Security Directory

C

Candu123

croissance-verte.net

52

The website 'Candu123' operates as an online gaming agent platform primarily targeting users interested in gambling and gaming services. It offers products and services related to online gaming with claims of official PAGCOR licensing, positioning itself as a niche player in the online gaming e-commerce sector. The business appears small and relatively new, founded in 2019, with a physical address claimed in Paris, France. The website content is accessible and moderately structured but lacks comprehensive privacy and security policies, which impacts its trustworthiness. Technically, the site uses a modern but basic technology stack including Bootstrap, jQuery, and several popular JavaScript libraries for UI and interactivity. Hosting is supported by Cloudflare DNS, and HTTPS is enabled, but security headers and advanced security practices are missing. The site shows moderate performance and mobile optimization but has SEO and accessibility only at a basic level. From a security perspective, the site has some strengths such as HTTPS and Cloudflare DNS but lacks critical security headers and explicit data protection compliance. The absence of privacy and cookie policies, as well as incident response contacts, indicates compliance gaps. The use of multiple external and shortened URLs, some unrelated to the main domain, raises concerns about transparency and potential phishing risks. Overall, the website presents moderate risk with questionable content safety due to its gambling-related services and lack of robust privacy and security measures. Strategic improvements in security posture, privacy compliance, and clearer business information are recommended to enhance trust and reduce risk.

B

Banca Popolare Etica S.c.p.a.

fiarebancaetica.coop

72

Fiare Banca Etica is a cooperative and independent bank operating primarily in Spain and Italy, focused on ethical finance principles. It offers a range of financial products including current accounts, loans, credit, deposits, and ethical investment funds, targeting individuals, companies, and organizations interested in socially responsible banking. The bank emphasizes transparency, cooperative governance, and positive social impact. Technically, the website is built on WordPress with modern plugins and libraries, including Yoast SEO for optimization, Matomo for privacy-friendly analytics, and Iubenda for cookie consent management. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but could improve by enabling DNSSEC and adding explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration details align well with the business identity, supporting legitimacy and trustworthiness.

A

Audit People Srl – Società Benefit

ghgcompensation.com

64

ghgcompensation.com is a website operated by Audit People Srl – Società Benefit, providing sustainability consulting and greenhouse gas compensation services targeted at micro and small enterprises in Italy. The company offers free initial consultancy, online training, simplified emission calculations, improvement plans, and carbon offsetting options. The website positions itself as a pioneering independent service for small businesses aiming to be environmentally responsible. Technically, the site is built on WordPress with popular plugins such as WPBakery, Slider Revolution, and Contact Form 7, incorporating modern features like Google reCAPTCHA v3 and Iubenda cookie consent management. Security posture is adequate with HTTPS and form protections, though it lacks DNSSEC and some security headers. Privacy compliance is strong with GDPR-aligned policies and explicit consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, serving a niche market effectively.

F

FS International SpA

fsinternational.it

62

FS International SpA is a prominent European rail transport company specializing in high-speed rail services across borders, regulated rail passenger services, and urban mobility solutions. As part of the FS Italiane Group, it holds a leading position in the European transportation sector, focusing on sustainable and seamless passenger mobility. The website reflects a professional corporate presence with clear branding and comprehensive business information. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and analytics tools, ensuring a good user experience and mobile optimization. Security measures include HTTPS and a strict Content-Security-Policy header, complemented by a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and strong business credibility, with room for enhanced security transparency.

F

FSTechnology

fstechnology.it

61

FSTechnology is a medium-sized technology company operating within the transportation sector in Italy, primarily serving as a digital transformation and technology service provider for the Ferrovie dello Stato Italiane group. The company offers a range of services including continuous and project-based technological services, managed and proprietary platforms, and advanced digital solutions such as IoT, blockchain, 5G, and robotic process automation. The website reflects a professional and consistent corporate identity with a focus on innovation and sustainability. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools, and implements strong security measures including HTTPS and a strict Content-Security-Policy. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, explicit contact information and security policies are not prominently displayed on the homepage, which could be improved. Overall, the website and domain registration data indicate a legitimate and trustworthy business entity with a solid market position in Italy's transportation technology sector.

F

Fondazione FS Italiane

fondazionefs.it

66

Fondazione FS Italiane is a well-established non-profit organization dedicated to preserving and promoting Italy's railway heritage. The website offers comprehensive information about historic train journeys, museum visits, and cultural events, targeting railway enthusiasts, tourists, and educational groups. The foundation operates under the umbrella of the FS Italiane group, Italy's state railway company, reinforcing its market position and credibility. Technically, the website is built on Adobe Experience Manager with modern JavaScript libraries and includes robust cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, Content Security Policy, and no evident vulnerabilities, although some additional headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, the site is professional, trustworthy, and serves its audience effectively.

F

Ferservizi Spa

ferservizi.it

54

Ferservizi Spa is a key service company within the FS Italiane Group, providing a broad range of services including accounting, real estate management, procurement, HR administration, and facility management. The company supports the Italian railway sector with specialized internal and external services, positioning itself as an important entity in transportation and real estate services in Italy. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to corporate clients and stakeholders. Technically, the site leverages Adobe Experience Manager and integrates modern analytics and consent management tools, indicating a solid digital infrastructure. Security posture is strong with HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, although some additional security headers could enhance protection. Overall, the site is trustworthy, compliant with GDPR, and aligned with the business's corporate identity and market position.

I

Italcertifer S.p.A.

italcertifer.com

55

Italcertifer S.p.A. is a medium-sized Italian company specializing in railway certification, testing, and safety verification services. It is a subsidiary or closely affiliated entity of Ferrovie dello Stato Italiane, Italy's national railway group, and collaborates with prominent Italian universities. The company positions itself as a center of excellence in railway conformity and safety, offering services such as certification of rolling stock, signaling, infrastructure, energy, and urban transport, alongside laboratory testing and project verification. The website content is professionally presented in Italian, targeting industry stakeholders and clients requiring railway safety and compliance services. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates analytics and marketing tools including Siteimprove Analytics, Adobe Launch, and LinkedIn Insight Tag. The site is mobile-optimized with good accessibility and SEO practices. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible HTTP security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website's affiliation with a reputable parent company mitigates this risk. Overall, Italcertifer's website demonstrates a solid business and technical foundation with good security hygiene, though improvements in domain registration transparency and security header implementation are recommended to enhance trust and compliance.

I

Italferr S.p.A.

italferr.it

10

Italferr S.p.A. is a prominent Italian engineering company specializing in railway infrastructure design, project management, and technological innovation. As a subsidiary of Ferrovie dello Stato Italiane, Italferr holds a leading market position in the transportation sector, offering comprehensive engineering services with a strong focus on sustainability and quality. The company targets government agencies, infrastructure developers, and transportation stakeholders, leveraging its extensive experience and certifications to maintain competitive advantage. The website reflects a mature digital presence with clear navigation, professional content, and consistent branding. Technically, the site is built on Adobe Experience Manager, utilizing modern analytics and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is robust with HTTPS, Content Security Policy, and secure script loading, although some additional headers could enhance protection further. Overall, the website demonstrates high trustworthiness and professionalism, supporting Italferr's business credibility and market reputation.

B

Banca Etica

bancaetica.it

11

Banca Etica is an Italian cooperative bank specializing in ethical finance, focusing on transparency and social/environmental impact. It serves individuals, families, businesses, and organizations with banking products such as current accounts, loans, ethical investments, and advisory services. The bank holds a niche leadership position in Italy and Spain, emphasizing cooperative governance and sustainability. Technically, the website is built on WordPress with modern libraries and tools, including Matomo for analytics and Iubenda for cookie compliance. The site is well-optimized for SEO, accessibility, and mobile use. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. WHOIS data confirms legitimacy with consistent registrant information and domain age matching the business history. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

D

DRI

dri.fr

53

DRI is a French-based company specializing in sovereign and eco-responsible web hosting and IT management services. Established since 2001, it serves a diverse clientele including public sector entities and environmentally conscious organizations. The company emphasizes security, environmental responsibility, and social engagement, holding ISO 27001 and ISO 14001 certifications. Their service portfolio includes managed hosting, infogérance, DevOps consulting, and AI sovereign services under the EVA brand. The website demonstrates a mature digital presence with good content quality, clear navigation, and mobile responsiveness. Technically, it uses modern frameworks like Bootstrap and FontAwesome, and integrates marketing automation via Mautic. Security posture is strong with HTTPS and certifications, though some improvements in security headers and incident response transparency are recommended. WHOIS data is missing, which slightly impacts trust but the extensive client testimonials and certifications support legitimacy. Overall, DRI presents as a credible and professional hosting provider with a strong focus on sustainability and security.

H

Handwerkskammer Dresden

hwk-dresden.de

53

Handwerkskammer Dresden is a regional chamber of crafts serving the Dresden area, providing a broad range of services including vocational training, continuing education, business consulting, legal advice, and political representation for the handcraft sector. The organization targets handcraft businesses, apprentices, trainers, and educational institutions within its jurisdiction. The website is professionally designed, content-rich, and well-structured, supporting multiple languages and offering extensive resources and event information. Technically, the site is built on TYPO3 CMS with modern libraries such as jQuery and Bootstrap, hosted likely by Deutsche Telekom, ensuring reliable infrastructure and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and active social media presence.

EFEN GmbH operates a professional website focused on providing optimized safety systems for electrical energy distribution. The company targets industrial and infrastructure sectors requiring reliable and safe energy supply solutions. The website reflects a medium-sized business with a long-standing market presence since 2007, supported by a consistent brand and clear service offerings. Technically, the site uses legacy JavaScript libraries such as jQuery and jQuery UI, hosted on Forpsi nameservers, with moderate performance and basic mobile optimization. Security posture is moderate, with cookie consent mechanisms implemented but lacking explicit security headers and visible HTTPS enforcement in the provided data. Privacy compliance is good, with GDPR-aligned cookie and privacy policies. Contact information is primarily via a contact page, with no direct emails or phone numbers on the main page. Overall, the site is trustworthy and professional but could improve security and technical modernization.

E

EFEN GmbH

efen-sales.com

48

EFEN GmbH operates a professional e-commerce website specializing in fuse links, power distribution components, measurement, and communication devices primarily targeting industrial and energy sector customers. The company emphasizes quality and safety, supported by DIN-ISO certification and a long-standing market presence. The website is built on the OXID eShop platform with modern frontend technologies like Bootstrap and jQuery, providing a good user experience with clear navigation and mobile optimization. Security measures include cookie consent and session management, but lack explicit HTTP security headers and visible incident response contacts. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional business presentation. Overall, the site scores well on content and privacy compliance but has room for improvement in security posture and business transparency.

A

Aschendorff Medien

aschendorff-medien.de

69

Aschendorff Medien is a regional media company based in Germany, specializing in local, digital, and crossmedia advertising solutions primarily targeting businesses in the Münsterland region. Their offerings include digital advertising, print media placements, social media management, performance marketing, and e-Recruiting services. The website is professionally designed using WordPress with Elementor and Jet plugins, reflecting a mature digital infrastructure. GDPR compliance is evident through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a trustworthy and professional image suitable for its business domain.

M

media city leipzig

media-city-leipzig.de

44

media city leipzig operates as the largest and most modern production complex for film, TV, radio, and stage in Central Germany, offering rental services for studios, event spaces, and conference rooms. The website reflects a professional media industry focus with clear navigation and relevant content for media professionals and creative businesses. Technically, the site is built on Drupal CMS with jQuery and Colorbox, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy and cookie policy present but no active cookie consent mechanism. Overall, the domain registration data aligns with the business claims, supporting legitimacy. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

R

ratiopharm arena – ganz nah dran!

ratiopharmarena.de

50

The ratiopharm arena website represents a medium-sized hospitality business focused on providing event venue services, ticket sales, and VIP experiences in Germany. The company positions itself as a regional event arena offering a variety of event types including concerts, private celebrations, and corporate galas. The website is professionally designed with clear navigation and good content relevance, targeting event attendees and organizers. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance and uses Google Tag Manager for analytics and marketing. Hosting is provided by Raidboxes, a reputable WordPress hosting provider. Security posture is good with HTTPS enabled and cookie consent implemented, though the absence of security headers and explicit privacy policy pages are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

E

Energieleitzentrale

eventlocation-energieleitzentrale.de

46

Energieleitzentrale is a specialized event location business based in Bremen, Germany, offering flexible venue spaces for corporate events, trade fairs, exhibitions, galadinners, concerts, and theater performances. The business leverages historic harbor buildings combined with modern amenities to attract medium to large-scale events with capacities up to 2,000 attendees. Their market position is regional with a focus on corporate and cultural event organizers. Technically, the website is built on WordPress using popular plugins and themes, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced and some security tokens in forms, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, with active social media presence and consistent branding.

The BAM Akademie website serves as the official training and conference portal for the Bundesanstalt für Materialforschung und -prüfung (BAM), a German federal institute. It offers a broad range of educational offerings including workshops, webinars, and on-demand courses primarily targeting professionals in energy, infrastructure, environment, material science, and chemical process technology sectors. The portal is well-positioned as a government-backed educational resource with a clear focus on industry and research professionals. Technically, the site is built on the ILIAS LMS platform with modern web technologies such as jQuery, Bootstrap, and various UI libraries, ensuring a responsive and accessible user experience. The site is hosted by Databay and uses HTTPS with a good security posture, including cookie consent and privacy policies aligned with GDPR requirements. Security best practices are observed, though explicit security headers could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

I

InfoCamere SCpA

italianbusinessregister.it

66

ItalianBusinessRegister.it is an official platform operated by InfoCamere SCpA, providing authoritative and certified data on Italian companies including company reports, annual accounts, and lists of companies. The website serves businesses, researchers, and individuals seeking reliable Italian business information. It holds a strong market position as the official Italian Business Register portal, offering fast access to over 6 million companies and millions of financial statements annually. The business model revolves around providing official data and document services, supported by partnerships with chambers of commerce and government entities.

B

Bundesverband Deutscher Sachverständiger und Fachgutachter BDSF e.V.

bundesverband-gutachter.de

47

The Bundesverband Deutscher Sachverständiger und Fachgutachter BDSF e.V. is a well-established professional association in Germany, specializing in connecting clients with qualified experts and appraisers across various fields, particularly real estate and technical expertise. With over 30 years of market presence and certifications such as ISO 9001 and ISO 17024, the organization positions itself as a trusted leader in its sector. The website serves as a portal for expert search, member services, and information dissemination, targeting individuals and businesses seeking professional appraisal services. Technically, the website is built on the Joomla CMS platform, utilizing modern web technologies including jQuery, Bootstrap, and Google Maps API for enhanced user experience. Hosting is provided by a reputable provider, Host Europe, ensuring stable infrastructure. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Privacy and cookie compliance are well implemented, featuring a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. From a security perspective, the site enforces HTTPS and employs CSRF tokens in forms, with no evident vulnerabilities in the provided content. However, some security headers are not explicitly detected and could be improved. The absence of a public security policy or incident response information suggests room for enhancement in transparency and readiness. Analytics usage is handled via Matomo, respecting user privacy with opt-in consent. Overall, the website reflects a professional and trustworthy digital presence for the association, with solid business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing explicit security policies, and considering a vulnerability disclosure framework to further strengthen trust and security maturity.

P

Państwowe Muzeum Auschwitz-Birkenau

auschwitz.org

54

The Państwowe Muzeum Auschwitz-Birkenau website serves as the official digital presence of the Auschwitz-Birkenau State Museum, a large non-profit organization dedicated to preserving the memory and history of the former Nazi concentration and extermination camp. The site provides extensive educational content, museum information, and visitor resources, targeting a broad audience including educators, researchers, and the general public. The museum is internationally recognized and operates with a strong focus on historical accuracy and memorialization. Technically, the website employs a custom CMS (edito) and utilizes common web technologies such as jQuery, Owl Carousel, Google Analytics, and Facebook SDK. The site is mobile optimized and accessible, with good SEO practices and a moderate performance profile. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices with HTTPS and no visible sensitive data exposure. However, it lacks some security headers and explicit cookie consent mechanisms, which could be improved to enhance GDPR compliance and overall security posture. The absence of WHOIS data limits domain trust verification, but the website's content and branding strongly indicate legitimacy. Overall, the site is a professional, trustworthy resource for historical education and memorial activities. Strategic recommendations include implementing cookie consent banners, enhancing security headers, and publishing security and incident response policies to strengthen compliance and user trust.

H

Hetzner Online GmbH

your-objectstorage.com

78

Hetzner Online GmbH is a well-established German hosting and data center operator founded in 1997, offering a broad range of IT infrastructure services including dedicated servers, cloud hosting, and scalable S3-compatible Object Storage solutions. The company emphasizes GDPR compliance, sustainability through 100% green electricity, and transparent pricing models. Their Object Storage product targets businesses and private customers needing flexible, secure, and scalable storage solutions with pay-as-you-go billing. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and uses SilverStripe CMS. It integrates Matomo analytics for privacy-conscious user tracking and provides a responsive, accessible, and well-structured user experience. The hosting is self-managed by Hetzner, ensuring good performance and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and secures forms with CSRF tokens. However, explicit security headers are not clearly visible in the HTML, and no dedicated security or incident response pages are found. The WHOIS data for the domain is unavailable, which limits domain registration trust analysis but does not detract from the professional presentation and trust signals on the site. Overall, Hetzner Online demonstrates a strong security posture, excellent privacy compliance, and a mature business model. Strategic recommendations include publishing explicit security policies, enhancing security headers, and providing clear incident response contacts to further strengthen trust and compliance.

S

Studierendenwerk Münster

stw-muenster.de

70

Studierendenwerk Münster is a regional non-profit organization dedicated to supporting students in Münster, Germany, by providing essential services such as student housing, catering, counseling, and event organization. The website reflects a well-established entity with a clear focus on student welfare and academic community support. The organization maintains a strong market position as a key service provider in the education sector within its region. Technically, the website is built on WordPress using Elementor and integrates modern SEO and cookie consent tools, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contact could enhance transparency. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its target audience.

A

Allgemeiner Studierendenausschuss der Universität Münster

asta.ms

47

The website represents the Allgemeiner Studierendenausschuss (AStA) of the University of Münster, a non-profit student organization providing services, political representation, and event information to the university community. The site is well-structured, primarily in German, and targets students and university affiliates. It offers key services such as student media, housing information, and contact avenues. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, hosted by Variomedia AG, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but the absence of DNSSEC and security headers indicates room for improvement. No critical vulnerabilities or blocking mechanisms were detected, and the domain WHOIS data aligns with the organization's legitimacy and history. Overall, the site scores well on business credibility and privacy compliance but could enhance its technical security posture.

S

Startseite » Studierzimmer Münster

studierzimmer-muenster.de

35

Studierzimmer Münster is a community-driven campaign focused on facilitating affordable student housing in the city of Münster, Germany. The website serves as a platform to connect landlords, investors, and students seeking housing, emphasizing social support and local collaboration. The campaign is supported by local institutions including the City of Münster, University of Münster, Fachhochschule Münster, and Studentenwerk Münster, indicating strong community ties and trust. Technically, the website is built on the SilverStripe CMS platform, utilizing standard web technologies such as HTML5, CSS, JavaScript, and jQuery. The site demonstrates moderate performance and basic mobile optimization. However, there is room for improvement in accessibility and SEO optimization. The hosting is provided by kasserver.com, a known hosting provider. From a security perspective, the site uses HTTPS as indicated by the base URL, but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms with sensitive inputs are present on the homepage, reducing immediate risk exposure. The absence of vulnerability disclosure and incident response information suggests limited security maturity. Overall, the website is a trustworthy and professional community resource with moderate technical and security posture. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance with data protection regulations.

U

UILTuCS

uiltucs.it

47

UILTuCS is a well-established Italian trade union representing workers in the tertiary sector, including tourism, commerce, and services. Founded in 1999, it operates as a large non-profit organization providing a range of services such as legal and fiscal assistance, training, and advocacy for its members. The website reflects a professional and consistent brand image, targeting workers and union members in Italy. It maintains a strong market position within its sector, supported by a network of related partner sites and affiliations with the broader UIL federation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile and SEO. It uses several plugins for social sharing, cookie management, and newsletter subscriptions, indicating a mature digital presence. Performance is moderate with good mobile optimization and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks some advanced security headers and DNSSEC, which are recommended to enhance its security posture. No incident response or security policy pages are publicly available, which is typical for this type of organization but could be improved. Overall, the website is trustworthy, safe, and professionally managed, with no signs of malicious activity or content safety concerns. Strategic improvements in security headers and transparency around security policies would further strengthen its position.

E

Energiefabrik Knappenrode

energiefabrik-knappenrode.de

41

Energiefabrik Knappenrode is a regional cultural and industrial heritage museum located in Germany, specializing in energy and industrial history. The website serves as an information portal for visitors, offering details about exhibitions, events, educational programs, and visitor services. It is affiliated with the Zweckverband Sächsisches Industriemuseum, indicating a non-profit organizational structure focused on cultural preservation and education. The target audience includes families, tourists, and educational institutions interested in industrial heritage. Technically, the website is built on TYPO3 CMS and employs modern JavaScript libraries such as jQuery, UniteGallery, Lightbox (Tobii), and Slick Slider to enhance user experience. The site is mobile-optimized with good navigation clarity and moderate performance. Hosting is managed through professional DNS providers, and SSL is properly configured, ensuring secure connections. From a security perspective, the website uses HTTPS and secure form submissions but lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. The site includes Matomo analytics for user tracking, with moderate tracking levels and basic privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements include implementing cookie consent, adding security headers, and publishing security and incident response policies to enhance compliance and security posture.

K

KIDS Regio c/o Deutsche Kindermedienstiftung Goldener Spatz

kids-regio.org

52

KIDS Regio is a German non-profit organization operating under the Deutsche Kindermedienstiftung Goldener Spatz, focusing on children's media and film festivals. The website serves as a platform for events like the KIDS Regio Forum and provides publications and networking opportunities for professionals in the children's media sector. The organization targets a niche audience involved in young audience film festivals and media education. Technically, the website is built on WordPress with common plugins such as LayerSlider and Real Cookie Banner Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with good content quality and clear navigation. Security-wise, the site uses HTTPS and a GDPR-compliant cookie consent mechanism but lacks DNSSEC and some advanced security headers, which are recommended for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with no signs of adult or questionable content.

V

VIP Films

vipfilms.com

45

VIP Films is a well-established multimedia production company operating primarily in the MENA region, with offices in Dubai, Riyadh, and Beirut. The company specializes in cinematic video production, corporate branding videos, and production servicing, leveraging over four decades of industry experience. Their market position is strong within the regional media production sector, targeting businesses and organizations seeking premium video content. The website reflects a professional and consistent brand image, supported by active social media channels and clear contact information across multiple regional offices. Technically, the website is built on WordPress using the Avada theme framework, incorporating modern plugins such as Yoast SEO and Slider Revolution. Hosting is provided via GoDaddy, with a moderate performance profile and good mobile optimization. SEO practices are well implemented, though accessibility features are basic. Analytics are tracked using Google Analytics, indicating moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and formal security policies. No privacy or cookie policies are present, and GDPR compliance mechanisms are absent, which represents a compliance gap. No vulnerabilities or exposed sensitive data were detected, but the absence of security.txt or incident response contacts limits transparency. Overall, VIP Films presents a credible and professional online presence with solid business credibility and technical implementation. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

A

American Film Market

americanfilmmarket.com

50

American Film Market (AFM) operates as a premier global event and marketplace for film and TV professionals, facilitating networking, pitching, financing, and content acquisition. The website reflects a mature digital presence with a professional design, modern WordPress infrastructure, and SEO optimization. However, it lacks visible privacy and terms of service policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS and domain transfer protections, but could be enhanced with DNSSEC and security headers. Advertising and analytics tools are standard, supporting marketing efforts but requiring transparent privacy practices. Overall, the site is credible and well-positioned in the media event sector but should improve compliance documentation and security transparency.

S

SHOTZ Production Service Germany

shotzfilm.de

48

SHOTZ Production Service Germany is a well-established film production service company based in Berlin, with over 25 years of experience and a strong market position in Germany. They specialize in organizing filming, casting, and remote production services for commercials, films, and content productions. Their business model focuses on providing Hollywood-quality production experience with versatile services to a broad creative audience. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using Elementor and optimized with NitroPack, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking published security policies and incident response information. Overall, the site is trustworthy and well-maintained but could improve compliance by adding privacy and terms of service pages.

G

Gebietsbetreuung Stadterneuerung

gbstern.at

55

Gebietsbetreuung Stadterneuerung (GB*) is a municipal service entity of the City of Vienna dedicated to urban renewal, housing consultation, and community engagement. With a history spanning approximately 50 years, GB* operates multiple local offices and provides free advisory services to residents on housing and neighborhood matters. The website serves as a comprehensive information portal, offering news, events, thematic projects, and multimedia content to engage and inform the public. The organization maintains an active presence on social media platforms including Facebook, Instagram, and YouTube, enhancing community outreach. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo for privacy-conscious web analytics. The site features modern frontend technologies such as jQuery and Owl Carousel for interactive elements. Cookie consent mechanisms are implemented with granular user controls, reflecting compliance with GDPR requirements. The site is mobile-optimized and accessible, with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses privacy-friendly analytics. However, HTTP security headers are not visibly implemented, and no public security policy or incident response contact information is provided, which could be improved. The absence of WHOIS data due to quota restrictions limits domain registration trust verification, but the website content and structure strongly indicate a legitimate and trustworthy municipal service. Overall, the website demonstrates a mature digital presence with strong content quality, privacy compliance, and community focus. Strategic improvements in security headers and transparency around security policies would enhance trust and resilience.

T

Ta-Daaa Studio

ta-daaa.ch

10

Ta-Daaa Studio is a small, Geneva-based design studio specializing in graphic and interaction design, founded in 2020. The company focuses on creating visual identities and offers services tailored to businesses and individuals seeking professional design solutions. Their market position is that of a niche local studio with a clear brand presence and active social media engagement. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, reflecting a moderate to good level of digital maturity. The site is mobile-optimized and incorporates modern web technologies such as jQuery and Google Analytics for visitor tracking with user consent. Security-wise, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers and documented security policies. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front with room for improvement in security hardening and transparency of contact information.

F

FondazioneConIlSud

esperienzeconilsud.it

10

Esperienze CON IL SUD is a non-profit network platform operated by Fondazione CON IL SUD, focused on promoting and sharing social projects in Southern Italy. The website serves as a hub for various community initiatives, providing visibility and fostering collaboration among stakeholders. It targets non-profit organizations, social workers, and community members interested in regional development and social innovation. The platform is positioned as a niche regional leader in the non-profit sector, leveraging its parent foundation's reputation and funding. Technically, the website is built on WordPress with modern web technologies including Bootstrap for responsive design, jQuery, and Slick Carousel for UI components. SEO is enhanced by the Yoast SEO plugin, and analytics are handled via Matomo, reflecting a commitment to privacy-conscious tracking. The site is mobile-optimized and demonstrates good performance and accessibility standards, though some improvements in security headers could be made. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements a cookie consent banner for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests room for maturity in security governance. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a socially focused non-profit entity. It balances content quality, technical implementation, and privacy compliance effectively, making it a reliable resource for its target audience.

F

FS PARK

fspark.it

59

FS PARK operates as a key service provider managing parking facilities linked to the Italian railway network, serving commuters and travelers across Italy. The website reflects a medium-sized enterprise with strong ties to the Gruppo FS Italiane, offering diverse parking solutions including bike parks and bus terminals. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and comprehensive analytics tools, indicating a mature digital presence. Security posture is strong with HTTPS, strict Content-Security-Policy, and cookie consent mechanisms in place, though explicit security policy and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the transportation sector.

N

Non Profit Legale

nonprofitlegale.it

48

Non Profit Legale is a specialized legal consultancy focused on providing assistance to non-profit organizations and entities in Italy. Their services include legal, civil, and fiscal consultancy, support for registrations, regulatory updates, privacy compliance including Data Protection Officer activities, training, and credit recovery. The website positions itself as a niche player serving non-profit entities and related professionals. Technically, the site is built on WordPress using the Divi theme and includes GDPR compliance features such as a cookie consent banner. The site is well-structured, mobile-optimized, and presents professional content with clear navigation. Security posture is good with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not found. Overall, the site is trustworthy and compliant with GDPR requirements, though it could improve by adding terms of service, vulnerability disclosure, and direct contact details for security incidents.

G

Gallerie FIAF

galleriefiaf.it

40

Gallerie FIAF is a cultural organization operating a network of photographic galleries across Italy, promoting photographic exhibitions and cultural events. The website serves as an information portal for these galleries, targeting photography enthusiasts and cultural audiences. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile-optimized and uses structured data for SEO benefits. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and trustworthy but could improve in privacy and security transparency.

Montanari Tour is a well-established Italian tour operator specializing in group travel packages for senior citizens, operating since 1976. The company offers a variety of travel destinations across Italy, focusing on quality and tailored experiences for the elderly market segment. Their website reflects a professional and consistent brand image, with clear contact information and trust signals such as certifications and testimonials. Technically, the site is built on WordPress with Elementor, leveraging modern SEO and analytics tools, and is mobile optimized. Security posture is good with HTTPS and some security best practices, though improvements like DNSSEC and security headers could be implemented. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business presents a credible and trustworthy online presence.

Z

Zeitungsgruppe Münsterland

zgm-muensterland.de

46

Zeitungsgruppe Münsterland (ZGM) is a regional media partnership uniting several local newspapers in the Münsterland area of Germany. The group offers advertising opportunities across print and digital platforms, targeting local businesses and advertisers seeking regional reach. The website reflects a professional media group with a strong regional presence and multiple partner newspapers. Technically, the site is built on WordPress with modern frontend technologies and includes features such as a newsletter signup and social media sharing. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, well-branded, and serves its business purpose effectively.

D

DRI and Syloé

produhost.net

51

The website serves as a login portal for ÉVA Pilote, an extranet management platform developed collaboratively by DRI and Syloé. It targets business users who require tailored tools to manage hosted applications and services, including eco-indicators for digital sobriety. The platform positions itself as a niche B2B SaaS solution with a focus on visibility and control over application environments. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap, delivering a responsive and professional user interface. However, the absence of visible security headers and unclear SSL status suggests moderate security maturity. The lack of privacy and cookie policies indicates gaps in compliance with data protection regulations. WHOIS data is missing, raising concerns about domain registration legitimacy despite the professional appearance and partner affiliations. Overall, the site is functional and business-focused but requires improvements in security posture and compliance documentation.

D

Disques VDE-GALLO sàrl

vdegallo.com

50

Disques VDE-GALLO sàrl is a Swiss-based company specializing in the production and distribution of compact discs and music publishing. The website serves as an e-commerce platform targeting music enthusiasts and professionals interested in classical and niche music genres. The company maintains a consistent brand presence with multilingual support and a clear focus on music media. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and performance optimizations. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some improvements such as DNSSEC and security headers are recommended. Overall, the site presents a professional and trustworthy digital presence with clear contact information and business legitimacy.

M

Musikvertrieb AG

musikvertrieb.ch

52

Musikvertrieb AG is a Swiss independent music distributor and record label with a long history dating back to 1935. The company focuses on marketing and distributing national and international artists and labels, including partnerships with notable entities such as PIAS and muve recordings. The website reflects a professional presence in the media industry, targeting music industry professionals and independent artists. Technically, the site is built on WordPress using the Brooklyn theme, leveraging modern web technologies and asynchronous loading of analytics and tracking scripts. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

NiRo Music is an international Swiss record label specializing in music production, distribution, and artist management. The company offers tiered album release packages ranging from basic to fully developed support including marketing and promotional campaigns. The website reflects a niche media business with a focus on professional music releases and artist branding. Technically, the site is built on WordPress with a modern tech stack including jQuery, FlexSlider, and multilingual support via WPML. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks explicit security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy in content but could improve in privacy compliance and security transparency.

S

SIDOMUSIC B. Liechti & Cie

sidomusic.com

46

SIDOMUSIC B. Liechti & Cie is a small music-related business based in Geneva, Switzerland, with a domain registered since 2001. The website is currently under construction, providing basic contact information including a physical address, phone number, and company email. The business appears legitimate with consistent WHOIS data and a reputable registrar. Technically, the site runs on WordPress with jQuery and uses a maintenance plugin to display the under-construction page. The site is served over HTTPS with a good SSL configuration but lacks DNSSEC and security headers. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. No analytics or tracking scripts are detected, suggesting minimal user tracking. The content is safe for general audiences with no adult or explicit material. Overall, the site has a basic technical and content maturity level with moderate business credibility but requires improvements in security and privacy practices.

M

Mouthwatering Records

mouthwateringrecords.com

51

Mouthwatering Records is a Switzerland-based independent music label specializing in publishing, management, and artist development. The company operates a professional website showcasing featured artists, new releases, and management services, positioning itself as a niche player in the independent music industry. The website content is well-structured and visually appealing, targeting music professionals and fans interested in independent music. Technically, the site uses a custom CMS (Glorya) with common JavaScript libraries such as jQuery and Masonry, hosted likely by Hostpoint AG. The site performs moderately well with good mobile optimization and SEO practices but lacks advanced accessibility features. From a security perspective, the domain is registered since 2006 with transparent WHOIS data and clientTransferProhibited status, indicating a stable and legitimate presence. However, the website lacks critical security headers and DNSSEC, which could improve its security posture. There are no visible privacy or cookie policies, nor contact information or incident response channels, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website demonstrates a good business credibility and content quality but falls short in privacy compliance and security best practices. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance. The risk level is moderate with no critical vulnerabilities detected but with room for security and compliance enhancements.

M

MEDIA Desk Suisse

mediadesk.ch

50

MEDIA Desk Suisse is a Swiss-based organization providing funding, advisory, and networking services within the European film and media sector. It acts as the national MEDIA Desk, supporting Swiss film projects through MEDIA-Ersatzmassnahmen, including project funding, co-development, promotion, and training. The website targets film professionals, producers, and stakeholders seeking European funding and industry information. Technically, the site uses a CMS (InitCMS), Bootstrap framework, jQuery, Typekit fonts, and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no exposed sensitive data, though security headers are missing and some libraries (jQuery 1.4.2) are outdated. Contact information is clearly provided, including email and phone, with active social media presence on LinkedIn and Facebook. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

F

Fond na podporu umenia

fpu.sk

54

Fond na podporu umenia is a Slovak non-profit organization dedicated to supporting and promoting cultural and artistic projects across various disciplines including amateur theatre, music, visual arts, literature, and more. The organization operates a grant funding model to empower artists and cultural institutions, positioning itself as a key national player in Slovakia's cultural sector. The website reflects a well-structured digital presence with comprehensive information about supported areas, programs, and projects, targeting artists, cultural professionals, and the general public interested in arts and culture. Technically, the site is built on WordPress with modern web technologies, including Google Analytics and Tag Manager, and demonstrates good mobile optimization and SEO practices. Privacy and cookie consent mechanisms are implemented in compliance with GDPR, enhancing user trust. Security posture is solid with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the website presents a professional and trustworthy digital front for the organization.

S

Slovenský ochranný zväz autorský

soza.sk

55

Slovenský ochranný zväz autorský (SOZA) is a Slovak collective rights management organization dedicated to protecting and managing the rights of music authors. Established in 2003, SOZA serves a broad audience including authors, publishers, and users of music, providing licensing, rights management, and support services. The organization maintains a strong national presence with international partnerships and agreements, positioning itself as a key player in the Slovak music rights ecosystem. Technically, the website employs a moderate technology stack including jQuery, Google Analytics, and Hotjar for user analytics and behavior tracking. The site is hosted on exohosting servers and demonstrates good mobile optimization and SEO practices. The website is fully accessible without any blocking or WAF challenges, and it uses HTTPS with no visible SSL issues, indicating a secure connection. From a security perspective, the site implements cookie consent mechanisms and uses HTTPS, but lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through cookie policies and GDPR-aligned consent banners, though a dedicated privacy policy page is not clearly identified. Business credibility is strong with clear contact information, social media presence, and long domain age. Overall, SOZA's website is professional, secure, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security policy transparency and incident response readiness would enhance trust and security posture further.