Security Directory

L

Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI)

lasi-info.com

51

The Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI) is a German government-related committee focused on occupational safety and security technology. The website serves as an authoritative platform providing publications, resources, and coordination information for stakeholders involved in workplace safety across Germany. The organization is well-established with a domain age of over 10 years, reflecting stability and legitimacy. The site targets government agencies, businesses, and safety professionals, offering key services such as safety publications, event information, and strategic cooperation details. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including Bootstrap, Font Awesome, and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the organization's profile, with no signs of suspicious activity. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no advanced security headers or published security policies were detected. There is no visible incident response or vulnerability disclosure information, which could be areas for improvement. Overall, the security posture is solid but could benefit from enhancements to DNS security and transparency. The website content is safe for general audiences, with no adult or questionable material. The site maintains a professional and trustworthy appearance, supporting its role as a government advisory body. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture and user trust.

DERTICKETSERVICE.DE GmbH & Co. KG operates the website westticket.de, an established e-commerce platform specializing in ticket sales for concerts, sports, musicals, shows, and cultural events primarily in Germany. The platform targets a broad audience interested in event attendance and offers a wide range of event categories and city-specific venues, indicating a well-structured and user-friendly service. The website demonstrates a consistent brand presence and professional design, supporting its market position as a reliable ticket reseller. Technically, the website employs common web technologies such as jQuery, Google Tag Manager, and Eventim's EVI widget, hosted on netcologne.de infrastructure. The site shows moderate performance and good mobile optimization, with basic accessibility and SEO features. The presence of a comprehensive cookie consent mechanism reflects a mature approach to privacy compliance, particularly GDPR adherence. From a security perspective, the site enforces HTTPS and uses cookie consent for user data protection. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious patterns were detected in the provided content or WHOIS data, which is consistent and transparent, reinforcing the domain's legitimacy. Overall, westticket.de presents a trustworthy and professional e-commerce platform with solid privacy compliance and a good security baseline. Strategic enhancements in security policy transparency, security headers, and accessibility could further strengthen its posture and user trust.

D

DERTICKETSERVICE.DE GmbH & Co. KG

koelnticket.de

57

DERTICKETSERVICE.DE GmbH & Co. KG operates the kölnticket.de website, a regional e-commerce platform specializing in ticket sales for concerts, sports, theater, musicals, and cultural events primarily in the Cologne area. The website offers a well-structured event catalog with personalized recommendations and additional services such as gift vouchers and VIP extras. The company positions itself as a trusted local ticket provider with a focus on secure and convenient online ticket purchasing. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance. Hosting is provided by NetCologne, consistent with the regional focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting a positive user experience and trustworthiness.

S

SAS Ligne Web Services - LWS

sitebuilderpro.fr

43

SiteBuilder Pro is a French SaaS company offering an AI-powered website builder targeting small to medium-sized businesses and entrepreneurs. The platform provides an easy drag-and-drop interface, professional templates, and integrated hosting and domain services via its parent company SAS Ligne Web Services - LWS. The website is well designed, mobile optimized, and provides clear pricing and customer testimonials, positioning it as a trustworthy and accessible solution in the website creation market. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosted by LWS in France. Security posture is good with HTTPS and SSL certificates, but lacks visible security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and credible but could improve privacy compliance and security transparency.

P

Postradali.com

postradali.com

45

Postradali.com is a Bulgarian website dedicated to providing information, comparison, and support services for victims of road traffic accidents and their families. The platform aggregates offers from associations, NGOs, and lawyers to help users find legal assistance and claim compensation. The site is focused on the Bulgarian market and is presented in Bulgarian language. Technically, the website is built on WordPress with several plugins for forms, ratings, and filtering. It uses Google Analytics and Adsense for tracking and monetization. However, the site lacks HTTPS, which is a critical security shortcoming. There is no visible security policy or incident response information, and contact details are limited to a web form. The domain is registered since 2015 with consistent data and local hosting, indicating legitimacy. Overall, the website serves a niche audience with relevant content but requires significant security improvements.

V

Vzemi Credit

vzemicredit.com

44

VzemiCredit.com is a Bulgarian online platform specializing in fast loan comparison and referral services. Established in 2016, it aggregates offers from multiple financial companies to provide users with quick access to credit options. The website targets Bulgarian consumers seeking rapid online loans without the need for guarantors or complex procedures. The business model is primarily affiliate-based, earning commissions from partner loan companies such as Credissimo, Smile Credit, and CrediNet. The platform positions itself as a convenient and time-saving tool for loan seekers in Bulgaria.

И

Ипотечен и жилищен кредит

ipotechen.com

43

Ipotechen.com is a Bulgarian online platform specializing in mortgage and housing loan information, offering users access to multiple financial institutions including banks and non-bank lenders. The site provides detailed guidance on loan types, required documentation, and application procedures, targeting individuals seeking property financing in Bulgaria. The platform supports lead generation by enabling users to apply for loans via a single request sent to multiple companies, enhancing user convenience and market reach. Technically, the website is built on WordPress with Visual Composer, leveraging Google Fonts, Google Analytics, and Google Adsense for content presentation, analytics, and monetization respectively. The hosting is provided by superhosting.bg, with domain registration dating back to 2014, indicating a mature and stable presence. Security-wise, the site uses HTTPS and has domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is evident. Overall, the site presents a professional and functional digital presence with moderate security and privacy posture.

K

Kabelna.com - Доставчици|Пакети|Интернет|Телевизия|Домашен телефон

kabelna.com

44

Kabelna.com is a Bulgarian telecommunications comparison website established in 2013, offering users a comprehensive platform to find and compare providers and packages for cable, satellite, digital television, internet, and home phone services. The site targets consumers in Bulgaria seeking detailed information and filtering options by price, channel count, internet speed, and location. Technically, the site is built on WordPress with common plugins for SEO, live chat, and UI enhancements, hosted on SuperHosting.bg. It uses HTTPS and integrates Google services for analytics and advertising. Security posture is moderate with room for improvement, notably the lack of DNSSEC, security headers, and outdated WordPress version. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is functional and relevant but would benefit from enhanced security and compliance measures.

E

Edition Raetia

raetia.com

48

Edition Raetia operates as an independent book publisher and online retailer based in Bolzano, South Tyrol, specializing in German and Italian language books with a regional cultural focus. The website is built on the PrestaShop platform, featuring a professional design, multilingual support, and e-commerce capabilities including a newsletter subscription protected by Google reCAPTCHA. The technical infrastructure incorporates modern tracking and marketing tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and privacy policies are lacking. The absence of public WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, the website presents a functional and professional front for a small regional publisher but would benefit from enhanced privacy compliance and security disclosures.

F

Film Association of South Tyrol (FAS)

fas-film.net

46

The Film Association of South Tyrol (FAS) is a professional organization representing film industry professionals in South Tyrol, Italy. It serves as a hub for filmmakers, actors, production companies, and service providers, promoting the region as a film-friendly location and supporting local film productions with international aspirations. The website is well-structured, bilingual (German and Italian), and provides clear information about the association's mission, membership, and news. The presence of partner logos and a newsletter subscription indicates active community engagement. Technically, the website is built on WordPress using WPBakery Page Builder and common JavaScript libraries such as jQuery and MediaElement.js. It employs HTTPS with a valid SSL certificate and includes a GDPR-compliant cookie consent mechanism. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers and does not provide visible security policies or incident response contacts. The WHOIS data for the domain is unavailable, which is unusual but the website content and professional presentation suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a trustworthy and professional front for the Film Association of South Tyrol, with minor improvements recommended in security headers and transparency around security policies. The missing WHOIS data warrants monitoring but does not currently indicate malicious intent.

U

UNISCA

unisca.it

51

UNISCA is an independent Italian association focused on coordinating and aggregating professionals and organizations in the creativity, arts, and entertainment sectors. Founded in 2021, it serves as a platform for idea exchange, advocacy, and sector synthesis. The website reflects a small-sized non-profit entity with a clear mission to support cultural identity and artistic autonomy within Italy. Technically, the site is built on WordPress using Elementor and related modern web technologies, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, DNSSEC, and security headers, though explicit security policies and incident response information are absent. Privacy and cookie policies are present with consent mechanisms, indicating GDPR awareness. Overall, the site is professional, trustworthy, and safe for general audiences.

F

Fondazione Haydn di Bolzano e Trento

bolzanodanza.it

53

Bolzano Danza is a prominent contemporary dance festival organized by Fondazione Haydn di Bolzano e Trento, held annually in Bolzano, Italy. The festival showcases leading choreographers and performers, offering a diverse program of performances, workshops, and community engagement activities. It targets a broad audience interested in contemporary dance and cultural events, emphasizing inclusion and sustainability. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Matomo for privacy-conscious analytics. It uses HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. The site integrates external partners and sponsors, enhancing its credibility and reach. From a security perspective, the website demonstrates good practices including HTTPS enforcement and cookie consent. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could benefit from additional hardening. The domain WHOIS data aligns well with the website's organizational claims, showing transparency and legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining regular security audits to sustain trust and compliance.

S

sictom

sictom-pezenas-agde.fr

44

The SICTOM Pézenas-Agde website represents a local public service organization focused on waste collection and ecological transition in the Pézenas-Agde region of France. The site provides comprehensive information on waste sorting, collection schedules, recycling points, and community news, targeting residents and local businesses. The business model is that of a government or non-profit entity delivering essential environmental services with a strong community engagement focus. Technically, the website is built on WordPress using the Divi theme, incorporating modern JavaScript libraries such as jQuery and Leaflet for interactive maps. It integrates Google Analytics via MonsterInsights and employs a cookie consent mechanism compliant with GDPR. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit advanced security headers. No exposed sensitive data or vulnerabilities were detected in the provided content. The absence of WHOIS data reduces domain trust slightly, but the professional presentation and consistent branding support legitimacy. Overall, the site is well-structured, informative, and trustworthy for its intended audience. Strategic improvements in security headers and ongoing maintenance would enhance its security posture. The lack of WHOIS transparency is a minor concern but does not detract significantly from the site's credibility.

A

AW Solutions

awsolutions.fr

58

AW Solutions is a French platform specializing in the dematerialization of public procurement processes, serving both public buyers and private companies. It operates under the Groupe Achat Solutions, a well-established entity in the public procurement sector since 1989. The platform offers a comprehensive suite of services including call for tenders dissemination, buyer profiling, sourcing, and business intelligence, positioning itself as a leader in the French government procurement market. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Yoast SEO, and Matomo analytics, ensuring a professional and functional digital presence. Security measures such as HTTPS, Google reCAPTCHA, and Keycloak SSO are implemented, though there is room for improvement in HTTP security headers and explicit security policies. Privacy compliance is basic with cookie consent mechanisms and privacy policies present but lacking detailed GDPR compliance indicators. Overall, the website is trustworthy, professional, and well-aligned with its business objectives.

M

Mandai Park Holdings Pte. Ltd.

mandai.com

71

Mandai Wildlife Reserve is a prominent wildlife and nature destination in Singapore, operated by Mandai Park Holdings Pte. Ltd., a subsidiary of Temasek Holdings. The organization manages multiple wildlife parks and offers diverse services including ticketing, memberships, educational programs, event venues, and accommodations. The website reflects a strong market position with a focus on family and wildlife enthusiasts, supported by comprehensive content and consistent branding. Technically, the site is built on Adobe Experience Manager with modern analytics and marketing tools integrated, providing a good user experience with mobile optimization and accessibility considerations. Security posture is strong with HTTPS, security headers, and secure forms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security transparency and vulnerability disclosure mechanisms.

S

SwipeTrack Solutions

ticketapp.org

58

SwipeTrack Solutions is a medium-sized technology company specializing in software systems that enhance guest experiences for hospitality and event organizations such as museums, zoos, festivals, and science centers. Their offerings include online ticketing, self-service kiosks, digital memberships, access control, and various add-ons tailored to operational needs. The company has a solid market position in the US with a focus on B2B SaaS solutions. Technically, the website is built on WordPress with Elementor, hosted with Cloudflare DNS, and uses HTTPS with a good SSL configuration. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies, lack of DNSSEC, and absence of security.txt or vulnerability disclosure pages. Overall, the security posture is moderate with room for improvement in headers and incident response transparency. The website is professional, well-branded, and trustworthy with clear contact information and social media presence.

Connex Marketing GmbH operates a well-established online platform specializing in gift vouchers and hotel bookings across Europe. With over 35 years of experience, the company targets consumers seeking convenient holiday voucher solutions. The website demonstrates a professional design with good content quality and strong accessibility features, including a comprehensive accessibility tool supporting various user needs. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though the absence of security headers and a published security policy suggests room for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the business appears credible and professional, with clear contact information and privacy compliance mechanisms in place.

R

Rockjumper Birding Tours

rockjumperbirding.com

63

Rockjumper Birding Tours operates a specialized bird-watching adventure tour business targeting nature enthusiasts and bird watchers worldwide. The company positions itself as a niche leader offering global bird safaris and adventure travel experiences. The website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Trustpilot integration, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and relevant content for its audience. Security posture is adequate with HTTPS and DigiCert SSL certification, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and trust signals suggest a legitimate business presence. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance documentation.

B

Birding Ecotours

birdingecotours.com

63

Birding Ecotours is a specialized tour operator offering small group and custom birding adventures worldwide. The company targets birding enthusiasts and eco-tourists with a comprehensive portfolio of tours categorized by destination, date, and style. The website is professionally designed using WordPress with modern plugins and SEO optimizations, providing an excellent user experience and clear navigation. Technical infrastructure includes Google Analytics, Google Tag Manager, and Smart Slider 3 for rich media presentation. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though no explicit security policy or incident response information is published. The absence of WHOIS data raises some concerns about domain legitimacy, but the professional web presence and content quality suggest a legitimate business. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site is secure, privacy-conscious, and well-structured, but domain registration verification is recommended.

D

DYEZ

dyez.com

54

DYEZ is a French-based digital media company specializing in SEO and web content management with a decade of experience. The company offers services including article publication, SEO article writing, personalized consulting, and collaboration opportunities targeting advertisers, web agencies, SEO consultants, and businesses of various sizes. The website is professionally designed using WordPress with Elementor and SEO optimization plugins, reflecting a mature digital presence. Technically, the site is well-optimized for performance and mobile responsiveness, leveraging modern web technologies and best practices. Security posture is solid with HTTPS and Content Security Policy headers, though additional security headers and explicit privacy policies are lacking. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the site presents a credible business front with room for improvement in privacy compliance and security transparency.

I

Internet Society (ISOC) France

isoc.fr

43

Internet Society France is the French chapter of the global Internet Society, dedicated to protecting internet users and promoting an open, accessible, and neutral internet. The organization operates as a non-profit, engaging in advocacy, education, and community building within France and internationally. Their website reflects a professional presence with clear mission statements, event information, and membership opportunities. The organization is well-established with a domain age consistent with its founding date and maintains active social media channels for outreach. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Smart Slider 3, with integration of SEO tools like Yoast. Hosting appears to be through OVH with DNS managed via AWS, indicating a robust infrastructure. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO practices are good, with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. There is no visible cookie consent mechanism, which is a GDPR compliance gap. No vulnerability disclosure or security.txt files are present. Overall, the security posture is adequate but could be improved with additional best practices. The risk assessment is low given the organization's non-profit nature, clear contact information, and consistent domain registration. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and establishing a vulnerability disclosure process to enhance trust and compliance.

O

OrdiPat

ordipat.fr

55

OrdiPat is a specialized French company providing domain name management, secure hosting, and IT solutions with a focus on intellectual property systems. The company leverages over 40 years of experience and offers a range of services including premium domain management, software products like Lola, and domain monitoring tools such as Typochecker. Their market position is that of a niche, trusted provider with multiple industry accreditations and partnerships. Technically, the website is built on WordPress with modern plugins and SEO optimizations, offering a good user experience and mobile responsiveness. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. The absence of WHOIS data slightly impacts trust but the overall business credibility remains high due to professional presentation and accreditations.

I

Institut F2I

institut-f2i.fr

59

Institut F2I is a private educational institution based in France specializing in post-baccalaureate education in information technology, digital technologies, and commerce. Founded in 2012, it offers courses from BAC to BAC+5 levels, including initial and alternating (work-study) programs. The institution targets students and professionals seeking specialized education in these sectors. The website reflects a focused educational business model with consistent branding and relevant content tailored to its audience. Technically, the website is built on WordPress CMS using modern libraries such as Bootstrap, jQuery, and Swiper, hosted by OVH. It employs Google Tag Manager and Google Analytics for tracking and marketing purposes, alongside reCAPTCHA for bot protection. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security-wise, the website uses HTTPS with a good SSL configuration and some best practices like reCAPTCHA; however, it lacks security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies despite the presence of cookie consent SDK. Overall, the website is professional and credible but requires improvements in privacy disclosures and security hardening to enhance trust and compliance.

I

ILGA World

ilga.org

73

ILGA World is a well-established global non-profit organization advocating for the human rights of lesbian, gay, bisexual, trans, and intersex people worldwide. Founded in 1978, it operates as a federation of over 2,000 member organizations across 170 countries, providing advocacy, research, and grassroots support. The website reflects a mature digital presence with comprehensive content, strong branding, and clear navigation targeting activists, civil society, and human rights stakeholders. Technically, the site is built on WordPress with modern plugins for SEO, accessibility, and user engagement. It uses Cloudflare DNS and integrates Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and cookie consent mechanisms in place. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled and security headers are not explicitly detected, indicating areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, ILGA World’s website is trustworthy, professional, and secure, supporting its mission effectively. Strategic recommendations include enhancing DNS security, publishing explicit security policies, and implementing security.txt or vulnerability disclosure channels to further strengthen trust and compliance.

A

Arcus Foundation

stateoftheapes.com

58

State of the Apes is a non-profit publication initiative under the Arcus Foundation, focusing on the conservation of great apes and gibbons by examining the impact of human development activities. The website serves as a resource hub offering downloadable chapters, video interviews, and research reports targeting policymakers, academics, NGOs, and conservation experts. The platform is well-branded, professionally designed, and provides clear navigation and content relevant to its mission. Technically, the website is built on WordPress with Bootstrap and jQuery, enhanced by SEO plugins and integrated with marketing and analytics tools such as HubSpot Forms, Google Tag Manager, and LinkedIn Insight. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the reputable association with the Arcus Foundation. Overall, the website presents a low-risk profile with strong content and business credibility but would benefit from enhanced transparency in domain registration and security practices to improve trust and compliance.

M

Mairie de Saint-Andiol

saint-andiol.fr

56

The website www.saint-andiol.fr serves as the official municipal portal for the commune of Saint-Andiol in France. It provides residents and visitors with access to local government services, public information, urban planning resources, and community event details. The site positions itself as a trusted local authority with clear contact information and links to regional partner organizations. Technically, the site is built on the WebSee CMS platform and utilizes common JavaScript libraries such as jQuery and Jssor Slider for interactive elements. While the site is accessible and mobile-optimized, some technical improvements could enhance performance and security. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and uses an older jQuery version that may pose vulnerabilities. Privacy compliance is partial, with no explicit privacy policy found but a cookie management page present. Overall, the site is trustworthy and professionally maintained, suitable for its governmental role.

C

Commune de Châlo-Saint-Mars

chalosaintmars.fr

58

The website www.chalosaintmars.fr serves as the official digital presence for the commune of Châlo-Saint-Mars, a small municipality in the Essonne department of France. It provides residents and visitors with comprehensive information about municipal services, local news, cultural activities, urban planning, and community events. The site is well-structured, user-friendly, and targets local citizens and tourists interested in the commune's heritage and services. Technically, the site leverages a combination of jQuery, jQuery UI, Jssor Slider, and Fancybox libraries, managed through the WebSee CMS platform. It is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with basic GDPR requirements. The site is moderately optimized for performance and mobile devices, with good navigation clarity and accessibility features, though some improvements could be made. From a security perspective, the site enforces HTTPS but lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain reduces the overall trust score, though the official nature of the site and consistent branding support its legitimacy. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy policy transparency, and domain registration verification would enhance trust and compliance.

N

NetSalesMedia

netsalesmedia.pl

65

NetSalesMedia is a professional affiliate marketing network operating primarily in Poland, formed by the merger of NetSales and SalesMedia. The company offers an innovative platform with advanced tracking technologies such as customer journey tracking, cross-device tracking, and fingerprint tracking to ensure fair and accurate commission settlements for publishers. The website demonstrates a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Tag Manager for analytics, and employs a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The WHOIS data is not publicly available, which is typical for .pl domains, but the business legitimacy is supported by clear contact information, social media presence, and association with Cube Group, a recognized digital marketing leader in Poland.

C

CENTRALNIC CANADA INC

roulette-en-ligne.ca

47

The website roulette-en-ligne.ca is a French-language Canadian online casino review platform specializing in roulette games. It provides detailed casino reviews, bonus offers, and game listings targeted at Canadian players interested in online gambling. The business operates primarily as an affiliate marketing site, promoting various reputable online casinos. The domain is registered in Canada with a consistent registrant and appropriate domain age, supporting its legitimacy. Technically, the site is built on WordPress and uses common web technologies such as jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. Hosting is behind Cloudflare DNS, ensuring reliable delivery, though no active WAF challenge is detected. The site is moderately optimized for mobile and SEO, with good navigation and content quality. From a security perspective, the site uses HTTPS and includes tracking via Google Analytics and Yandex Metrika but lacks visible security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, which reduces trust and compliance posture. There are no detected vulnerabilities or exposed sensitive data, but improvements in security headers and privacy compliance are recommended. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures, security hardening, and transparent contact information to improve trust and compliance with data protection regulations.

P

Prognos AG

prognos.com

75

Prognos AG is a professional consulting and research firm specializing in economic and policy analyses, serving government, public sector, and business clients primarily in Germany and Europe. Their services encompass studies, forecasts, evaluations, and strategic consulting across sectors such as economy, innovation, climate, energy, and infrastructure. The company maintains a strong market position with over 200 experts and multiple European offices. Technically, the website is built on Drupal 10 with modern JavaScript libraries, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract significantly given the professional site presentation. Overall, the site is well-designed, content-rich, and trustworthy, with moderate user tracking via Matomo analytics and compliance with GDPR indicated by comprehensive privacy and cookie policies.

TAKT Fest is a cultural festival and traditional singer-songwriter competition based in Novi Sad, Serbia. The website provides detailed information about the event's program segments including music, theater, standup, circus, movies, and creative workshops. The festival targets artists and cultural enthusiasts, positioning itself as a niche event with international participation. The domain is registered since 2020 and is consistent with the festival's recent editions. Technically, the site uses Joomla CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has a good design and user experience. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via a form and social media links. Overall, the site is trustworthy and professional but could improve compliance and security practices.

N

Nová síť z.s.

artinres.cz

53

ART-IN-RES is a Czech-based online portal dedicated to connecting artists with providers of artistic residencies, facilitating creative stays essential for artistic project development. The platform targets artists primarily in the Czech Republic but also internationally, offering listings of residencies, open calls, and news updates. The business operates under Nová síť z.s., a Czech non-profit organization, and maintains a professional web presence with clear branding and consistent content quality. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, integrating plugins for event management, GDPR compliance, and analytics. The site is mobile-optimized, SEO-friendly, and employs HTTPS with a cookie consent mechanism, reflecting a mature digital infrastructure suitable for its niche audience. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and detailed security policies. No vulnerabilities or WAF blocks were detected, indicating a secure baseline posture. Privacy compliance is evident through GDPR-aligned cookie and privacy policies. However, contact information is limited to a newsletter subscription form, with no direct emails or phone numbers provided. Overall, ART-IN-RES presents a trustworthy, well-maintained platform with a clear focus on artistic residencies. Strategic improvements in security headers, incident response transparency, and expanded contact options could enhance trust and compliance further.

K

Kolowratovy sady s.r.o.

kolowratovysady.cz

47

Kolowratovy sady s.r.o. is a Czech-based medium-sized company specializing in the cultivation and sale of fruit such as apples, pears, cherries, and potatoes, along with the production of apple juice, cider, lemonade, honey, and mead. The company operates a retail store located in Velké Dvorce near Přimda and holds certifications including SISPO and GLOBALG.A.P, indicating adherence to quality and safety standards. The website reflects a well-established regional producer with a strong local presence and a clear business model focused on both wholesale and retail markets. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, featuring responsive design and moderate performance. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site implements GDPR-compliant cookie consent with an opt-out mechanism and obfuscates email addresses to reduce spam risks. However, there is room for improvement in security headers and explicit security policies. From a security perspective, the site uses HTTPS with good SSL configuration and follows basic best practices such as cookie consent and email obfuscation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance the security posture and user trust.

V

Connexion Visimodif

visimodif.fr

37

The website visimodif.fr serves primarily as an administration login portal for Visimodif, likely related to Visicod.com. The site is minimalistic, focusing on user authentication for internal or administrative users, with no public-facing business descriptions or contact information. The domain is well-established, registered since 2010 with OVH, a reputable French registrar, indicating a stable presence. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript with jQuery and validation plugins, hosted on OVH infrastructure. Mobile optimization is adequate, but accessibility and SEO features are basic. Security posture is moderate; while client-side validation is implemented, there is no visible HTTPS enforcement or security headers in the provided HTML content, and no advanced security policies or incident response information is available. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is functional but lacks comprehensive security and privacy measures, and public business information is minimal.

D

Datackathon

datackathon.com

56

Datackathon is a French digital magazine specializing in data, digital technology, cybersecurity, AI, cloud computing, SaaS, marketing, and e-commerce. It targets professionals and enthusiasts interested in these domains by providing regularly updated articles and news. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. Advertising is primarily managed through Google Adsense and affiliate marketing via ThirstyAffiliates. The website enforces HTTPS, ensuring secure communication, but lacks some advanced security headers and explicit cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data for the domain is missing or unavailable, which raises questions about domain registration transparency, though the website content and structure appear legitimate and professional.

A

Advertising Media s.r.o.

advertising-media.cz

51

Advertising Media s.r.o. is a Czech-based digital marketing and web development company specializing in creating functional websites, e-shops, and tailored marketing campaigns. They serve a diverse clientele including small businesses, schools, and public institutions, offering scalable solutions from simple websites to complex e-commerce platforms. Their market position is that of a trusted local provider with a strong emphasis on measurable and profitable marketing services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent management for tracking scripts but lacks explicit security headers and published privacy or incident response policies, indicating room for improvement in compliance and transparency. The absence of WHOIS data reduces domain trustworthiness, though the professional presentation and clear contact information mitigate some concerns. Overall, the website is well-designed, user-friendly, and business-focused, with moderate risk due to missing WHOIS transparency and privacy documentation.

I

IUCN

iucnleadersforum.org

71

The IUCN Leaders Forum website serves as a professional platform for promoting the 2024 edition of the IUCN Leaders Forum event, focusing on innovation and conservation. It is backed by the International Union for Conservation of Nature (IUCN), a well-established global environmental organization. The site provides comprehensive event details, speaker profiles, and multimedia content, targeting environmental leaders, policymakers, and sustainability professionals worldwide. The business model is non-profit, centered on convening stakeholders to advance nature-positive solutions. Technically, the website is built on Drupal 9 with Bootstrap 4, leveraging modern web technologies and performance optimizations such as lazy loading and responsive design. It integrates multiple marketing and analytics tools, including Google Tag Manager, LinkedIn Insights, and Twitter tracking, all managed with a clear cookie consent mechanism ensuring GDPR compliance. The site is hosted with Cloudflare DNS and secured with HTTPS, although DNSSEC is not enabled. From a security perspective, the website demonstrates good practices with HTTPS enforcement, domain locking, and cookie consent. However, there is room for improvement by enabling DNSSEC and publishing explicit security policies and vulnerability disclosure information. No critical vulnerabilities or security issues were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the IUCN's mission to foster collaboration and innovation in environmental conservation through its Leaders Forum event.

Der Deutsche Arbeitsschutzpreis ist eine etablierte Initiative, die alle zwei Jahre Unternehmen auszeichnet, die sich besonders für die Sicherheit und Gesundheit ihrer Beschäftigten engagieren. Die Ausrichtung erfolgt durch namhafte deutsche Institutionen wie das Bundesministerium für Arbeit und Soziales (BMAS), den Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI) sowie die Deutsche Gesetzliche Unfallversicherung (DGUV). Die Website dient als zentrale Informationsplattform für Bewerbungen, Preisverleihungen und aktuelle Nachrichten rund um den Arbeitsschutzpreis. Die Zielgruppe sind Unternehmen, Organisationen und Einzelpersonen in Deutschland, die im Bereich Arbeitsschutz tätig sind oder sich engagieren möchten.

D

Deutsche Kinderschutzstiftung Hänsel + Gretel

notinsel.de

54

Notinsel is a reputable non-profit initiative operated by the Deutsche Kinderschutzstiftung Hänsel + Gretel, focused on providing safe havens for children in distress across Germany. The project enjoys strong support from local governments and social organizations, with a network of over 16,000 safe locations. The website effectively communicates its mission, target audience, and services, supported by testimonials and social media presence. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and embedded YouTube videos. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. From a security perspective, the site uses HTTPS and session management for login states, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the website's purpose and shows no suspicious patterns. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include adding security headers, publishing a security policy, and providing vulnerability disclosure information to enhance trust and security posture.

R

RheinFit Sportakademie GmbH

adventure-minigolf-bochum.de

40

Adventure Minigolf Bochum is a small local hospitality and leisure business offering a unique adventure minigolf experience with 24 themed courses, hand-carved sculptures, and additional activities such as football billiards. The company operates under RheinFit Sportakademie GmbH and targets families, friends, and children aged six and above. The website is professionally designed using WordPress and the Divi theme, with good mobile optimization and SEO practices. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting the business's local market position.

S

Stadtwerke Bochum

stadtwerke-bochum.de

69

Stadtwerke Bochum is a well-established regional energy provider based in Bochum, Germany, with a history spanning approximately 170 years. The company offers a broad range of energy-related services including electricity (with green energy options), natural gas, district heating, water supply, solar energy solutions, heat pumps, and e-mobility services. Their target audience includes both private and business customers within the Bochum region. The website reflects a mature digital presence with comprehensive service information, customer support channels, and active social media engagement. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Bootstrap, and various UI libraries. It employs a consent management platform (Usercentrics) and integrates Google Tag Manager for analytics, indicating a focus on privacy compliance and user experience. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with good SSL configuration and incorporates consent-based script loading. It holds ISO 27001 certification and displays multiple trust badges, reinforcing its commitment to security and sustainability. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be more visible, and an incident response contact or security.txt file is absent. Overall, Stadtwerke Bochum's website demonstrates a strong security posture, excellent content quality, and robust privacy compliance. It serves as a trustworthy digital front for a major regional utility provider. Strategic recommendations include enhancing security header implementation, publishing incident response information, and maintaining regular audits of third-party scripts.

G

GERMAX Gerli GmbH

germax.net

50

GERMAX media is a well-established marketing and advertising agency based in Aachen, Germany, founded in 2000. The company offers a broad range of services including web design, corporate design, consulting, and campaign management, targeting businesses and public institutions. Their website reflects a professional and consistent brand image with a comprehensive portfolio and client testimonials, indicating a strong market position in the regional media sector. Technically, the site uses a variety of JavaScript libraries and plugins to deliver a responsive and visually appealing experience, though it appears to be custom-built rather than relying on a popular CMS. Security-wise, the site lacks DNSSEC and explicit security headers, and no cookie consent mechanism is implemented despite a detailed privacy policy. The domain registration is consistent with the business claims, showing a mature and legitimate online presence.

N

NETZCOCKTAIL

netzcocktail.de

49

NETZCOCKTAIL is a German-based small business specializing in the development of successful websites with professional features aimed at optimizing Google search rankings. The company targets businesses seeking comprehensive website development and SEO services, positioning itself as a niche player in the technology sector. The website demonstrates a professional design with consistent branding and good content quality, although explicit privacy and terms of service policies are not present in the analyzed content. Technically, the site uses modern technologies including jQuery and Usercentrics for cookie consent management, and it is built on the AmphiCMS platform. HTTPS is enabled, and reCAPTCHA is used to enhance security. However, the absence of security headers and detailed contact information limits the overall security posture and trustworthiness. The site is accessible without any WAF or security challenges, indicating good availability.

T

TFGpl sp. z o.o.

ebutik.pl

70

eButik.pl is a well-established Polish online boutique specializing in women's fashion, offering a broad range of clothing categories including plus size and seasonal collections. The company, TFGpl sp. z o.o., has been operating since 2003, positioning itself as a trusted retailer with a focus on quality, style, and affordability. The website demonstrates strong digital maturity with a modern e-commerce platform (IdoSell Shop), comprehensive privacy and cookie policies, and integration of advanced marketing and analytics tools such as Google Analytics, Facebook Pixel, and TrustMate reviews. Security posture is robust with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the site provides an excellent user experience with mobile optimization and clear navigation, supported by credible business information and positive customer feedback.

Z

Zoologische Gesellschaft für Arten und Populationsschutz e.V.

zgap.de

60

The Zoologische Gesellschaft für Arten und Populationsschutz e.V. (ZGAP) is a well-established German non-profit organization dedicated to the conservation of lesser-known and highly endangered animal species. With a history dating back to 1982, ZGAP operates numerous conservation projects across more than 50 countries, focusing on species protection, research, and public awareness. Their website serves as an information hub for members, donors, and the general public, offering project details, membership options, donation opportunities, and event information. The organization maintains a strong social media presence and complies with GDPR through comprehensive privacy and cookie policies.

G

Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH)

g-e-h.de

57

The Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH) is a well-established German non-profit organization founded in 1981, dedicated to the conservation of old and endangered livestock breeds. With over 2100 members from diverse backgrounds including agriculture, biology, and veterinary medicine, the organization provides educational resources, workshops, publications, and conservation projects. Their website reflects a professional and consistent brand presence, offering clear navigation and multiple channels for engagement and donations. Technically, the site is built on Joomla CMS with standard web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and an explicit security policy. Overall, the domain and website content align well, indicating a trustworthy and credible online presence.

W

WSW Wuppertaler Stadtwerke GmbH

wsw-online.de

55

WSW Wuppertaler Stadtwerke GmbH is a regional utility company based in Germany, providing reliable energy supply and innovative mobility solutions primarily to private customers, businesses, and young people. The company holds a strong market position in the Wuppertal region, offering electricity, gas, district heating, public transport services, and e-mobility solutions. Their digital presence is built on the TYPO3 CMS platform, integrating modern technologies such as Google Tag Manager, Usercentrics for consent management, and Mouseflow for analytics, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and compliant with GDPR, supporting a high level of trust and user experience.

V

Verband deutschsprachiger Zoopädagogen

vzp.de

63

The Verband deutschsprachiger Zoopädagogen (VZP) is a German-speaking non-profit association dedicated to zoo pedagogy, fostering education and interest in biodiversity and conservation through zoos. The website serves as a platform for news, events, and information exchange among zoo educators. Technically, the site is built on the Jimdo Creator CMS, hosted on Jimdo's infrastructure, and employs modern web technologies including jQuery and Swiftype for search functionality. The site is mobile-optimized and provides a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response information. Overall, the website is professional, content-rich, and trustworthy, serving a niche educational community effectively.

D

Deutsche Gesellschaft für Herpetologie und Terrarienkunde

dght.de

47

The Deutsche Gesellschaft für Herpetologie und Terrarienkunde (DGHT) is a German non-profit organization dedicated to the conservation and study of amphibians and reptiles. The website serves as an information hub for conservation projects, terraristic expertise, environmental education, and scientific research. It targets conservationists, herpetologists, hobbyists, and educators. The organization maintains a reputable position within its niche, supported by partnerships and a membership model. Technically, the website is built on WordPress with Bootstrap and jQuery, hosted on Strato servers, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, with room for security and privacy improvements.

C

Clickonometrics

clickonometrics.pl

50

Clickonometrics operates as an advertising technology platform specializing in ad server solutions and campaign management tools for publishers, advertisers, and ad networks. Founded in 2016 and based in Poland, the company offers services including RTB, SSP, DSP, and various advertising pricing models such as CPC, CPA, CPS, and CPM. The website presents a professional and consistent brand image targeting a niche market within the online advertising ecosystem. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized and structured with clear navigation, though accessibility features are basic. Hosting and domain registration are managed through OVH sas, a reputable provider, with domain status flags enhancing domain security. However, no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and has domain-level protections but lacks visible security headers and explicit incident response or security policies. Privacy compliance is minimal, with a basic privacy policy located on a separate opt-out page and no cookie consent mechanism despite the use of tracking scripts. Contact information is not provided on the landing page, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and more transparent business contact information to strengthen trust and regulatory adherence.