Security Directory

C

Collectivité européenne d'Alsace

alsace.eu

68

The Collectivité européenne d'Alsace (CeA) is a regional governmental entity serving the Alsace region in France. The website provides comprehensive information about public services, social aid, cultural events, transport, environment, and education, targeting residents and stakeholders of Alsace. The site is well-branded, consistent, and professionally maintained, reflecting its official government status. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized and accessible, with good SEO practices and structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses script integrity checks but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with GDPR-aligned policies and clear cookie consent. Overall, the website presents a low risk profile with high trustworthiness and professionalism. The lack of WHOIS data is due to EURid privacy policies and is typical for .eu domains. Strategic improvements include adding security headers and publishing a security policy or vulnerability disclosure to enhance transparency and security posture.

G

GKV-Spitzenverband

gkv-spitzenverband.de

66

The GKV-Spitzenverband website serves as the official portal for Germany's statutory health and long-term care insurance umbrella organization. It provides comprehensive information on health insurance, care insurance, policy updates, research, and services for insured persons and healthcare providers. The site is well-structured, professionally designed, and offers content in German and English, targeting insured individuals, healthcare professionals, policymakers, and the public. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics with a strong emphasis on privacy and consent. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not explicitly published. Overall, the site reflects a mature digital presence consistent with a large, government-related healthcare entity.

C

Carl Götz

carlgoetz.de

63

Carl Götz is a medium-sized German company specializing in the retail and distribution of wood products and related construction materials. The website presents a comprehensive catalog of products including panels, wood construction materials, flooring, doors, and garden-related items, targeting both business and private customers. The company maintains multiple physical locations and offers digital services such as customer login, configurators, and sample services. Technically, the website is built on the Shopware CMS platform, uses modern web technologies including Google reCAPTCHA and Google Tag Manager, and is hosted on a reliable DNS provider. Security posture is good with HTTPS enforced and CSRF protection on forms, though additional security headers and policies could enhance protection. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy and security transparency.

B

Bundesministerium für Bildung und Forschung

bne-portal.de

61

The BNE-Portal is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF) dedicated to promoting education for sustainable development (Bildung für nachhaltige Entwicklung - BNE). It serves as a comprehensive resource hub offering educational materials, news, event calendars, and information on funding opportunities. The portal targets educators, learners, policymakers, and the general public interested in sustainability education. Technically, the site is built on the Government Site Builder CMS, employs modern web standards, and is optimized for accessibility and mobile devices. Security-wise, the site uses HTTPS and provides a cookie consent mechanism with anonymized analytics via Matomo, but lacks explicit security policies or incident response contacts. Overall, the site demonstrates a strong professional and trustworthy presence consistent with a government educational service.

D

Deutscher Gründerpreis für Schüler:innen

dgp-schueler.de

56

The Deutscher Gründerpreis für Schüler:innen is a German educational initiative focused on promoting entrepreneurship education among students, primarily targeting those in the 9th grade and above, as well as teachers and Sparkasseninstitutes. The initiative organizes competitions, provides educational materials, and fosters practical learning experiences to sensitize young people to economic topics and entrepreneurial self-employment. The website is professionally designed, well-structured, and consistent with the brand's mission, supported by recognized partners such as Sparkasse, ZDF, Porsche, and others. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with embedded YouTube videos and Google Tag Manager for analytics. The site appears to be built on TYPO3 CMS, indicated by URL patterns and asset naming conventions. Performance and mobile optimization are good, with accessibility features implemented. Privacy compliance is strong, featuring a cookie consent banner and a comprehensive privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IP addresses in analytics. However, no explicit security headers were detected in the HTML content, and there is no visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is consistent with the website's purpose, supporting legitimacy. Overall, the website presents a low-risk profile with a solid security posture and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.

The website hostay.fr is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to any business content or information. The domain is registered with Scaleway and uses Cloudflare nameservers, indicating a hosting and security setup consistent with a French-based small business or service. Due to the lack of visible content, no privacy, cookie, or terms of service policies are available, nor is there any contact or security policy information. The technical infrastructure includes modern security measures such as Cloudflare's WAF and CAPTCHA, but the absence of accessible content limits the ability to assess the website's full digital maturity or business model. The security posture is moderate based on the presence of Cloudflare protections, but the lack of visible security headers or policies reduces confidence. Overall, the site is low in trustworthiness and content quality due to the blocking mechanism.

LeadBI is a digital marketing platform offering marketing automation and real-time customer insights, targeting businesses and marketers seeking to enhance their marketing beyond traditional email campaigns. The company is operated by LINK Mobility Italia S.r.l, based in Italy, with a domain registered since 2016, reflecting a mature and stable business presence. The website presents a clean, professional design with good mobile optimization and clear navigation, although it lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. Technically, the website is hosted on Amazon AWS infrastructure as inferred from DNS nameservers, uses standard HTML5 and CSS3 technologies, and performs moderately well. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. No analytics or tracking scripts were detected, indicating minimal user tracking but also limited marketing analytics integration. From a security perspective, the site uses HTTPS (implied by the login link), but no explicit security policies or incident response information is provided. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, appropriate for the business type. Overall, the security posture is moderate but could be improved by implementing security best practices and compliance documentation. The overall risk is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies and security headers are notable gaps. Strategic recommendations include adding comprehensive privacy and cookie policies, enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to improve trust and compliance.

D

Dinas Lingkungan Hidup Kota Semarang

dlhkotasemarang.id

42

Dinas Lingkungan Hidup Kota Semarang is a government environmental agency responsible for managing environmental affairs in Semarang city, Indonesia. The website serves as an official portal providing information about the agency's structure, mission, and public services such as business permits, environmental impact assessments, and public reporting. The site targets the general public and stakeholders interested in environmental governance. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with Cloudflare DNS services. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers. Privacy and cookie policies are absent, which impacts compliance. The domain WHOIS data shows an anomalous future creation date, which may be a data error but slightly reduces trust. Overall, the website is a credible government resource with room for improvement in security and privacy compliance.

D

Dinas Lingkungan Hidup Kota Depok

dlhdepok.id

43

Dinas Lingkungan Hidup Kota Depok is the official government agency responsible for environmental management in Depok city, Indonesia. The website serves as a public information portal providing services such as environmental permits, waste management, and public complaint reporting. The agency operates under local government regulations and targets local citizens and stakeholders interested in environmental governance. Technically, the website is built with standard web technologies, uses HTTPS, and is hosted behind Cloudflare DNS, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies, lack of security headers, and no incident response information highlight areas for improvement in security and compliance. The domain WHOIS data shows a future creation date, which is inconsistent with the agency's founding year, suggesting a data anomaly but not necessarily a legitimacy issue. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Dinas Lingkungan Hidup Kota Bekasi

dlhbekasi.id

50

Dinas Lingkungan Hidup Kota Bekasi is a government environmental agency responsible for managing environmental affairs in Bekasi city, Indonesia. The website serves as an official portal providing information about the agency, its organizational structure, and public services such as business permits, environmental impact assessments, and complaint reporting. The site targets the general public and local businesses requiring environmental services. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with Cloudflare DNS hosting. It is mobile responsive and employs lazy loading for images, contributing to moderate performance and good user experience. However, the site lacks advanced SEO and accessibility features and does not use a known CMS.

D

Dinas Lingkungan Hidup Kota Bandung

dlhbandung.id

51

Dinas Lingkungan Hidup Kota Bandung is the official government environmental agency for Bandung city, Indonesia, responsible for managing environmental affairs including waste management, forestry, and public works related to environmental issues. The website serves as an information portal offering services such as business permit information, registration for technical permits, environmental impact assessment network access, and public reporting. The site targets the general public and government stakeholders, positioning itself as a leading local government agency in environmental management. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, hosted with Cloudflare DNS services. It is mobile responsive with good navigation and basic SEO optimization. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy and security practices.

D

Dinas Lingkungan Hidup Kota Jakarta

dlhkotajakarta.id

51

Dinas Lingkungan Hidup Kota Jakarta operates as the official government environmental agency for Jakarta city, focusing on environmental governance, waste management, and public environmental services. The website serves as an information portal for citizens and stakeholders, providing contact details and links to related government services. Technically, the site uses standard web technologies with Cloudflare DNS but lacks advanced CMS or frameworks. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. The domain WHOIS data shows inconsistencies, including a future creation date and a private registrar, which may warrant further verification. Overall, the site is functional, safe, and professional but could improve in security and compliance.

D

DLH Provinsi Sumatera Selatan

dlhsumateraselatan.id

49

The website dlhsumateraselatan.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of South Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management and policies. The site targets residents and stakeholders within the province, functioning as a government information dissemination platform. Technically, the site employs standard web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The design and content quality are basic but functional, with moderate mobile optimization and navigation clarity. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data shows inconsistencies with a future domain creation date and a private registrar, raising legitimacy concerns. Overall, the site is accessible and safe for general audiences but requires improvements in security and privacy compliance to enhance trust and resilience.

R

Repair-Café Tösstal

repair-cafe-toesstal.ch

36

Repair-Café Tösstal is a small, community-driven non-profit organization based in Switzerland, focused on providing free repair services for various household and personal items to reduce waste and promote sustainability. Founded in 2018, it operates with a volunteer team and enjoys strong local support from municipalities and schools. The website reflects a well-structured and informative platform that clearly communicates its mission, services, and contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with moderate performance and good mobile optimization. However, there is a lack of formal privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate with no visible vulnerabilities or sensitive data exposure, but the absence of security best practices and compliance documentation lowers the overall security score. Overall, the website is trustworthy and professional, serving its target audience effectively with a clear business model and community focus.

G

Gewerbeausstellung GEWA | 17. – 19. April 2026 | Reithalle Turbenthal

gewa-turbenthal.ch

61

The website www.gewa-turbenthal.ch appears to represent a small Swiss business, likely in the energy or local services sector, based on the domain and partial content context. The site is built on the Wix platform, utilizing Wix Thunderbolt framework and standard Wix hosting infrastructure. The technical infrastructure is modern but basic, with no advanced SEO or accessibility features detected. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. No contact or business registration information is clearly presented, limiting trust and compliance assessment. Overall, the site is functional but minimal in content and security maturity.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which is displayed when a requested website is not accessible or offline. This page includes embedded Chromium offline game scripts and styling but contains no actual business or website content. Consequently, there is no identifiable company, no privacy or cookie policies, no contact information, and no external links or marketing content. The technical infrastructure is limited to Chromium internal scripts and basic HTML/CSS, with no hosting or CMS details available. Security posture is minimal due to the nature of the page being an error display rather than a public website. Overall, this page does not represent a legitimate business website and cannot be evaluated for compliance or security beyond its role as a browser error page.

W

Weil am Rhein Wirtschaft und Tourismus GmbH

w-wt.de

55

The website for Weil am Rhein Wirtschaft und Tourismus GmbH serves as the official platform for economic development, tourism, and city marketing in the municipality of Weil am Rhein, Germany. It targets local businesses, tourists, and residents, providing information on commercial real estate, events, and tourism services. The site is built on the Weblication® CMS platform and features a well-structured navigation system with multilingual support. Accessibility is a key focus, evidenced by the dedicated accessibility menu offering font size, contrast, dark mode, and reading options. However, the site lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust.

C

Collectivité européenne d'Alsace

haut-rhin.fr

68

The Collectivité européenne d'Alsace operates as a regional government entity providing a comprehensive range of public services and information to residents and stakeholders in the Alsace region of France. The website serves as an official portal with detailed information on social services, culture, transport, environment, and citizen engagement. It maintains a strong market position as the authoritative regional government body with a clear focus on transparency and public communication. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure suitable for a government portal. From a security perspective, the site enforces HTTPS and demonstrates good security hygiene with no exposed sensitive data or vulnerable libraries detected. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data is standard for .eu domains and does not detract from the legitimacy of the site. Strategic recommendations include implementing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and security.

E

Einwohnergemeinde Allschwil

allschwil.ch

62

The Einwohnergemeinde Allschwil website serves as the official digital presence of the municipal government of Allschwil, Switzerland. It provides comprehensive information on local government services, cultural events, political activities, and community resources. The site targets residents and stakeholders interested in municipal affairs, offering a broad range of services including administrative forms, event calendars, and contact information. The business model is that of a public sector entity focused on community service and governance. Technically, the website is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates external resources like FontAwesome for icons and ReadSpeaker for accessibility. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses some security headers, though it lacks advanced headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism in place. However, no explicit security policy or incident response contact information is provided. Overall, the website is trustworthy and professional, reflecting the legitimacy of a municipal government entity. It maintains a good balance between usability, compliance, and security, with room for improvement in security header implementation and incident response transparency.

K

KaktusApps

kaktusapp.com

10

KaktusApps is a specialized eCommerce development company focused on providing a suite of innovative apps designed to enhance online store performance, increase sales, and improve customer engagement. Their offerings primarily target Shopify merchants but also extend to other eCommerce platforms. The company has established a solid market position with multiple apps available on the Shopify app store, supported by positive customer ratings and testimonials. Technically, the website is built using modern web technologies including Webflow CMS, Cloudflare DNS, and integrates marketing and analytics tools such as Google Tag Manager and Crisp Chat. The site is mobile optimized and demonstrates good performance and SEO practices. Security-wise, the domain is well protected with registrar locks and HTTPS is enforced, though DNSSEC is not enabled. However, the site lacks explicit privacy and cookie policies, and no direct contact information is provided, which are areas for improvement. Overall, the website is professional, trustworthy, and safe for general audiences.

T

Team PAPREC ARKÉA

teampaprecarkea.com

39

Team PAPREC ARKÉA is a French offshore sailing team prominently preparing for the Vendée Globe 2024-2025 race, sponsored by Paprec and Arkéa. The website serves as an official platform to share news, media, and team information, targeting sailing enthusiasts and sports fans. The business model revolves around sponsorship and promotion within competitive sailing circuits. Technically, the site employs modern web standards, including responsive design, accessibility features, and structured data, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response information are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and active social media presence support the site's credibility. Overall, the site is well-maintained, compliant with privacy regulations, and effectively supports the team's branding and communication objectives.

The website lexikon-riehen.ch is an online municipal lexicon dedicated to the history and culture of Riehen, Switzerland. It is supported by the local government and related foundations, providing a curated collection of articles on persons, places, events, and organizations relevant to the community. The platform targets residents, researchers, and history enthusiasts, offering a participatory approach to content enrichment. Technically, the site uses a simple but effective stack including jQuery and CSS, with responsive design for mobile users. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, reflecting its public sector backing.

Omnisend operates as an omnichannel marketing platform specializing in email and multi-channel messaging services designed to help businesses engage customers effectively and compliantly. The website analyzed is a minimal landing page primarily used for tracking links from emails sent via Omnisend's platform and providing an abuse reporting contact. The business is positioned as a technology provider in the marketing automation space, founded in 2017, with a medium-sized operational scale. Technically, the website is hosted via Cloudflare with basic HTML, CSS, and JavaScript technologies. The site lacks advanced frameworks or CMS indications and shows moderate performance and basic mobile optimization. No analytics or tracking scripts were detected in the provided content, indicating a privacy-conscious minimal landing page. From a security perspective, the domain is registered with a reputable registrar and protected against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected, representing areas for improvement. The presence of an anti-abuse contact email demonstrates incident response readiness, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is functional for its purpose but limited in content and compliance documentation. Strategic improvements in security headers, privacy policies, and mobile optimization would enhance trust and compliance posture.

M

modmore development

modmore.com

68

modmore is a specialized technology company focused on developing premium and open source extras for the MODX Revolution CMS platform. Established in 2012 and based in the Netherlands, modmore serves a professional audience of web developers and agencies with high-quality software products, support services, and a remote site management platform called SiteDash. The company maintains a strong market position within the MODX ecosystem, supported by a loyal user base and active community engagement. Technically, the website is built on modern web standards with a robust tech stack including jQuery, Google Analytics, Disqus, and Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, modmore demonstrates a mature digital presence with professional branding, comprehensive content, and trustworthy business information.

J

Jubla Region Basel

jublabasel.ch

10

Jubla Region Basel is a non-profit youth organization dedicated to providing children and adolescents in the Basel region with meaningful leisure activities such as group meetings, camps, and events. The organization emphasizes community, nature exploration, responsibility, and friendship, serving approximately 20 groups locally. The website is built on modern web technologies and the Neos CMS platform, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

Y

Yetkin Mercan-Çağlayansoy | Web Consulting

yc-webconsulting.de

64

Yetkin Mercan-Çağlayansoy | Web Consulting is a small, local German web consulting and social media advisory business based in Köln. The company offers modern, secure, and responsive website creation services alongside social media consulting and support, targeting small business owners and professionals. The website demonstrates a professional presence with clear contact information, client references, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on DomainControl nameservers, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and cookie consent management, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences.

D

Deutsche Stiftung für junge Erwachsene mit Krebs

junges-krebsportal.de

49

The Deutsche Stiftung für junge Erwachsene mit Krebs operates the Junges Krebsportal, a specialized online platform providing young cancer patients in Germany with direct access to expert advice and support. The portal offers multiple communication channels including online chats, telephone consultations, and in-person meetings, complemented by a Tandem-Beratung program where affected individuals support each other. The foundation is supported by recognized partners and foundations, reinforcing its credibility in the healthcare non-profit sector. Technically, the website is built using modern web standards including HTML5, CSS3, JavaScript, and the UIkit framework, hosted on a reputable German hosting provider. The site is mobile-optimized with good SEO practices and clear navigation, although accessibility features are basic. No major performance or technical issues were detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit security or incident response policies. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism is evident. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a trustworthy, professional, and focused service with a strong business credibility score. Security posture is solid but could be improved with additional headers and policies. The absence of cookie consent mechanisms and incident response information are notable gaps. The domain WHOIS data is limited but consistent with the business purpose. No WAF or blocking mechanisms interfere with content access.

S

Sparkassen- und Giroverband Hessen-Thüringen (SGVHT)

mein-fahrtwind.de

55

Mein Fahrtwind is a promotional website operated by the Sparkassen- und Giroverband Hessen-Thüringen (SGVHT), a public financial association in Germany. The site hosts a contest offering participants the chance to win one of eight electric scooters, targeting residents of Hessen, Thüringen, and parts of Rheinland-Pfalz. The website is professionally designed with comprehensive legal and privacy documentation, reflecting a strong commitment to GDPR compliance and user data protection. The contest employs a double opt-in mechanism to ensure participant consent and data accuracy. Technically, the site uses modern web technologies including Google Tag Manager, Matomo analytics, Adobe Typekit fonts, and a cookie consent management system. Hosting is managed via DomainControl, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security measures include HTTPS and IP masking in analytics, though HTTP security headers are not explicitly detected. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy policies are detailed and transparent, including a named data protection officer contact. No incident response or vulnerability disclosure policies are found, which could be areas for improvement. Overall, the site presents a low risk profile with strong compliance and trust indicators. Strategically, the site effectively supports the SGVHT's marketing and public engagement goals, leveraging digital tools to promote sustainable mobility. The integration of multiple marketing and tracking tools is balanced with user privacy considerations, positioning the organization as responsible and trustworthy in its digital presence.

S

Sparkassen- und Giroverband Hessen-Thüringen (SGVHT)

finanzen-mit-daniel-jung.de

47

The website 'finanzen-mit-daniel-jung.de' is an educational platform focused on financial literacy, primarily targeting students and educators in the Hessen and Thüringen regions of Germany. It is operated under the auspices of the Sparkassen- und Giroverband Hessen-Thüringen, a reputable financial association. The site offers a series of well-structured, easy-to-understand videos and learning materials to enhance financial knowledge. The partnership with Sparkassen and the inclusion of the Sparkassen-SchulService platform reinforce its credibility and regional relevance. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Matomo for analytics, alongside a GDPR-compliant cookie consent mechanism. The site is hosted on servers indicated by the nameservers 'your-server.de' and related domains, suggesting a professional hosting environment. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and clearly presented, with a designated data protection officer contact provided. The site does not employ a vulnerability disclosure policy, which could be considered for future enhancement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. It effectively serves its educational mission with professional content and transparent governance. Strategic recommendations include enhancing HTTP security headers, formalizing a vulnerability disclosure process, and improving accessibility features to further strengthen the site's security and user experience.

O

Office du Tourisme et des Congrès de la métropole de Lyon

visiterlyon.com

69

The website www.visiterlyon.com serves as the official tourism portal for Lyon and its metropolitan area, operated by the Office du Tourisme et des Congrès de la métropole de Lyon. It provides comprehensive tourism information, online booking services for hotels, restaurants, leisure activities, and city passes such as the Lyon City Card. The site targets tourists, families, business travelers, and groups, positioning itself as an authoritative and trusted source for visiting Lyon. The content is rich, professionally presented, and available in multiple languages, enhancing accessibility and user experience. Technically, the website employs modern web technologies including Alpine.js for interactivity, Swiper.js for sliders, and MapLibre GL for mapping. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed with HTTPS enforcement, security headers, and secure forms, although explicit security policy and incident response information are not published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. However, WHOIS data for the domain is missing or unavailable, which is unusual for an official entity and slightly impacts trustworthiness. Despite this, the website's certifications, social media presence, and comprehensive content support its legitimacy. Overall, the website is a high-quality, secure, and user-friendly platform for promoting tourism in Lyon. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to further enhance trust and transparency.

S

SAIO

saio.io

60

SAIO is a small ecommerce service provider specializing in Shopify development, offering custom themes, live webshop tweaks, and app development. The company positions itself as an industry leader trusted by thousands of shop owners worldwide. The website is built on Squarespace, leveraging standard web technologies and Google Analytics for tracking. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is incomplete and privacy-protected, which limits transparency but is common for small businesses. Overall, the website is professional and trustworthy with room for improvement in security and compliance documentation.

B

Bayerische Botanische Gesellschaft e.V.

bbgev.de

57

The Bayerische Botanische Gesellschaft e.V. is a long-established non-profit botanical society based in Munich, Germany, founded in 1890. The organization focuses on the scientific study and conservation of Bavaria's native flora, offering members educational programs, excursions, and publications. The website serves as an informational portal for members and interested parties, highlighting the society's history, activities, and protected areas it manages. Technically, the site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the site is functional and professionally presented, mobile optimization and accessibility are basic, and there is room for improvement in SEO and privacy compliance. Security posture is adequate with HTTPS and standard headers, but lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and suitable for its audience but could benefit from enhanced privacy and security features.

N

National Geographic España

nationalgeographic.es

55

National Geographic España operates as a prominent media brand delivering high-quality content focused on science, nature, history, and travel. The website serves a broad general audience with a mix of free and subscription-based content, supported by advertising partnerships and e-commerce through affiliated domains. The brand is well-established in Spain, leveraging multimedia content and digital subscriptions to maintain market relevance. Technically, the website employs a modern tech stack including advanced advertising technologies, consent management via Didomi, and multimedia delivery through JWPlayer. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a mature digital infrastructure. However, some areas such as explicit privacy policy publication and accessibility could be improved. Security posture is solid with HTTPS enforcement and consent mechanisms, but lacks visible vulnerability disclosure or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website's professional presentation and branding strongly indicate legitimacy. Overall, the site presents a low-risk profile with good content quality and technical implementation, but should enhance transparency around privacy, contact information, and security disclosures to strengthen trust and compliance.

SWISS is a major international airline operating under the Lufthansa Group, providing comprehensive flight booking and travel services globally. The website is professionally designed, mobile-optimized, and offers a rich user experience with clear navigation and extensive travel-related content. Technically, the site leverages modern JavaScript frameworks, Adobe Helix RUM for performance monitoring, and Tealium for tag management, hosted on Akamai CDN ensuring fast and reliable delivery. Security posture is strong with HTTPS enforcement, secure login mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, aligned with the Lufthansa Group's reputation.

E

EWS Wirtschaftsprüfung AG

ews.li

43

EWS Wirtschaftsprüfung AG is a small, independent auditing firm based in Liechtenstein, specializing in statutory and voluntary audits, financial statement reviews, and compliance with Liechtenstein and European auditing standards. The company serves businesses and organizations requiring professional auditing and financial consulting services, leveraging a team with strong professional credentials and partnerships in Switzerland. The website is built on WordPress with a custom theme, employing standard web technologies such as jQuery and CSS3. The site is accessible, mobile-optimized, and professionally designed, though it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enforced, but missing security headers and absence of a vulnerability disclosure policy indicate areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Z

zurichnetgroup ag

netgroupcloud.ch

56

Zurichnetgroup ag is a Swiss ICT service provider specializing in cloud solutions tailored for small and medium-sized enterprises (KMU). The company leverages strong partnerships with Microsoft and Swisscom to offer a range of cloud services including private, public, hybrid clouds, and Microsoft 365 cloud solutions. Their market position is solidified by certifications such as ISO 9001, 14001, and 27001, and their focus on Swiss data protection standards appeals to privacy-conscious KMU clients. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and good SEO practices. The use of JSON-LD structured data and lazy loading images enhances performance and search engine visibility. Hosting is implied to be with Swisscom, aligning with their service offerings. From a security perspective, the site enforces HTTPS, employs multiple security headers, and benefits from the robust encryption standards of their cloud partners. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a trustworthy, professional image with strong compliance to privacy regulations and security best practices. The company is well-positioned in the Swiss KMU market with a comprehensive portfolio of cloud and IT services.

J

Jugendkulturfestival Basel (JKF)

jkf.ch

45

Jugendkulturfestival Basel (JKF) is a small-scale cultural festival focused on youth engagement in Basel, Switzerland. The website serves as an informational platform for the festival's upcoming events, providing program links, partner information, and contact details. The festival targets youth and cultural enthusiasts in the region, positioning itself as a key local cultural event. Technically, the site is built on WordPress with modern web standards, including HTTPS and responsive design, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in compliance and security transparency.

G

Goettingen Marketing GmbH

gaenseliesel-fest.de

60

The website www.gaenseliesel-fest.de is a professionally designed WordPress site promoting the Pro City Gänseliesel Fest, a family-friendly city festival in Göttingen, Germany. It provides detailed event information, application forms for festival roles, FAQs, and multimedia galleries, targeting local residents and visitors interested in cultural events. The site uses modern web technologies including WordPress 6.8.3 and Elementor, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Contact information is provided via official email and forms, enhancing business credibility. Overall, the site is trustworthy, well-maintained, and suitable for its community event purpose.

A

Active City Hamburg

hamburg-activecity.de

56

Active City Hamburg is a government-backed public initiative promoting sports and physical activities for all residents and visitors of Hamburg. The platform offers a comprehensive activity program, event information, and sports club details, supported by a dedicated mobile app. The website is well-branded, professionally designed, and targets a broad audience interested in an active lifestyle. Technically, the site uses modern web technologies including Vue.js and Mapbox GL JS, hosted on AWS infrastructure with S3 storage. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and serves as a valuable resource for the Hamburg community.

The Nationale Plattform zur Bekämpfung der Manipulation von Sportwettbewerben is an official German government initiative under the Bundesministerium des Innern und für Heimat, dedicated to combating manipulation in sports competitions. The platform provides comprehensive information, monitoring, prevention strategies, and a reporting mechanism to stakeholders including public authorities, sports organizations, and the general public. It holds a strong market position as a trusted governmental resource in Germany for sports integrity. Technically, the website is built on the Government Site Builder CMS, employing modern web technologies such as HTML5, CSS3, JavaScript, and accessibility tools like ReadSpeaker. The site is mobile-optimized, accessible, and includes SEO best practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with options for anonymous statistical tracking. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and transparent, reinforcing the site's legitimacy. Overall, the platform demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source for its intended audience. Strategic improvements in security policy transparency and header implementation could further enhance its security posture.

K

KERN CHERKEH Rechtsanwälte Partnerschaft mbB

sportrechtskanzlei.de

58

KERN CHERKEH Rechtsanwälte Partnerschaft mbB is a specialized German law firm focusing on sports law and related legal services. The firm serves a broad clientele including sports federations, professional clubs, athletes, sponsors, and agencies, positioning itself as a leading expert in the sports legal domain in Germany. Their website reflects a professional and consistent brand image with comprehensive service offerings in sports sponsorship, contracts, labor law, doping, compliance, and more. Technically, the website uses modern web technologies such as HTML5, CSS3, and JavaScript with Swiper.js for UI elements, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal security policies. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

E

EQS Group AG

bkms-system.net

56

The BKMS System website is currently displaying a maintenance page indicating temporary unavailability. The BKMS System is a compliance and whistleblowing platform operated by EQS Group AG, targeting organizations requiring secure reporting and compliance management solutions. The domain is well-established since 2004 and hosted via Cloudflare DNS services, indicating a mature and stable technical infrastructure. However, the current website content is minimal, lacking privacy, cookie, or terms of service policies, and no contact information is provided on the landing page. Security posture is basic with no advanced security headers detected, and DNSSEC is not enabled, which could be improved to enhance domain security. Overall, the site shows moderate business credibility but limited content and privacy compliance at this time.

D

domainwebhosting.de

domainwebhosting.de

48

The website domainwebhosting.de is currently a parked domain primarily monetized through Bodis advertising services. It lacks active business content, contact information, or any clear company identity. The site serves ads and related search results but does not provide any direct services or products. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting is via Bodis name servers, indicating domain parking rather than active hosting. Security posture is weak with no visible HTTPS enforcement or security headers, and privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site presents a low trust profile and limited business credibility.

N

Nkom

nkom.no

74

Nkom is the Norwegian Communications Authority responsible for ensuring robust, equitable, and future-oriented postal and electronic communication services across Norway. As a government regulatory body, it oversees frequency management, market regulation, security, and emergency preparedness in the telecommunications sector. The website reflects its authoritative role with comprehensive information, regulatory documents, and public resources targeted at Norwegian citizens, businesses, and communication providers. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, with Adobe Fonts integration and Fathom Analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. Security best practices such as HTTPS and cookie consent mechanisms are implemented, though some security headers could be enhanced. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published vulnerability disclosure policy and incident response contact details suggests room for improvement in transparency and readiness. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Nkom's website is a trustworthy, professional government portal with high content quality and technical maturity. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security posture.

D

Dinas Lingkungan Hidup Kota Jakarta

dlhdkijakarta.org

54

Dinas Lingkungan Hidup Kota Jakarta operates as the official government environmental agency for Jakarta city, focusing on environmental preservation, waste management, public complaint handling, and community education. The website serves as an authoritative portal for residents and stakeholders to access environmental information and services. Technically, the site uses modern web technologies including Laravel Livewire, Swiper.js, and Cloudflare DNS, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in security and compliance aspects.

W

Wienerberger

wienerberger.be

71

Wienerberger is a well-established manufacturer and distributor of ceramic building materials including bricks, roof tiles, and clay pavers, serving primarily the Belgian market. The company emphasizes quality, sustainability, and offers a range of tools and training for construction professionals. The website is professionally designed using Adobe Experience Manager and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM. Cookie consent is managed via Cookiebot, indicating compliance efforts with GDPR. However, explicit privacy and terms of service pages were not detected in the provided content. The WHOIS data for the domain is restricted, which is common for corporate domains to protect registrant privacy. Overall, the website presents a credible and professional business presence with good content quality and user experience.

N

NAML

naml.no

66

The website www.naml.no represents a Norwegian entity with a professional web presence focused on providing organizational or business-related services. The site uses modern web technologies including HTTPS, Google reCAPTCHA Enterprise for bot protection, Microsoft Application Insights for analytics, and Cookiebot for cookie consent management. The content is primarily in Norwegian and the site demonstrates good design quality and user experience with clear navigation and mobile optimization. However, explicit privacy policy and terms of service pages are not clearly found, and no direct contact information such as emails or phone numbers are visible, which slightly impacts transparency and user trust. Technically, the site employs a modern tech stack with standard web technologies and integrates third-party services for analytics and marketing. Security posture is solid with HTTPS enforced and bot protection in place, but the absence of explicit security headers and detailed privacy documentation suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common but reduces the ability to verify domain ownership and age. Overall, the website is secure and professional but could enhance trust and compliance by publishing clear privacy and terms policies and providing contact details. The domain's privacy-protected WHOIS is not unusual but should be monitored for legitimacy. No critical vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

S

Sputnik Bikeshop Zweisimmen

sputnik-bikeshop.ch

42

Sputnik Bikeshop Zweisimmen is a specialized local retail business focused on bicycles, e-bikes, and related accessories, offering sales, rental, repair, and personalized consultation services primarily in the Zweisimmen and Gstaad regions of Switzerland. The website reflects a well-structured and content-rich platform that supports the business model with clear product categories, service descriptions, and contact information. Technically, the site uses a combination of Bootstrap 3, jQuery, and various sliders to deliver a responsive and user-friendly experience, though some technologies are slightly dated. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, though no terms of service or vulnerability disclosure policies are present. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

UTZ MEDIEN AG is a Swiss digital agency specializing in innovative web design, TYPO3 portal development, AI integration, and SEO services. With over 20 years of experience and a portfolio including notable clients such as SAP and Roche, the company positions itself as a trusted partner for comprehensive digital solutions. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating analytics tools like Google Analytics and Matomo. Privacy and cookie consent mechanisms are well implemented, indicating a strong commitment to GDPR compliance. However, the absence of WHOIS domain registration data raises questions about domain legitimacy, which should be further investigated. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, UTZ MEDIEN AG demonstrates a mature digital infrastructure and business model with minor security and compliance gaps.

T

TwentyThree

twentythree.net

71

TwentyThree is a leading European video software company specializing in a comprehensive video marketing platform designed for businesses to leverage video content across customer journeys. The company positions itself as a pioneer with a full suite of video tools including webinars, video libraries, and personal video capabilities, targeting medium-sized to large enterprises primarily in the technology sector. The website reflects a mature digital presence with modern infrastructure, leveraging HubSpot CMS, Amazon Cloudfront hosting, and advanced analytics tools such as Google Analytics and Google Tag Manager. The site is well-optimized for mobile and SEO, providing an excellent user experience with clear navigation and professional branding. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration data corroborates the business legitimacy and history, supporting a high trust level.