Security Directory

T

TC Cuadernos

tccuadernos.com

49

TC Cuadernos operates a professional e-commerce website specializing in architecture books and magazines, targeting architects, students, and enthusiasts primarily in Spain. The website is built on PrestaShop CMS with modern web technologies and includes features such as product carousels, search, user accounts, and secure checkout. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit privacy and cookie policies are not clearly linked. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website content and functionality suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in privacy transparency and incident response readiness.

R

Renault Trucks Danmark

renault-trucks.dk

65

Renault Trucks Danmark is a key player in the commercial vehicle sector in Denmark, offering a wide range of trucks and innovative transport services. As a subsidiary of Renault Trucks, it benefits from a strong brand presence and a comprehensive product portfolio targeting business customers in transportation and logistics. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to its target audience. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Analytics, Matomo, HubSpot, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, although explicit security and incident response policies are not published. The absence of WHOIS data limits domain trust verification, but the overall website professionalism and branding suggest legitimacy. Privacy compliance is partially addressed with cookie consent mechanisms, but the lack of a dedicated privacy policy page and explicit contact details are areas for improvement. Overall, the site scores well in content, technical implementation, and security posture, with recommendations to enhance privacy transparency and domain trust verification.

W

web4business

we22solutions.com

51

web4business is a professional web design and website creation service provider based in Berlin, Germany, operating under the parent company IONOS GROUP SE. The company offers full-service web solutions including modern web design and personalized customer service, targeting businesses and professionals seeking to establish or improve their online presence. With over 10 years of experience and more than 25,000 websites created, web4business holds a solid market position in the technology sector. Technically, the website is built on TYPO3 CMS with Bootstrap framework, integrating Google Analytics and Tag Manager for analytics and klaro for cookie consent management. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is adequate with HTTPS enforced and privacy compliance well addressed through clear privacy and cookie policies. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Rouillé & Coulon is a well-established family-owned SME specializing in transport, logistics, and vehicle rental services primarily in the Occitanie region of France, with additional sites in Aquitaine and the Paris region. The company boasts over 60 years of experience, a fleet of 230 vehicles, and a workforce of approximately 220 employees, positioning itself as a reliable regional player with national reach. Their services include road transport, combined transport, container transport, logistics, and vehicle rental with qualified drivers. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on CMS Made Simple and leverages modern web technologies such as Bootstrap, jQuery, Google Fonts, and integrates multimedia content from YouTube and Vimeo. It uses Matomo for analytics and Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is decent with HTTPS and CAPTCHA usage, but lacks visible security headers and DNSSEC, which are recommended for improvement. From a security and compliance perspective, the site includes a comprehensive privacy and terms of service page indicating GDPR compliance, but lacks a visible cookie consent mechanism. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. No critical vulnerabilities or malware indicators were found in the content. Contact information is complete and professional, supporting business credibility. Overall, the website is a good representation of a medium-sized transport and logistics company with solid business and technical foundations. However, the missing WHOIS data and minor security header omissions suggest areas for improvement to enhance trust and security posture.

K

Kleyling SAS

kleyling-transports.com

48

Kleyling SAS is a medium-sized French transportation and logistics company with over 70 years of experience, specializing in freight, groupage, vehicle rental with drivers, and express transport services primarily in Alsace and Seine-et-Marne regions, with international reach including Switzerland. The website is built on Joomla CMS with modern front-end technologies and includes multiple analytics tools such as Google Analytics, Matomo, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. Privacy compliance is basic with a privacy policy and cookie consent banner present, but no visible terms of service or vulnerability disclosure. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credible market position.

G

Gamba & Rota

gamba-rota.fr

52

Gamba & Rota is a French transport and logistics company specializing in comprehensive supply chain services including national and international transport, warehousing, and specialized logistics for the wine and spirits sector. The company emphasizes customized solutions, operational excellence, and secure storage facilities. Their website reflects a mature digital presence with detailed service descriptions, recent news updates, and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and captcha protections, though lacks some advanced security headers and explicit security policies. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the professional content and business details support a credible operation. Overall, the website is well-structured and trustworthy for its business domain.

R

RSPAL dr. Ramelan Surabaya Layanan Medis Profesional Dan Modern

rsalramelansby.id

54

RSPAL dr. Ramelan Surabaya is presented as a professional and modern Type A Indonesian Navy hospital offering medical services to both military personnel and the general public. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and is hosted behind Cloudflare DNS. The site features good design quality, mobile optimization, and SEO practices, but lacks critical privacy and cookie policies as well as explicit contact information. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data raises concerns due to its recent creation date and registrant being a registrar company rather than the hospital entity, which impacts trustworthiness. Overall, the site is accessible, safe, and professionally presented but requires improvements in compliance and security transparency.

A

Ari Wibowo Indonesia

ariwibowo.id

50

The website ariwibowo.id is a personal brand and informational site dedicated to Ari Wibowo, covering his career as a model, actor, singer, and successful culinary entrepreneur. The site targets a general Indonesian audience interested in his professional journey and related news. Technically, the site is built on WordPress with a modern theme and uses Cloudflare DNS for domain resolution. It is mobile optimized and includes SEO enhancements via Yoast SEO plugin. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present. WHOIS data shows the domain is newly registered with some inconsistencies in the creation date, which may warrant further verification. Overall, the site is functional and professional but could improve in compliance and security transparency.

P

PT. Sebelas Cipta Mandiri

diskanpalembang.com

54

The website diskanpalembang.com serves as the official online presence of the Dinas Peternakan dan Kesehatan Hewan Kota Palembang, a government department responsible for livestock and animal health services in Palembang, Indonesia. It provides public information, news, galleries, videos, and event updates targeted at local citizens, peternak (farmers), and government stakeholders. The site is positioned as a trusted government resource with a focus on community engagement and education. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Swiper, and Slick Carousel, ensuring a responsive and user-friendly experience. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. However, the site lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. The domain registration data shows inconsistencies, with a recent creation date and registrar that do not fully align with the official government nature of the site, which may warrant further verification. From a security perspective, HTTPS is properly implemented, and Google reCAPTCHA is used to protect forms, but the absence of privacy and cookie policies indicates compliance gaps with data protection regulations such as GDPR. No incident response or security policy information is published, limiting transparency. Overall, the site demonstrates a moderate security posture but would benefit from improvements in policy disclosures and technical security controls. The overall risk assessment suggests the website is a legitimate government resource with good content quality and user experience but has room for improvement in privacy compliance and domain registration transparency. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and clarifying domain ownership to enhance trust and compliance.

P

PT. Sebelas Cipta Mandiri

diskanlut-riau.com

54

The website represents the official online presence of the Dinas Peternakan dan Kesehatan Hewan Provinsi Riau, a government agency responsible for livestock and animal health services in Riau Province, Indonesia. It provides public service information, educational content, event updates, and multimedia resources targeting local farmers, government stakeholders, and the general public. The site is branded consistently with official logos and partner affiliations, reinforcing its government legitimacy. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Swiper, and Slick Carousel, hosted behind Cloudflare DNS services. It uses HTTPS with a valid SSL certificate and integrates Google Analytics and ShareThis for tracking and social sharing. Mobile optimization and navigation are good, though accessibility features are basic. However, the site lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms, but does not publish security policies or incident response contacts. The WHOIS data shows inconsistencies, notably a future domain creation date, which raises questions about domain registration legitimacy despite the site's apparent authenticity. No WAF or blocking mechanisms are detected, and no adult or questionable content is present. Overall, the website is a functional and professional government portal with moderate technical maturity and some compliance gaps, particularly in privacy and security policy disclosures. Strategic improvements in DNS security, security headers, and privacy compliance would enhance trust and resilience.

P

PT. Sebelas Cipta Mandiri

disnakbengkulu.id

51

The website disnakbengkulu.id serves as the official online presence of the Dinas Peternakan dan Kesehatan Hewan (Department of Livestock and Animal Health) of Bengkulu Province, Indonesia. It provides public information, news, galleries, videos, and contact details related to livestock and animal health services. The site targets local farmers, government stakeholders, and the general public interested in livestock development and animal health in the region. The business model is government service-oriented, focusing on information dissemination and public engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Swiper, Slick Carousel, and Google services such as reCAPTCHA and Analytics. It is hosted behind Cloudflare DNS, ensuring good availability and performance. The site is mobile-optimized with a clear navigation structure and good content quality, although accessibility features are basic. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and important security headers. There is no visible security policy or incident response information, and no vulnerability disclosure mechanism. Privacy compliance is weak, with no privacy or cookie policies present. Contact information is clearly provided, enhancing business credibility. Overall, the website is a functional and professional government portal with moderate security and privacy posture. Strategic improvements in security headers, DNSSEC, and privacy policies would enhance trust and compliance.

P

PT. Sebelas Cipta Mandiri

disnaksubang.id

51

The website disnaksubang.id serves as the official online presence for the Dinas Peternakan dan Kesehatan Hewan Kabupaten Subang, a government agency responsible for livestock and animal health services in Kabupaten Subang, Indonesia. It provides public information, educational content, event updates, and multimedia galleries targeted at local farmers, government stakeholders, and the general public. The site is positioned as a trusted government resource with consistent branding and relevant content. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Swiper, and Google services such as reCAPTCHA and Tag Manager. It is hosted behind Cloudflare DNS but lacks DNSSEC and advanced security headers. The site is mobile optimized with good navigation and content quality, though it does not appear to use a common CMS. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but it lacks explicit security policies, incident response contacts, and privacy or cookie policies, indicating compliance gaps. The WHOIS data reveals a domain registration inconsistency with a commercial registrar and a future creation date, which raises some legitimacy concerns despite the official government content. Overall, the website is functional and trustworthy for its intended audience but would benefit from enhanced security practices, privacy compliance, and clearer domain registration alignment to strengthen its credibility and reduce risk.

P

PT. Sebelas Cipta Mandiri

disnakpalembang.id

52

The website disnakpalembang.id serves as the official online presence for the Dinas Peternakan dan Kesehatan Hewan (Department of Livestock and Animal Health) of Kota Palembang, Indonesia. It provides public information, news, event galleries, videos, and contact channels aimed at supporting livestock farmers and the general public. The site is positioned as a government service platform with a focus on animal health and livestock development in the region. The business model is primarily informational and service-oriented, targeting local citizens and stakeholders in the agricultural sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Font Awesome, and various JavaScript plugins for UI enhancements. It is hosted behind Cloudflare DNS services, ensuring reliable availability and basic security. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. However, no explicit CMS was detected, and SEO optimization is basic. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and important security headers such as CSP and HSTS. There is no published security policy or incident response contact, which limits transparency and readiness for security incidents. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional, with clear business credibility and good content quality. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

P

PT. Sebelas Cipta Mandiri

disnakblitar.id

52

The website disnakblitar.id serves as the official online presence for the Dinas Peternakan dan Kesehatan Hewan Kabupaten Blitar, a government agency responsible for livestock and animal health in Kabupaten Blitar, Indonesia. The site provides public information, educational content, event updates, and contact details to support local farmers and stakeholders. The business model is focused on public service and information dissemination, targeting the general public and agricultural community. The site is relatively new, launched in 2025, and reflects a consistent government branding and messaging. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and interactivity. It is hosted behind Cloudflare, ensuring good performance and security at the network level. The site is mobile responsive and has a moderate performance profile. SEO and accessibility are basic but functional. However, there is no explicit CMS detected, and some technical improvements could enhance security and compliance. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, and the domain is protected against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected in the provided data, which are areas for improvement. Privacy and cookie policies are absent, which is a compliance gap. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is trustworthy and professional, serving its government mandate effectively. The main risks relate to privacy compliance and some technical security hardening. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing incident response contacts to enhance trust and compliance.

P

PT. Sebelas Cipta Mandiri

disnakboyolali.id

51

The website disnakboyolali.id serves as the official online presence of the Dinas Peternakan dan Kesehatan Hewan Kabupaten Boyolali, a government entity responsible for livestock and animal health services in Boyolali, Indonesia. It provides public information, educational content, event updates, galleries, and videos targeting local farmers, government stakeholders, and the general public interested in livestock development. The site is branded consistently with government logos and offers clear contact channels including email, phone, and physical address. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper.js, and Slick Carousel, and integrates Google services including reCAPTCHA and Google Analytics. Hosting and DNS are managed via Cloudflare, enhancing performance and security. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, HTTPS is enforced and domain status includes clientTransferProhibited, indicating some domain security. However, no explicit security headers were detected, and DNSSEC is not enabled. Privacy and cookie policies are absent, representing compliance gaps. WHOIS data shows inconsistencies, notably a domain creation date set in the future and a registrant organization unrelated to the government entity, which may warrant further verification. Overall, the website is functional, informative, and trustworthy as a government resource, but improvements in privacy compliance, security headers, and WHOIS data accuracy are recommended to enhance trust and security posture.

D

Dinas Sosial Kabupaten Mojokerto

dinsoskabmojokerto.org

56

Dinas Sosial Kabupaten Mojokerto is a government social service agency responsible for assisting the Walikota in social affairs within the Mojokerto Regency, Indonesia. The website provides information about its functions, organizational structure, and recent news updates related to social services. The site targets local citizens and stakeholders interested in social welfare programs. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted behind Cloudflare DNS. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. The WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

D

Dinas Sosial Kabupaten Lamongan

dinsosnakertranslamongan.com

56

Dinas Sosial Kabupaten Lamongan is a local government social services agency in Indonesia focused on social rehabilitation, social protection, empowerment, and poverty alleviation. The website serves as an official portal providing information, news, and public service announcements to the community. The agency is relatively small with a staff of 27 civil servants and 17 non-ASN personnel. The website is built using modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, hosted behind Cloudflare DNS services. The site is mobile optimized and provides clear navigation and relevant content for its target audience. However, the domain registration data shows inconsistencies, including a future creation date, which raises questions about domain legitimacy or data accuracy. Security posture is moderate with HTTPS enabled but lacks important security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional and professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

U

Universitätsklinikum Ulm

uniklinik-ulm.de

65

Universitätsklinikum Ulm is a prominent university hospital in Germany, providing advanced medical care, research, and education. The website reflects a well-structured institution focused on patient services, clinical studies, and academic excellence. The digital infrastructure is built on TYPO3 CMS with modern frontend technologies, ensuring a responsive and accessible user experience. Privacy compliance is robust, leveraging Usercentrics for consent management and self-hosted Matomo for analytics, indicating a strong commitment to data protection. Security posture is good with HTTPS enforced, though the absence of certain security headers suggests room for enhancement. Overall, the domain registration and website content align well, confirming legitimacy and trustworthiness.

T

Technische Hochschule Mittelhessen

thm-i40.de

52

The Technische Hochschule Mittelhessen (THM) website for the Smart Factory Mittelhessen (SFM) research group presents a well-structured academic and research-focused platform. It highlights the group's commitment to Industry 4.0 concepts, applied research, and collaboration with SMEs to enhance manufacturing competitiveness in Germany. The site targets students, researchers, and industry partners, offering educational programs, research projects, and practical smart factory infrastructure. The content is professionally presented in German, with clear navigation and comprehensive information about equipment, research themes, and partnerships. Technically, the website is built on Joomla CMS with modern libraries such as jQuery and Bootstrap, and includes interactive elements like Smart Slider 3. The site is mobile-optimized and accessible, though some accessibility features could be enhanced. Security-wise, HTTPS is enforced, and forms use CSRF tokens, but security headers are not explicitly detected. Privacy compliance is addressed with a privacy policy and cookie information, though no explicit consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the security posture is solid but could benefit from additional security headers and incident response information. The website shows no signs of malicious activity or suspicious content, and the domain registration aligns well with the academic institution's identity. The site is safe for general audiences and maintains a high level of professionalism and trustworthiness.

S

Stolz WEB GmbH

stolzweb.ch

47

Stolz WEB GmbH is a Swiss-based small technology company specializing in custom web development, online shops, and web applications. Founded in 2012, the company offers tailored software solutions including their proprietary CMS 'Simpli', targeting designers, agencies, and businesses seeking bespoke digital solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, positioning Stolz WEB as a reliable niche player in the Swiss web development market. Technically, the site employs modern web technologies such as HTML5, CSS, JavaScript, PHP, and Bootstrap, with a moderate performance profile and good mobile optimization. Analytics are implemented using Google Analytics with IP anonymization and Matomo, indicating some privacy awareness. Security posture is adequate with HTTPS enabled but lacks standard security headers and explicit security policies. Contact information is comprehensive and clearly presented, though privacy and terms policies are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

G

Gedtrans

gedtrans.com

60

Gedtrans operates a specialized SaaS platform focused on transport document management, targeting transport subcontractors and orderers primarily in France and Europe. The platform facilitates the collection, verification, and real-time tracking of legal transport documents, helping clients comply with regulatory obligations and streamline their operational processes. With over 12,000 customers annually and a 5-year market presence, Gedtrans positions itself as a leader in its niche. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, integrating essential tools such as Google reCAPTCHA for form security and Matomo for analytics. The site demonstrates good mobile optimization, SEO practices, and GDPR compliance through cookie consent mechanisms and a comprehensive privacy policy. From a security standpoint, the site enforces HTTPS and employs standard best practices, though it lacks explicit HTTP security headers and a published security policy or incident response plan. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain introduces a minor trust concern but does not detract significantly from the overall legitimacy given the professional presentation and business consistency. Overall, Gedtrans presents a secure, compliant, and professionally managed online presence suitable for its business domain, with recommendations to enhance security headers and incident response transparency to further strengthen trust and resilience.

F

France Industrie

franceindustrie.org

61

France Industrie is a professional organization representing the unified interests of the French industrial sector. The website positions itself as the authoritative voice for industry in France, providing news, events, publications, and advocacy resources. The organization targets industry professionals, policymakers, and stakeholders within the manufacturing sector. The site is well-branded, with consistent messaging and a strong presence on social media platforms such as Twitter and LinkedIn. The business model centers on industry representation and information dissemination, with a large footprint indicated by the scale of content and events.

P

Paul Maschinenfabrik GmbH & Co. KG

paul.eu

49

Paul Maschinenfabrik GmbH & Co. KG is a well-established German manufacturer specializing in circular saw machines, prestressed concrete technology, and storage systems. With a strong export focus exceeding 80%, the company holds a leading global market position in its industrial sectors. The website reflects a professional and comprehensive digital presence, featuring detailed product information, recent news updates, and multilingual support. Technically, the site is built on TYPO3 CMS with modern web technologies, ensuring good performance and mobile optimization. Security measures include HTTPS, cookie consent, and privacy compliance, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature digital infrastructure aligned with business needs.

FlectraHQ operates as an open-source ERP and CRM software provider, offering a comprehensive suite of business management tools including sales, marketing, accounting, inventory, and human resources modules. The company targets businesses seeking customizable and integrated ERP/CRM solutions, positioning itself as a niche player in the open-source software market since its domain registration in 2016. The website content is well-structured, detailing extensive features and industry applications, reflecting a mature product offering. Technically, the website is built on the Flectra CMS/framework, utilizing modern web technologies such as Bootstrap and FontAwesome, with Cloudflare DNS services and Tawk.to live chat integration. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with deferred loading of JavaScript assets. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating gaps in privacy compliance. No incident response or vulnerability disclosure information is published, which could impact trust and security readiness. Overall, the website is professional and content-rich, with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and incident response transparency would enhance trust and compliance.

M

Meier + Cie AG

shn.ch

10

Schaffhauser Nachrichten is a well-established regional news media company based in Switzerland, operating since 1861. The website serves the Schaffhausen region with news, classifieds, multimedia content, and subscription services. It maintains a strong market position as a trusted local news source with a comprehensive digital presence including e-paper, newsletters, and social media engagement. The business model relies on subscriptions and advertising revenue, targeting residents and businesses in the region. Technically, the site uses Drupal 9 CMS with React components, integrates modern analytics and push notification tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

West Fraser is a reputable manufacturer specializing in high-quality wood-based panels such as OSB boards, serving professional markets in construction, packaging, furniture, and DIY sectors primarily in Europe. The company emphasizes sustainability, sourcing FSC-certified wood and recycled materials, positioning itself as a trusted supplier with a strong environmental commitment. The website reflects a professional and consistent brand image with clear product offerings and support resources. Technically, the site is built on WordPress with Bootstrap and integrates Google Analytics for user insights. It is hosted on kasserver.com with HTTPS enabled, ensuring secure communications. However, the absence of security headers and cookie consent mechanisms indicates areas for improvement in security and privacy compliance. Overall, the site is well-structured, mobile-optimized, and user-friendly, supporting West Fraser's market presence effectively.

O

OPmobility

opmobility.com

61

OPmobility is an enterprise-level automotive supplier specializing in sustainable and connected mobility solutions. The company positions itself as a leader in the automotive sector, offering a range of products and services including exterior and lighting components, modules, fuel systems, hydrogen and fuel cell technologies, and software solutions. The website targets industry professionals, partners, investors, and customers interested in innovative and sustainable automotive technologies. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and Divi Builder, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive privacy compliance indicate a legitimate business. Overall, the site is well-structured and trustworthy, though improvements in security disclosures and contact information visibility are recommended.

G

GedMouv

gedmouv.com

63

GedMouv is a specialized B2B platform offering shared traceability solutions for the transport and logistics industry, enabling real-time data exchange and delivery tracking among customers, carriers, and drivers. The company operates under the parent entity B2PWeb and targets transport companies, freight forwarders, and shippers primarily in France. The website is professionally designed using WordPress with modern technologies such as Bootstrap, jQuery, and slick carousel, and integrates multiple analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in HTTP security headers and explicit security policies are recommended. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, but the overall business presence and content quality support a trustworthy profile.

The Römisch-Katholische Kirche Basel-Stadt website serves as the official online presence of the Roman Catholic Church in Basel-Stadt, Switzerland. It provides comprehensive information about church activities, pastoral care, social services, and community engagement. The site targets local residents and members of the Catholic community, offering resources and news relevant to their spiritual and social needs. The business model is non-profit, focusing on religious and community services within the regional government and non-profit sectors. Technically, the website employs a modern web application framework (webIQ 6.1) and integrates popular JavaScript libraries such as jQuery and Bootstrap for responsive design. It uses multiple analytics platforms including Matomo, Microsoft Clarity, and Google Analytics, alongside a robust privacy consent management system powered by Truendo. The site is mobile-optimized and demonstrates good performance and accessibility basics. From a security perspective, the website enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional, trustworthy, and secure platform for its intended audience, though improvements in privacy policy transparency, security header implementation, and contact information visibility are recommended.

D

digitaleheimat GmbH

digitaleheimat.de

60

digitaleheimat GmbH is a German digital agency specializing in comprehensive online marketing solutions including SEA, SEO, social media marketing, and programming services. Established in 2011, the company has a strong market presence supported by certifications such as Google Premium Partner and a portfolio of over 1000 campaigns. The website reflects a mature digital infrastructure built on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking explicit security policies and headers. Overall, the business demonstrates credibility and professionalism with room for improvement in privacy and security transparency.

V

Verband Deutscher Naturparke e.V.

naturparke.de

51

Verband Deutscher Naturparke e.V. is a German non-profit umbrella organization dedicated to the preservation, development, and public awareness of nature parks in Germany. The website serves as an informational and educational platform, providing extensive resources about nature parks, their projects, and programs. It targets nature enthusiasts, members, partners, and the general public interested in environmental conservation and sustainable regional development. The organization holds a strong national position as the voice of German nature parks and collaborates closely with partner organizations such as Nationale Naturlandschaften e.V.

E

ERMARINE GmbH

ermarine.ch

48

ERMARINE GmbH operates as a specialized boat service provider and dealer located in Switzerland, serving the Boden- and Zürichsee regions. Their offerings include boat winter storage, repairs, rentals, sales, and motorhome rentals, targeting boat owners and leisure travelers. The company maintains a professional online presence with clear contact details and social media engagement, positioning itself as a trusted local partner in the transportation sector. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries such as jQuery and Bootstrap, and is mobile responsive with moderate performance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site is professional and trustworthy but lacks some compliance and security best practices.

G

Gemeinde Ermatingen

ermatingen.ch

48

Gemeinde Ermatingen operates as the official municipal government website for the community of Ermatingen in Switzerland. It provides residents and visitors with comprehensive information about local government services, community events, public notices, and administrative contacts. The website targets local citizens and stakeholders, serving as a central hub for municipal communication and service delivery. The business model is typical of a government entity, focusing on transparency, accessibility, and community engagement. From a technical perspective, the website employs a modern technology stack including jQuery, Bootstrap, Isotope, Fancybox, and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and features interactive elements such as digital tours and event calendars. The CMS appears to be a custom or specialized system (Simpli CMS), supporting structured content management. Security posture is adequate with HTTPS enforced and no visible exposure of sensitive data. However, the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth strategies. The use of Matomo analytics reflects a privacy-conscious approach to user tracking, though GDPR compliance could be enhanced by adding explicit cookie consent and privacy notices. Overall, the website is trustworthy and professional, with clear contact information and consistent branding. The risk level is low, but strategic enhancements in security policies, privacy compliance, and technical hardening are recommended to maintain and improve trust and regulatory adherence.

B

Bauhaus Universität Weimar

bauhaus4.eu

59

Bauhaus4EU is a European University Alliance hosted by Bauhaus Universität Weimar, offering a broad range of interdisciplinary courses and academic activities across ten European universities. The alliance focuses on innovative education in sustainability, digital transformation, culture, and leadership, targeting students, academics, and university staff. The website is built on TYPO3 CMS and uses modern web technologies to provide a rich user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced but lacks some security headers and cookie consent mechanisms. The domain WHOIS data is privacy protected under EURid policy, which is typical for .eu domains and does not indicate suspicious activity. Overall, the website is trustworthy, professional, and well-positioned as an educational alliance platform.

I

ITSC

itsc.de

59

ITSC is a well-established German company specializing in digital transformation and IT services for statutory health insurance providers. With over 25 years of experience, ITSC offers a broad portfolio including strategic consulting, application management, business process outsourcing, and AI-driven platform solutions. The company positions itself as a trusted partner in the healthcare sector, leveraging modern technologies and certifications to deliver innovative solutions. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, integrating privacy-conscious analytics via Matomo and a clear cookie consent mechanism using Klaro. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, ITSC maintains strong practices including HTTPS enforcement, ISO 27001 and ISO 9001 certifications, and privacy-focused analytics. However, there is room for improvement in publishing explicit security headers, incident response contacts, and data protection officer details. No critical vulnerabilities or blocking mechanisms were detected. Overall, ITSC presents a professional, trustworthy, and secure digital presence aligned with its business focus. Strategic recommendations include enhancing security header implementation, incident response transparency, and further privacy disclosures to strengthen compliance and trust.

H

hostNET Medien GmbH

han-solo.net

64

hostNET Medien GmbH is a well-established German hosting provider founded in 1994, offering a broad range of hosting solutions including managed-root cloud servers, baremetal cloud servers, reseller servers, dedicated servers, domain registration, SSL certificates, and backup services. The company targets businesses and individuals requiring reliable and professional hosting services, positioning itself as a trusted original hosting provider in Germany with memberships in key internet registries and councils. The website reflects a mature digital presence with a professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses a combination of Contao CMS, Bootstrap, and various JavaScript libraries, though some components like jQuery are outdated, suggesting room for modernization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response contacts. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

M

Mediawerk GmbH

mediawerk.ch

47

Mediawerk GmbH is a Swiss-based content creation agency specializing in video production, photo production, social media, and web development services. The company positions itself as a modern, fresh, and creative agency targeting businesses and individuals in Switzerland seeking professional content creation. The website showcases a portfolio of projects and client testimonials, reinforcing its market presence and credibility. Technically, the website is built on WordPress using popular plugins such as Elementor and Yoast SEO, with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit security or incident response policies. There is no cookie consent mechanism, which is a compliance gap given GDPR relevance. No vulnerabilities or suspicious content were detected. Overall, the website is professional and trustworthy, with clear business contact information and consistent branding. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the site's security posture and compliance standing.

M

Musik Spiri

spiri-shop.ch

43

Musik Spiri is a specialized retail and rental business focused on musical instruments and accessories, operating primarily in Switzerland with physical stores in Winterthur and Meilen. The website serves as an e-commerce platform showcasing a wide range of products including harps, woodwind, brass instruments, percussion, and related accessories. The business targets musicians and music enthusiasts in the regional market, offering both sales and rental services. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, and reCAPTCHA, ensuring a functional and user-friendly experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of CAPTCHA, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, with cookie consent and privacy policy available. Overall, the website is professional, trustworthy, and well-positioned for its market segment.

B

BKK24

bkk24.de

60

BKK24 operates as a statutory health insurance provider in Germany, offering a wide range of healthcare services with a focus on comprehensive coverage and customer support. The website positions itself as a reliable and accessible insurer with nationwide presence and 24/7 service availability. The business model centers on statutory health insurance, targeting insured individuals and employers within Germany. The website content is professionally presented, consistent with the healthcare industry standards, and compliant with GDPR regulations. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user interaction. Cookiebot is integrated for cookie consent management, reflecting a mature approach to privacy compliance. Hosting is managed via kasserver.com, with secure HTTPS connections and moderate performance. SEO and accessibility are adequately addressed, though some improvements in accessibility could be beneficial. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Analytics usage is moderate, primarily via self-hosted Matomo and etracker, with clear data retention policies. Overall, BKK24's website demonstrates a solid digital presence with good privacy and security practices aligned with its business sector. Strategic enhancements in security headers, incident response disclosure, and accessibility would further strengthen its posture. The site is trustworthy, professional, and suitable for its target audience.

O

Organisation des Transporteurs Routiers Européens (OTRE)

otre.org

53

The Organisation des Transporteurs Routiers Européens (OTRE) is a professional organization representing the French road transport sector, primarily focusing on SMEs with patrimonial capital. The website serves as a communication and advocacy platform, providing news, events, partnerships, and regional contact information. The organization positions itself as a key representative body for transport professionals in France. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR, ensuring good SEO and privacy compliance mechanisms like cookie consent. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and documented incident response. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and structure indicate a legitimate and professional entity. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, supporting its credibility and user trust.

W

Webspatz Webdesign GmbH

webspatz.ch

51

Webspatz Webdesign GmbH is a small, specialized web design and SEO agency based in Zürich, Switzerland. The company focuses on creating modern, responsive WordPress websites, Shopify shops, and providing SEO optimization services including local SEO. Their market position is that of a boutique agency offering personalized and high-quality digital services to small and medium-sized businesses. The website demonstrates a strong digital maturity with a well-structured WordPress platform, modern technologies such as Bootstrap and Slider Revolution, and integration of analytics tools like Google Analytics and Microsoft Clarity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

The website pilze-ammersee.de serves as an educational and informational platform dedicated to the fungi species of the Ammersee region in Germany. It offers extensive photographic content, distribution maps, and detailed descriptions of over 3000 mushroom species, targeting nature enthusiasts, mycology hobbyists, and conservationists. The project is regionally focused and supported by local governmental and mycological organizations, positioning it as a niche but valuable resource within Bavaria and potentially broader German-speaking audiences. Technically, the site is built on the Mezzanine CMS with Bootstrap and jQuery 1.7.1, indicating a somewhat dated but functional technology stack. The site is moderately optimized for mobile and accessibility, with clear navigation and good content relevance. However, there is no evidence of modern security headers or advanced performance optimizations. The absence of HTTPS confirmation and use of an outdated jQuery version pose potential security risks. From a security and compliance perspective, the site lacks visible privacy and cookie policies, GDPR compliance indicators, and contact information for incident response or data protection officers. No analytics or tracking scripts were detected, suggesting minimal user tracking. The WHOIS data is limited but consistent with a legitimate domain registered via GoDaddy's nameservers. No WAF or blocking mechanisms were detected, and the content is safe and appropriate for general audiences. Overall, the site is a credible, regionally focused educational resource with moderate technical maturity and some security and compliance gaps. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance trust and resilience.

R

robin-shop.com

robin-shop.com

65

robin-shop.com is a German-based e-commerce business specializing in sustainable, handmade headwear products such as stirnbänder, mützen, and caps. The company positions itself as the only cap manufacturer in Germany, producing unique items in their Allgäu manufactory. The website targets environmentally conscious consumers seeking high-quality, locally made fashion accessories. Technically, the site is built on the Shopify platform using the Broadcast theme, leveraging modern JavaScript libraries and consent management tools to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security policies are published. Marketing and analytics are implemented via trusted services such as Google Analytics, Klaviyo, and Facebook Pixel, with user consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

Webfinancial Group Schweiz AG

yourmoney.ch

10

Webfinancial Group Schweiz AG operates a professional ICT and financial market information website targeting investors and financial professionals primarily in Switzerland. The company specializes in stock market information systems, data processing, knowledge management, consulting, ICT security monitoring, and maintenance services. The website demonstrates a solid market position as a leading ICT company in Switzerland within its niche. Technically, the site employs modern JavaScript libraries such as jQuery, Bootstrap, and Highcharts for interactive charts, and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements CSRF tokens, but lacks visible security headers and published security policies or incident response contacts. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

D

DOSB New Media GmbH

sporteurope.tv

8

The website sporteurope.tv is operated by DOSB New Media GmbH, a German media company founded in 2018. It appears to be a sports media platform targeting European sports fans, particularly German-speaking audiences. The business model focuses on sports streaming and content delivery, positioning itself as a niche regional sports media provider. The technical infrastructure uses modern frontend technologies such as Bootstrap and Font Awesome, with moderate performance and good mobile optimization. However, the website lacks visible privacy and cookie policies, contact information, and security headers, indicating gaps in privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the domain registration details are consistent and legitimate. Overall, the website presents a basic but functional digital presence with room for improvement in security and compliance.

SailingAdmin is a specialized software platform developed primarily for the administration of sailors and officials affiliated with Swiss Sailing. It provides member data management and regatta registration functionalities, partially accessible to clubs and classes. The platform emphasizes data privacy and confidentiality, allowing members to control their personal data visibility and usage. The website reflects a niche market position focused on Swiss Sailing's community with a small-scale business model and a consistent brand presence. Technically, the site uses standard web technologies including Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate, with no explicit security headers detected and no visible vulnerabilities, but lacking advanced security policies or incident response information. Privacy compliance is partially met with a privacy policy present but missing cookie consent mechanisms and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with a legitimate domain registration consistent with the business history and location.

Swiss Sailing Team is a Swiss sports organization dedicated to competitive sailing, supporting elite and youth athletes. The website serves as a platform for news, team information, event updates, and partner engagement. It targets sailing enthusiasts, athletes, and sponsors within Switzerland. The business model is centered on athlete development and sponsorship partnerships, positioning itself as a national leader in sailing sports. Technically, the site is built on WordPress with common libraries such as jQuery, Bootstrap, and Slider Revolution, hosted by omega.influent.solutions. The site is moderately performant and mobile-optimized with basic accessibility and SEO features. Security posture is adequate with HTTPS and Google reCAPTCHA implemented, but lacks advanced security headers and explicit privacy/cookie policies. Contact information is clearly provided, including company emails and physical address, alongside active social media presence. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

E

EUROSAF

eurosaf.org

9

EUROSAF is the European Sailing Federation, a non-profit organization dedicated to governing and promoting sailing activities across Europe since 1998. The website serves as an information hub for governance, committees, events, and regulatory frameworks related to sailing in Europe. The site targets sailing organizations, athletes, officials, and enthusiasts, positioning itself as a key continental federation in the sailing sports sector. Technically, the website is built on WordPress with common plugins and frameworks such as Bootstrap and WPBakery Page Builder, hosted via a reputable registrar and DNS provider. The site is moderately performant and mobile-optimized but lacks some advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but it lacks DNSSEC and important security headers, which should be addressed to improve resilience. Privacy compliance is weak due to missing privacy and cookie policies, which is a significant gap given GDPR requirements in Europe. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

The Biosphärenreservat Südost-Rügen website serves as the official online presence for the UNESCO-recognized biosphere reserve in Southeast Rügen, Germany. It provides comprehensive information about the region's unique cultural landscape, natural environment, and ongoing sustainability projects. The site targets local residents, visitors, and environmental enthusiasts, offering educational content, event announcements, and partner information. The business model is non-profit and government-affiliated, focusing on conservation and regional promotion. Technically, the website employs a traditional but effective tech stack including Bootstrap and jQuery, with Matomo analytics for privacy-conscious user tracking. The site is mobile responsive and well-structured, though it lacks some modern CMS features and advanced accessibility implementations. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are recommended for compliance with EU regulations. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and security posture. Overall, the website is trustworthy, professionally maintained, and aligned with its mission. Strategic improvements in privacy compliance and security hardening would further strengthen its position and user confidence.