Security Directory

C

cayou media

cayou-media.de

48

Cayou media is a small, specialized web and graphic design agency based in Halle and Leipzig, Germany. They provide a range of digital services including responsive web design, web programming, SEO, online shop development, corporate identity, and social media management. The company emphasizes innovation, individuality, and user-friendly solutions tailored to client needs, positioning itself as a trusted local partner with a professional and consistent brand presence. Technically, the website is built on WordPress using modern themes and plugins, including LayerSlider and Usercentrics for consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and privacy compliance well addressed via GDPR-aligned policies and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant, with room for improvement in security best practices and accessibility.

M

Media City Atelier GmbH

mdr-die-studiotour.de

54

MDR Die Studiotour is a small media-focused business operating in Germany, offering guided tours through the studios of Mitteldeutscher Rundfunk and the media city Leipzig. The website provides detailed information about tour offerings, booking procedures, and related catering services through a partner. The business targets a general audience including children aged 12 and above, positioning itself as a niche regional provider of educational and entertainment tours in the media sector. Technically, the website is built on WordPress with modern plugins and scripts, ensuring a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious content or blocking mechanisms.

N

netpoint media gmbh

netpoint-media.de

56

Netpoint Media GmbH is a German-based online advertising company established in 2001, specializing in high-quality online media marketing with a strong focus on travel and tourism sectors. The company operates a broad portfolio of digital advertising services including programmatic advertising and addressable TV, targeting media planners, advertisers, and publishers. Their market position is that of a leading independent online media marketer in Germany, supported by memberships in industry bodies such as AGOF, OVK, and BVDW. Technically, the website is built with standard modern web technologies (HTML5, CSS3, JavaScript) and hosted on professional infrastructure (dogado.de). The site is mobile-optimized with good SEO and basic accessibility features. Security posture is moderate with HTTPS and a Content-Security-Policy header implemented, but lacks additional security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR in terms of privacy policy presence, though cookie consent is missing. Contact is primarily via a web form, with social media presence on Xing and LinkedIn. The domain registration data aligns well with the business claims, indicating legitimacy and consistency.

W

Wiener Wohnen

wienerwohnen.at

64

Wiener Wohnen operates as the largest municipal housing provider in Europe, delivering affordable and quality public housing in Vienna. The website serves tenants and prospective tenants with comprehensive information about housing options, application procedures, tenant services, and community news. The organization maintains a strong market position as a key government entity in the real estate sector, focusing on social housing and tenant support. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multimedia players and accessibility tools such as JWPlayer and ReadSpeaker. The site is mobile-optimized, accessible, and uses Matomo analytics with a clear cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced transparency and readiness. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its public sector mission with clear navigation, relevant content, and user-friendly services. Strategic recommendations include publishing a dedicated security policy, incident response information, and implementing additional security headers to further strengthen the security posture.

P

Pronosoft

pronosoft.com

70

Pronosoft is a French media website specializing in sports betting assistance, offering pronostics, betting tips, live scores, statistics, contests, and proprietary software products. The site targets French-speaking sports bettors and pronostiqueurs, providing a comprehensive platform with a long-standing presence since 2000. The business model relies on content, software sales, advertising, and affiliate marketing partnerships. Technically, the site uses a traditional web stack with jQuery, Google Analytics, and multiple ad networks integrated via header bidding technologies. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and published security policies. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy for its niche audience but could improve security posture and transparency.

A

Domain Default page

araoo.tech

44

The website araoo.tech currently hosts a default placeholder page generated by Plesk, a popular web hosting control panel. The content is informational about Plesk services and related tools but does not represent an active business or service offering. The domain is registered with OVH since 2016, indicating a legitimate registration, but the website itself is not yet developed or customized. Technically, the site uses standard HTML5, CSS3, and JavaScript with Plesk branding assets. It is hosted on OVH infrastructure and shows moderate performance and good mobile optimization. However, there are no advanced frameworks or CMS detected, and no analytics or tracking scripts are present. The site lacks security headers and DNSSEC is not enabled, which are areas for improvement. From a security perspective, the site uses HTTPS (implied by the URL scheme), but no additional security headers or policies are implemented. There are no privacy, cookie, or terms of service policies, and no contact or incident response information is provided. No vulnerabilities or suspicious content were detected, but the lack of security best practices and compliance documentation lowers the security posture. Overall, the site is a basic placeholder with minimal content and low business credibility. It is safe for general audiences but lacks any meaningful business or security features. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing contact information to improve trust and compliance.

W

wohnfonds_wien

hauskunft-wien.at

47

Hauskunft is a municipal service operated by wohnfonds_wien, providing free and subsidized consulting for building renovations and energy efficiency upgrades in Vienna. The website offers comprehensive information about their services, including orientation consultations, future checks, and support for creating renovation concepts. The target audience includes homeowners, property managers, architects, and planners in Vienna. The service is well integrated with city initiatives like 'Raus aus Gas' and collaborates with partners such as the City of Vienna and klimaaktiv-gebaut.at. Technically, the website uses modern web technologies, including Matomo for privacy-friendly analytics and Swiper.js for interactive content. It is well optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and secure forms, though incident response and vulnerability disclosure information could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a government service.

The website www.icloud.com is the official web portal for Apple's iCloud service, a cloud storage and cloud computing platform integrated deeply within the Apple ecosystem. It offers users access to photos, mail, notes, documents, and other personal data synced across Apple devices. The site is professionally designed with consistent branding and clear navigation, targeting Apple device users and general consumers seeking secure cloud services. The business model is subscription-based with free and paid tiers, positioning Apple as a leading technology provider in consumer cloud services. Technically, the site employs modern web technologies including strict Content-Security-Policy headers, HTTPS encryption, and Apple proprietary JavaScript libraries. The infrastructure is hosted on Apple’s own platforms, ensuring high performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates strong best practices such as strict CSP, HTTPS enforcement, and restricted form actions. However, it lacks visible cookie consent mechanisms and publicly available security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the site is trustworthy and professional with a high security posture and excellent business credibility. The absence of WHOIS data is likely due to privacy protections common for large corporations. Strategic recommendations include adding explicit cookie consent, publishing security policies, and providing vulnerability disclosure information to enhance transparency and compliance.

H

Hetzner Online GmbH

your-objectstorage.com

78

Hetzner Online GmbH is a well-established German hosting and data center operator founded in 1997, offering a broad range of IT infrastructure services including dedicated servers, cloud hosting, and scalable S3-compatible Object Storage solutions. The company emphasizes GDPR compliance, sustainability through 100% green electricity, and transparent pricing models. Their Object Storage product targets businesses and private customers needing flexible, secure, and scalable storage solutions with pay-as-you-go billing. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and uses SilverStripe CMS. It integrates Matomo analytics for privacy-conscious user tracking and provides a responsive, accessible, and well-structured user experience. The hosting is self-managed by Hetzner, ensuring good performance and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and secures forms with CSRF tokens. However, explicit security headers are not clearly visible in the HTML, and no dedicated security or incident response pages are found. The WHOIS data for the domain is unavailable, which limits domain registration trust analysis but does not detract from the professional presentation and trust signals on the site. Overall, Hetzner Online demonstrates a strong security posture, excellent privacy compliance, and a mature business model. Strategic recommendations include publishing explicit security policies, enhancing security headers, and providing clear incident response contacts to further strengthen trust and compliance.

F

Football Agency Cup GmbH

agency-cup.com

56

Football Agency Cup GmbH operates a well-established football tournament event for Germany's marketing and creative agencies, positioning itself as the largest industry event of its kind since 1988. The website is professionally designed using the Wix platform, offering good content quality and user experience tailored to its target audience. However, the technical infrastructure is basic with moderate performance and limited advanced SEO or accessibility features. Security posture is average with no evident security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Overall, the digital maturity is moderate with room for improvement in security and compliance.

H

Hopp Foundation for Computer Literacy & Informatics gGmbH

hopp-foundation.de

50

The Hopp Foundation for Computer Literacy & Informatics gGmbH is a small non-profit organization based in Germany focused on promoting digital education in the Rhein-Neckar metropolitan region. Their website offers comprehensive information about workshops, teaching materials, and support services for teachers, school leaders, students, and parents. The foundation emphasizes practical and innovative learning formats to foster digital literacy and informatics skills. Technically, the website is built on a modern stack with Kirby CMS, uses JavaScript libraries for UI enhancements, and is hosted on a domain managed by DomainControl. The site is mobile-optimized, well-structured, and provides clear navigation and professional design. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No tracking or advertising scripts were detected, reflecting a privacy-conscious approach. WHOIS data is minimal but consistent with a legitimate educational entity. Overall, the website is trustworthy, professional, and well-suited for its educational mission.

N

Northwestern University Knight Lab

knightlab.com

57

Northwestern University Knight Lab is an academic and research community focused on advancing journalism and media innovation through exploration, experimentation, and open-source storytelling tools. The Lab serves a diverse audience including students, educators, journalists, and media makers, providing tools, classes, and research initiatives that push the boundaries of storytelling and media technology. The Lab is well-positioned as a leader in media innovation with strong ties to Northwestern University and a global user base for its open-source projects. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including Google Analytics for tracking. The site is mobile-optimized with good SEO and accessibility basics, hosted likely on Northwestern's infrastructure or associated CDNs. However, there is room for improvement in security headers and privacy compliance, as no explicit privacy or cookie policies are found, and no cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities in the provided content. The absence of security headers and privacy policies are notable gaps. The WHOIS data is unavailable, typical for edu subdomains, but the domain's affiliation with Northwestern University and consistent website content support legitimacy. Overall, the site demonstrates a solid security posture but could enhance compliance and transparency. The overall risk is low given the academic nature and reputable affiliation, but strategic improvements in privacy, security headers, and user consent would strengthen trust and compliance.

myCicero is an established Italian mobility services platform founded in 2012, offering a range of mobility management solutions for transport operators, public entities, large companies, and events. The website promotes both B2B services and a consumer-facing mobility app, MooneyGo, which replaces the original myCicero app. The platform positions itself as the first Global Distribution System (GDS) for mobility in Italy, targeting a broad audience from institutional clients to end users. The site content is professionally presented with good design and navigation, though it lacks visible privacy and security policy disclosures. Technically, the website uses modern frontend technologies including Bootstrap 5 and Google Fonts, with a responsive design suitable for mobile devices. However, no CMS or backend technologies are evident from the homepage HTML. Performance is moderate, and SEO and accessibility features are basic but present. No analytics or tracking scripts were detected in the provided content, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by domain), but no DNSSEC is enabled and no security headers are visible in the HTML content. There are no published privacy, cookie, or terms of service policies, nor any contact information for security incidents or data protection officers. The WHOIS data shows a consistent and legitimate domain registration since 2012 with no privacy protection, supporting trustworthiness. Overall, the security posture is moderate but could be improved with better policy disclosures and technical security controls. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information for security and privacy concerns to enhance trust and compliance.

Gruppo Trentasei is a small Italian digital design studio that recently transformed into the Digital Design Studio of Jakala Civitas, indicating a strategic partnership or acquisition. The website serves primarily as an announcement page with limited content, focusing on branding and corporate messaging. Technically, the site uses modern HTML5 and CSS3 standards with Google Fonts integration, and it is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks security headers and visible privacy or cookie policies, which are important for compliance and trust. No contact information or forms are present, limiting user engagement and transparency. Overall, the site is professional but minimalistic, with room for improvement in privacy compliance and security best practices.

S

Setup Type

setuptype.com

57

Setup Type is a Slovak-based design studio and type foundry specializing in font creation, branding, and lettering services. Founded in 2009 by Ondrej Jób, the company targets creative professionals and agencies seeking high-quality typographic and branding solutions. The website reflects a niche market position with a strong focus on design aesthetics and font retail. Technically, the website employs modern web technologies including HTTPS, Google Analytics, and cookie consent mechanisms, providing a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social media presence support business credibility. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and enhanced security practices.

B

Bundesanstalt für Materialforschung und -prüfung (BAM)

bam.de

61

The Bundesanstalt für Materialforschung und -prüfung (BAM) is a German federal scientific research institute specializing in material research and testing. It operates under the Federal Ministry for Economic Affairs and Energy and serves a broad audience including researchers, industry professionals, and government entities. The website provides comprehensive scientific content, official portals, and public services related to material safety and technology transfer. Technically, the site uses modern web technologies with good mobile optimization and accessibility. Security posture is strong with HTTPS and privacy-respecting analytics (Matomo) that anonymize user data and require consent. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site reflects a professional, trustworthy government entity with excellent content quality and privacy compliance.

D

DRI and Syloé

produhost.net

51

The website serves as a login portal for ÉVA Pilote, an extranet management platform developed collaboratively by DRI and Syloé. It targets business users who require tailored tools to manage hosted applications and services, including eco-indicators for digital sobriety. The platform positions itself as a niche B2B SaaS solution with a focus on visibility and control over application environments. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap, delivering a responsive and professional user interface. However, the absence of visible security headers and unclear SSL status suggests moderate security maturity. The lack of privacy and cookie policies indicates gaps in compliance with data protection regulations. WHOIS data is missing, raising concerns about domain registration legitimacy despite the professional appearance and partner affiliations. Overall, the site is functional and business-focused but requires improvements in security posture and compliance documentation.

SG Productions Editions International (SGPE) is a Swiss-based small media company specializing in music production, publishing, digital distribution, and art promotion. Founded in 1996, it operates a Latin music radio station and an art promotion platform, positioning itself as a niche player in the international music and art markets. The website provides basic informational content with limited interactive features and minimal contact details. Technically, the site uses a simple hosting page builder with standard web technologies and is hosted on Infomaniak infrastructure. The site lacks advanced SEO, accessibility, and mobile optimization features. Security posture is weak due to absence of security headers, privacy policies, and incident response information, although no critical vulnerabilities or malicious content were detected. Overall, the site is functional but requires improvements in privacy compliance and security best practices to enhance trust and user confidence.

W

waldbach medien

waldbachmedien.ch

50

waldbach medien is a small Swiss technology company specializing in web development, digital media, and consulting services with over 20 years of experience. The company targets businesses and organizations seeking tailored internet solutions including responsive websites, webshops, multimedia presentations, and IoT device development. Their market position is that of a niche local specialist in Winterthur, Switzerland, offering a broad range of digital services supported by a proprietary CMS platform (WebZen). The website reflects a professional and consistent brand image with clear navigation and relevant content.

E

Etat de Genève

ge.ch

70

The website www.ge.ch is the official online portal for the République et canton de Genève, serving as the authoritative source for government information, public services, and administrative procedures for residents and businesses in the Canton of Geneva, Switzerland. It offers comprehensive access to official news, e-demarches (online administrative procedures), publications, and institutional information, positioning itself as a critical government communication and service platform. Technically, the site is built on the Drupal CMS platform, leveraging modern web technologies including responsive design, JavaScript, and Matomo analytics for user tracking with consent. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Hosting details are not explicitly stated but are likely managed by government infrastructure. From a security perspective, the site enforces HTTPS and uses a consent-based cookie banner compliant with GDPR. While explicit security headers are not visible in the HTML, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page is noted as an area for improvement. The WHOIS data confirms the domain is registered to the official government entity, reinforcing legitimacy. Overall, the site is highly trustworthy, professionally designed, and well-maintained, with strong privacy compliance and a clear focus on public service. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

F

403 - Forbidden

fondazione-experience.com

38

The website fondazione-experience.com currently serves a 403 Forbidden error page, indicating that access to the content is restricted or blocked. There is no visible business information, contact details, or policy documents available on the site. The domain is relatively new, registered in November 2022 via GoDaddy.com, LLC, and hosted on SiteGround servers. The technical infrastructure is minimal, with basic HTML and CSS and no advanced frameworks or CMS detected. Security configurations are basic, with no DNSSEC enabled and no security headers observed. The lack of accessible content and contact information significantly limits the ability to assess the business or security posture comprehensively.

A

AIESEC International Inc.

aiesec.it

42

AIESEC Italia is a well-established non-profit youth organization focused on leadership development through international exchange programs such as volunteering, internships, and teaching abroad. The website reflects a professional and consistent brand presence targeting young people and students interested in global leadership experiences. The organization has a strong market position with global reach and recognized affiliations with UN bodies. Technically, the website uses modern JavaScript libraries and tracking tools, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some security headers and explicit privacy and terms policies. Cookie consent is implemented via Usercentrics CMP, indicating GDPR awareness. Overall, the website is trustworthy and professional with room for improvement in privacy transparency and security hardening.

M

Monte Cavallo

montecavallo.com

51

Monte Cavallo is a regional tourism website focused on promoting the Monte Cavallo ski and hiking area near Vipiteno in South Tyrol, Italy. The site offers information about skiing, sledding, hiking, and family-friendly outdoor activities, targeting tourists and families interested in alpine experiences. The business model revolves around tourism services including ticket sales and accommodation bookings. The website is professionally designed with consistent branding and multilingual support, reflecting a good level of digital maturity. Technically, it uses modern web technologies and a proprietary CMS (Consisto.CMS), with integrated analytics and consent management tools. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy and terms of service pages. WHOIS data is not publicly available, which slightly reduces trustworthiness but does not strongly indicate malicious intent. Overall, the site is safe, well-structured, and suitable for general audiences interested in tourism in the region.

V

Vacanze a Vipiteno - Racines - Colle Isarco Il top in Alto Adige

vipiteno-racines.it

44

The website www.vipiteno-racines.it is a regional tourism portal focused on promoting the Vipiteno-Racines-Colle Isarco area in northern Italy's Alto Adige region. It provides visitors with information about skiing, hiking, cultural highlights, accommodation booking, and local events. The site targets tourists interested in alpine vacations and outdoor activities. Technically, it uses a proprietary CMS (Consisto.CMS), integrates Google Tag Manager and Google Analytics for tracking, and employs responsive design techniques for mobile optimization. However, it lacks visible privacy and cookie policies, and no explicit contact information or security policies are found in the provided content. Security headers are not detected, and the domain uses privacy protection in WHOIS, which is common but reduces transparency. Overall, the site is functional and professionally designed but could improve in privacy compliance and security posture.

O

Olsberg SPI

o-spi.com

61

Olsberg SPI is a specialized international consultancy focused on the creative industries, particularly the global screen sector. The company offers strategic advisory and consultancy services to public and private sector clients, aiming to foster sustainable growth and demonstrate impact in a competitive environment. The website is professionally designed using Squarespace, featuring clear navigation and relevant content about their services, projects, and news. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status. Security posture is moderate with HTTPS enabled but lacking advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a credible business front but would benefit from enhanced transparency and security practices.

T

Thomas Werner

spassmitdaten.de

44

Spass mit Daten is a German-language curated link directory and blog focused on data science, data visualization, and open data. The site provides categorized links to data sources, tools, background information, and guides, targeting data professionals, researchers, and hobbyists interested in open data. The business operates as a small, content-driven resource without direct commercial offerings. Technically, the site is built using the Hexo static site generator with the Icarus theme, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and libraries like jQuery and Moment.js. Hosting is provided by Schlund Technologies, and the site uses HTTPS with good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner. No contact information or formal security policies are published, limiting direct user engagement and incident response readiness. Overall, the website is professional, trustworthy, and safe, with minimal tracking and no advertising. The domain registration is consistent with the website's history and hosting provider, supporting legitimacy. Strategic improvements in security and privacy compliance would enhance trust and resilience.

K

KANULART Art & Design Studio

kanulart.design

60

KANULART Art & Design Studio is a small, specialized design studio based in Vevey, Switzerland, founded in 2012. The company focuses on branding, graphic design, and abstract minimalist art, targeting businesses and individuals seeking cohesive and relevant visual identities. The website reflects a professional and consistent brand image with bilingual content in French and English, showcasing a portfolio of design projects. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as Typekit and Google Fonts, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and a cookie consent banner present, though the absence of security headers and privacy policy pages indicates room for improvement. The lack of WHOIS data suggests privacy protection for the domain registration, which is typical for small businesses. Overall, the website presents a trustworthy and professional front with clear contact information and social media presence.

P

Promo Turismo FVG

turismofvg.it

62

The website www.turismofvg.it serves as the official tourism portal for the Friuli Venezia Giulia region in Italy, providing comprehensive information on accommodations, events, offers, and services to tourists. It positions itself as a trusted regional tourism authority, leveraging partnerships with major analytics and marketing providers such as Adobe, Google, and Cookiebot to enhance user experience and compliance. The site employs a modern consent management platform ensuring GDPR compliance and transparent cookie usage. Technically, the site is built on the Ikon Author CMS and integrates advanced tag management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent blocking mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

F

FONDATION SUISA

fondation-suisa.ch

55

FONDATION SUISA is a Swiss non-profit foundation dedicated to supporting Swiss and Liechtenstein music creators through funding, partnerships, and promotional activities. The website serves as an information hub for funding offers, application submissions, and foundation activities, targeting musicians and cultural organizations. The foundation holds a reputable position in the Swiss cultural sector with a clear mission to promote music. Technically, the website is built on WordPress using a standard theme and plugins, including GDPR compliance tools. It is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and a public vulnerability disclosure policy. WHOIS data confirms the legitimacy and transparency of the domain registration, consistent with the foundation's profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve security headers and incident response transparency.

H

Hell Company KG

hellcompany.eu

67

Hell Company KG is a newly founded (2024) small enterprise specializing in strategic marketing and digital transformation services tailored for growth-oriented SMEs in the construction sector. The company leverages AI-driven marketing automation to enhance market presence, customer acquisition, and talent recruitment. Their website reflects a professional and consistent brand image, targeting primarily German-speaking construction businesses in Italy. The business positions itself as a market leader in AI marketing solutions for the construction industry, emphasizing efficiency and digital innovation. Technically, the website is built on the WebPlatform CMS, utilizing modern web technologies including JavaScript, CSS3, and Google services such as reCAPTCHA and Consent Mode. The site is mobile-optimized and demonstrates moderate performance. However, some security best practices like DNSSEC and security headers are not fully implemented, representing areas for improvement. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to mitigate automated abuse. Privacy compliance is basic, with cookie consent mechanisms in place but lacking comprehensive GDPR indicators or explicit security policies. No incident response or vulnerability disclosure information is provided, which could be enhanced to build trust. Overall, the website is trustworthy and professional, with clear contact information and certifications such as EU AI ACT compliance. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing security policies, and improving privacy compliance to elevate trust and security posture.

S

Kickstart your TYPO3 template development - get.typo3.org

sitepackagebuilder.com

56

The website get.typo3.org/sitepackage serves as a resource hub for TYPO3 CMS template development, providing starter sitepackage templates and related resources primarily targeting TYPO3 developers and integrators. It operates within the open source software ecosystem, focusing on facilitating template creation for TYPO3 CMS users. The site demonstrates a moderate level of digital maturity, utilizing modern web technologies such as Web Components and integrating Usercentrics for consent management, indicating awareness of privacy requirements though lacking explicit policy pages. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of contact information and WHOIS registrant data reduces the overall business credibility and trustworthiness. No vulnerabilities or exposed sensitive data were detected in the provided content, but improvements in security best practices and transparency are recommended. Overall, the site is functional and well-targeted for its niche audience but would benefit from enhanced privacy compliance, clearer business information, and improved security configurations to strengthen trust and compliance posture.

I

Internationale Kurzfilmtage Winterthur

kurzfilmtage.ch

11

Internationale Kurzfilmtage Winterthur is a prominent Swiss short film festival that annually transforms Winterthur into a vibrant hub for short films, showcasing international and thematic film programs, competitions, and cultural events. The website reflects a mature digital presence with multilingual support, comprehensive event information, and integrated ticketing solutions. Technically, the site is built on the WebZen CMS platform, employs modern web standards, and includes Google Analytics and Google Ads for marketing and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Overall, the site demonstrates strong business credibility and compliance with privacy regulations, making it a trustworthy platform for visitors and industry stakeholders.

The website www.giorgioarmanibeauty-usa.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks automated access and prevents content retrieval. No WHOIS registration data is available for this domain, indicating it may be unregistered or inactive, raising significant legitimacy concerns. Due to the lack of accessible content, no business information, contact details, or policies can be verified. The technical infrastructure is limited to Cloudflare's security platform with no visible CMS or additional technologies. Security posture cannot be assessed beyond the presence of Cloudflare's WAF. Overall, the site presents a high risk due to lack of transparency and accessibility.

C

Code for Münster

codeformuenster.org

54

Code for Münster is a volunteer-driven civic technology community focused on leveraging open data and free software to improve transparency and citizen engagement in the city of Münster, Germany. The organization operates as part of the broader Code for Germany network and offers a variety of open source projects and community events such as biweekly hacknights. Their website reflects a well-structured, content-rich platform with a clear mission and active project portfolio. Technically, the site is built using Jekyll, hosted likely on netcup infrastructure, and employs privacy-respecting analytics (Fathom). Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite analytics usage. Overall, the site is trustworthy, professional, and well-aligned with its community-oriented mission.

K

KopfKunst, Agentur für Kommunikation GmbH

kopfkunst.net

63

KopfKunst, Agentur für Kommunikation GmbH is an established creative agency based in Münster, Germany, with over 30 years of experience delivering outstanding communication and marketing services across diverse industries. The company focuses on creative communication, branding, and campaign development, targeting businesses seeking innovative marketing solutions. The website reflects a professional and consistent brand image with rich multimedia content and clear contact information. Technically, the site is built on Webflow CMS, uses Matomo for privacy-conscious analytics, and is well optimized for performance and mobile devices. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

I

IHK Nord Westfalen

ihk-nordwestfalen.de

76

IHK Nord Westfalen is a regional chamber of commerce in Germany providing consulting, training, and support services to member companies. The website serves as an information portal for businesses in the Nord Westfalen region, offering access to various business services and educational resources. The organization holds a strong market position as a governmental business support entity with a clear focus on regional economic development. Technically, the website employs a custom CMS and integrates modern technologies such as Cookiebot for GDPR-compliant cookie management, Cloudflare for DNS and bot protection, and eTracker for analytics. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and implements a robust cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in transparency and incident management. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security header policies, publishing vulnerability disclosure information, and maintaining regular audits of third-party scripts.

L

LVM Versicherung

lvm.de

63

LVM Versicherung is a well-established German insurance company with over 125 years of experience, offering a broad range of insurance, financial, and advisory services to private and business customers. The website reflects a mature digital presence with comprehensive product offerings, customer service portals, and strong branding consistency. The company targets a broad audience including private individuals and commercial clients, positioning itself as a trusted partner in insurance and finance sectors. Technically, the website employs modern web technologies including Angular framework, cloud-based CDN delivery via Amazon Cloudfront, and integrates consent management and tracking tools such as Consentmanager.net and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS and uses consent mechanisms to comply with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data is limited due to DENIC policies but shows no suspicious indicators, and the domain age aligns reasonably with the company's long-standing history. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance, making it a trustworthy platform for customers. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust.

D

Digital Hub münsterLAND e.V.

digitalhub.ms

50

Digital Hub münsterLAND e.V. is a regional digital innovation hub based in Münster, Germany, focused on fostering digital business models and innovation through collaboration between SMEs, startups, and the tech community. The organization offers a broad range of services including startup matching, accelerator programs, coworking spaces, and community events, positioning itself as a key player in the Münsterland digital ecosystem. The website reflects a professional and well-structured digital presence with clear navigation and rich content tailored to its target audiences of Mittelstand companies, startups, and tech enthusiasts. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, jQuery, and Matomo analytics, ensuring a responsive and accessible user experience. The site is served over HTTPS with a cookie consent mechanism in place, demonstrating attention to privacy compliance. However, some security best practices like explicit security headers and secure form submission methods could be improved. From a security perspective, the site shows a good baseline with HTTPS and cookie consent but lacks visible security headers and formal incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and active community engagement. Overall, the website is a trustworthy and well-maintained digital platform supporting the regional innovation ecosystem. Strategic improvements in security headers, form handling, and transparency around security policies would further enhance its security posture and trustworthiness.

L

Lammetal GmbH

lammetal.net

45

Lammetal GmbH is a German non-profit organization dedicated to providing social services and support for disabled individuals, including vocational training, residential care, and therapeutic equestrian activities. The website reflects a well-structured and professionally designed platform targeting a broad audience with a clear social mission. Technically, the site uses standard web technologies such as jQuery and Fancybox, with moderate performance and good mobile optimization. Security posture is moderate, with cookie consent implemented but lacking advanced security headers and explicit incident response contacts. The WHOIS data is notably missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the active website. Overall, the site is trustworthy in content but requires verification of domain registration and improvements in security practices.

H

Hanse Haus

hanse-haus.de

62

Hanse Haus is a well-established German prefabricated house builder with a strong market position and a history dating back to 1929. The company offers a wide range of customizable homes, emphasizing quality, sustainability, and customer satisfaction. Their website reflects a mature digital presence with a modern TYPO3 CMS platform, integrated consent management, and detailed customer engagement tools such as a multi-step house building assistant form. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

ONI Temperiertechnik RHYTEMPER GmbH is a medium-sized German manufacturing company specializing in innovative and energy-efficient temperature control solutions for the plastics and metal processing industries. As part of the ONI Group, it holds a leading market position in multi-channel tempering technology, serving prominent industrial clients such as Audi, BMW, and Volkswagen. The website reflects a professional and comprehensive presentation of their products, services, and corporate history, supporting their B2B business model effectively. Technically, the site uses modern web technologies including jQuery, Leaflet.js, and slick carousel, built on the ProcessWire CMS platform, hosted likely by Oberberg-Online. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and incident response contact information. Privacy compliance is mostly met with a clear privacy policy but missing cookie consent mechanisms. Overall, the website is trustworthy and professional, with strong business credibility and good content quality.

B

Brandnamic GmbH

ehotelier.it

52

Brandnamic GmbH is a medium-sized company specializing in hospitality software solutions, marketing, and consulting services targeted at the hotel and hospitality industry. The company positions itself as a leading agency in this sector, offering an all-in-one software solution branded as Hospitality Apps. The website is professionally designed, multilingual, and optimized for accessibility, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern web technologies and includes SEO and accessibility best practices. Security posture is good with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not published. The WHOIS data for the domain is missing, which reduces trust slightly, but the overall business credibility and content quality remain high. Strategic recommendations include publishing security policies and incident response contacts and clarifying domain registration details.

PlayRighttop100.be is a website dedicated to publishing the weekly top 100 music charts for the Flanders region in Belgium, focusing on popular Belgian music based on official streaming and airplay data. The site targets music listeners interested in local talent across genres and provides embedded Spotify playlists for user engagement. The website is professionally designed with good mobile optimization and clear navigation, although it lacks formal privacy, cookie, and terms of service policies. Technically, the site uses standard HTML, CSS, and JavaScript with Spotify embeds but does not show advanced security headers or analytics integrations. The WHOIS data presents an inconsistency with a future domain creation date, which raises questions about domain legitimacy but does not directly impact the quality of the website content. Overall, the site serves as a niche media platform for Belgian music charts with moderate technical maturity and security posture.

P

PRS for Music

prsformusic.com

75

PRS for Music operates as a collective rights management organization focused on licensing music usage and collecting royalties globally for its members, including songwriters, composers, and publishers. The organization holds a strong market position in the UK music industry with global representation agreements, providing licensing services to businesses, broadcasters, and online platforms. The website reflects a professional and well-branded digital presence with comprehensive content about their services and mission. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, and integrates Google Tag Manager and TrustArc for consent management. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are not visibly implemented. The use of HTTPS and cookie consent mechanisms indicates a mature approach to security and privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but could be improved by adding explicit security headers and publishing a dedicated security policy or incident response information. The absence of WHOIS data limits domain trust analysis, but the professional site content and policies support legitimacy. Overall, the site presents low risk with good compliance and security practices. Strategic recommendations include enhancing HTTP security headers, publishing security and incident response policies, and providing explicit security contact channels to improve trust and compliance further.

D

Domain Default page

designverign.net

43

The website designverign.net currently hosts a default placeholder page generated by Plesk, indicating no active business or service presence. The page primarily promotes Plesk hosting control panel and related tools such as Sitejet Builder and WP Guardian, targeting web professionals and site owners interested in hosting management solutions. The domain is registered since 2012, which suggests a legitimate registration history, but the lack of active content reduces its business credibility. Technically, the site uses standard HTML5, CSS3, and JavaScript with no detected CMS or advanced frameworks. It is hosted on servers with name servers under cloudpit domains, but no DNSSEC is enabled. The site is mobile responsive with basic accessibility and SEO features. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site lacks security headers and does not enable DNSSEC, which are areas for improvement. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available. The site uses HTTPS (implied by the URL) but SSL configuration details are unknown. No vulnerabilities or exposed sensitive data were detected. Overall, the site is safe with no adult or questionable content but scores low on privacy compliance and business credibility due to the placeholder nature of the content. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and providing contact information to improve trust and compliance.

S

Styrian Tourism Board

steiermark.com

68

The website steiermark.com serves as the official tourism portal for the Styria region in Austria, providing comprehensive information on travel, accommodation, events, and regional culture. It targets tourists and travelers seeking to explore Styria, positioning itself as a key regional destination marketing organization. The site offers booking capabilities and rich content to support holiday planning. Technically, the site employs modern web technologies including Matomo analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design. From a security perspective, the website enforces HTTPS, uses standard security headers, and integrates cookie consent mechanisms compliant with GDPR. However, it lacks publicly available security policies and incident response information, which could be improved to enhance trust and transparency. Overall, the site is well-built and trustworthy from a content and technical standpoint, but the absence of WHOIS registration data and explicit security documentation slightly reduces its domain registration trustworthiness. Strategic improvements in transparency and security communication are recommended.

C

Cooperativa turistica Vipiteno Val di Vizze Campo di Trens

sagradeicanederli-vipiteno.com

52

The website www.sagradeicanederli-vipiteno.com promotes the traditional Sagra dei Canederli event in Vipiteno, South Tyrol, Italy. It serves as an informational and promotional platform for a local cultural and gastronomic festival centered around the traditional dish 'canederli'. The site targets tourists and local visitors interested in regional culinary traditions and cultural events. The business behind the event is a small cooperative focused on tourism and local gastronomy promotion. Technically, the website is built on Consisto CMS with modern web technologies including JavaScript, Google Tag Manager, and a consent management platform ensuring GDPR compliance. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a concern for domain legitimacy, but the professional presentation and active content suggest a legitimate operation. Overall, the website is a well-maintained regional event site with moderate technical maturity and good privacy compliance.

M

Mercatino di Natale Vipiteno in Alto Adige

mercatinodinatale-vipiteno.it

46

The website www.mercatinodinatale-vipiteno.it serves as a regional tourism promotion platform focused on the traditional Christmas Market in Vipiteno, Alto Adige, Italy. It provides detailed event information, accommodation search capabilities, and cultural highlights to attract visitors during the holiday season. The site is professionally designed with good content quality and clear navigation, targeting tourists interested in Alpine Christmas markets. Technically, it employs modern web technologies including Google Analytics, Google Tag Manager, and a CMS platform (Consisto.CMS). The site is mobile optimized and uses HTTPS, ensuring secure data transmission. However, it lacks visible privacy and cookie policies, terms of service, and direct contact information, which are important for compliance and user trust. Security posture is generally good with no obvious vulnerabilities, but improvements in security headers and published policies are recommended. Overall, the site is safe, professional, and credible for its business purpose but would benefit from enhanced privacy compliance and transparency.

R

Radio Télévision Suisse

rts.ch

65

Radio Télévision Suisse (RTS) is the leading Swiss francophone public broadcaster providing a comprehensive range of media services including radio, television, streaming, news, sports, and podcasts. The website serves a broad French-speaking audience in Switzerland and beyond, offering rich multimedia content and up-to-date information. The platform is professionally designed with excellent content quality and consistent branding, reflecting its position as a trusted public media entity. Technically, the website employs modern web technologies including JavaScript frameworks, UserCentrics for consent management, and advanced analytics tools like Snowplow and Chartbeat. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response contacts are not prominently published. From a security and compliance perspective, RTS demonstrates good GDPR compliance with clear privacy and cookie policies and active consent mechanisms. The domain registration details align with the organization's identity, supporting legitimacy and trustworthiness. No critical vulnerabilities or suspicious activities were detected in the analysis. Overall, RTS.ch is a high-quality, secure, and compliant media website with a strong reputation and technical maturity. Strategic improvements could include publishing detailed security policies and vulnerability disclosure information to further enhance transparency and trust.

B

Börsenmedien AG

boersenmedien.de

61

Börsenmedien AG operates a professional e-commerce platform specializing in financial media products including magazines, newsletters, stock reports, books, and merchandise. The company targets German-speaking investors and financial enthusiasts, maintaining a strong market position with multiple well-known brands. The website is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, the site uses modern JavaScript libraries and a privacy management platform to ensure GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.