Security Directory

A

ABC Cinemas

aflamuna.online

60

AFLAMUNA.online is a specialized media streaming platform dedicated to Arab cinema and cultural films, targeting Arabic-speaking audiences interested in regional film content. The platform offers a curated selection of films including fiction, documentary, experimental, and essay genres, delivered via a modern streaming infrastructure powered by Shift72. The business model combines free and transactional video on demand services, supported by Stripe payment integration. The website demonstrates a good level of digital maturity with responsive design, multilingual support, and integrated analytics for user tracking and marketing. From a security perspective, the site enforces HTTPS and uses secure payment processing but lacks explicit security headers and published incident response policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, though GDPR compliance is not clearly indicated. Contact information is minimal, with no direct emails or phone numbers found, which may impact user trust and support accessibility. Overall, the platform is well-positioned as a niche cultural streaming service with good technical implementation and content quality. However, improvements in security transparency, contact availability, and privacy compliance would enhance trust and regulatory adherence.

T

teamblau GmbH

teamblau.com

58

teamblau GmbH is a professional digital agency based in Bolzano, Italy, specializing in e-commerce, web design, and online marketing services. They hold a strong regional presence in South Tyrol and are recognized as a certified Shopware Gold Partner in Italy. Their website showcases a comprehensive portfolio of projects and references, targeting businesses seeking digital transformation and e-commerce solutions. The company emphasizes quality, innovation, and customer-centric design in their offerings. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrated with multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Matomo, all managed via Google Tag Manager. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and no explicit security or incident response policies are published. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy, but the website content and business information support credibility. Overall, the site is professional, secure, and compliant, with room for improvement in security headers and domain registration transparency.

D

Duke University

duke.edu

66

Duke University is a prestigious private research university based in the United States, offering a wide range of undergraduate, graduate, and professional education programs. The website reflects its comprehensive academic offerings, research initiatives, global partnerships, and community engagement. The target audience includes students, faculty, staff, alumni, and researchers. The university maintains a strong market position as a leading educational institution with extensive resources and services. Technically, the website employs modern web technologies, including JavaScript libraries, Google Tag Manager, and Microsoft Clarity for analytics, and implements a cookie consent mechanism to comply with privacy regulations. The site is well-structured, mobile-optimized, and accessible, providing a professional user experience.

W

Werbekomplizen

andreassaulig.com

65

Werbekomplizen is a small, established German media agency specializing in branding, web design, print design, e-commerce, and digital marketing services. With over 16 years of experience, the company targets businesses seeking comprehensive marketing and design solutions. The website is professionally designed, mobile-optimized, and presents a clear portfolio of projects, reinforcing its market position as a trusted regional agency. Technically, the website leverages modern web technologies including Webflow CMS, GSAP for animations, jQuery, and smooth scrolling libraries. Hosting appears stable with dedicated nameservers. Performance and mobile responsiveness are excellent, though accessibility features are basic. SEO is adequately addressed through meta tags and structured content. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. No suspicious or vulnerable libraries were detected, and no sensitive data exposure was found. Overall, the website is safe, professional, and trustworthy with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and incident response documentation would elevate the security posture and regulatory compliance.

N

NABU

nabu-netz.de

59

NABU-Netz is a digital collaboration platform operated by NABU, a well-established German non-profit environmental organization. The website serves as a hub for information, communication, and resource sharing among NABU volunteers and staff. It offers multiple integrated services such as a Wiki, Chat, Media Library, Publishing tools, E-Learning, and an Education Calendar, all aimed at supporting the organization's mission and community engagement. The platform emphasizes ease of access through a centralized NABU-Login system, enhancing user experience and security. Technically, the website is built on modern web technologies including Laravel Livewire and Alpine.js, with a focus on responsive design and moderate performance. It employs Matomo analytics for privacy-conscious user tracking and integrates third-party services like CleverReach for newsletter management. The site uses HTTPS with proper CSRF protections and demonstrates good security hygiene, although explicit security headers and incident response policies are not publicly documented. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies in place, aligned with GDPR requirements. However, the absence of a dedicated security policy or vulnerability disclosure program suggests room for improvement in transparency and incident readiness. Overall, NABU-Netz presents a trustworthy, professional, and well-maintained digital presence for a non-profit organization. The platform effectively supports its community with relevant services and maintains a good balance between usability, privacy, and security. Strategic enhancements in security documentation and header implementation could further strengthen its security posture and user trust.

The website asset-image.xyz/login.php is a minimal login portal with a simple form for username and password submission. It lacks any visible business branding, privacy policies, or contact information, which limits the ability to assess its business operations or credibility. The WHOIS data presents a suspicious future domain creation date (July 2025), which undermines trust in the domain's legitimacy. Technically, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. The hosting DNS is managed by Cloudflare, but DNSSEC is not enabled. Security posture is weak due to absence of security headers, no visible HTTPS confirmation, and lack of CSRF protections in the login form. No analytics, tracking, or advertising technologies are present, indicating minimal digital maturity. Overall, the site appears to be a very basic login interface with limited business or security maturity.

The website sozowebdesign.co.uk currently hosts only a default placeholder template page indicating a newly installed or unconfigured site. The domain is registered since 2006 with a reputable UK hosting registrar, ANS Group Ltd (UKFAST), suggesting a legitimate domain ownership. However, the absence of any real business content, contact information, privacy policies, or security features significantly limits the website's credibility and user trust. Technically, the site uses modern CSS frameworks like Tailwind CSS and Google Fonts but lacks advanced SEO, accessibility, and security implementations. There is no evidence of HTTPS enforcement or security headers in the provided data, which are critical for secure web operations. Overall, the site is in an initial setup phase and requires substantial development and compliance work to be business-ready.

S

Südtiroler Weinmuseum

weinmuseum.it

46

The Südtiroler Weinmuseum is a regional cultural institution dedicated to the history and culture of wine in South Tyrol, Italy. It offers museum exhibitions, educational programs, guided tours, and events focused on wine heritage. The museum is positioned as a trusted cultural destination with a strong local presence and a focus on preserving traditional wine varieties and history. Technically, the website employs modern web technologies including JavaScript libraries and cookie compliance tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforcement and security headers, though formal security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, serving a mature audience interested in wine culture.

S

Südtiroler Landesmuseum für Volkskunde

volkskundemuseum.it

41

The Südtiroler Landesmuseum für Volkskunde is a regional cultural museum located in Dietenheim near Bruneck, Italy, dedicated to showcasing the rural life and folk culture of South Tyrol. The museum offers permanent and special exhibitions, events, workshops, and research services, targeting a broad audience including families, schools, and cultural visitors. The website reflects a well-maintained digital presence with clear business information and visitor resources. Technically, the site employs modern web technologies including JavaScript libraries and cookie consent solutions, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and privacy compliance via Iubenda cookie management, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy institution.

P

Pinsent Masons LLP

aboutcookies.org

65

The website www.aboutcookies.org is an educational resource focused on informing users about cookies, their management, and compliance with EU cookie law. It is branded and operated by Pinsent Masons LLP, a reputable law firm, which lends credibility and trustworthiness to the content. The site targets general internet users seeking to understand cookies and legal compliance, providing clear navigation to related topics such as cookie FAQs and EU cookie law compliance guides. The business model appears to be content marketing and informational support aligned with legal services.

P

pide&co

pide-co.com

59

Pide&Co is a small hospitality business based in London specializing in traditional Turkish cuisine including pide, lahmacun, and meze. The website presents a professional and visually appealing design with clear navigation and integration for online ordering via Deliveroo. The business targets local customers seeking authentic Turkish food with options for dine-in and delivery. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. Mobile optimization is good, and the site includes social media links to Facebook, Instagram, and TikTok, enhancing customer engagement. However, the website lacks critical privacy and cookie policies, and no consent mechanisms are present, indicating compliance gaps with GDPR and other privacy regulations. Security headers are not detected, and DNSSEC is not enabled, which could expose the site to certain risks. The WHOIS data shows inconsistencies, notably a domain creation date set in the future, which reduces trustworthiness despite the legitimate business content. Overall, the site is functional and professional but requires improvements in privacy compliance and security hardening to reduce risk and enhance trust.

F

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş.

foxcrofthotels.com

59

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş. operates in the hospitality sector, likely providing hotel and tourism services in Turkey. The website is currently a minimal 'Coming Soon' placeholder page with very limited content and no interactive features or detailed business information. The target audience appears to be potential customers or visitors interested in hospitality services, but the site does not yet provide sufficient information to engage or convert visitors. Technically, the website uses basic web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr. It is hosted behind Cloudflare DNS services, but no detailed hosting or CMS information is available. The site shows basic mobile optimization and accessibility but lacks SEO optimization and advanced technical features. Performance is moderate given the minimal content. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, no security headers are detected, and no privacy or cookie policies are present. There are no forms or data collection points to assess for input security. The domain registration is consistent with the business and country, registered in 2020 with a reputable Turkish registrar. Overall security posture is weak due to missing best practices and policies. The overall risk is moderate given the minimal content and lack of security and privacy features. Strategic improvements should focus on enabling HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers and SEO. These steps will improve trust, compliance, and user engagement.

C

ConFedersicurezza

confedersicurezza.it

49

ConFedersicurezza is an Italian federation coordinating private security associations, serving as a key industry representative and service provider. The website reflects a medium-sized organization with a clear focus on advocacy, publications, events, and member coordination. The technical infrastructure is based on standard web technologies including Bootstrap, jQuery, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and visible CSRF protections on forms. Overall, the site is professional, GDPR compliant, and trustworthy, with room for security enhancements.

Sogei - Società Generale d'Informatica S.p.A. is a wholly owned IT company of the Italian Ministry of Economy and Finance, specializing in providing digital services and infrastructure to public administration entities. The company plays a strategic role in modernizing and simplifying public services, supporting key government departments and agencies with advanced IT solutions. Their offerings include fiscal information systems, digital platforms, and data center management, positioning them as a critical partner in Italy's digital transformation efforts. Technically, the website demonstrates a mature digital infrastructure using modern frameworks like Bootstrap and Matomo for analytics, with a CMS likely based on Adobe Experience Manager. The site is mobile-optimized, accessible, and well-structured, reflecting a high level of digital maturity. Analytics are implemented with privacy considerations, using anonymized data collection. From a security perspective, the site enforces HTTPS and provides a robust cookie consent mechanism, though it lacks explicit security policy documentation and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns with the organization's identity, reinforcing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a reliable digital front for a government IT service provider. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.

M

Mary Anning – Film d’animation pour enfants | Bande-annonce & avant-premières

maryanning.ch

51

The website www.maryanning.ch is a promotional platform for the children's animation film 'Mary Anning', targeting families and children primarily in Switzerland. It offers rich interactive content including a fossil hunting contest across multiple Swiss cities, educational resources for schools, and a mini-game to engage users. The site uses modern web technologies such as HTML5, CSS3, JavaScript, Swiper.js for UI components, and Kaboom.js for the game engine, alongside Google Tag Manager and Google Analytics for tracking. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks explicit privacy and cookie policies, which is a compliance gap given the use of tracking technologies.

Monoloco is a Geneva-based digital agency specializing in custom web development, CMS solutions, intranet systems, and mobile applications for iOS and Android platforms. With over 15 years of experience, the company serves a diverse clientele, delivering tailored digital solutions that address complex business needs. Their portfolio and client testimonials demonstrate a strong market position as a trusted local technology service provider. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive content. Google Fonts and Google Tag Manager are integrated for typography and analytics respectively. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. The CMS appears proprietary, indicating custom development capabilities. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or security policy information is provided. Overall, the website is professional and trustworthy with a solid business credibility score. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the security posture and regulatory adherence of the company’s online presence.

W

Wonderlink

wonderlink.de

58

Wonderlink is a German-based SaaS platform offering a GDPR-compliant 'Link in Bio' solution tailored for influencers, artists, entrepreneurs, and commercial social media users. It positions itself as a privacy-first alternative to competitors like Linktree by eliminating tracking and cookies and hosting exclusively on German servers. The platform supports legal compliance by integrating mandatory legal texts such as Impressum, Datenschutz, and AGB, appealing to commercial users concerned about regulatory adherence. With over 75,000 customers and endorsements from legal partners and media, Wonderlink holds a strong market position in the privacy-conscious segment of link management services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Lottie animations, delivering a fast, mobile-optimized, and accessible user experience. Hosting is managed via German-based DNS and servers, reinforcing its privacy claims. The site lacks some advanced security headers and a public vulnerability disclosure policy but maintains excellent SSL configuration and no tracking mechanisms, enhancing its security posture. From a security perspective, Wonderlink demonstrates strong GDPR compliance, no user tracking, and transparent privacy policies, making it suitable for privacy-sensitive users. However, the absence of incident response contacts and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, the site is professional, trustworthy, and well-aligned with its privacy-centric business model. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contact details to further strengthen trust and security posture.

K

KCWA

kcwa.de

65

KCWA is a small German-based communication agency specializing in marketing and communication services for technical products and brands. The company positions itself as a niche service provider helping technical brands achieve their goals in a connected world. The website is built on WordPress using a commercial Brooklyn theme, indicating a moderate level of digital maturity with a focus on professional presentation and usability. The technical infrastructure includes modern web technologies such as HTTPS, jQuery, and Google Fonts, hosted likely via GoDaddy's domain control services. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a compliance risk under GDPR. Overall, the website is professional and safe but would benefit from enhanced security and privacy measures.

I

Ideo Solutions AS

ideosolutions.no

58

Ideo Solutions AS is a Norwegian-based interactive agency and internet software house specializing in responsive websites, e-commerce, mobile applications, e-learning platforms, digital marketing, and IT outsourcing services. With over 10 years of experience in Norway and a large team of experts in Poland, the company positions itself as a reliable technology partner offering flexible collaboration models including team leasing and outsourcing. Their market presence is supported by a professional website, client testimonials, and a portfolio showcasing diverse projects across sectors such as energy and education. Technically, the website employs modern web technologies including Google Tag Manager for analytics and marketing, and likely uses the Edito CMS platform. The site is mobile-optimized, accessible, and SEO-friendly with a comprehensive cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected in the HTML source, and the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and enforces cookie consent with granular controls, but lacks visible security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website demonstrates a good security posture but could improve by implementing security headers and publishing clear security policies. The overall risk assessment suggests a legitimate and professional business with minor gaps in domain registration transparency and security policy disclosures. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing incident response and terms of service documents to strengthen trust and compliance.

Landesmusikrat Brandenburg e.V. is a well-established non-profit umbrella organization representing music associations, institutions, and individuals in Brandenburg, Germany. Founded in 1990, it serves as an advocate and advisor in music policy, organizes events, and offers educational and funding programs. The website reflects a professional and content-rich platform targeting musicians, cultural institutions, and the general public interested in music. Technically, the site uses modern web technologies including a CMS likely Drupal, JavaScript libraries for UI components, and is hosted on rzone.de. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Cit Studio is a small creative media studio based in Italy specializing in cinema and video production services. The website presents a professional and visually appealing interface targeting film and media professionals or clients seeking creative video production. The technical infrastructure is built on WordPress with common web technologies such as Bootstrap and jQuery, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. Overall, the site is legitimate and safe, but enhancing privacy compliance and security best practices would strengthen trust and reduce risk.

A

Apple Inc.

icloud-content.com

74

Apple's iCloud developer site provides a comprehensive platform for developers to securely store and sync user data across Apple devices using iCloud and CloudKit technologies. The site offers detailed resources, telemetry, dashboards, and push notification tools, positioning Apple as a market leader in cloud services and developer tools. The technical infrastructure is modern and optimized for performance and accessibility, leveraging Apple's proprietary technologies and fonts. Security posture is strong with HTTPS enforced and privacy-respecting telemetry, though explicit security headers and incident response contacts are not evident on this page. Overall, the site demonstrates high professionalism, trustworthiness, and a mature digital presence.

Yieldbird Sp. z o.o. is a Poland-based programmatic advertising partner specializing in maximizing publisher revenue through tailored technology, demand partnerships, and expert services. With over 15 years of experience and a client base spanning 1000+ websites across 40 countries, Yieldbird holds a strong market position supported by its parent company Agora, a major European publishing group. The company offers a comprehensive platform including advanced header bidding, video solutions, and rich media ad formats, complemented by consulting and programmatic deal management services. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and a consent management platform to ensure compliance and user experience. The hosting is managed via home.pl DNS servers, consistent with its Polish base. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

F

First Music Contact

firstmusiccontact.com

62

First Music Contact is a small, Ireland-based non-profit organization dedicated to supporting musicians and the independent music sector through various projects, consultancy services, and development programs. The website is professionally designed using the Squarespace platform, featuring clear navigation and a focus on artist support and regional development. Technically, the site uses modern web technologies and is hosted on Squarespace's CDN, providing good performance and mobile optimization. Security posture is solid with HTTPS enforced, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and social media presence suggest a genuine organization. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security practices.

M

Meta Platforms, Inc.

internet.org

79

Meta Platforms, Inc. is a global leader in social technology, focusing on building immersive experiences through virtual and augmented reality, AI, and social media platforms. The company operates flagship products such as Facebook, Instagram, WhatsApp, and Meta Quest hardware. The website reflects a mature digital presence with comprehensive content about their mission, technologies, and corporate actions. The technical infrastructure is robust, leveraging modern web technologies and Meta's own CDN for fast and reliable content delivery. Security posture is strong with HTTPS, security headers, and content security policies in place, though WHOIS data is unavailable, likely due to privacy protections. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

M

Mesecentrum Nyitólap - IGYIC

mesecentrum.hu

45

Mesecentrum.hu is a Hungarian media website focused on children's literature, cultural content, and educational media. The site offers book recommendations, literary critiques, interviews, event information, essays, and podcasts, targeting a general audience interested in Hungarian children's culture. The website appears to be a niche media outlet with a small but consistent presence since its domain registration in 2020. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Hotjar for user behavior tracking. The site is mobile-optimized and has a professional design with clear navigation, although accessibility features are basic. Security posture is moderate with HTTPS enforced but lacks important security headers and visible privacy or cookie policies. No direct company contact emails or phone numbers are found, but a contact form is available. Overall, the site is legitimate and stable but could improve privacy compliance and security best practices.

I

Initiative Open Source LMS

opensourcelms.de

49

The website opensourcelms.de serves as a German-language advocacy platform promoting free and open-source learning management systems (LMS) for educational institutions. It represents a coalition of major LMS communities including ILIAS, Stud.IP, and Moodle, supported by numerous universities and educational organizations across Germany. The site emphasizes the importance of sustainable funding, policy support, and the preservation of digital sovereignty in education through open-source software. Technically, the site is built with standard web technologies including HTML5, CSS3, and JavaScript with jQuery, and is hosted with DNS services from DomainControl (GoDaddy). The website is well-structured, mobile-optimized, and provides extensive content relevant to its audience. Security-wise, while HTTPS usage is assumed, explicit security headers and incident response policies are not evident, and no forms collect sensitive data except a downloadable PDF form. Contact is primarily via an obfuscated email address. Overall, the site is legitimate, trustworthy, and serves an important role in the German education sector.

K

KAYAK

kayak.fr

51

The analyzed website is a CAPTCHA verification page for the French domain of KAYAK, a well-known global travel metasearch engine. The page is designed to verify that visitors are legitimate users and not automated bots, employing Google reCAPTCHA Enterprise technology. Due to this security mechanism, the actual website content is inaccessible, limiting the ability to perform a full content and compliance analysis. KAYAK operates under Booking Holdings Inc., serving travelers seeking flights, hotels, and car rentals by aggregating offers from multiple providers. The domain WHOIS data is unavailable, which restricts verification of domain legitimacy and ownership details. The presence of advanced bot mitigation indicates a mature security posture, but the lack of visible privacy, cookie, or contact information on this page reduces transparency and user trust.

K

Köln Dialog

koeln-dialog.de

44

Köln Dialog is a specialized online marketing agency based in Köln, Germany, offering a comprehensive suite of digital services including web design, web development, SEO, Google Ads, social media management, and reputation management. The company targets businesses seeking tailored digital marketing solutions, with a strong emphasis on individual client needs and measurable success. Their market position is that of a trusted regional agency with a portfolio spanning various sectors, notably real estate and legal marketing. The website reflects a professional and consistent brand image, supported by client testimonials and trust certifications. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user engagement capabilities. Hosting is provided by kasserver.com, and the site demonstrates good mobile optimization and accessibility. Security practices include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. The security posture is solid with good SSL configuration and secure form handling, but the absence of a public security policy or incident response contact suggests room for improvement. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Business credibility is high, supported by transparent contact information, professional content, and trust signals. Overall, Köln Dialog presents a trustworthy and professional digital presence suitable for its business model. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and compliance.

M

Website is not found

mangomarketing.de

47

The website www.mangomarketing.de currently serves a placeholder page indicating that the site has been unpublished or deleted by the owner. No active business content, contact information, or policies are present. The domain uses name servers associated with rzone.de and is in a 'connect' status, but lacks detailed WHOIS registrant information. The absence of content and security features suggests the website is not operational at this time. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with resources hosted on onecdn.io. There is no evidence of a CMS or advanced frameworks. The page is mobile responsive at a basic level but lacks SEO optimization and accessibility features. No security headers or HTTPS information were detected in the provided data. Security posture is weak due to the lack of HTTPS, security headers, and absence of privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also indicating no active user engagement. The WHOIS data is minimal and does not provide sufficient information to verify legitimacy or business claims. Overall, the website is inactive and does not currently represent an operational business presence. Strategic recommendations include reactivating the website with proper security configurations, publishing privacy and cookie policies, adding contact information, and improving technical and content quality to establish trust and compliance.

Deutsche Eigentümer Allianz BVFI24 operates as a real estate community and membership platform targeting property owners, investors, and individuals interested in real estate acquisition primarily in Germany and the D-A-CH region. The website offers networking opportunities, educational content, expert access, and VIP property search services, positioning itself as a modern and comprehensive real estate alliance. Technically, the site is built on a modern stack with CDN delivery, PWA support, and uses Facebook Pixel for marketing analytics. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and incident response information. Privacy compliance is partial due to missing privacy policy and terms of service pages. Overall, the site is professional and trustworthy but could improve transparency and security practices.

S

SemantycaWeb: Realizzazione siti web Prato | Web agency Prato

semantycaweb.it

49

SemantycaWeb is a small, established web agency based in Prato, Italy, specializing in custom website development, e-commerce solutions, SEO, web marketing, social media marketing, and mobile app development. With over 15 years of experience, the company targets businesses in the Tuscany region seeking to enhance their digital presence. The website demonstrates a good level of technical maturity, employing modern web technologies including PWA features, JavaScript libraries like jQuery and SweetAlert2, and integrates cookie consent management via Iubenda. The presence of structured data enhances SEO and local business visibility. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and explicit consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target market.

O

Oral-B Professionals

oralbprofessional.de

10

Oral-B Professionals operates a specialized online platform targeting dental healthcare professionals in Germany, providing educational resources, courses, and webinars to keep practitioners updated on the latest innovations in dentistry. The platform is part of the globally recognized Oral-B brand under Procter & Gamble, positioning it strongly within the healthcare education sector. The website leverages Salesforce Experience Cloud technology and is hosted on Microsoft Azure DNS infrastructure, indicating a robust and scalable technical foundation. Integration with multiple payment processors and marketing tools reflects a mature digital ecosystem supporting user engagement and monetization. Security posture is strong with HTTPS enforcement and a strict Content-Security-Policy, complemented by GDPR-compliant cookie consent via OneTrust. However, the absence of explicit privacy policy and terms of service pages, as well as direct contact information, represents areas for improvement in transparency and compliance. Overall, the platform demonstrates a professional and trustworthy presence suitable for its target audience.

S

Schloss Wolfsthurn – Südtiroler Landesmuseum für Jagd und Fischerei

wolfsthurn.it

48

Schloss Wolfsthurn operates as a regional cultural museum in South Tyrol, Italy, focusing on the history of hunting and fishing. The museum is housed in a historic baroque castle and offers exhibitions, educational programs, and events targeting tourists, families, and educational groups. The website reflects a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses modern web technologies including JavaScript libraries and cookie consent management, ensuring GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

T

Tovuti LMS

tovuti.io

70

Tovuti LMS is a US-based company founded in 2017 that offers a comprehensive learning management system platform designed to help organizations create courses, engage learners, and manage training efficiently. The company positions itself as a fast, simple, and all-in-one LMS solution with AI-powered course creation, dynamic learning experiences, and robust reporting capabilities. Their market presence is supported by positive customer testimonials, case studies, and integration with major marketing and analytics platforms. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and multiple analytics and advertising tools, ensuring a responsive and professional user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information are not publicly available. The absence of WHOIS registration data for the domain introduces some uncertainty about domain legitimacy, but the overall business credibility and digital maturity are high. Strategic recommendations include improving transparency on security policies, incident response, and domain registration verification to enhance trust further.

C

airbank.co.uk

cpplus.com

53

The website airbank.co.uk currently serves primarily as a parked domain with minimal content and advertising placeholders. There is no substantive business information, contact details, or user engagement features present. The domain is registered since 2014 with Dynadot, indicating a stable registration but no clear business presence or branding. Technically, the site uses basic HTML, CSS, and JavaScript with Google Adsense and Bodis advertising scripts integrated. The site lacks modern CMS or frameworks and shows only basic mobile optimization and accessibility features. Security posture is weak with no security headers detected and no cookie consent mechanisms, despite having a privacy policy page. No forms or data collection mechanisms are present, reducing risk but also limiting business functionality. Overall, the site appears to be a placeholder or parked domain rather than an active business website.

P

Production Paradise

productionparadise.com

70

Production Paradise operates as a leading online directory and showcase platform dedicated to commercial creatives in the film, photography, and post-production industries. The website offers curated resources including member directories, spotlight and showcase magazines, image search, and location finder tools, targeting commercial creatives and service providers globally. The business model is subscription-based, providing visibility and marketing opportunities to its members. The company is established since 2003 and appears to be headquartered in Spain, with a medium-sized market presence and a strong brand identity. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Twitter Ads. The site is mobile-optimized with good accessibility and SEO practices. Security measures include HTTPS enforcement and use of Google reCAPTCHA Enterprise, though some security headers are not explicitly present, suggesting room for improvement. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy verification, which should be addressed to enhance trust. Overall, Production Paradise presents a professional, trustworthy, and well-maintained digital presence with comprehensive content and strong business credibility. Strategic recommendations include improving security headers, verifying domain registration details, and enhancing incident response transparency to further strengthen security and compliance.

NABU LV Sachsen is a regional branch of the well-established German non-profit environmental organization NABU - Naturschutzbund Deutschland e.V. The website serves as a comprehensive platform for nature conservation activities, environmental education, advocacy, and community engagement within the Saxony region. It offers news, events, donation opportunities, and volunteer coordination, targeting environmentally conscious individuals and supporters in Germany. The organization maintains a strong market position as a reputable non-profit with consistent branding and trust indicators such as official contact details and privacy compliance. Technically, the website is built on the Imperia CMS platform with Bootstrap for responsive design, enhanced by JavaScript libraries including jQuery and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Privacy and cookie policies are clearly presented with a consent mechanism, reflecting GDPR compliance. The use of Matomo and Google Analytics indicates moderate user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and employs security cookies for bot detection. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present and could be improved. No vulnerabilities or exposed sensitive data were detected. Incident response and security policy information are not prominently available, suggesting room for enhancement in transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. It effectively balances user experience, privacy, and security, making it a reliable resource for its audience. Strategic improvements in security headers and incident response visibility would further strengthen its posture.

B

Bundesministerium für Wirtschaft und Energie (BMWK)

existenzgruendungsportal.de

69

The Existenzgründungsportal is an official German government website operated by the Bundesministerium für Wirtschaft und Energie (BMWK). It serves as a comprehensive informational portal dedicated to supporting individuals interested in professional self-employment and business startups in Germany. The site offers extensive resources including guides on business plan creation, financing, company registration, insurance, consulting, and FAQs, positioning itself as a trusted authority in the entrepreneurship ecosystem. Technically, the website employs modern web technologies such as jwplayer for media, etracker for analytics with privacy-respecting configurations, and is hosted on managed IP infrastructure. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, it enforces HTTPS, uses secure cookies, and respects user privacy, though it could enhance security headers and publish explicit security policies. Overall, the website demonstrates a strong security posture and high business credibility, making it a reliable resource for its target audience.

Art Screen TV is a Swiss-based company specializing in representing contemporary artists and sponsoring prestigious international art events such as the Florence Biennale. The website serves primarily as an informational platform showcasing the company's partnerships, artist roster, and upcoming events. Technically, the site is built with basic HTML and CSS, leveraging external fonts and icon libraries, and hosted by Infomaniak Network SA, a reputable Swiss hosting provider. The website is accessible via HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security posture. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the site is functional but basic, with limited interactive features and minimal tracking or analytics.

B

Banque Cantonale du Fribourg

bcf.ch

58

Banque Cantonale du Fribourg (BCF) is a well-established Swiss cantonal bank providing a broad range of financial services including retail and private banking, asset management, and corporate banking primarily serving the canton of Fribourg and surrounding regions. The website reflects a professional and modern digital presence built on Nuxt.js with integrated user consent management, indicating a mature technical infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, supporting BCF's position as a reputable regional financial institution.

W

Domain Default page

waxmann-verlag.de

34

The website waxmann-verlag.de currently hosts only a default placeholder page generated by Plesk, indicating that no active website content or business information is published. The domain is configured with AWS DNS nameservers, suggesting hosting on Amazon infrastructure, but no SSL certificate or HTTPS enforcement is evident. The absence of privacy policies, contact information, or terms of service further indicates that the site is not yet operational or publicly serving business purposes. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with Plesk platform integration but lacks advanced frameworks or CMS. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site presents a low trust profile and minimal digital maturity.

G

Google LLC

youtube.it

79

YouTube, owned by Google LLC, is the world's leading online video sharing and streaming platform. It offers a vast array of video content including entertainment, education, music, and user-generated videos, serving a global audience. The platform operates on an advertising-based business model supplemented by premium subscription services. Its market position is dominant in the online video industry, supported by a strong brand and extensive user base. Technically, YouTube employs a modern web technology stack including Polymer, Web Components, and Google APIs, hosted on Google Cloud infrastructure. The website is optimized for both desktop and mobile platforms, delivering fast performance and good accessibility. SEO and metadata practices are well implemented, enhancing discoverability. From a security perspective, YouTube enforces HTTPS, employs robust security headers, and integrates advanced bot protection mechanisms. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, YouTube demonstrates a high level of digital maturity, security, and compliance. The domain is legitimate and longstanding, with WHOIS privacy protection typical for large enterprises. The platform's extensive analytics and advertising integrations are balanced with strong privacy controls. Strategic recommendations include maintaining regular security audits, enhancing incident response transparency, and continuing to evolve privacy practices to meet emerging regulations.

The website ctaonline.it is currently a parked domain landing page with minimal content primarily aimed at advertising the domain for sale. There is no visible business presence, contact information, or privacy and security policies. The technical infrastructure relies on basic HTML, CSS, JavaScript, and an iframe loading external content over HTTP, which poses security concerns. The domain is newly registered in January 2024 and lacks DNSSEC and other trust indicators. Overall, the site lacks professionalism, security maturity, and compliance, making it unsuitable for business operations in its current state.

E

entour.it

entour.it

4

The website entour.it appears to be a parked domain primarily serving advertising content related to travel keywords. There is no clear business presence, contact information, or meaningful content describing services or company details. The technical infrastructure relies on basic HTML, CSS, and JavaScript with Google Adsense and Bodis advertising networks integrated. No CMS or advanced frameworks are detected. Security posture is weak with no HTTPS detected in the provided data, no security headers, and no privacy or cookie consent mechanisms. The domain WHOIS is privacy protected, which is typical for parked domains but reduces trust. Overall, the site lacks professionalism and business credibility, posing a low trust risk but minimal security risk due to limited functionality.

W

World Association of Girl Guides and Girl Scouts

wagggs.org

67

The World Association of Girl Guides and Girl Scouts (WAGGGS) operates as the largest voluntary global movement dedicated to empowering girls and young women. Their website reflects a professional and well-structured platform offering educational programs, leadership development, advocacy, and capacity building for national associations. The organization targets a global audience of girls, young women, supporters, and volunteers, emphasizing non-profit and social impact activities. The site includes clear calls to action for donations and volunteering, supported by comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, Facebook SDK, and Google Analytics. The site is mobile-optimized with good accessibility and SEO practices, delivering a moderate performance. Security posture is strong with HTTPS enforced and no exposed sensitive data, though there is room for improvement in publishing explicit security policies and enhancing HTTP security headers. No signs of WAF or content blocking were detected, and the site is fully accessible. WHOIS data is unavailable due to privacy protection, which is common for non-profit organizations. The domain appears legitimate and consistent with the organization's branding and global presence. Social media integration is robust, linking to official Instagram, Facebook, LinkedIn, and YouTube channels. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure mechanisms, and enhancing security headers to further strengthen the security posture.

The website www.twint.ch is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, including business information, policies, or contact details. The site appears to be related to the finance sector, likely a payment or financial service given the domain and industry context, but no direct content confirms this. The technical infrastructure includes Cloudflare protection, indicating a focus on security, but the lack of accessible content limits further analysis. Security posture cannot be fully assessed due to the blocked content, but the presence of Cloudflare WAF is a positive indicator. Overall, the site’s risk assessment is limited by the lack of accessible data, and strategic recommendations focus on improving transparency and accessibility post-WAF challenge.

E

EFCO & HPA

efcohpa.eu

10

EFCO & HPA is a European industry association representing the camping and caravan sector at the European level. The organization focuses on advocacy and representation to European authorities to promote and defend the interests of campsite, holiday, and caravan park businesses. The website is professionally designed using the Wix platform and provides relevant information for tourism professionals and industry stakeholders. Technical infrastructure is standard for Wix-hosted sites, with moderate performance and basic mobile optimization. Security posture is good with HTTPS enforced, though security headers and incident response contacts are absent. Privacy and cookie policies are present, indicating GDPR awareness. Overall, the website reflects a credible and established industry body with room for improvement in security and contact transparency.

A

AVI.DAT GmbH

hortpro.de

47

HortPRO, operated by AVI.DAT GmbH, is a specialized digital solution designed for child care and after-school care facilities in Germany. The platform offers a comprehensive web-based attendance and group book system tailored to the needs of kindergartens and similar institutions. It leverages modern technologies such as RFID for efficient child check-in/out and provides an intuitive user experience accessible from any internet-enabled device. The company positions itself as a niche provider with a strong focus on GDPR compliance and operational efficiency for childcare providers. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The infrastructure supports mobile responsiveness and good performance, with hosting servers located in Germany ensuring data sovereignty. The site employs HTTPS with excellent SSL configuration but lacks some advanced security headers. The cookie consent mechanism is robust, reflecting a mature approach to privacy. From a security perspective, the site demonstrates good practices including secure forms and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is partially consistent with the business claims, showing no suspicious patterns. Overall, HortPRO presents a professional, trustworthy, and GDPR-compliant digital service for childcare providers, with room for improvement in security transparency and technical hardening. The website quality and business credibility are high, supporting its market position as a specialized SaaS provider in the education sector.

The website at adocnazionale.it is currently inaccessible due to a 403 Forbidden error, indicating that access to the content is blocked or restricted. The domain is well-established, created in 2012 with DNSSEC enabled, suggesting legitimacy and a stable registration. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact information severely limit the ability to assess the business or its services. Technically, the site uses basic HTML and CSS with Google Fonts, but lacks modern frameworks or CMS indicators. Security posture is moderate due to DNSSEC and SSL presence, but missing security headers and policies reduce overall security confidence. Overall, the site appears to be down or access-restricted, resulting in a low AI score and limited insights.