Security Directory

The Österreichisches Ökologie-Institut is a well-established non-profit organization focused on ecological research and sustainability initiatives in Austria. Founded in 1985, it operates through interdisciplinary projects, public participation, and educational activities. The website reflects a professional and consistent brand image, targeting environmentally conscious audiences and stakeholders in sustainability. Technically, the site is built on WordPress with modern plugins and offers good mobile optimization and accessibility. Security posture is solid with HTTPS and form validations, though it lacks explicit security headers and incident response information. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR. Overall, the site is trustworthy and credible, with no signs of malicious activity or content safety concerns.

K

Klimabündnis Österreich

klimabuendnis.at

49

Klimabündnis Österreich operates as the largest municipal climate protection network in Austria, connecting over 2,000 municipalities and cities across Europe with indigenous organizations in South America. The organization focuses on climate protection, climate justice, and promoting sustainable lifestyles through networking, education, and campaigns. The website is built on WordPress, leveraging modern SEO and cookie consent tools, and integrates analytics and user behavior tracking via Google Analytics and Hotjar. Security posture is strong with HTTPS enforcement and cookie consent management, though the absence of explicit privacy and terms of service pages indicates room for compliance improvement. Overall, the site presents a professional and trustworthy digital presence aligned with its non-profit mission.

U

Umweltdachverband gGmbH

umweltbildung.at

57

Forum Umweltbildung is a well-established Austrian educational portal dedicated to promoting education for sustainable development, environmental education, and the UN Agenda 2030. Supported by Austrian federal ministries and operated by Umweltdachverband gGmbH, it offers a variety of educational resources, events, podcasts, and a webshop targeting educators and sustainability advocates. The website demonstrates a strong market position as a leading platform in Austria for sustainability education. Technically, the website is built on WordPress with a modern and accessible design, incorporating plugins for podcasting, GDPR compliance, and accessibility. The site is mobile-optimized and provides a good user experience with clear navigation and professional content presentation. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit HTTP security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and good business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

P

Paris Est Marne & Bois

parisestmarnebois.fr

56

Paris Est Marne & Bois is a regional intercommunal government authority in France, representing 13 communes and serving over half a million inhabitants. The organization provides a broad range of public services including transportation, environmental management, social cohesion, urban planning, and economic development. The website serves as an official communication platform targeting residents and stakeholders within the territory, offering access to administrative documents, news, events, and service information. Technically, the website is built on Drupal 9, leveraging modern web technologies such as jQuery and privacy-focused analytics via Matomo. The site is hosted by OVH, a reputable provider, and implements cookie consent mechanisms compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent tools to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected, and no published security or incident response policies are found. There are no visible vulnerabilities or exposed sensitive data, indicating a generally sound security posture. Overall, the website is trustworthy, professionally maintained, and aligned with the expectations for a public sector entity. Strategic improvements could include publishing detailed security policies, enhancing HTTP security headers, and providing direct contact information for security incidents to strengthen transparency and trust.

D

Dijon métropole

metropole-dijon.fr

50

Dijon métropole is the official metropolitan government entity serving Dijon and its 23 associated communes in France. The website provides comprehensive information and services related to urban planning, environmental quality, transportation, housing, social services, and citizen participation. It positions itself as a high-quality environmental metropolitan authority with a focus on community engagement and sustainable development. The site targets residents, local businesses, and stakeholders within the metropolitan area. Technically, the website is built on WordPress with a modern technology stack including Yoast SEO for optimization, Matomo for privacy-conscious analytics, and various JavaScript libraries for enhanced user experience such as Leaflet for mapping and AOS for animations. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism that complies with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent tools to manage user privacy. However, it lacks explicit security headers and does not publish a security policy or incident response contact information. The WHOIS data is not publicly available, which reduces transparency but is not uncommon for government domains. No vulnerabilities or suspicious content were detected. Overall, Dijon métropole's website demonstrates a solid digital presence with good content quality and technical implementation. Strategic improvements in transparency around privacy policies, security disclosures, and WHOIS data would enhance trust and compliance further.

E

EIT Health

eithealth.eu

65

EIT Health is a prominent EU-backed network focused on promoting innovation in healthcare across Europe. The organization facilitates collaboration among businesses, researchers, educators, and healthcare providers to develop impactful health solutions. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The target audience includes healthcare innovators, professionals, and European citizens interested in health advancements. Technically, the site is built on WordPress with modern libraries and tracking tools, optimized for performance and accessibility. Security posture is strong with HTTPS, security headers, and privacy compliance evident, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate entity.

W

Online Wunschliste erstellen • Wunschzettel ohne Registrierung

wishsite.de

60

wishsite.de is a German-language online wishlist platform that enables users to create and share wishlists for various occasions such as weddings, birthdays, Christmas, and baby parties. The service emphasizes ease of use, no registration requirement, and free access, targeting individuals who want a simple and effective way to communicate gift wishes. The platform enjoys a strong market presence with over one million fulfilled wishes and a high user recommendation rate, supported by user testimonials and a demo wishlist feature. Technically, the website leverages modern web technologies including JavaScript, jQuery, Google Tag Manager, and Bing Ads, hosted behind Cloudflare DNS services. The site is mobile-optimized and designed with accessibility and SEO best practices in mind. Security-wise, the site enforces HTTPS, uses CSRF tokens, and includes CAPTCHA challenges to prevent spam, but lacks visible security headers and published security policies. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, wishsite.de presents a professional, trustworthy, and user-friendly service with moderate to strong security posture and good privacy practices.

P

Phönix FM

phoenix-fm.de

43

Phönix FM is a medium-sized German facility and property management company, part of the CLEES Unternehmensgruppe. They provide comprehensive building technology, maintenance, and property management services primarily in residential and commercial real estate sectors. The website is built on TYPO3 CMS and uses standard web technologies such as jQuery and Bootstrap. While the site is professionally designed and content-rich, it lacks explicit privacy, cookie, and security policies, which are critical for GDPR compliance and user trust. No security headers or incident response information were found, indicating room for improvement in security posture. The domain WHOIS data is minimal but consistent with a legitimate business operation. Overall, the website is functional and business-focused but would benefit from enhanced privacy and security features.

D

Defiant

defiant.com

10

Defiant is a specialized cybersecurity company focused on WordPress security, offering products such as Wordfence firewall and malware scanner, incident response services, and customized security solutions for businesses with mission-critical WordPress installations. The company positions itself as a global leader in this niche, protecting over 4 million websites and employing a team of over 35 security professionals. Their business model revolves around software and managed security services tailored to WordPress environments. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery, Google Tag Manager, Google Analytics, and HubSpot for marketing and analytics. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be improved. The presence of privacy and cookie policies, along with terms of use, indicates a mature approach to compliance. From a security perspective, the site enforces HTTPS and displays ISO 27001 certification, signaling a commitment to information security standards. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS registration data is a notable anomaly that reduces trust in domain legitimacy, though the website content and external trust signals mitigate this concern somewhat. Overall, Defiant presents a professional and credible front with strong market positioning in WordPress security. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, improving accessibility, and resolving WHOIS data inconsistencies to strengthen trust and compliance.

C

Clovr.com

clovr.com

59

Clovr.com is a niche online platform specializing in providing curated reviews and comparisons of cryptocurrency-based casinos, particularly Bitcoin gambling sites. The site targets adult users interested in crypto gambling, offering information on bonuses, fast withdrawals, and game selections. The business model appears to be affiliate marketing and content curation within the crypto gambling sector. Technically, the website is built on WordPress, utilizing popular SEO and analytics tools such as Yoast SEO, Google Tag Manager, Microsoft Clarity, and Visual Website Optimizer, indicating a moderate level of digital maturity and performance optimization. Security-wise, the site enforces HTTPS and uses asynchronous loading of tracking scripts, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data and registrant information introduces uncertainty about domain legitimacy, which impacts overall trust. Strategic recommendations include enhancing transparency with privacy and cookie policies, implementing security headers, and clarifying domain registration details to improve business credibility and compliance.

C

CDNLogo.com

cdnlogo.com

57

CDNLogo.com operates as a specialized platform offering a vast collection of brand logo vectors available for free download in multiple formats including SVG, EPS, AI, and PNG. The site targets designers and users seeking high-quality brand logos without login requirements, positioning itself as one of the largest repositories in this niche. The business model revolves around free access combined with user-submitted logos and monetization through Google Adsense advertising. The multilingual support and extensive logo catalog indicate a mature digital presence since its founding in 2017. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Fonts, and Google Tag Manager, hosted on AWS infrastructure. The site demonstrates good mobile optimization and SEO practices with structured data and hreflang tags. Performance is moderate with room for improvement in accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Security-wise, the absence of explicit privacy, cookie, and security policies, as well as contact information, represents compliance and trust gaps. The site uses Google advertising and tracking services, indicating moderate user tracking. No vulnerabilities or malware indicators were found, but improvements in transparency and security best practices are advised. Overall, CDNLogo.com is a functional and professional platform with a strong content offering but requires enhancements in privacy compliance, security policies, and contact transparency to improve trust and regulatory adherence.

A

Archéodyssée

archeodyssee-heraultmediterranee.com

49

Archéodyssée is a regional cultural and educational platform dedicated to archaeology in the Hérault Méditerranée area of France. It serves a diverse audience including the general public, schools, and scientific communities by providing digital applications, archaeological films, educational mediation, and resources. The website is positioned as a trusted regional resource supported by local government entities, as evidenced by official contact details and logos. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good SEO and performance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and follows basic best practices but lacks advanced security headers and published security policies. The absence of WHOIS data for the domain is a concern, although the website content and contact information appear legitimate. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

E

Ebizindia Consulting Pvt. Ltd.

ctracker.in

65

CTRACKER is a web-based compliance tracking software designed primarily for small and medium-sized enterprises (SMEs) and Chartered Accountants (CAs) in India. The platform offers a subscription-based SaaS model with a focus on statutory, regulatory, and internal compliance management, featuring automated daily email reminders, team-based task assignments, and mobile-friendly access without the need for app installation. The business is operated by Ebizindia Consulting Pvt. Ltd., a NASSCOM member company, which adds credibility and trust to the offering. The website content is well-structured, professional, and provides clear information about the product, pricing, and benefits, supported by customer testimonials.

H

HIRELLO

hirello.fr

43

Hirello is a small French digital agency based in Auray specializing in website creation, SEO, and SEA services. The company positions itself as a partner for businesses seeking to enhance their online presence and growth through well-designed, performant websites and targeted digital marketing campaigns. The website demonstrates a professional and consistent brand image with a portfolio showcasing recent client projects. Technically, the site is built on WordPress using Elementor and Yoast SEO, with integrations for Matomo analytics and Google Tag Manager, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. The domain WHOIS data is privacy protected, which is typical for small agencies and does not raise immediate concerns. Overall, Hirello presents as a credible and professional digital agency with room to enhance privacy compliance and security best practices.

A

Ajitora.asia

ajitora.asia

49

Ajitora.asia presents itself as a small-scale website branded as "The Asia Tiger from Cyberspace," with content dating back to 2015. The site uses WordPress with the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The technical infrastructure is standard for small business or personal websites, with some modern JavaScript usage and a cookie consent mechanism in place. However, the absence of a privacy policy and terms of service pages, as well as lack of visible contact information, limits its compliance and business credibility. Security posture is basic with HTTPS enabled but no advanced security headers detected, and no vulnerability disclosure or incident response information available. Overall, the site is accessible without WAF or security challenges, but improvements in privacy compliance and security best practices are recommended.

G

Go.Asia

go.asia

54

Go.Asia is a non-profit digital platform dedicated to promoting social good, charity projects, and community engagement across Asia. The website serves as a hub for charity profiles, inspirational stories, and project information aimed at encouraging public involvement in social causes. The platform targets a general audience interested in philanthropy and community development. Technically, the site is built on WordPress using the Extra theme and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security-wise, the site enforces HTTPS but lacks advanced security headers and a vulnerability disclosure mechanism. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to query failure, but the site appears legitimate based on content and active maintenance. Overall, Go.Asia presents a professional and trustworthy platform for non-profit engagement with room for security and privacy improvements.

P

Private by Design, LLC

netmission.asia

54

NetMission.Asia is a well-established non-profit organization focused on empowering youth in the Asia-Pacific region through education and advocacy in Internet governance and digital rights. The website serves as a hub for their flagship program, NetMission Academy, along with various youth forums, policy reports, and ambassador programs. The organization has a credible market position supported by a domain registered since 2008 and consistent business information. Technically, the site is built on WordPress with modern plugins and frameworks, hosted behind Cloudflare DNS, and uses HTTPS with Google Analytics and reCAPTCHA for user interaction and security. However, there are areas for improvement in security posture, such as enabling DNSSEC and implementing security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, content-rich, and trustworthy, serving a general audience safely.

A

Art Fest

siff.bg

44

The Sofia International Film Festival (SIFF) website serves as the official digital presence for an established cultural event in Bulgaria, focusing on film screenings, festival news, and related activities. The site targets film enthusiasts, industry professionals, and cultural audiences, providing comprehensive information about the festival's schedule, awards, and partners. The business operates in the media sector with a medium-sized footprint and a history dating back to 2001. Technically, the website is built on the qLibra CMS platform and employs common web technologies such as jQuery and Bootstrap. It integrates Google Analytics and Facebook Pixel for tracking and Google Adsense for advertising. Hosting is provided by a Bulgarian hosting provider, inferred from the nameservers. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web threats. No sensitive data exposure or vulnerabilities were detected in the content. The WHOIS data is privacy protected, consistent with GDPR, and the domain appears legitimate and aligned with the website's cultural mission. Overall, the website presents a professional and trustworthy front for the film festival, with room for improvement in security headers and contact transparency. The risk profile is low, but enhancing security best practices and providing clearer contact information would strengthen trust and compliance.

D

Diagonale – Festival des österreichischen Films

diagonale.at

52

Diagonale – Festival des österreichischen Films is a prominent Austrian cultural festival dedicated to showcasing Austrian cinema. The website serves as a comprehensive platform for festival programming, film awards, industry networking, and educational film mediation. It targets film professionals, enthusiasts, and the general public interested in Austrian film culture. The organization maintains a strong market position as a leading film festival in Austria with significant governmental and cultural sponsorships. Technically, the website is built on WordPress with modern plugins such as WPML for multilingual support and Real Cookie Banner Pro for GDPR-compliant consent management. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the festival.

D

D'Filmakademie

dfilmakademie.lu

52

D'Filmakademie is a Luxembourg-based film academy dedicated to promoting cinema and audiovisual arts within the country. It organizes key cultural events such as the Lëtzebuerger Filmpräis, supports film professionals, and fosters community engagement through various activities and membership programs. The organization holds a significant position in Luxembourg's cultural landscape, supported by official sponsors including the Chamber of Commerce Luxembourg, CNA, and FilmFund Luxembourg. Technically, the website is built on WordPress, utilizing modern plugins and frameworks such as WPBakery Page Builder, Smart Slider 3, and Contact Form 7. It employs standard web technologies including jQuery, Tailwind CSS, and integrates Google Analytics and Tag Manager for analytics. Hosting is provided by OVH, a reputable provider. The site is mobile-optimized with good SEO practices and a professional design. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response documentation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website demonstrates a strong commitment to privacy compliance and user experience, with clear contact information and trust indicators. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen the security posture.

N

novomind

novomind.com

65

novomind AG is a technology company specializing in software solutions for digital commerce and customer service. Their portfolio includes products for digital commerce platforms, customer service software, AI agents, and data platforms, targeting businesses seeking to enhance their digital sales and customer interaction capabilities. The company positions itself as a comprehensive provider offering both software products and professional services such as integration, long-term support, and custom software development. The website reflects a professional and modern digital presence, indicating a medium-sized enterprise based in Germany with a clear B2B focus. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes GDPR-compliant cookie consent management via Usercentrics. Performance is moderate with good SEO and accessibility basics, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses consent management for tracking scripts, but lacks explicit published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces the overall trust score, as it prevents verification of domain ownership and age, which is unusual for a professional business domain. Overall, novomind AG presents a trustworthy and professional digital commerce software provider with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and improving WHOIS data transparency to strengthen trust and compliance posture.

O

OFFICE Partner

office-partner.de

68

OFFICE Partner is a German-based e-commerce retailer specializing in office technology and supplies, including printers, monitors, and consumables. The website targets business customers and office supply purchasers within Germany, offering convenient payment options such as invoice and installment purchases. The company appears to have been established around 2014 and maintains a consistent brand presence with integration of trusted third-party services like Trusted Shops and Amazon Payments. Technically, the website is built on the Shopware CMS platform and utilizes modern JavaScript libraries and analytics tools including Google Tag Manager, econda, and Microsoft UET. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. Hosting is provided via Creoline Server, as indicated by the nameservers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, OFFICE Partner presents a professional and trustworthy e-commerce platform with room for improvement in privacy disclosures and security transparency. Strategic enhancements in these areas would strengthen compliance and customer trust.

R

Remmers

remmers.de

71

Remmers GmbH is a well-established family-owned manufacturing company specializing in innovative system solutions for the construction and woodworking industries. With over 75 years of tradition, the company offers a broad portfolio including building protection, wood coatings, flat roof solutions, and tools. The website reflects a mature digital presence with comprehensive product information, strong branding, and multi-language support across 21 countries. Technically, the site leverages modern JavaScript libraries, SAP Commerce platform, and cloud hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, secure login forms, and consent management, though explicit security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional content and certifications. Strategic recommendations include enhancing security headers, publishing incident response contacts, and establishing a vulnerability disclosure policy.

R

Rapunzel Naturkost GmbH

rapunzel.de

46

Rapunzel Naturkost GmbH is a well-established German company specializing in the production and retail of organic and fair trade food products since 1974. The company operates both B2B and B2C channels, including a webshop and a visitor center called Rapunzel Welt. Their market position is strong within the organic food sector, supported by certifications such as Bio and Demeter, and a dedicated fair trade program called HAND IN HAND. The website reflects a mature digital presence with comprehensive product information, recipes, and sustainability initiatives targeting consumers interested in organic lifestyles. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the business claims, showing a consistent and legitimate domain registration. The website is safe for general audiences with no adult or questionable content detected. Strategically, Rapunzel Naturkost should enhance its security transparency by publishing a security policy and incident response contacts, implement security headers, and consider a vulnerability disclosure program to further strengthen trust and compliance.

D

Digital Campus Zollverein

campus-zollverein.de

47

Digital Campus Zollverein is an educational and innovation hub based in Germany, focusing on digital transformation and technology development. The website presents a professional and well-structured platform built on WordPress with the Divi theme, targeting students, researchers, and digital professionals. The business model revolves around providing digital education, innovation projects, and community engagement at the Zollverein site. Technically, the site uses modern web technologies and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security measures.

W

Westfälische Hochschule

w-hs.de

60

Westfälische Hochschule is a German university of applied sciences with campuses in Gelsenkirchen, Bocholt, and Recklinghausen. The institution focuses on practical education in engineering, business, and natural sciences, offering degree programs, research, and cooperation with industry partners. The website is built on TYPO3 CMS and features a modern, accessible design with active news and event updates. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and compliance. WHOIS data confirms the domain's legitimacy and institutional affiliation. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

S

Stadt Gelsenkirchen

gelsenkirchen.de

70

The website www.gelsenkirchen.de serves as the official digital portal for the city government of Gelsenkirchen, Germany. It provides extensive information and services related to municipal administration, education, culture, tourism, social services, and citizen engagement. The site targets residents, businesses, and visitors, offering a comprehensive range of online services and up-to-date news. The business model is that of a public sector entity focused on transparent communication and service delivery to its community. The website demonstrates consistent branding and high content quality, reflecting its authoritative position as a government resource. Technically, the site is built on ASP.NET WebForms with a modern frontend leveraging jQuery, Leaflet for mapping, Bootstrap grid for layout, and Klaro for cookie consent management. The infrastructure appears stable and moderately performant, with good mobile optimization and accessibility features. The use of HTTPS and cookie consent mechanisms indicates a mature approach to privacy and security compliance. From a security perspective, the site enforces HTTPS and employs secure form handling via ASP.NET viewstate. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are clearly linked and comprehensive, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and maintaining up-to-date third-party libraries to sustain security posture and trustworthiness.

S

Stackbox GmbH

stackbox.co

71

Stackbox GmbH is a specialized software solutions and consulting company focused on the eMobility sector, primarily serving businesses in energy and transportation. The company offers tailored services including business process design, IT solution architecture, system integrations, and operations support. Their market position is strengthened by a decade of experience and notable clients such as IONITY and Hubject. The website reflects a professional and consistent brand image with clear communication of services and team expertise. Technically, the website employs modern frameworks like Bootstrap and integrates analytics tools such as Amplitude with session replay capabilities, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Performance is moderate with good SEO practices. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance trust and compliance.

W

WpOpal

wpopal.com

58

WpOpal is a specialized WordPress theme provider established in 2014, offering a wide range of free and premium themes targeting WordPress users and businesses seeking professional website designs. The company holds an Envato Power Elite Author status, indicating a strong market position and credibility within the WordPress theme ecosystem. Their business model revolves around theme sales and membership access, supported by demos, documentation, and customer support services. Technically, the website is built on WordPress 6.4.3 with modern plugins such as Elementor and Easy Digital Downloads, hosted on Bluehost with Cloudflare DNS, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, SEO practices, and a professional design, although performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

L

L'Associazione I Borghi più belli d’Italia

borghipiubelliditalia.it

44

L'Associazione I Borghi più belli d’Italia is a well-established non-profit organization dedicated to promoting the cultural and historical heritage of Italy's small towns. Founded in 2002, it certifies and supports over 360 Borghi, positioning itself as a leader in cultural tourism within Italy. The website serves as a comprehensive platform for information, events, publications, and community engagement targeting tourists and cultural enthusiasts. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and vulnerability disclosure policies could enhance trust. Overall, the site reflects a mature digital presence aligned with its mission and audience.

K

Kahnawake Gaming Commission

gamingcommission.ca

61

The Kahnawà:ke Gaming Commission operates as the official regulatory authority overseeing gaming activities within the Mohawk Territory of Kahnawà:ke, Canada. Established in 2008, it provides licensing, compliance, player protection, and dispute resolution services for both interactive and land-based gaming sectors. The Commission maintains a clear market position as a sovereign jurisdiction regulator with a focus on integrity and player safety. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery and Google Analytics, with hosting and DNS services involving Go Daddy and Cloudflare. The site demonstrates good mobile optimization, SEO practices, and a professional design. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

V

Vertikale

vertikale.it

41

Vertikale is a well-established climbing center located in Brixen, Italy, founded in 2012. The business offers a variety of climbing and bouldering courses, private lessons, kids programs, summer camps, and bar services, targeting families, youth, and adult climbing enthusiasts. The website is professionally designed using WordPress with Elementor and WooCommerce, providing a user-friendly experience with good SEO and mobile optimization. Social media integration and structured data enhance its digital presence. Security posture is solid with HTTPS and DNSSEC enabled, though additional security headers and formal policies could improve resilience. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a credible, transparent, and customer-focused business with a moderate to high level of digital maturity.

A

Astra

astrabx.com

64

Astra Brixen is a cultural non-profit center located in Brixen, Italy, focused on providing a platform for cultural exchange, artistic experimentation, and production. Managed by the Verein Jugendhaus Kassianeum, it serves artists, collectives, and cultural organizations, offering event spaces and hosting film screenings. The website reflects a local cultural hub with a clear mission and target audience of young and engaged cultural actors. Technically, the site is built on WordPress with common plugins for event management and GDPR compliance, leveraging Google Tag Manager for analytics. Security posture is generally good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are published. Overall, the site is professional, trustworthy, and compliant with GDPR, suitable for its non-profit cultural mission.

C

Comune di Bressanone

bressanone.it

53

The website www.brixen.it is the official digital presence of the Comune di Bressanone, serving as a comprehensive portal for municipal information, public services, news, and community engagement. It targets residents and visitors, providing multilingual support and detailed resources related to local governance, cultural events, and administrative procedures. The site demonstrates a solid market position as the authoritative source for Bressanone's municipal affairs. Technically, the website employs a modern JavaScript stack including libraries such as Moment.js and Usercentrics for cookie consent management, alongside Google Analytics with IP anonymization to balance analytics needs with privacy compliance. The site is mobile optimized, accessible, and structured with clear navigation, reflecting a mature digital infrastructure suitable for public sector needs. From a security perspective, the site enforces HTTPS and integrates privacy mechanisms such as cookie consent banners. However, explicit security headers like Content-Security-Policy and incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the official municipal identity, supporting a high legitimacy score. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it would benefit from enhanced security policies and transparency around incident response. Strategic recommendations include implementing additional security headers, publishing a security policy, and establishing clear security contact channels to further strengthen trust and resilience.

K

Kufgem GmbH

kufgem.at

64

Kufgem GmbH is a well-established Austrian IT service provider specializing in digital solutions for municipalities, businesses, and organizations. With over 34 years of experience, Kufgem offers a broad portfolio including IT infrastructure, security, cloud services, municipal management software, and ERP solutions. The company serves a significant client base of 450 municipalities and 500 companies, positioning itself as a trusted partner in the regional technology market. The website reflects a professional and consistent brand image, emphasizing digital transformation and secure IT operations. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, Kufgem demonstrates a mature digital presence aligned with its business model and market position.

M

mesrdv.com

mesrdv.com

54

mesrdv.com is a French-based online appointment scheduling platform established in 2014, offering professionals a SaaS solution to optimize their appointment management and client interactions. The website promotes its mobile applications for iOS and Android, targeting professionals and their clients seeking efficient scheduling tools. The business operates in the technology sector with a small company size and a clear focus on user-friendly, real-time appointment management. Technically, the website uses a combination of jQuery, AOS for animations, and tarteaucitron.js for cookie consent management. The site is moderately optimized for mobile devices and performance, with basic SEO and accessibility features. Hosting and domain registration are consistent and transparent, though DNSSEC is not enabled, and no advanced security headers were detected. From a security perspective, the site implements basic protections such as captcha on contact forms and cookie consent mechanisms. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. The absence of DNSSEC and security headers suggests room for improvement in hardening the site against attacks. No critical vulnerabilities or blocking mechanisms were detected. Overall, mesrdv.com presents a professional and trustworthy online presence with moderate technical maturity and security posture. Strategic improvements in security policies, DNS security, and enhanced privacy compliance would strengthen its risk profile and user trust.

L

La Maison du Bien-Être

bien-etre-massages.be

10

La Maison du Bien-Être is a small, recently founded wellness center located in Namur, Belgium, specializing in a variety of massage therapies including relaxing, therapeutic, sports, and aromatherapy massages. The business also offers private cabin rentals for wellness professionals. The website presents a professional and comprehensive digital presence with clear service descriptions, customer testimonials, and multiple contact channels. The company holds relevant certifications such as IFAPME, enhancing its credibility in the local market. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and service workers for PWA capabilities. It is mobile-optimized with good SEO practices and accessibility features, although some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS transparency and security.txt reduces trust. The WHOIS data is restricted by the registry, showing a 'NOT ALLOWED' status, which is common for .be domains but impacts domain legitimacy assessment. Overall, the website is trustworthy and professional, serving its target audience effectively. Strategic improvements in security headers and transparency would further enhance trust and compliance.

G

G-E Motors

garage-gemotors.be

58

G-E Motors is a small, locally focused automobile garage based in Aubel, Belgium, specializing in vehicle maintenance, repair, diagnostics, and sales of used cars. The company emphasizes a personalized, family-oriented approach and rapid vehicle delivery, positioning itself as a trusted partner for local customers. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence for a small business. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, with a service worker for progressive web app capabilities. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, which is common for .be domains, but the website content and business information support legitimacy. Overall, the site presents a trustworthy and professional image with strong business credibility and compliance with privacy regulations.

C

CONSTRUCTS SOLUTIONS

construct-solutions-renovation.be

57

CONSTRUCTS SOLUTIONS is a small, established construction and renovation company based in Belgium, serving Brussels and surrounding areas. With over 30 years of experience, it offers a comprehensive range of services including new construction, complete renovation, electrical work, plumbing, and exterior and interior works. The company emphasizes quality, compliance with standards, and customer satisfaction. The website is professionally designed, mobile-optimized, and includes structured data for local business identification. Technically, it uses modern web technologies such as jQuery, Google Tag Manager, and reCAPTCHA to enhance user experience and security. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but the website content and business information appear legitimate and professional.

C

Cabinet Fabre Avocat

cabinetfabre-avocats.fr

55

Cabinet Fabre Avocat is a specialized law firm based in Montigny-le-Bretonneux, France, with over 20 years of experience in criminal law and personal injury indemnification. The firm focuses on defending victims and accused parties with a rigorous and strategic approach, serving clients primarily in the Yvelines region. Their services include criminal defense, victim support, road traffic law, and legal consultation. The website reflects a professional and modern legal practice with strong client testimonials and certifications, positioning the firm as a trusted local legal expert. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Google reCAPTCHA, and service workers for PWA capabilities. It is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security practices include HTTPS enforcement and spam protection on forms, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the WHOIS data for the domain is unavailable, which limits verification of domain registration details and raises a moderate concern about domain legitimacy. Despite this, the website content and business information strongly support the firm's credibility. Overall, the website is professional, secure, and user-friendly, serving its target audience effectively. Strategic improvements in security headers and domain registration transparency are recommended to further enhance trust and compliance.

P

Purple Motorsport

garage-motorsport.be

63

Purple Motorsport is a small, local automotive garage based in Andenne, Belgium, specializing in comprehensive vehicle repair and maintenance services including bodywork, mechanical repairs, glazing, tires, and circuit vehicle servicing. The company positions itself as a trusted expert with a focus on customer satisfaction, offering personalized services such as free loaner vehicles and flexible scheduling. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a cookie consent framework, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though HTTP security headers are not explicitly detected. The WHOIS data is unavailable due to registry restrictions, which slightly impacts domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable online presence for the garage.

H

Healthyfit Be Free

healthyfitbefree.com

57

Healthyfit Be Free is a small French healthcare business specializing in personalized sports coaching and nutritional guidance primarily serving the Paris 8 and 16 arrondissements and nearby areas. Founded in 2021 by Éric Capel, the company offers in-home and corporate coaching services, complemented by a line of nutritional products under the Beautysané brand. The website demonstrates a professional and consistent brand presence with strong customer trust signals such as positive Google reviews and active social media profiles. Technically, the site uses modern web technologies including Google Tag Manager, jQuery, and cookie consent management, and is optimized for mobile and accessibility. Security posture is good with HTTPS and cookie consent but lacks published security policies or incident response contacts. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency and legitimacy. Overall, the site is well-built and trustworthy from a user perspective but would benefit from improved domain registration transparency and enhanced security disclosures.

A

Aachen-Termine

aachen-kalender.de

59

Aachen-Kalender.de is a localized event calendar platform focused on providing comprehensive listings of cultural, sports, and community events in Aachen and its surrounding region. The website targets residents and visitors interested in staying informed about local happenings. It leverages WordPress CMS with popular plugins such as The Events Calendar and Yoast SEO to deliver structured event data and optimized search engine presence. The platform offers event search, filtering, and calendar export features, enhancing user engagement and utility. Technically, the website is built on a modern WordPress infrastructure with Elementor for design and jQuery for interactivity. It employs HTTPS with proper security headers, ensuring secure data transmission and basic protection against common web threats. The site is mobile-optimized and provides good accessibility and SEO features, although some accessibility enhancements could be beneficial. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit privacy and cookie policies, as well as incident response contact information. No vulnerabilities or suspicious activities were detected in the provided content. The absence of cookie consent mechanisms and privacy documentation represents compliance gaps, particularly under GDPR regulations. Overall, Aachen-Kalender.de is a trustworthy and professionally maintained local event platform with solid technical foundations. To enhance its security posture and regulatory compliance, it should implement comprehensive privacy and cookie policies, introduce consent mechanisms, and provide clear incident response contacts.

S

Senckenberg Gesellschaft für Naturforschung

senckenberg.de

61

Senckenberg Gesellschaft für Naturforschung is a well-established non-profit research institute founded in 1817, specializing in biodiversity and natural sciences. It holds a strong market position as a leading research entity in Germany and internationally. The website reflects a mature digital infrastructure built on WordPress with comprehensive multilingual support and integration of various media and social platforms. Security measures include HTTPS, Wordfence, Google reCAPTCHA, and a robust cookie consent mechanism, indicating a strong security posture. No critical vulnerabilities or compliance gaps were detected. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR requirements.

The Missouri Botanical Garden is a well-established non-profit organization focused on botanical research, conservation, education, and providing a public garden experience. The website reflects a mature digital presence with comprehensive content, including event information, educational programs, visitor services, and donation opportunities. The organization targets a broad audience including families, researchers, students, and garden enthusiasts. Technically, the website is built on ASP.NET WebForms with DNN CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a professional user experience with clear navigation and rich multimedia content. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, despite the absence of detailed WHOIS data due to privacy protection.

C

Conservation International

conservation.org

77

Conservation International is a well-established non-profit organization founded in 1987, dedicated to protecting oceans, forests, and other vital ecosystems globally. The organization targets a broad audience including donors, environmental advocates, and the general public. Their business model focuses on conservation efforts, scientific research, community partnerships, and advocacy. The website reflects a mature digital presence with integrated donation capabilities and active social media engagement. Technically, the website is built on the Sitefinity CMS platform, utilizing modern technologies such as Bootstrap, jQuery, and various third-party widgets for fundraising and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by comprehensive privacy and cookie policies with user consent mechanisms. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response details, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website is professional, trustworthy, and secure, with minor areas for improvement in security communication and incident handling. The absence of WHOIS data is due to privacy protection, which is justified for this type of organization. The domain and website content align well, supporting a high legitimacy score.

B

BirdLife International

birdlife.org

74

BirdLife International is a globally recognized non-profit organization dedicated to bird conservation and environmental protection. It operates as the largest international partnership for nature conservation, focusing on research, advocacy, and public engagement to protect bird species and their habitats worldwide. The website reflects a mature and professional digital presence, targeting conservationists, researchers, donors, and the general public interested in environmental issues. Technically, the website is built on WordPress and leverages modern technologies including Google Analytics, Cookiebot for consent management, Cloudflare Turnstile for bot protection, and Vimeo for media content. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed in the provided data, the use of reputable third-party services and absence of exposed sensitive data indicate a solid security posture. However, the lack of publicly available WHOIS data and absence of explicit security policies or incident response contacts suggest areas for improvement in transparency. Overall, BirdLife International's website is trustworthy, professionally maintained, and compliant with privacy standards. The primary risks relate to enhancing security header implementation and publishing more detailed security and incident response information to bolster user trust and compliance.

S

Sonuç Bilişim El. Ev Al.Ser.Tic.Ltd.Şti.

faturago.com

50

Fatura Ödemex is a Turkish online platform specializing in utility bill inquiry and payment services, covering electricity, water, telephone, natural gas, internet, and TV bills. The platform targets individual and corporate customers in Turkey, offering a user-friendly interface with over 300 institutions supported. It operates as a representative of N Kolay Ödeme ve Elektronik Para Kuruluşu A.Ş., indicating a solid partnership and market presence. The website is well-branded, mobile-optimized, and provides social media engagement and mobile applications to enhance accessibility. Technically, the site is built on ASP.NET Web Forms with custom JavaScript and uses common libraries such as FontAwesome. The performance is moderate with good SEO and mobile responsiveness. Security is adequate with HTTPS and 3D secure payment mentions, but lacks some modern security headers and explicit incident response or vulnerability disclosure policies. Analytics usage is moderate with GetClicky tracking. Overall, the security posture is good but could be improved by implementing additional HTTP security headers, cookie consent mechanisms, and publishing security policies. The business credibility is high with clear contact information, user testimonials, and consistent branding. No suspicious or malicious content was detected, and the site is safe for general audiences.

C

Circuits SAS

cirkwi.com

65

Cirkwi is a French company operating under the legal entity Circuits SAS, specializing in providing official hiking and walking routes to over 12 million travelers annually. The company supports more than 2,000 tourism professionals by offering a comprehensive platform and mobile application to explore over 45,000 official itineraries. Positioned as a leading provider in the French tourism sector, Cirkwi leverages technology to enhance outdoor travel experiences. Technically, the website is built on WordPress with Elementor, integrating modern web technologies such as Google Fonts, Google Analytics, Facebook Pixel, and consent management frameworks. The site demonstrates good SEO practices, mobile optimization, and moderate performance. The infrastructure supports a professional digital presence with a focus on user experience and accessibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. The absence of WHOIS registration data reduces transparency but does not significantly detract from the site's legitimacy given the professional content and social media presence. Overall, Cirkwi presents a secure, professional, and user-friendly platform with strong business credibility in the tourism technology sector. Strategic enhancements in security transparency and WHOIS data availability would further strengthen trust and compliance.

P

pkt.pl

pkt.pl

64

pkt.pl is a well-established Polish online business directory offering a comprehensive database of companies, products, services, user reviews, and articles. It targets Polish consumers and businesses seeking local providers across various industries. The platform is supported by WeNet Group S.A., indicating a solid corporate backing. Technically, the website employs modern JavaScript frameworks, lazy loading, and integrates marketing and analytics tools such as HubSpot and Google Analytics, ensuring a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses reCaptcha for form protection, but lacks some advanced security headers and published security policies, which could be improved. Overall, pkt.pl presents a professional, trustworthy, and content-rich platform with good privacy compliance and user engagement features.