audience but requires improvements in privacy compliance and security best practices.

S

smartsteuer GmbH

smartsteuer.de

63

smartsteuer GmbH operates a well-established online tax declaration platform targeting German taxpayers including employees, self-employed individuals, students, and pensioners. The service offers an intuitive, step-by-step tax filing experience with TÜV certifications and integration options such as Lexware Office. The company positions itself as a user-friendly alternative to traditional tax filing methods, emphasizing ease of use and maximizing tax refunds. Technically, the website is built on WordPress with modern plugins and libraries, hosted on sysEleven infrastructure, and optimized for performance and mobile use. Security posture is strong with HTTPS, cookie consent management, and TÜV certifications, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, smartsteuer demonstrates a mature digital presence with high trustworthiness and professional business operations.

C

Cotec

cotec.es

10

Cotec is a Spanish non-profit foundation dedicated to promoting innovation through research, projects, and public engagement. The website reflects a well-established organization with a clear focus on innovation and youth, providing reports, observatories, and events. Technically, the site is built on WordPress with modern plugins and integrations such as HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though formal security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, serving a broad audience interested in innovation in Spain.

M

musicdirectory.ch

musicdirectory.ch

47

musicdirectory.ch is a specialized online platform operated by Helvetiarockt, targeting women, inter-, trans-, non-binary, and agender individuals in the Swiss music industry. It serves as a directory and community hub offering listings of people, projects, and events to foster networking and visibility within this niche market. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages to cater to a diverse Swiss audience. Technically, it is built on WordPress with common plugins for forms, multilingual support, and performance optimization, and it integrates Google Analytics and Tag Manager for user tracking. Security-wise, the site uses HTTPS and some best practices like password strength meters and honeypots in forms but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced privacy and security measures.

S

Stiftung Leben mit Krebs

beweg-dich-gegen-krebs.de

10

Beweg Dich gegen Krebs is a German non-profit initiative operated by Stiftung Leben mit Krebs, focused on promoting physical activity and sports for cancer patients. The initiative leverages a mobile app to engage users in tracking their activities and encourages donations to support cancer patients locally. The website is professionally designed using WordPress and integrates modern technologies such as Swiper.js and Borlabs Cookie for consent management. It maintains a moderate security posture with HTTPS and cookie consent but lacks published privacy and terms of service policies. The site is well-positioned in the healthcare non-profit sector in Germany, targeting patients, supporters, and the general public interested in health and charity. The digital infrastructure is adequate, with room for improvement in security policies and compliance documentation.

R

Repair-Café Tösstal

repair-cafe-toesstal.ch

36

Repair-Café Tösstal is a small, community-driven non-profit organization based in Switzerland, focused on providing free repair services for various household and personal items to reduce waste and promote sustainability. Founded in 2018, it operates with a volunteer team and enjoys strong local support from municipalities and schools. The website reflects a well-structured and informative platform that clearly communicates its mission, services, and contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. However, there is a lack of formal privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate with no visible vulnerabilities or sensitive data exposure, but the absence of security best practices and compliance documentation lowers the overall security score. Overall, the website is trustworthy and professional, serving its target audience effectively with a clear business model and community focus.

A

Awelty

awelty.com

50

Awelty is a French web agency based in Amiens with over 20 years of experience specializing in web creation, AI integration, and digital marketing services. The company offers a broad range of services including custom software development, e-commerce solutions, SEO, mobile applications, and motion design. Their market position is that of a well-established regional player with a strong focus on innovative AI-powered digital solutions. The website reflects a professional and consistent brand image with detailed case studies and client logos, indicating trust and credibility. Technically, the website uses a modern technology stack including PHP Symfony, Flutter, Firebase, and cloud services from Google Cloud and AWS. It employs common web frameworks like Bootstrap 4 and jQuery, and integrates AI technologies such as OpenAI and Mistral. The site is mobile-optimized and SEO-friendly, with good performance and accessibility basics in place. From a security perspective, the site uses HTTPS and includes tracking and analytics tools like Google Analytics, Matomo, and Facebook Pixel. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial, with cookie management present but no clear privacy policy page found. Overall, the website is professional, secure, and credible with minor gaps in privacy and security policy disclosures. The domain WHOIS data is unavailable due to privacy protection, which is typical for commercial entities in France. The business and technical maturity are consistent with the company's claims, though domain age cannot be verified. Strategic recommendations include enhancing privacy disclosures, publishing security policies, and implementing security headers to improve trust and compliance.

G

gb consite GmbH | Geomarketing und Logistik Software

gbconsite.de

53

gb consite GmbH operates a professional website offering specialized software solutions in the geomarketing and logistics sector. Their services include location analysis and route optimization tools targeted at businesses seeking to optimize their geographic marketing and logistics operations. The company positions itself as a niche provider with a focus on affordable and professional online geomarketing software. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. Cookie consent is managed effectively via Cookiebot, demonstrating attention to privacy compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though improvements in security headers and incident response documentation are recommended. Overall, the website presents a trustworthy and professional front for a small technology company based in Germany.

W

Wiki Software International - Consulenza finanziaria

wikisoftware.it

43

Wiki Software International is a specialized Italian company founded in 2011, offering financial consultancy and software solutions focused on synchronizing financial flows and reducing errors in payment processes. Their market position is that of a niche provider with strong banking and financial know-how, targeting CFOs and financial departments of enterprises. The website reflects a professional B2B business model with key services including assessment, consultancy, international finance, IBAN checking, and a competence center. Technically, the site is built on WordPress with modern plugins and SEO tools, showing good mobile optimization and moderate performance. Security posture is adequate with HTTPS, DNSSEC, and reCAPTCHA, but the expired domain status is a critical risk. Privacy compliance is limited due to missing privacy and terms policies. Overall, the site is trustworthy and professional but requires urgent domain renewal and enhanced compliance documentation.

E

Einwohnergemeinde Allschwil

allschwil.ch

62

The Einwohnergemeinde Allschwil website serves as the official digital presence of the municipal government of Allschwil, Switzerland. It provides comprehensive information on local government services, cultural events, political activities, and community resources. The site targets residents and stakeholders interested in municipal affairs, offering a broad range of services including administrative forms, event calendars, and contact information. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates external resources like FontAwesome for icons and ReadSpeaker for accessibility. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses some security headers, though it lacks advanced headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism in place. However, no explicit security policy or incident response contact information is provided. Overall, the website is trustworthy and professional, reflecting the legitimacy of a municipal government entity. It maintains a good balance between usability, compliance, and security, with room for improvement in security header implementation and incident response transparency.

S

SUPERO

supero.ch

10

SUPERO is a Swiss-based graphic design agency located in La Chaux-de-Fonds, Neuchâtel. The company offers creative graphic design services and operates an online shop. The website is built on WordPress with WooCommerce integration, utilizing modern frontend libraries such as Bootstrap, Swiper, and Video.js. Social media presence is established on Facebook, LinkedIn, and Instagram, enhancing brand visibility. The technical infrastructure is solid with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. No contact emails or phone numbers are directly visible in the analyzed HTML content, which may affect user trust and compliance. Overall, the website presents a professional image with good content quality and user experience but could improve in privacy compliance and security best practices.

H

Historisches Lexikon der Schweiz (HLS)

hls-dhs-dss.ch

10

The Historisches Lexikon der Schweiz (HLS) is a reputable, multilingual, scientific online lexicon dedicated to Swiss history, serving both the general public and researchers. It is uniquely positioned as the only scientific lexicon published simultaneously in the four Swiss national languages. The website is affiliated with the Swiss Academy of Humanities and Social Sciences, enhancing its credibility and trustworthiness. The platform offers a rich array of content including articles, multimedia, projects, and newsletters, emphasizing open access and scientific rigor. Technically, the website is built on the XWiki platform with a modern tech stack including RequireJS, jQuery, Bootstrap, and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is strong with HTTPS enforced and no exposed sensitive data, but could be improved by adding explicit security headers and vulnerability disclosure mechanisms. Overall, the site maintains a high level of professionalism and trustworthiness, with comprehensive content and consistent branding. However, it lacks explicit cookie consent mechanisms and published security policies, which are recommended for enhanced compliance and user trust. The domain registration aligns well with the website's academic nature, supporting its legitimacy.

E

EasyRecyclage

easyrecyclage.com

60

EasyRecyclage is a leading French company specializing in tertiary waste management services, including recycling, secure destruction of confidential documents, and customized waste solutions. The company operates under the Paprec Group umbrella, leveraging a strong market position and extensive service offerings tailored to businesses and organizations across France. Their website reflects a professional and consistent brand image, emphasizing their expertise and client base of over 20,000 companies. Technically, the website is built on WordPress with Elementor, incorporating modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is trustworthy and professionally maintained, supporting the company's credibility in the waste management sector.

H

herzog kommunikation GmbH

herzogkommunikation.de

53

herzog kommunikation GmbH is a small digital agency based in Stuttgart, Germany, specializing in scalable and future-proof web and application development. Their services include customized web tools, mobile apps, digital installations, and concept development, targeting both established companies and startups. The website reflects a professional digital agency with a clear portfolio and contact information, positioning them as a regional player in the technology sector. Technically, the site uses modern web technologies such as HTML5, Bootstrap, PHP, and Docker, ensuring responsive design and moderate performance. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and formal security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professionally maintained.

F

Fachkommission Internet – Amnesty International

amnesty-intern.de

43

The Fachkommission Internet (FK Internet) website serves as an informational and support platform for the German section of Amnesty International, focusing on IT-related services such as webhosting, email, cloud storage, and intranet support. The organization operates as a small, volunteer-driven non-profit entity providing specialized IT assistance to Amnesty International groups and districts in Germany. The website is built on WordPress and leverages a variety of plugins and modern web technologies to deliver content and services effectively. Hosting is provided by Manitu, a reputable German hosting provider, which aligns with the organization's regional focus. From a technical perspective, the site demonstrates a moderate level of digital maturity with a modern tech stack, responsive design, and active content updates. However, there is room for improvement in areas such as security headers implementation and cookie consent mechanisms to enhance GDPR compliance. The absence of explicit terms of service and vulnerability disclosure pages suggests potential gaps in formal security and compliance documentation. Security posture is generally good, with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site does not exhibit signs of malicious activity or phishing. Privacy compliance is supported by the presence of a privacy policy, though cookie consent mechanisms are lacking. Contact information is available primarily via email and contact forms, but no phone numbers or physical addresses are prominently displayed. Overall, FK Internet presents a trustworthy and professional online presence consistent with its non-profit mission. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing formal security policies to strengthen trust and compliance further.

P

Partner sein

partner-sein.ch

65

Partner sein is a Swiss non-profit humanitarian organization affiliated with the Swiss Old Catholic church, focusing on international aid projects in countries such as DR Congo, South Sudan, Uganda, Syria, and the Philippines. The website provides project updates, donation options, and contact forms for engagement. The organization targets donors and church communities interested in solidarity and humanitarian support. Technically, the website is built on the kirchenweb.ch CMS platform, uses jQuery and Hyphenopoly for hyphenation, and serves content over HTTPS with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy compliance and security transparency.

The website cloud32.ch currently serves as a minimal 'Coming Soon' placeholder page with no substantive business content, contact information, or policies. The site uses WordPress with a Coming Soon plugin and includes styling via Tailwind CSS and FontAwesome. There is no evidence of active business operations or services presented on the site. The technical infrastructure is basic, with standard libraries such as jQuery and Google Fonts included. No analytics or tracking scripts are detected, and no security headers or SSL configuration details are available from the provided data. The security posture is weak due to lack of visible HTTPS enforcement and absence of security best practices. Privacy compliance is non-existent as no privacy or cookie policies are found. Overall, the site lacks business credibility and trust indicators, making it unsuitable for customer engagement at this time.

C

Consorzio Cooperativo Finanziario per lo Sviluppo

fin4coop.it

40

FIN4COOP is a cooperative financial intermediary operating nationally in Italy, focusing on providing financial services and support to cooperative members. The website serves as an information portal offering details on financial activities, brochures, membership procedures, financial statements, and news updates. The company targets cooperative organizations and mutual societies, positioning itself as a niche player in the cooperative finance sector with strategic partnerships and a cooperative business model. The website is professionally designed, consistent in branding, and includes trust signals such as privacy compliance and social media presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Maps API, and Google Analytics integrated with consent management. The site shows moderate performance and good mobile optimization. SEO practices are well implemented with proper meta tags and structured data. However, a visible PHP warning indicates a plugin issue that should be resolved to improve security and user experience. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs a cookie consent mechanism via Iubenda. No critical vulnerabilities were detected, but the absence of security headers and the PHP warning reduce the security posture score. No incident response or security policy pages were found, suggesting room for improvement in transparency and preparedness. Overall, the website is trustworthy and professional with a good balance of content quality, technical implementation, and privacy compliance. Addressing the minor security issues and enhancing security headers would further strengthen the site's security and user trust.

C

Coopfond

coopfond.com

68

Coopfond is a mutualistic fund affiliated with Legacoop, dedicated to promoting cooperation and supporting the creation and sustainable growth of cooperatives in Italy. The organization has a strong market position with over 30 years of history, offering financial and strategic support to cooperatives, emphasizing sustainability, innovation, and solid growth. The website reflects a mature digital infrastructure built on WordPress with modern plugins and analytics tools, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, including cookie consent and GDPR-aligned policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and trustworthy online presence. Overall, Coopfond presents as a credible and professional organization with a clear mission and well-implemented digital presence.

Rumahweb Indonesia is a well-established web hosting and domain registration provider based in Indonesia, serving primarily small to medium businesses and individuals. Founded in 2002, the company offers a comprehensive suite of services including shared hosting, cloud hosting, VPS, dedicated servers, email hosting, SSL certificates, and website creation tools. Their market position is strong locally, supported by over 155,000 customers and multiple industry certifications such as ISO 27001. The website reflects a professional and modern digital presence built on WordPress with Elementor, demonstrating technical maturity and good user experience. Security posture is robust with HTTPS, security partnerships, and anti-DDoS measures, though explicit cookie consent mechanisms and incident response contacts could be improved. The absence of WHOIS data for the domain is unusual but does not detract significantly from the overall trustworthiness given the extensive business and trust signals present. Strategic recommendations include enhancing privacy compliance and publishing vulnerability disclosure information to further strengthen security and compliance posture.

A

Axapharm AG

grafixpharm.ch

46

Grafixpharm, operated by Axapharm AG, is a Swiss-based graphic design service provider with a multilingual WordPress website. The site demonstrates moderate digital maturity with the use of modern plugins such as Yoast SEO, WPML for multilingual support, and Google Analytics for visitor tracking. The website design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS enabled and some tracking opt-out mechanisms, but it lacks advanced security headers and public security policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and consistency.