Security Directory

L

Luonnonvarakeskus (Luke)

luke.fi

63

Luonnonvarakeskus (Luke) is a Finnish government research and expert organization focused on building wellbeing and a sustainable future through renewable natural resources. The website serves as a comprehensive portal offering research, expert services, statistics, policy recommendations, and publications targeted at researchers, policymakers, and stakeholders in the bioeconomy and environmental sectors. The site is built on Drupal 10, employs modern web technologies, and integrates privacy-compliant analytics and cookie consent mechanisms. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response information are not prominently published. Overall, the website reflects a mature digital presence consistent with a large government entity, providing trustworthy and professional content.

F

Fintraffic

tmfg.fi

76

Fintraffic is a Finnish public service organization specializing in traffic management and safety across all transportation modes. The website reflects a mature digital presence with a modern Drupal 10 CMS infrastructure, integrated with advanced cookie consent management and analytics tools such as Matomo and Piwik Pro. The site demonstrates strong compliance with GDPR and privacy regulations, providing detailed cookie policies and user consent mechanisms. Security posture is robust with HTTPS enforcement and multiple security headers, though explicit security and incident response policies are not publicly detailed. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

S

Suomen ympäristökeskus

syke.fi

65

Suomen ympäristökeskus (Syke) is a Finnish governmental environmental research and expert center providing comprehensive environmental data, research, and services. The website serves as a portal for information about their activities, projects, publications, and open job positions, targeting environmental professionals, authorities, researchers, and the general public interested in environmental issues. The organization has a strong market position as a key national environmental authority in Finland, with a large operational size and a 30-year history. Technically, the website is built on Drupal 10, uses modern web technologies including SVG graphics, Google Tag Manager for analytics, and CookieHub for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital presence with strong privacy compliance and business credibility. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. No suspicious or malicious indicators were found. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing direct contact options for security matters.

Y

Ympäristöministeriö (Finnish Ministry of the Environment) and associated Finnish environmental authorities

ymparisto.fi

60

Ymparisto.fi is the official Finnish government environmental portal providing comprehensive information and resources to support sustainable decision-making by citizens, workers, and policymakers. It is backed by key Finnish environmental authorities, ensuring authoritative and trustworthy content. The website is built on Drupal 10, employs modern web technologies, and offers excellent mobile optimization and accessibility. Privacy and cookie policies are well implemented with active consent mechanisms. Security posture is strong with HTTPS and best practices observed, though explicit security policy and incident response contacts are not published. Overall, the site is professional, trustworthy, and serves as a critical public service platform for environmental awareness and engagement in Finland.

C

Center for Sustainable Energy

energycenter.org

70

The Center for Sustainable Energy is a well-established nonprofit organization focused on advancing decarbonization through sustainable, equitable, and resilient transportation, buildings, and communities. Their services include program implementation, advisory, incentive management, policy analysis, and outreach, supported by their proprietary software platform Caret® for electric vehicle policy. The organization targets government agencies, utilities, policymakers, and clean energy stakeholders, positioning itself as a national leader in clean energy program management. Technically, the website is built on Drupal 10 with modern frameworks such as Bootstrap and FontAwesome, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and Marketo. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely via GoDaddy infrastructure. Performance is moderate with good technical implementation. From a security perspective, the site uses HTTPS and follows some best practices like external link security attributes, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows a long-established domain with privacy protection appropriate for a nonprofit. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance and security headers. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security policies to enhance trust and compliance.

C

Center for Sustainable Energy

theapostolicchurch.org

60

The Clean Vehicle Grants Project website serves as the official information portal for the California Clean Vehicle Rebate Project (CVRP), administered by the Center for Sustainable Energy on behalf of the California Air Resources Board. It provides comprehensive resources including eligibility guidelines, rebate application access, FAQs, and program updates targeted at California residents and businesses interested in electric vehicle incentives. The site is positioned as an authoritative source within the clean energy and transportation sectors, supporting California's sustainability goals. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrations such as Google Analytics, Google Tag Manager, and social media pixels for marketing and analytics purposes. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable delivery and moderate performance. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs domain registration protections but lacks DNSSEC and advanced security headers, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided with multilingual support, enhancing trust and accessibility. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in security hardening and privacy compliance. The domain registration details align well with the business purpose, supporting legitimacy and trustworthiness.

R

RONAL GROUP

ronal-wheels.com

59

RONAL GROUP operates an international website focused on manufacturing and supplying high-quality automotive wheels. The company offers a variety of wheel products including forged and winter wheels, targeting automotive dealers and vehicle owners globally. The website is professionally designed using Drupal 10 CMS, incorporating modern web technologies such as Vue.js and jQuery, and includes multimedia content and configurator tools to enhance user engagement. Privacy and cookie compliance are well implemented with a comprehensive privacy policy and an interactive cookie consent mechanism. However, the absence of WHOIS registration data for the domain www.ronal-wheels.com raises concerns about domain legitimacy, despite the professional appearance and active social media presence. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, but the lack of explicit security policies and incident response contacts suggests room for improvement. Overall, the website presents a credible business front but should address domain registration transparency to enhance trust.

Z

ZAPA beton

zapa.cz

54

ZAPA beton is a Czech Republic-based large manufacturing company specializing in the production, delivery, and placement of concrete products. The company operates multiple branches and emphasizes sustainability and innovation in concrete technology, such as their ZAPA QCC and ZAPA NEXT products. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. It provides clear navigation and relevant content for construction professionals and students. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

B

Bureau Veritas Latvia

bureauveritas.lv

68

Bureau Veritas Latvia operates as a local branch of the global leader in testing, inspection, and certification services. The company offers a broad portfolio of services including quality, safety, environmental certifications, verification services for emissions and sustainability, inspections, audits, and professional training. Their market position is strong, supported by global brand recognition and multiple accreditations. Technically, the website is built on Drupal 10, integrates modern consent management and analytics tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a reliable digital presence for the business.

K

Královehradecký kraj

kr-kralovehradecky.cz

63

Královehradecký kraj operates an official regional government website providing comprehensive information about the regional administration, public services, news, and community resources. The site targets residents and stakeholders within the Královéhradecký region of the Czech Republic, offering key services such as contact directories, grant information, and cultural portals. The website is built on a modern Drupal 10 CMS platform, utilizing contemporary web technologies including Bootstrap and Google Tag Manager, ensuring a responsive and accessible user experience. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature privacy posture. However, the absence of security headers and a security.txt file indicates room for improvement in security best practices. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The lack of WHOIS data is unusual but likely due to registry or query limitations rather than malicious intent, given the official nature of the site. Overall, the website demonstrates a solid technical infrastructure and professional presentation consistent with government standards. It maintains good privacy compliance and user trust indicators, including clear contact information and social media engagement. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security posture.

S

Sportovní a rekreační areál Kraví hora

kravihora-brno.cz

59

Sportovní a rekreační areál Kraví hora is a public sports and recreational facility located in Brno, Czech Republic, offering a variety of services including indoor and outdoor swimming pools, sauna, ice rinks, and multiple sports fields. The website serves local residents and sports enthusiasts, providing information on facility status, booking options, and events. The business operates primarily as a community-focused sports venue with a medium-sized presence in the hospitality and government sectors. Technically, the website is built on Drupal 10 CMS, utilizing modern JavaScript libraries and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized, accessible, and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible security headers and published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of public facility. Overall, the site demonstrates a good security posture but could improve transparency and technical security controls. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy policy publication, security headers, and incident response disclosures would enhance trust and compliance.

S

SAKO Brno, a.s.

sako.cz

69

SAKO Brno, a.s. is a large waste management company based in Brno, Czech Republic, providing comprehensive services including waste collection, sorting, and energy recovery. The company targets citizens, businesses, and municipalities with a strong local market presence and multiple related projects such as ReSAKO and specialized collection centers. The website is professionally designed using Drupal 10, with modern tracking and cookie consent technologies, ensuring good user experience and compliance with GDPR. Security posture is solid with HTTPS and cookie consent, though lacking explicit security headers and published security policies. WHOIS data is unavailable, limiting domain trust assessment, but the website's transparency and social presence support legitimacy. Overall, the site is well-structured, secure, and compliant, serving as a reliable digital front for the company.

K

KULTINO*

kult.cz

47

KULTINO* is a Czech regional cultural magazine focused on Brno and surrounding areas, offering a quarterly printed magazine and a comprehensive online platform featuring articles, interviews, reviews, and event listings. The website is professionally designed using Drupal 10 CMS and integrates modern web technologies and analytics tools, indicating a mature digital presence. Social media channels on Facebook, Instagram, and YouTube support audience engagement. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit privacy policy and security headers. WHOIS data is unavailable, limiting domain trust assessment but the website content and partner references suggest legitimacy. Overall, the site is well-positioned as a trusted cultural media outlet in its region.

D

Dopravní podnik města Brna, a. s.

dpmb.cz

62

Dopravní podnik města Brna, a. s. (DPMB) is the primary public transportation operator in Brno, Czech Republic, providing bus, trolleybus, tram, and boat services to tens of thousands of daily passengers. The company maintains a professional and comprehensive website built on Drupal 10, offering detailed transport information, ticketing options, and service updates. The site is well-branded, mobile-optimized, and accessible, targeting residents and visitors of Brno. Technically, the website employs modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to privacy protection, which is common and justified for this type of public entity. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance with privacy regulations.

V

Visit Costa Rica

costaricapuremeetings.com

66

Visit Costa Rica's meetings page is a professionally designed tourism and event promotion website focused on attracting business meetings and events to Costa Rica. The site highlights the country's sustainability leadership, connectivity, and meeting infrastructure, targeting event planners and professionals. Technically, the site uses Drupal 10 CMS, integrates Google Tag Manager and reCAPTCHA, and employs cookie consent management via OneTrust, reflecting a modern digital infrastructure. Security posture is generally good with HTTPS and anti-bot measures, but lacks explicit security headers and visible security policies. WHOIS data is missing, which reduces transparency and trust slightly. Overall, the site is functional, well-branded, and suitable for its business purpose but could improve privacy and security disclosures.

B

Bundesverband der Deutschen Luft- und Raumfahrtindustrie e.V. (BDLI)

bdli.de

61

The Bundesverband der Deutschen Luft- und Raumfahrtindustrie e.V. (BDLI) is a prominent German aerospace industry association representing a broad spectrum of companies from engineering service providers to international system manufacturers. The website serves as the official digital presence, providing industry news, campaigns, event information, and member services. It targets industry stakeholders, policymakers, and professionals interested in aerospace and defense sectors. Technically, the site is built on Drupal 10, leveraging modern analytics (Matomo) and consent management (Usercentrics), ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative market position.

E

Evoluma Klaster Przemysłowy

evoluma.pl

62

Evoluma Klaster Przemysłowy is a Polish industrial cluster that connects over 50 members and partners, employing more than 5,000 people and operating in 36 export markets. The cluster focuses on fostering cooperation, innovation, and development within the industrial sector, offering networking, project support, and event organization services. The website is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager and Google Analytics. It features a cookie consent mechanism compliant with GDPR requirements, although no explicit privacy or terms of service pages were found. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies or incident response contacts. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website presents a professional and trustworthy digital presence for the industrial cluster.

U

UCB

ucbcaresforneurology.fr

38

The website ucbcaresforneurology.fr is a specialized healthcare support site related to UCB, focusing on neurology patient support and information. Currently, the site is under maintenance and contains no active content beyond a maintenance notice and links to related UCB websites. The technical infrastructure is based on Drupal 10 CMS and hosted with Microsoft Azure DNS services, indicating a modern and scalable platform. However, the lack of active content, privacy policies, and contact information limits its current utility and trustworthiness. From a security perspective, the site uses HTTPS (implied by Azure DNS and modern hosting), but no explicit security headers or policies are detected. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and incident response contacts indicates compliance gaps. The WHOIS data is consistent and appropriate for the business, with no privacy protection used, supporting legitimacy. Overall, the site scores low on content quality due to its maintenance status but shows moderate technical implementation and business credibility. Security posture and privacy compliance require improvement. The site is safe with no adult or questionable content detected. Strategic recommendations include publishing privacy and cookie policies, adding contact and incident response information, implementing security headers, and improving content availability to enhance user trust and compliance.

I

ICON plc

iconplc.com

68

ICON plc is a globally recognized clinical research organization (CRO) specializing in outsourced clinical development and commercialization services for the pharmaceutical, biotechnology, and medical device sectors. The company positions itself as a leader in the clinical research industry, offering a broad range of solutions including clinical operations, consulting, healthcare intelligence, and strategic services. Their website reflects a mature enterprise with a comprehensive service portfolio targeting industry professionals and stakeholders. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party integrations such as Google Tag Manager and performance monitoring tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, indicating a high level of digital maturity. Hosting appears to be supported by Akamai CDN services, enhancing performance and reliability. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes multiple security headers. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly evident, representing areas for improvement. Overall, the website presents a professional and trustworthy digital presence consistent with an enterprise-level healthcare CRO. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong branding and content quality. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and compliance.

S

Schréder

schreder.com

64

Schréder is a globally recognized independent smart lighting solution provider focused on enhancing safety, well-being, and sustainability in public spaces. Their offerings include advanced lighting design, engineering, manufacturing, and connected lighting solutions tailored for municipalities, industries, and transport sectors. The website reflects a mature digital presence built on Drupal 10, incorporating modern analytics and cookie consent mechanisms. Security posture is adequate with HTTPS and consent management but lacks explicit security headers and published security policies. WHOIS data is unavailable, which slightly impacts trust but the professional branding and content quality support business credibility. Strategic recommendations include improving transparency with privacy and security policies and enhancing security headers to strengthen trust and compliance.

H

Het Scheepvaartmuseum

hetscheepvaartmuseum.com

67

Het Scheepvaartmuseum, also known as The National Maritime Museum, is a prominent cultural institution in the Netherlands specializing in maritime history and exhibitions. The museum boasts one of the largest maritime collections globally, with approximately 400,000 objects. The website serves as an informational and ticketing platform targeting general audiences interested in maritime culture and history. Technically, the site is built on Drupal 10 CMS and incorporates modern JavaScript libraries and marketing tools such as Visual Website Optimizer (VWO) for analytics and optimization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data for the domain is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the website is professionally maintained and trustworthy but could enhance transparency and security posture.

H

Het Scheepvaartmuseum

hetscheepvaartmuseum.nl

69

Het Scheepvaartmuseum is a prominent maritime museum in the Netherlands showcasing 500 years of Dutch maritime history with one of the world's largest maritime collections. The website is built on Drupal 10 and incorporates modern web technologies and tracking tools such as Cookiebot for consent management and Visual Website Optimizer for analytics and optimization. The site is well-branded, mobile-optimized, and provides rich content aimed at families, tourists, and maritime enthusiasts. However, explicit privacy policies and terms of service are not found in the provided content, which could be improved to enhance compliance and user trust. Security posture is strong with HTTPS and consent mechanisms, but lacks explicit incident response contacts or vulnerability disclosure information.

S

Stage Entertainment

stage-entertainment.de

70

Stage Entertainment operates a professional German-language website focused on musicals and live shows, offering ticket sales and gift vouchers. The company holds a strong market position in the entertainment sector in Germany, targeting a broad audience interested in family-friendly and popular musical productions. The website is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Segment Analytics, and Optimizely, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though improvements can be made in security headers and cookie consent mechanisms. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR through a comprehensive privacy policy.

O

Onlineafspraken.nl

onlineafspraken.nl

58

Onlineafspraken.nl is a Dutch technology company specializing in SaaS-based online reservation and appointment scheduling software. Founded in 2004, it offers a comprehensive suite of products including online booking, payment processing, customer management, marketing tools, and mobile apps. The company targets businesses across multiple sectors seeking efficient and integrated scheduling and payment solutions. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on Drupal 10, employs modern analytics and marketing tools, and is optimized for mobile and accessibility. Security posture is strong, evidenced by ISO 27001 certification, DNSSEC enabled domain, HTTPS enforcement, and cookie consent management. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website and domain data indicate a trustworthy and credible business with a solid market position in the Netherlands.

G

GS1

gs1.org

72

GS1 is a globally recognized standards organization that provides essential business communication standards, including barcodes and data synchronization, to improve supply chain efficiency and product identification worldwide. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting businesses across multiple industries such as retail, healthcare, and transportation. Technically, the site is built on Drupal 10 with modern libraries and frameworks, hosted on Azure CDN, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and business credibility, supporting GS1's position as a global leader in standards.

U

Université de Picardie Jules Verne

u-picardie.fr

60

Université de Picardie Jules Verne (UPJV) is a large public university based in France offering a broad range of multidisciplinary degree programs from undergraduate to doctoral levels. The institution is positioned as a regional leader in higher education and research within the Hauts-de-France region, providing extensive academic services and fostering research excellence. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding aligned with its educational mission. Technically, the site is built on Drupal 10, employs Matomo for analytics, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and policies could be improved. The absence of WHOIS data from AFNIC is noted but does not detract from the legitimacy of the site given the official branding and content. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

G

GS1 Switzerland

gs1.events

59

GS1 Switzerland is a professional standards organization focused on providing barcode and identification standards, training, and networking events primarily for retail, logistics, and healthcare sectors in Switzerland. The website is well-structured, content-rich, and targets industry professionals seeking knowledge transfer and collaboration opportunities. Technically, the site is built on Drupal 10 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit incident response and vulnerability disclosure information are not found. Overall, the site demonstrates high professionalism and trustworthiness with strong alignment between WHOIS data and business identity.

L

Longfonds

longfonds.nl

69

Longfonds is a Dutch non-profit organization dedicated to promoting healthy lungs and clean air for everyone. The website serves as a platform for health advocacy, supporting scientific research, and raising public awareness about respiratory health. The organization targets the general public concerned with lung health and related issues. The website is built on Drupal 10 and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Visual Website Optimizer, and Cookiebot for cookie consent management. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks publicly visible security policies and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences, though it would benefit from publishing explicit privacy, terms of service, and security policies to enhance compliance and transparency.

A

ActiZ

actiz.nl

72

ActiZ is a prominent Dutch healthcare branch association representing approximately 400 care organizations specializing in eldercare and chronic illness care. The website serves as a comprehensive platform for information dissemination, member services, and sector news, targeting healthcare professionals, policymakers, and stakeholders in the eldercare sector. The organization maintains a strong market position within the Netherlands, supported by a large membership base and extensive staff representation. Technically, the website is built on Drupal 10, integrating modern analytics and user behavior tracking tools such as Google Analytics and Hotjar, ensuring a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and professionally designed, reflecting high content quality and user experience standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms; however, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the domain registration data aligns with the organization's profile, confirming legitimacy and trustworthiness. The website is safe for general audiences with no adult or explicit content detected.

G

GS1 Switzerland

gs1.ch

59

GS1 Switzerland is a national member organization of the global GS1 network, providing standardized barcode and data management solutions to over 8600 companies in Switzerland. Their website offers comprehensive information about GS1 standards, barcode issuance, digital product passes, and related services, targeting businesses across retail, healthcare, logistics, and manufacturing sectors. The site is professionally designed, multilingual, and well-structured to serve a business audience seeking efficient supply chain and product identification solutions. Technically, the website is built on Drupal 10 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the organization's identity, indicating a legitimate and trustworthy online presence.

M

Maerki Baumann & Co. AG

maerki-baumann.ch

57

Maerki Baumann & Co. AG is an independent private bank based in Zurich, Switzerland, specializing in private banking, asset management, and advisory services for private clients and independent asset managers. The website reflects a professional banking institution with a clear focus on wealth management and personalized financial services. The company positions itself as a family-owned bank with generational expertise, targeting a discerning clientele seeking bespoke financial solutions. Technically, the website is built on Drupal 10, integrating modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and employs standard SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and implements several security headers, demonstrating a solid security posture. Cookie consent is comprehensive, with detailed cookie categories and provider information, indicating good privacy compliance and GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with moderate technical sophistication and a strong business credibility profile.

S

Schweizer Fleisch

schweizerfleisch.ch

71

Schweizer Fleisch is a Swiss-focused informational and promotional website dedicated to educating consumers about Swiss meat, its quality, safety, and sustainability. The site offers recipes, cooking tips, and detailed content aimed at encouraging the consumption of Swiss meat products. The platform appears to be professionally managed, likely by industry stakeholders, and targets consumers interested in high-quality, locally sourced meat. Technically, the website is built on Drupal 10 and incorporates modern web technologies including Google Tag Manager and Mailchimp for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit privacy and terms of service policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's Swiss identity and business focus, indicating legitimacy and trustworthiness.

P

Public Health Accreditation Board

phabdata.org

58

The Public Health Accreditation Board (PHAB) operates a professional website focused on advancing public health practice through accreditation and data visualization services. The site targets governmental public health agencies and accredited health departments, providing tools for benchmarking and exploring health department capacity data. The organization positions itself as a trusted authority in public health accreditation with a clear mission and service offering. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are absent. From a security perspective, the site demonstrates a solid baseline with no detected vulnerabilities or blocking mechanisms. However, improvements could be made by publishing security policies, providing contact channels for security incidents, and implementing vulnerability disclosure processes. The lack of WHOIS data limits domain registration insights but does not detract from the site's apparent legitimacy. Overall, the website is professional, trustworthy, and well-suited for its audience. Strategic recommendations include enhancing security transparency, improving privacy policy visibility, and expanding contact information to bolster user trust and compliance.

M

Maerki Baumann & Co. AG

archip.ch

59

Maerki Baumann & Co. AG operates as an independent Zurich-based private bank specializing in blockchain and cryptocurrency asset management services. The website presents a professional image targeting private and corporate clients interested in custody, trading, staking, crypto investment advice, asset management, and NFT custody. The bank emphasizes generational expertise and a focused business model in the finance sector. Technically, the website is built on Drupal 10, integrates Google Tag Manager and Cookiebot for consent management, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further enhanced. The website uses multiple third-party advertising and tracking services with transparent consent. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity. No critical security or content safety issues were detected.

The Department of Social Services (DSS) website serves as the official online presence of the Australian Government's department responsible for improving the economic and social wellbeing of individuals, families, and vulnerable community members. The site provides comprehensive information on various social programs including community support, disability services, family and children support, housing, and violence prevention. The department holds a strong market position as a government entity with enterprise scale and a clear focus on public service delivery. Technically, the website is built on Drupal 10 and hosted on the GovCMS platform, ensuring modern content management capabilities and compliance with government digital standards. The site integrates Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. Accessibility and mobile optimization are excellent, supporting a wide range of users. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting good security hygiene. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. The WHOIS data is restricted, typical for government domains, but the domain's .gov.au TLD and content authenticity strongly indicate legitimacy. Overall, the DSS website demonstrates a mature digital presence with strong content quality, technical implementation, and business credibility. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing transparency around data protection contacts.

M

Mise en Place

miseenplace.be

50

Mise en Place is a Belgian staffing service specializing in student jobs, flex jobs, and event personnel staffing. The website targets students, flexible workers, and event organizers primarily in Belgium. The business operates in the hospitality sector and presents itself with a professional and consistent brand image. The website is built on Drupal 10 CMS, utilizing modern web fonts and icons, and includes structured data for SEO and social media integration. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism implemented to comply with privacy regulations. Security posture is strong with HTTPS enforced and standard security headers present, although some security policy and incident response information is missing. WHOIS data is privacy protected, which is common for this business type and does not raise immediate concerns. Overall, the website is well-designed, accessible, and trustworthy, with room for improvement in transparency and contact information availability.

W

WONDERFOL bv

weresmartworld.com

53

We're Smart World is a Belgium-based non-profit organization established in 2015, dedicated to promoting excellence in vegetable-focused culinary arts globally. The organization operates a comprehensive Green Guide listing over 1300 vegetable restaurants worldwide, organizes awards, and provides consulting and educational services. Their market position is niche but authoritative within the sustainable culinary sector. Technically, the website is built on Drupal 10, hosted via Hostbasket, and uses modern analytics and cookie compliance tools. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie banner but no terms of service or incident response details. Overall, the website is professional, trustworthy, and content-rich, serving a specialized audience of culinary professionals and enthusiasts.

R

RTE - RESEAU DE TRANSPORT D' ELECTRICITE

fondation-rte.org

53

Fondation RTE pour les ruralités is a French non-profit foundation established in 2008 by RTE - RESEAU DE TRANSPORT D' ELECTRICITE, focused on supporting social cohesion and development in rural areas of metropolitan France. The foundation provides financial grants and human support to local initiatives, positioning itself as a key player in rural development with over 17 years of activity and significant funding impact. The website serves as an information hub and project submission portal for stakeholders and beneficiaries. Technically, the site is built on Drupal 10 with Bootstrap 5, integrates Matomo for analytics, and uses tarteaucitron for cookie consent management, reflecting a modern and privacy-conscious digital infrastructure. Security posture is solid with HTTPS enforcement, captcha on contact forms, and privacy compliance, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with the foundation's mission and parent organization.

B

BESIX RED

besixred.com

69

BESIX RED is a well-established real estate development company founded in 2004 and operating primarily in Belgium and other European countries. The company focuses on sustainable and ambitious real estate projects including residential, office, and mixed-use developments. Their market position is strong with a clear emphasis on ESG commitments and architectural excellence. Technically, the website is built on Drupal 10 with modern libraries and APIs, providing a responsive and accessible user experience. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding more security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a credible and professional business with strong digital maturity.

B

Beroepsinstituut van Vastgoedmakelaars

ipi.be

63

The Beroepsinstituut van Vastgoedmakelaars (BIV) is the official professional institute and regulatory authority for real estate brokers in Belgium. The website serves as a comprehensive resource for brokers and the public, offering information on certification, education, complaint procedures, and sector integrity. The site is well-branded, professionally designed, and provides clear navigation and relevant content tailored to its audience. Technically, it is built on Drupal 10 with modern web technologies and includes privacy and cookie compliance mechanisms. Security posture is good with HTTPS and secure forms, though some HTTP security headers and explicit security policies are absent. WHOIS data is restricted, which is typical for .be domains, but the website content and branding strongly support legitimacy. Overall, the site is a trustworthy and authoritative source for real estate brokerage regulation in Belgium.

A

Australian Institute of Aboriginal and Torres Strait Islander Studies

aiatsis.gov.au

63

The Australian Institute of Aboriginal and Torres Strait Islander Studies (AIATSIS) is Australia's sole national institution dedicated to the history, culture, and heritage of Aboriginal and Torres Strait Islander peoples. It operates as a government-funded entity providing extensive research, educational resources, and cultural heritage services. The website reflects a strong market position as a trusted custodian and leader in Indigenous Australian studies, targeting researchers, educators, Indigenous communities, and the general public. Key services include family history research support, collection access, educational curriculum resources, and cultural heritage repatriation programs. Technically, the website is built on Drupal 10 with modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting details are not explicitly stated but the domain is managed by the Australian Department of Finance with DNS via netregistry.net. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses Content Security Policy nonces to mitigate script injection risks. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism or published vulnerability disclosure policy. The WHOIS data confirms the domain is registered to a legitimate government entity with domain status protections, enhancing trustworthiness. Overall, AIATSIS's website is professional, content-rich, and secure, with minor gaps in privacy compliance and vulnerability disclosure. It serves as a reliable digital platform for Indigenous cultural and research engagement in Australia.

The Australian Government Department of Health, Disability and Ageing operates as the national authority for health and aged care policy and services in Australia. The website serves as a comprehensive resource for public health information, government programs, and policy updates, targeting a broad audience including the general public, health professionals, and industry stakeholders. The department holds a strong market position as a government entity with authoritative content and trusted branding. Technically, the website is built on Drupal CMS with govCMS, leveraging modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. Hosting and infrastructure appear robust and aligned with government standards. From a security perspective, the site enforces HTTPS and follows best practices with secure forms and privacy policies. While explicit security headers are not visible in the HTML, it is likely they are configured server-side. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear policies and a vulnerability disclosure program. Overall, the website presents a low risk profile with high trustworthiness and professionalism. It effectively supports the department's mission to provide health information and services to Australians. Strategic recommendations include verifying security headers and maintaining up-to-date CMS components to sustain security posture.

V

Vzw Martine Van Camp

martinevancamp.be

51

Vzw Martine Van Camp is a well-established non-profit organization based in Belgium, founded in 2000, providing specialized care and support services to persons with disabilities. Their service offerings include day support, guided work, residential support, short-term stays, home guidance, and directly accessible help. The organization is officially recognized and subsidized by the Flemish Agency for Persons with Disabilities, positioning it as a trusted regional care provider. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on Drupal 10 with Bootstrap and integrates Google Tag Manager for analytics, showing a moderate to good level of digital maturity and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policies. Overall, the site is trustworthy, safe, and compliant with GDPR requirements, though it lacks some advanced security and incident response disclosures.

G

Gambling Help Online

gamblinghelponline.org.au

58

Gambling Help Online is a non-profit Australian service providing free, anonymous, and 24/7 support for individuals affected by gambling. The website offers immediate help, local support services, self-help resources, and a community forum, positioning itself as a trusted resource in the gambling support sector in Australia. The site is built on Drupal 10 CMS, leveraging modern web technologies such as Font Awesome and Google Tag Manager for analytics and tracking. The design is professional, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. WHOIS data is unavailable due to query failure or privacy protection, which is common for such organizations. Overall, the site is trustworthy and serves its target audience effectively but should improve privacy and cookie policy transparency to enhance compliance and user trust.

V

Vlaams Agentschap voor Personen met een Handicap (VAPH)

vaph.be

64

VAPH (Vlaams Agentschap voor Personen met een Handicap) is a Flemish government agency dedicated to supporting persons with disabilities through funding, services, and guidance. The website serves as an official portal for citizens, caregivers, and professionals in Flanders, providing comprehensive information and access to services. The site is built on Drupal 10 and integrates Matomo analytics for user tracking, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although some security policy and incident response information could be more explicit. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the website is professional, trustworthy, and serves its public sector mission effectively.

B

Beroepsinstituut van Vastgoedmakelaars

biv.be

65

The Beroepsinstituut van Vastgoedmakelaars (BIV) is the official professional institute and regulatory body for real estate brokers in Belgium. It focuses on ensuring integrity, professionalism, and compliance within the real estate sector by providing certification, training, complaint handling, and knowledge dissemination. The website serves as a comprehensive resource for brokers, trainees, and the public, offering detailed information on becoming a broker, ethical guidelines, and complaint procedures. The organization maintains a strong market position as the authoritative entity overseeing real estate professionals in Belgium. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. Privacy and cookie policies are prominently available, demonstrating good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no advanced security headers or explicit security policies were detected, and no vulnerability disclosure or incident response contacts are published. The WHOIS data for the domain is restricted, limiting transparency about domain ownership, which slightly impacts trust but is common for .be domains. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the BIV, with minor recommendations to enhance security posture and transparency to further strengthen trust and compliance.

U

UCLL

ucll.be

74

UCLL is a large higher education institution in Belgium serving approximately 15,000 students across multiple campuses. The website presents a professional and comprehensive digital presence built on Drupal 10, integrating modern analytics and consent management tools. The institution offers a variety of educational programs including professional bachelor degrees, graduaat, postgraduaat, and student support services. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response information is noted. WHOIS data is restricted, which slightly reduces transparency but does not detract from the overall legitimacy of the site. The site complies with GDPR and provides clear privacy and cookie policies with consent mechanisms.

D

Dooleys Club - Lidcombe

dooleys.com

59

DOOLEYS Club - Lidcombe is a well-established social and entertainment club located in Sydney's West, Australia. The club offers a variety of services including dining, entertainment events, membership benefits, and community activities. It positions itself as a key local hospitality venue with ongoing development projects to enhance its facilities. The website is professionally designed with excellent content quality and consistent branding, targeting local community members and club patrons. Technically, the site is built on Drupal 10 with modern web technologies and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and accessible, providing a good user experience. Security-wise, the site enforces HTTPS and uses secure forms but lacks some recommended security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data for the domain is unavailable, which slightly reduces trust but the overall site professionalism and content suggest legitimate business operations. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving domain registration transparency.

The Digital Transformation Agency (DTA) is an Australian government agency dedicated to improving the delivery and experience of government digital services. It provides strategic leadership, guidance on government architecture, oversight of digital and ICT investments, and advisory services to government agencies. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design consistent with government standards. The target audience includes government agencies and the Australian public seeking information on digital government initiatives. Technically, the site is built on Drupal 10 with GovCMS, leveraging modern analytics tools such as Google Analytics and Matomo, and employs Google Tag Manager for marketing and tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Performance is moderate, with room for optimization in loading speed. From a security perspective, the site enforces HTTPS and publishes relevant security and privacy policies, including a vulnerability disclosure policy. While explicit security headers are not detected, no vulnerabilities or exposed sensitive data were found. The WHOIS data, though limited, aligns with official Australian government domain registration practices, supporting the site's legitimacy and trustworthiness. Overall, the DTA website presents a low-risk profile with strong business credibility and a solid security posture. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, publishing security certifications, and providing data protection officer contact details to further strengthen compliance and trust.

The Department of Finance website serves as the official portal for the Australian Government's finance department, providing extensive resources on government financial management, procurement, grants, and governance policies. It targets government officials, businesses, and individuals interacting with government financial services, positioning itself as a primary authoritative source in the Australian public sector finance domain. The website is built on a modern Drupal 10 CMS with GovCMS framework, leveraging Bootstrap for responsive design and integrating analytics tools such as Matomo and Google Analytics with privacy-conscious configurations like IP anonymization. Security measures include HTTPS enforcement and multiple security headers, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly detailed, suggesting an area for improvement. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO, with a high legitimacy score based on domain registration and content quality.