Security Directory

D

DPC Partai Demokrat Bantuan untuk Korban Bencana

dpcdemokratpidie.id

58

The website dpcdemokratpidie.id represents the local branch of the Democratic Party in Pidie, Indonesia, focusing on humanitarian aid for disaster victims. It provides information about aid distribution and community support, positioning itself as a responsive political entity in the region. The site is built on WordPress with a standard theme and uses Cloudflare for DNS and CDN services. The technical infrastructure is modern and supports mobile responsiveness and SEO best practices. Security posture is adequate with HTTPS and domain transfer lock enabled, but lacks DNSSEC and advanced security headers. Privacy and cookie policies are absent, indicating compliance gaps. No direct contact information or incident response details are provided, which may affect user trust and regulatory compliance. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

P

Portal Harian OKU Selatan – Aktual, Lokal, dan Kritis

harianokuselatan.id

56

Portal Harian OKU Selatan is a local Indonesian news portal focused on delivering current and critical news with a local perspective. The website primarily serves the community interested in regional news and social issues, providing regularly updated articles about social services and government activities. The site is built on WordPress and uses Cloudflare DNS services, indicating a modern but basic technical infrastructure. The content quality is good with clear navigation and mobile optimization, but lacks formal privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data shows an unusual future creation date, which may be a data anomaly but should be monitored. Overall, the site is accessible without WAF or blocking mechanisms and presents a professional local news media presence.

B

Bapera Kepulauan Riau

bapera-kepulauanriau.id

56

Bapera Kepulauan Riau is a youth organization active in the Kepulauan Riau region of Indonesia, focusing on youth development, social activities, and community service. It operates as part of the larger Barisan Pemuda Nusantara (Bapera) movement, aiming to foster nationalism, creativity, and environmental awareness among young people. The website serves as an informational platform with articles related to environmental and governmental agencies across Indonesia, reflecting a commitment to community engagement and education. Technically, the site is built on WordPress with standard plugins like Yoast SEO and uses Cloudflare for DNS services. The site is moderately optimized for performance and mobile use, with good SEO practices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing key security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps. The domain WHOIS data shows inconsistencies with a future creation date, which raises questions about registration legitimacy. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

D

Disciples-Escoffier Indonesia

disciples-escoffier.id

52

Disciples-Escoffier Indonesia is a professional culinary organization dedicated to developing the skills of chefs and gastronomic practitioners in Indonesia. The organization focuses on education, training, and hosting the Young Talents Escoffier competition to promote young Indonesian culinary talents nationally and internationally while preserving the culinary heritage of Auguste Escoffier. The website is built on WordPress with a modern tech stack including Bootstrap and Google Fonts, hosted behind Cloudflare DNS. The site is accessible and well-structured with good SEO optimization but lacks explicit privacy, cookie, and terms of service policies. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data shows inconsistencies with a future creation date, which raises concerns about registration legitimacy. Overall, the website is professional and safe for general audiences but requires improvements in privacy compliance and security best practices.

I

Internationales Zentrum der Traditionellen Bewässerung in Europa (IZTB)

iztb.ch

50

The Internationales Zentrum der Traditionellen Bewässerung in Europa (IZTB) is a small, non-profit organization dedicated to the preservation, research, and promotion of traditional irrigation practices as cultural heritage across Europe. The organization operates primarily from Switzerland and collaborates with various European partners, including local governments and cultural institutions. Their website reflects a focused mission with relevant content, event information, and educational resources targeted at researchers, local stakeholders, and cultural heritage enthusiasts. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. The site is well-structured, mobile-optimized, and uses HTTPS with CSRF protections, though it lacks some advanced security headers and cookie consent mechanisms. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of a formal security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security governance and transparency. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's cultural heritage mission. Strategic enhancements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

G

Gemeinde Pfaffnau

pfaffnau.ch

72

Gemeinde Pfaffnau operates as the official municipal government website for the Pfaffnau community in Switzerland, providing a broad range of administrative and public services including online service portals, political information, social services, safety resources, economic data, and leisure activities. The website targets local residents and stakeholders, positioning itself as a trusted source of municipal information and services. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on the Swiss GOViS eGovernment CMS platform, utilizing modern JavaScript libraries such as jQuery, Flickity, and Magnific Popup to enhance user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy and cookie consent mechanisms are robustly implemented, reflecting compliance with GDPR and Swiss data protection standards. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit HTTP security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal entity, supporting a high trust level. Overall, the website presents a professional, secure, and privacy-conscious digital presence appropriate for a local government entity. Strategic recommendations include enhancing security headers, publishing a security policy and vulnerability disclosure framework, and maintaining up-to-date third-party libraries to further strengthen security posture.

K

Kanton Luzern

lu.ch

65

The website www.lu.ch serves as the official digital portal for the Canton of Luzern, Switzerland. It provides comprehensive information about the cantonal government, parliament, administration, municipalities, courts, and citizens' rights. The site also offers news updates, digital services through the my.lu.ch portal, and access to statistical and geographic data. It targets residents, government officials, businesses, and tourists within the region, positioning itself as the authoritative source for cantonal governance and public services. Technically, the website employs a modern technology stack including jQuery, VideoJS, Moment.js, Slick Slider, and CookieConsent for user experience and compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly. It uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. Analytics are conducted via Piwik (Matomo), ensuring moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit visible security headers such as CSP or X-Frame-Options in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered to the official government entity, enhancing trust and legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government entity. Recommendations include enhancing security headers, publishing a security policy and incident response contact, and considering a security.txt file for vulnerability disclosures to further strengthen security posture.

P

Proba AS

proba.no

10

Proba AS is a Norwegian analysis and consultancy company specializing in the welfare sector, providing research and advisory services to public sector clients and welfare organizations. The company has an established market presence since 2013, focusing on delivering relevant knowledge with professional depth and engagement. The website is built on WordPress with a modern theme and plugins, reflecting a moderate level of digital maturity with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and published privacy or incident response policies indicates room for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced compliance documentation and security best practices.

B

B2P Connect

transroad-connect.com

60

B2P Connect operates a professional blog focused on the transport and logistics industry, primarily targeting French-speaking professionals. The website provides industry news, updates on digital solutions, recruitment information, and partnership announcements. The blog is well-structured, uses modern SEO techniques including Yoast SEO and JSON-LD structured data, and maintains a consistent brand presence with active social media links. Technically, the site is built on WordPress with common plugins for analytics and GDPR compliance, showing moderate digital maturity. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though explicit privacy and terms of service pages are missing, and security headers are not detected. The WHOIS data for the subdomain is unavailable, which is typical, but reduces transparency slightly. Overall, the site is a credible and professional resource within its niche.

G

Groupe Sarrion

sarrion-transports.fr

51

Groupe Sarrion is a well-established French transport and logistics company with a history dating back to 1947. It operates a large network of 27 agencies and subsidiaries across France, employing approximately 1300 people. The company offers a broad range of specialized transport services including general cargo, container transport, exceptional transport, bulk transport, hydrocarbon transport, waste management, and logistics solutions. Their market position is that of a significant player in the French transportation sector, emphasizing quality service and environmental responsibility. Technically, the website is built on WordPress with modern front-end libraries and plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and GDPR compliance evident through comprehensive privacy and cookie policies, as well as a whistleblower alert system. However, the absence of WHOIS registration data and lack of explicit security headers represent areas for improvement. Overall, the website is professional, trustworthy, and compliant, supporting the company's credibility and operational transparency.

G

Groupe Vigneron

transports-vigneron.fr

62

Groupe Vigneron is a medium-sized French transport and logistics company with a history dating back to 2004 as a domain and 70 years of corporate experience. The group specializes in road transport, multimodal logistics including rail and river transport, and industrial transport solutions. Their market position is strong regionally in Lorraine and nationally in France, supported by multiple subsidiaries and a professional online presence. Technically, the website is built on WordPress with modern SEO and caching plugins, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though lacking explicit security headers and published security policies. Privacy compliance is good with cookie consent and privacy policy in place. Overall, the website reflects a credible and professional business with room for security enhancements.

T

TRINTEC Informatik GmbH

trintec.ch

48

TRINTEC Informatik GmbH is a Swiss-based IT services company specializing in consulting, sales, installation, and support of IT solutions including PCs, servers, networks, hosting, and Digitalstrom systems. The company targets both businesses and private individuals, positioning itself as a professional provider of comprehensive IT solutions. The website reflects a small-sized, regionally focused business with a consistent brand presence and clear contact information. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and Bootstrap, with modern fonts and Google Tag Manager for analytics. Mobile optimization is good, though accessibility and SEO could be improved. Security posture is solid with HTTPS and CSRF tokens but lacks important security headers and a published security policy. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could enhance compliance and security practices.

G

Gemeinde Raperswilen

raperswilen.ch

58

Gemeinde Raperswilen operates as the official municipal government website for the community of Raperswilen, Switzerland. It provides residents and visitors with comprehensive information about local government, community services, news, events, and digital administrative services (eServices). The website is positioned as a trusted local government portal, serving a small community with essential public services and transparent communication. Technically, the website is built on the GOViS Swiss eGovernment CMS platform, utilizing modern JavaScript libraries such as jQuery and Font Awesome for UI enhancements. It implements a cookie consent mechanism compliant with GDPR, and uses Matomo analytics configured for privacy. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit HTTP security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, confirming legitimacy and trustworthiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing HTTP security headers and publishing security policies to further strengthen trust and security posture.

G

Gemeinde Kemmental

kemmental.ch

68

Gemeinde Kemmental operates as a municipal government portal serving the residents and stakeholders of the Kemmental community in Switzerland. The website provides comprehensive information about local governance, administrative services, political activities, community life, and upcoming events. It positions itself as an essential public service platform with a focus on accessibility and user engagement through online services such as the Online-Schalter. Technically, the site leverages modern web technologies including jQuery, Font Awesome, and the GOViS CMS tailored for eGovernment solutions, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and privacy compliance demonstrated through a detailed privacy policy and cookie consent mechanism. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and well-aligned with its public service mission.

G

Gemeindeverwaltung Gottlieben

gottlieben.ch

61

The website www.gottlieben.ch serves as the official digital presence of the municipality of Gottlieben in Switzerland. It provides comprehensive information about local government, politics, administration, cultural events, and public services aimed at residents, local businesses, and visitors. The site is well-structured with clear navigation and a consistent branding approach, reflecting its role as a trusted government resource. Technically, the website employs a modern technology stack including jQuery, Font Awesome, Magnific Popup, and Matomo analytics, built on the GOViS CMS platform. It demonstrates good mobile optimization and accessibility features, ensuring usability across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Matomo with secure cookie settings, but lacks several recommended security headers and a visible cookie consent mechanism. There is no published security policy or incident response contact, which could be improved to enhance trust and compliance. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a reliable and professional government portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security policies would further strengthen its posture and user trust.

P

Prakasita Sekar Mataram

prakasitasekarmataram.id

53

PT Prakasita Sekar Mataram is a small Indonesian company specializing in the production of traditional herbal medicines (jamu), botanical drinks, and natural cosmetics rooted in Javanese cultural philosophy. The company emphasizes natural ingredients and modern production standards to deliver safe and environmentally friendly health and beauty solutions. The website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Yoast SEO, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is well-structured, mobile-optimized, and SEO-friendly but lacks critical privacy and security policy disclosures. No contact emails or phone numbers are provided, limiting direct communication channels. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the site is accessible, content-rich, and safe for general audiences but would benefit from enhanced privacy compliance and security practices.

K

Kampus Tutor Indonesia

kampustutor.id

54

Kampus Tutor Indonesia operates as an educational platform connecting students and tutors with flexible, personalized learning services both online and offline. The website presents a professional and content-rich environment targeting Indonesian students and learners. Technically, the site is built on WordPress with modern libraries and plugins, hosted behind Cloudflare DNS, and optimized for mobile devices. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. The WHOIS data shows inconsistencies, including a future domain creation date and a registrant organization unrelated to the brand, which raises some trust concerns. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional and trustworthy for educational purposes but requires improvements in security and privacy transparency.

R

Radio Komunitas Lintas Subayang

rakomlintassubayang.id

56

Radio Komunitas Lintas Subayang is a community radio station dedicated to serving the local residents of Subayang, Indonesia, by broadcasting local news, cultural content, and community information. The website positions itself as a voice and communication bridge for the local community, emphasizing cultural preservation and social solidarity. The business model revolves around community engagement and local media services, targeting a small local audience. The website is relatively new, matching the domain registration date in 2025, and reflects a small-sized media entity with a focus on local impact. Technically, the website is built on WordPress 6.8.3, utilizing common plugins such as Yoast SEO for search engine optimization and jQuery for scripting. The site is hosted behind Cloudflare DNS servers, indicating some level of infrastructure robustness. The site shows moderate performance and good mobile optimization, with basic accessibility features. SEO is well addressed through meta tags and structured data (JSON-LD). From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance and user transparency. No contact information or incident response channels are provided, limiting user trust and security reporting capabilities. No advertising or tracking technologies are detected, suggesting minimal user tracking. Overall, the website is functional and professionally presented for its purpose but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence. The domain registration is consistent with the business age and location, supporting legitimacy. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and providing clear contact and incident response information.

R

RSPAL dr. Ramelan Surabaya Layanan Medis Profesional Dan Modern

rsalramelansby.id

54

RSPAL dr. Ramelan Surabaya is presented as a professional and modern Type A Indonesian Navy hospital offering medical services to both military personnel and the general public. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and is hosted behind Cloudflare DNS. The site features good design quality, mobile optimization, and SEO practices, but lacks critical privacy and cookie policies as well as explicit contact information. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data raises concerns due to its recent creation date and registrant being a registrar company rather than the hospital entity, which impacts trustworthiness. Overall, the site is accessible, safe, and professionally presented but requires improvements in compliance and security transparency.

R

RKU FM Radio Lokal Terpercaya di Kayong Utara

rkufm.id

52

RKU FM Radio Lokal Terpercaya di Kayong Utara is a small local media business operating a radio station at 101.5 FM and providing news and entertainment content primarily for the Kayong Utara community in Indonesia. The website is built on WordPress and uses common plugins such as Yoast SEO and jQuery, indicating a standard modern CMS infrastructure. The site is accessible, mobile-optimized, and provides regularly updated news articles, but lacks key compliance documents such as privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. WHOIS data shows inconsistencies with a future domain creation date and registrant information pointing to a registrar rather than the business, which raises some trust concerns. Overall, the website is functional and professional but would benefit from improved compliance and security practices.

M

Menjelajahi Keajaiban Geologi Kebumen Geopark

kebumengeopark.id

58

The Kebumen Geopark website serves as an official informational platform promoting the geological wonders and cultural heritage of Kebumen, Indonesia. It targets tourists, educators, researchers, and local communities interested in geoscience and cultural preservation. The site is built on WordPress with SEO optimization and Cloudflare DNS, indicating a modern but small-scale digital infrastructure. While the site is well-structured and content-rich, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust. The domain is newly registered but consistent with the website's launch timeline, and no suspicious WHOIS patterns are detected. Overall, the site is a credible government-related informational resource with room for improvement in security and privacy compliance.

D

Dishub Kaltim – Dinas Perhubungan Provinsi Kalimantan Timur

dishubkaltim.id

52

Dishub Kaltim is the official government transportation department for East Kalimantan Province, Indonesia, managing and overseeing transportation to support safe, comfortable, and efficient mobility in the region. The website is built on WordPress with Yoast SEO and uses Cloudflare DNS services. The content is rich and informative, focusing on government initiatives and social services, targeting local citizens and stakeholders. However, the domain WHOIS data shows a future creation date inconsistent with the content timeline, suggesting this may be a staging or test environment. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. No privacy or cookie policies are present, and no contact information is provided, which impacts compliance and trust. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and domain legitimacy to enhance trustworthiness.

K

KampusPenerbangan.id – Pusat Pendidikan Pelatihan Penerbangan Terpercaya

kampuspenerbangan.id

52

KampusPenerbangan.id is an Indonesian educational website specializing in aviation training and professional development. The site positions itself as a trusted center for aviation education, targeting students and professionals seeking to enter or advance in the aviation sector. The business appears to be newly established in 2025, consistent with the domain registration date. The website uses WordPress with Yoast SEO for content management and optimization, hosted behind Cloudflare DNS services. The technical infrastructure is modern and functional, with good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the website is professional and safe but would benefit from enhanced compliance and security measures.

S

STIKes Bani Saleh Cerdas, Terampil, Berintegritas

stikesbanisaleh.id

45

STIKes Bani Saleh is a newly established higher education institution in Indonesia specializing in health sciences. The website presents a professional and modern digital presence built on WordPress, featuring a modern curriculum and professional faculty aimed at preparing students for medical challenges. The institution targets students and healthcare professionals within Indonesia, positioning itself as a regional educational provider with a focus on competence and integrity. Technically, the website uses standard WordPress technologies with SEO optimization but lacks advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled and Cloudflare DNS usage, but absence of DNSSEC and security policies reduces overall security maturity. No privacy or cookie policies are published, and no contact information is provided, which impacts trust and compliance. Overall, the website is functional and professional but requires improvements in security and privacy transparency.

K

kalijaga.id

kalijaga.id

43

kalijaga.id is a small-scale informational website focused on the historical and cultural figure Sunan Kalijaga, a prominent Wali Songo in Indonesia. The site provides articles and news related to social services and government institutions, targeting a general Indonesian audience interested in cultural heritage and social information. The website is built on WordPress with a modern theme and uses common web technologies such as jQuery, Slick Slider, and FontAwesome. It is hosted behind Cloudflare DNS but lacks DNSSEC and security headers, which are recommended for enhanced security. The site does not provide privacy, cookie, or terms of service policies, nor does it offer contact information or incident response details, which limits its privacy compliance and business credibility. WHOIS data shows inconsistencies, including a domain creation date in the future, which reduces trust in domain registration legitimacy. Overall, the website is accessible, well-structured, and safe for general audiences but would benefit from improved security practices and compliance documentation.

P

Palma Pertiwi Makmur Indonesia

palmapertiwimakmur.id

55

Palma Pertiwi Makmur Indonesia is an Indonesian agribusiness company specializing in sustainable palm oil plantation management. The website serves as an informational platform providing news and updates related to agribusiness and social government topics. Technically, the site is built on WordPress with modern plugins like Yoast SEO and uses Cloudflare for DNS services, though DNSSEC is not enabled. The security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, and no direct contact information is provided, which impacts trust and compliance. Overall, the site is professionally designed with good content relevance but requires improvements in privacy compliance and security best practices.

M

Mukarrama Ismail Indonesia

mukarramaismail.id

55

Mukarrama Ismail Indonesia operates an educational blog focused on inspiring innovation in teaching and learning within Indonesia. The website provides articles and digital content aimed at educators and students to promote interactive and modern educational practices. The business is positioned as a niche content creator in the education sector with a small organizational size and a recent founding date in 2025. Technically, the website is built on WordPress with common plugins like Yoast SEO and uses Cloudflare for DNS and CDN services. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is provided, which limits trust and compliance. The domain registration is recent and somewhat inconsistent with content dates, warranting monitoring. Overall, the website is professional and safe but requires improvements in privacy, security headers, and contact transparency.

S

Syiah Kuala Indonesia

syiahkuala.id

52

Syiah Kuala Indonesia operates as a small-scale informational and educational platform focused on Islamic knowledge, moderate preaching, and community empowerment within Indonesia. The website serves as a content hub inspired by the legacy of a prominent Nusantara Islamic scholar, targeting a general Indonesian audience interested in religious and cultural development. Technically, the site is built on WordPress with modern plugins like Yoast SEO and uses Cloudflare DNS for hosting and security. The site demonstrates good design quality, mobile responsiveness, and SEO optimization but lacks critical privacy and cookie policies, as well as explicit contact information, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and legitimate, matching the website's recent launch and content timeline.

I

InversiSumut – Wadah Informasi dan Berita Sumut

inversisumut.id

52

InversiSumut is a newly established Indonesian regional news platform focused on providing comprehensive information and updates about investment, economy, and business developments in Sumatera Utara. The website targets local business actors, investors, and the general public interested in regional economic growth. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses Cloudflare for DNS and likely CDN services. The site demonstrates good content quality and user experience with a mobile-optimized design and clear navigation. However, the domain is very new, which may affect perceived trustworthiness. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. No contact information or incident response details are published, limiting transparency. Overall, the site is functional and relevant but requires improvements in security and compliance to enhance trust and resilience.

G

Golfclub Wylihof

golfclub.ch

47

Golfclub Wylihof is a well-established Swiss golf club offering a 27-hole championship course, practice facilities, a restaurant, golf school, and shop. The club targets golf enthusiasts, members, and corporate clients in the Swiss Mittelland region. The website is built on WordPress with modern plugins supporting multilingual content, SEO, and user engagement. The club demonstrates commitment to sustainability through recognized certifications. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers and incident response details are missing. Privacy compliance is addressed with a cookie consent banner and privacy policy. Overall, the site is professional, trustworthy, and serves its audience effectively.

P

Pixel-Puls Grafikdesign Werbemittel aus Herrenberg

pixel-puls.de

72

Pixel-Puls is a small German graphic design business based in Herrenberg, specializing in creative and professional graphic design services including logo creation, print media, wedding marketing, and web design. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. The site is well-designed, mobile-optimized, and provides a clear navigation structure, although it lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS and GDPR cookie compliance, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and professional, serving local clients with a focus on quality and transparency.

K

Kompetenzzentrum Soziale Dienste Seerücken

sdseeruecken.ch

67

Kompetenzzentrum Soziale Dienste Seerücken is a regional government entity providing social services to the communities in the Seerücken area of Switzerland. The website serves as an information hub for residents, offering news, service descriptions, and contact details. It maintains a professional and accessible design, supporting multiple municipalities with links to partner sites. The technical infrastructure includes modern JavaScript libraries such as jQuery and Font Awesome, and it is built on the GOViS CMS platform. The site is mobile-optimized and implements accessibility best practices. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Analytics are handled via Matomo, emphasizing privacy. However, the site lacks explicit security policy and incident response contact pages, which could enhance trust and preparedness. Overall, the site is trustworthy, well-maintained, and suitable for its public service role.

B

B2PWeb

b2pweb.com

63

B2PWeb is a well-established French freight exchange platform that connects transporters and freight forwarders, facilitating efficient freight matching and logistics operations. The company behind the platform, B2P, has a long history since 2006 and offers a suite of supply chain solutions including document management and recruitment services. The website is professionally designed, mobile-optimized, and rich in relevant content targeting transport professionals. Technically, the site runs on WordPress with modern plugins and analytics tools like Matomo, ensuring good SEO and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the professional presentation and partner endorsements. Overall, B2PWeb presents a credible and mature digital presence in the transportation sector.

U

UNIFAB - Union des Fabricants

unifab.com

46

UNIFAB - Union des Fabricants is a French non-profit association dedicated to the protection of intellectual property and the fight against counterfeiting. The organization provides consumer awareness campaigns, collaborates with customs and law enforcement, and publishes reports to support its mission. The website is professionally designed, primarily in French, and targets consumers, members, and stakeholders interested in intellectual property protection. The business model is focused on advocacy and education rather than commercial sales. Technically, the website is built on WordPress with WooCommerce, uses modern JavaScript libraries, and integrates analytics tools such as Google Tag Manager and Piwik PRO. The site is mobile-optimized and SEO-friendly, with structured data implemented for enhanced search visibility. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA for forms, but lacks explicit security headers in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain www.unifab.com raises concerns about domain registration transparency, which impacts overall trustworthiness. Privacy policy is present and GDPR compliant, but no cookie consent mechanism was found. Overall, the website is functional, secure, and professional, but domain registration opacity and limited contact information reduce business credibility.

V

Viakom

viakom.cloud

49

Viakom is a German technology company specializing in modular, open-source-based digital solutions focused on cloud providing, service providing, and infrastructure providing. The company targets business and public sector clients seeking digital sovereignty and tailored IT solutions. Their website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern plugins and analytics integration. Security posture is good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present, indicating room for improvement in compliance and transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

C

Creanet Internet Service AG

creanet.ch

77

Creanet Internet Service AG is a Swiss-based web agency specializing in web design, IT security, cloud solutions, and digital signage, primarily serving the regions of Luzern, Sursee, Zug, Basel, and Zürich. The company positions itself as a regional expert offering tailored IT and web services to small and medium-sized enterprises, emphasizing project planning, execution, and ongoing support. Their service portfolio includes web development, SEO, online marketing, IT security solutions such as ESET and SonicWALL, and cloud services, supported by a professional and user-friendly digital presence. Technically, the website is built on the CONTENS CMS platform and leverages modern web technologies including jQuery, Flickity for carousels, and Lottie for animations. Analytics are implemented via Google Analytics and Matomo, with a robust cookie consent mechanism powered by CookieHub, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. While explicit security headers are not evident, the company promotes IT security services and uses reputable security products. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Creanet Internet Service AG presents a professional, trustworthy, and well-structured online presence with strong regional market positioning. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility standards to further strengthen their security posture and compliance.

Holz-Zentralblatt is a leading German trade magazine specializing in forestry and the wood industry, operated by DRW-Verlag. It offers professional news, premium articles, classifieds, and event information targeting industry professionals. The website is built on WordPress with a modern plugin ecosystem supporting content management, advertising, and GDPR-compliant cookie consent. The site demonstrates good digital maturity with mobile optimization and privacy-conscious analytics via Matomo without cookies. Security posture is solid with HTTPS enforced and cookie management in place, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and compliant with European privacy regulations.

T

Transportez-Vous Bien

transportezvousbien.fr

55

Transportez-Vous Bien is a French health prevention program specifically designed for non-executive employees in the transport sector. Managed by Carcept Prévoyance, it offers a range of free health-related services including coaching, workshops, and support to improve employee well-being. The website is professionally designed, content-rich, and targets both employees and transport companies. It leverages WordPress CMS with modern plugins and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the business legitimacy is supported by detailed content and partner references.

U

Uptown – Verein für Musik, Kunst, Kultur und Gesellschaft

vereinuptown.ch

68

Uptown is a small non-profit association based in Basel, Switzerland, focused on promoting music, art, culture, and society. Founded in 2020 during the COVID-19 pandemic, it aims to strengthen cultural infrastructure and support cultural creators in the Basel region, particularly around the Kaschemme venue. The website is built on WordPress and presents a professional design with clear navigation and relevant content about projects, support, and partners. Technically, the site uses modern web technologies but lacks some advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing security policies and headers. No forms or tracking scripts are present, indicating minimal data collection and user tracking. Overall, the site is trustworthy and serves its community purpose well but would benefit from enhanced privacy and security measures.

B

Bayerische Mykologische Gesellschaft

pilze-bayern.de

63

The Bayerische Mykologische Gesellschaft (BMG e.V.) is a regional non-profit organization dedicated to the research and education of native mushrooms in Bavaria, Germany. Their website serves as an informational platform targeting mushroom enthusiasts, mycologists, and the general public interested in mycology. The organization focuses on mushroom consulting, research, and training mushroom consultants, positioning itself as a specialized entity within the regional scientific and educational community. Technically, the website is built on WordPress 6.8.3 using the Astra theme and several plugins including Yoast SEO and Smart Slider 3, indicating a modern and maintainable infrastructure. The site is mobile-optimized and employs SEO best practices, although some accessibility features are basic. Performance is moderate, with no major issues detected. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent banner, but lacks explicit security headers and detailed privacy or security policies. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and compliance. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is a well-structured, professional platform for a small non-profit organization with moderate security and privacy compliance. Strategic improvements in security headers, explicit privacy policies, and contact information would enhance its trustworthiness and compliance posture.

G

Gemeinde Turbenthal

turbenthal.ch

68

Gemeinde Turbenthal operates as the official municipal government website for the Turbenthal community in Switzerland, providing residents and visitors with access to local government services, community news, events, and administrative information. The site is well-positioned as a trusted local authority with a focus on energy sustainability, as evidenced by its Energiestadt Gold certification. The website targets local residents and stakeholders seeking municipal services and information.

C

Collettivo A/I

noblogs.org

55

NoBlogs.org is a niche, non-commercial blogging platform focused on radical activism, privacy, and social justice. Operated by the Collettivo A/I, it provides a space for activists and like-minded individuals to communicate and publish content without commercial influence. The platform is multilingual and emphasizes privacy and antifascist, antisexist values. Technically, the site runs on WordPress with a modern but modest tech stack, hosted by autistici.org, a known activist collective. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced DNS security and published security policies. Privacy compliance is good with a clear cookie banner and privacy policy, though no terms of service or incident response information is provided. Overall, the site is trustworthy and well-aligned with its mission but could improve in security transparency and technical hardening.

B

Bundesministerium für Wirtschaft und Energie

energieforschung.de

49

The website energieforschung.de is an official German government platform managed by the Bundesministerium für Wirtschaft und Energie (Federal Ministry for Economic Affairs and Energy). It serves as an information hub for project funding and research initiatives within the energy sector, focusing on applied energy research and the energy transition. The site targets researchers, energy sector stakeholders, policymakers, and the general public interested in energy innovation and funding opportunities. It provides comprehensive content including news, project funding details, research missions, and networking events, positioning itself as a key resource in Germany's energy research landscape. Technically, the website employs a modern yet stable technology stack including jQuery, Bootstrap, Slick Carousel, and Matomo analytics configured with privacy-conscious settings (cookies disabled). The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and Open Graph tags. Hosting appears to be on German research and education network infrastructure, consistent with its governmental nature. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, energieforschung.de demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government research information portal. Strategic improvements could include publishing formal security policies, enhancing HTTP security headers, and providing direct contact information for security incidents to further strengthen trust and security posture.

Dieter Gölsdorf's website serves as a comprehensive personal and professional history archive focusing on guitar design and related music industry stories spanning from 1964 to the present. The site targets guitar enthusiasts and music professionals interested in the legacy and contributions of Dieter Gölsdorf, featuring detailed narratives, publications, and multimedia content. The business model appears to be centered on personal branding and historical documentation rather than direct commercial sales. Technically, the website employs a straightforward tech stack with jQuery and custom CSS, hosted on kasserver.com. The site is moderately optimized for performance and mobile use but lacks advanced CMS or modern frameworks. SEO and accessibility are basic but functional. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which lowers its security posture and privacy compliance. No contact information or incident response channels are provided, limiting user trust and support capabilities. The site content is safe and suitable for general audiences, with no adult or explicit material. Overall, the website is a well-maintained personal archive with good content quality and moderate technical implementation. Security and privacy compliance improvements are recommended to enhance trust and user protection.

K

Keck Kiosk

keck-kiosk.ch

46

Keck Kiosk is a small cultural venue based in Basel, Switzerland, focused on hosting non-commercial cultural and social events, primarily music concerts and community gatherings. The website serves as an information portal for event announcements and community engagement, supported by a newsletter subscription and contact forms. The business is financed by the Fonds des Werkraum Warteck pp, indicating a non-profit cultural orientation. Technically, the site is built on WordPress with standard plugins such as Contact Form 7 and MailPoet, and uses Google Fonts and Google reCAPTCHA for form security. The site is mobile optimized and presents a consistent brand image with good content relevance and user experience.

K

Kulturbeiz 113

kulturbeiz113.ch

53

Kulturbeiz 113 is a small hospitality business based in Basel, Switzerland, specializing in fresh, seasonal European fusion cuisine with vegan, vegetarian, fish, and meat options. The venue is located in a historic brewery building with terraces offering scenic views and hosts cultural events alongside private event rentals. The website is built on WordPress using the Twenty Seventeen theme, indicating a standard but functional digital presence. Technical infrastructure includes modern web technologies such as jQuery and responsive CSS, but lacks advanced performance or security optimizations. Security posture is basic with no detected security headers or incident response policies, and privacy compliance is minimal due to absence of privacy or cookie policies. Contact information is clearly presented, but no online forms or email contacts are provided, with reservations handled exclusively by phone. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance features.

P

PFA

pfa-auto.fr

51

PFA (Plateforme automobile) is a prominent French automotive industry platform established in 2009, representing manufacturers, suppliers, subcontractors, and mobility actors. It serves as a strategic body for innovation, competitiveness, employment, and skills development within the French automotive sector and organizes major events such as Mondial de l’Auto. The website is professionally designed using WordPress with modern plugins and demonstrates a strong digital presence including social media integration and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing, representing compliance gaps. Overall, the site reflects a credible and authoritative industry platform with room for improvement in privacy and security transparency.

La Sphère des Possibles is a French communication agency established since 1992, specializing in communication consulting, event management, and business tourism services primarily in the Lyon region. The company presents itself as an innovative and comprehensive agency with a diverse team capable of addressing various client needs. The website is professionally designed using WordPress and includes rich content such as client testimonials, social media integration, and a video presentation to engage visitors. Technically, the site uses modern web technologies and plugins but lacks some security headers and has an unconfigured Google Analytics plugin. Security posture is moderate with HTTPS enforced and cookie consent implemented, but there is no visible incident response or vulnerability disclosure information. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the website is functional, professional, and safe for general audiences but would benefit from improved transparency and security practices.

I

IZES gGmbH

izes.eu

53

IZES gGmbH is a well-established, Saarland-supported, non-university research institute specializing in energy and material flow systems. With over 25 years of experience, it conducts transdisciplinary national and international projects focused on sustainable and climate-neutral energy and resource systems. The organization operates primarily through project funding and employs around 80 experts. The website is professionally designed using WordPress with modern plugins and provides comprehensive information about its research fields, projects, and events. Privacy and cookie compliance are well implemented, reflecting a strong commitment to GDPR standards. Security posture is good with HTTPS and security best practices in place, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, technically sound, and serves its target audience effectively.

K

Klinikum Fulda gAG – Außenstelle Klinikum Gersfeld

klinikum-gersfeld.de

44

Klinikum Gersfeld operates as a regional hospital branch of Klinikum Fulda gAG, providing a broad range of healthcare services including orthopedics, spinal surgery, urology, and pain therapy to the Rhön region in Germany. The website clearly targets patients and healthcare professionals seeking medical services in this area. Technically, the site is built on WordPress with a modern theme and SEO plugin, offering good mobile responsiveness and structured content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence aligned with its healthcare mission.