Security Directory

D

Direct Running

direct-running.fr

54

Direct Running is a French-based e-commerce retailer specializing in running shoes, sportswear, and related equipment. The company offers a wide range of products from major brands such as Adidas, Saucony, Puma, and Mizuno, targeting runners and sports enthusiasts primarily in France and Europe. The website demonstrates a mature digital presence with a professional design, clear navigation, and mobile optimization. It integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, supported by a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced and modern security headers implemented, although no dedicated security policy or incident response page was found. Overall, the site is trustworthy and well-positioned in the retail e-commerce market.

S

Les experts du running sont ici! - Shop4Runners

shop4runners.fr

70

Shop4Runners.fr is a French e-commerce website specializing in running shoes, apparel, and accessories from well-known brands such as Asics, Adidas, and New Balance. The site targets running enthusiasts primarily in France and French-speaking regions, offering competitive pricing, free delivery, and a 30-day return policy. The business appears to be a small-sized retailer founded in 2020, operating on a Magento platform with a modern Hyva theme frontend. The website infrastructure leverages Cloudflare for DNS and CDN services, ensuring good performance and security. Marketing and tracking tools such as Google Tag Manager, SalesManago, and Kwanko are integrated for analytics and advertising purposes. The site implements a GDPR-compliant cookie consent mechanism but lacks visible privacy policy and terms of service pages in the provided content. Contact information is limited to a company email address, with no phone or physical address found. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the website is professional, functional, and trustworthy with room for improvement in privacy disclosures and security transparency.

H

Hochschul-IT-Zentrum des Saarlandes

hiz-saarland.de

60

The Hochschul-IT-Zentrum des Saarlandes operates as a regional IT service center supporting higher education institutions in Saarland, Germany. It provides a range of IT services including user account management, network access (WLAN, VPN), email and groupware solutions, hardware procurement, and cloud services. The website is professionally designed using TYPO3 CMS and targets students, employees, guests, and academic facilities. It maintains partnerships with multiple universities in the region, reinforcing its role as a central IT hub for academic institutions. Technically, the website leverages modern web technologies such as TYPO3 CMS, Bootstrap, and jQuery, hosted likely within university or DFN infrastructure. The site is mobile optimized and offers good navigation and content relevance. However, some improvements in accessibility and SEO could be considered. Security posture is moderate with HTTPS usage and secure form handling, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the security posture is sound for an academic IT service provider, with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's academic context, indicating legitimacy and trustworthiness. The site does not engage in advertising or extensive user tracking, supporting a privacy-conscious approach. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and considering a vulnerability disclosure program to enhance trust and compliance.

H

Hochschule für Technik und Wirtschaft des Saarlandes

wissenwasverbindet.de

67

The Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) is a well-established higher education institution in Germany, specializing in dual study programs that combine academic learning with practical work experience. The website effectively communicates its educational offerings, cooperation with industry partners, and benefits for students. It targets prospective students and companies interested in dual education partnerships. The institution holds multiple certifications and maintains an active social media presence, reinforcing its credibility and market position. Technically, the website is built on TYPO3 CMS and employs Matomo for analytics, reflecting a modern and privacy-conscious infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and shows no signs of exposed sensitive data or vulnerable libraries. The absence of explicit security policies and incident response information suggests an opportunity to strengthen transparency and preparedness. Overall, the website demonstrates a solid security posture but could benefit from additional security best practices and compliance features. The overall risk assessment is low, with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security policies, and establishing a vulnerability disclosure process to further enhance trust and security culture.

SHINSEGAE E&C is a well-established South Korean construction company specializing in residential, architectural, and civil engineering projects. The company emphasizes customer happiness and corporate social responsibility, with a strong focus on sustainable management and community contributions. Their website reflects a professional corporate presence with clear navigation and a consistent brand identity aligned with the Shinsegae Group. Technically, the site uses a combination of legacy and modern JavaScript libraries, hosted on Akamai CDN infrastructure, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and uses outdated libraries that could pose risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the domain registration data supports the legitimacy and long-term operation of the business.

Gewerbeverein Pfaffnau / St. Urban & Roggliswil is a small local business association focused on fostering networking and collaboration among local and regional businesses and community stakeholders in Switzerland. The website is built on WordPress using the Divi theme, providing a good user experience with clear navigation and relevant content about the association's purpose, events, and members. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is safe, professional, and trustworthy for its intended audience but could improve in compliance and security transparency.

V

Verein Sakrallandschaft Innerschweiz

sakrallandschaft-innerschweiz.ch

67

Verein Sakrallandschaft Innerschweiz is a non-profit organization dedicated to promoting the rich cultural and spiritual heritage of Central Switzerland, focusing on churches, chapels, monasteries, and sacred sites. The website serves as an informational and promotional platform targeting tourists, pilgrims, families, and cultural enthusiasts interested in spirituality and history. It offers event information, guided tours, newsletters, and partner collaborations to enhance visitor engagement. Technically, the site is built on the Jimdo CMS platform, leveraging common web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could be improved by adding more security headers and explicit security policies. Overall, the website is trustworthy, professional, and compliant with basic privacy regulations, though it lacks detailed terms of service and incident response information.

B

BirdLife Luzern

birdlife-luzern.ch

50

BirdLife Luzern is a small, regional non-profit organization dedicated to bird and nature conservation in the canton of Luzern, Switzerland. The website serves as a hub for community engagement, offering events, educational courses, and conservation projects. The organization targets nature enthusiasts, volunteers, and the local community, positioning itself as a key player in regional biodiversity protection. Technically, the website is built on WordPress with a modern theme and plugins, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and no exposed sensitive data, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is partially met with a comprehensive privacy policy available, but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional, with strong social media integration and community focus.

R

Ripoche

ripochetransports.com

55

Ripoche Transport is a well-established French transport and logistics company founded in 1967, specializing in road freight transport across regional and national territories. The company offers a comprehensive range of services including national and regional transport, palletized messaging, vehicle rental with drivers, and transport commission/chartering. Since June 2024, Ripoche has been integrated into the Groupe Jolival, enhancing its market position and operational capabilities. The website reflects a professional and consistent brand image, targeting business clients requiring reliable and environmentally conscious transport solutions in France. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations, though there is room for improvement in accessibility and cookie consent compliance. Security posture is solid with HTTPS, reCAPTCHA, and domain transfer protections, but lacks DNSSEC and some advanced security headers. The WHOIS data shows a suspicious future domain creation date, which should be investigated to confirm legitimacy. Overall, Ripoche Transport presents a trustworthy and professional online presence with strong business credibility and good digital maturity.

P

ProFundo Sverige

profundo.se

44

ProFundo Sverige is a Swedish company specializing in fundraising and membership management solutions, offering a suite of services including CRM systems, payment solutions, communication tools, and advisory services. The company positions itself as a leading fundraising supplier in Sweden, targeting non-profit organizations and entities requiring efficient donor and member management. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. Performance optimizations such as WP Rocket are in use, and the site is mobile-optimized with good user experience and navigation clarity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional and trustworthy but would benefit from improved transparency and security practices.

B

Building

building.co.uk

62

Building.co.uk is a leading UK-based online magazine and resource portal for construction professionals, offering news, CPD modules, events, and industry data. The website is well-established with a professional design, consistent branding, and a comprehensive content offering targeted at construction industry stakeholders. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Amazon CloudFront CDN, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and standard security best practices observed, although explicit security policies and vulnerability disclosure mechanisms are not publicly available. Overall, the site presents a trustworthy and authoritative presence in its sector, though WHOIS data for the exact domain is unavailable due to domain naming rules, indicating the domain is likely a subdomain or alias under a registered parent domain.

M

anthrazit CMS |

mopage.ch

46

The website cms.anthrazit.org serves as a login portal for the anthrazit CMS platform, providing access to registered users. The site is minimalistic, focusing on authentication with no public-facing business information or marketing content. The platform appears to be a specialized CMS solution, but lacks visible business identity or contact details, limiting external trust signals. Technically, the site uses modern JavaScript libraries such as jQuery 3.7.1 and Bootstrap CSS for styling, and it is optimized for mobile devices with responsive design elements. However, the absence of security headers and privacy policies indicates room for improvement in compliance and security maturity. The WHOIS data is unavailable due to a malformed query or privacy protection, which is common for CMS platforms but reduces transparency. Overall, the site is functional but basic, with moderate technical implementation and security posture.

G

Guidle AG

kallaender.ch

50

The website www.kallaender.ch is a local event listing platform focused on the municipality of Allschwil, Switzerland. Operated by Guidle AG, it provides users with information about upcoming events and allows event organizers to submit their events via a dedicated page. The site targets residents and visitors interested in community activities, positioning itself as a localized event management and information service. The business model revolves around providing a centralized platform for event discovery and submission within the Allschwil community. Technically, the website employs modern web technologies including JavaScript modules, SVG graphics, and the Vite build system. It uses HTTPS to secure communications and loads external scripts from trusted domains such as guidle.com and ajax.googleapis.com. The site is mobile-optimized with responsive design elements and good navigation clarity. However, it lacks some advanced accessibility features and security headers that could enhance its security posture. From a security perspective, the site benefits from HTTPS encryption and does not expose sensitive data in its HTML content. There are no detected vulnerabilities or malicious scripts. However, the absence of security headers like Content-Security-Policy and Strict-Transport-Security, as well as the lack of a cookie consent mechanism, represent areas for improvement. No explicit privacy or security policies are published beyond an impressum page, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional, trustworthy, and serves its community purpose well but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing cookie consent, publishing detailed privacy and security policies, adding security headers, and considering a vulnerability disclosure program to improve trust and compliance.

M

Museum Allschwil – Haus für Kultur und Geschichte

museumallschwil.ch

61

Museum Allschwil is a local cultural and historical institution based in Allschwil, Switzerland, dedicated to preserving and showcasing regional culture and history. The website serves as an informational portal for visitors, providing details about the museum and its offerings. The business model is typical for a small museum, focusing on exhibitions and cultural education for the general public. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS, and JavaScript. It includes multilingual support and basic SEO metadata but lacks comprehensive privacy and terms of service documentation. Security measures include HTTPS enforcement and cookie consent mechanisms, with some security hardening scripts in place. However, there is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is professionally designed and functional, suitable for its purpose but with room for improvement in privacy and security transparency.

G

GSUB - Gesellschaft für soziale Unternehmensberatung MbH

teilhabeberatung.de

61

The website www.teilhabeberatung.de represents the Ergänzende unabhängige Teilhabeberatung (EUTB®), a German non-profit advisory service supporting people with disabilities and their relatives regarding rehabilitation and participation. Operated by GSUB - Gesellschaft für soziale Unternehmensberatung MbH, the site offers comprehensive advisory services, publications, and a dedicated app for appointment scheduling. The organization holds recognized accessibility certification (BIK - BITV-konform) and maintains a professional online presence with clear navigation and content relevance. Technically, the site is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and ReadSpeaker for accessibility. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not published. No blocking mechanisms or WAF challenges were detected, allowing full content access. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, no direct contact emails or phone numbers are publicly listed, relying on contact forms for communication. Overall, the website is trustworthy, professionally managed, and aligned with its non-profit mission. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

I

Intersnack Deutschland SE

intersnack.de

61

Intersnack Deutschland SE is a large German-based manufacturer and retailer of popular salty snacks, emphasizing sustainability and responsible production. The company operates a professional, well-structured website powered by TYPO3 CMS, targeting general consumers and potential employees. The site offers comprehensive information about their brands, sustainability initiatives, and career opportunities, with a clear corporate identity and consistent branding. Technically, the website uses modern web technologies and includes analytics via eTracker, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some advanced security headers and policies are not explicitly published. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data aligns with the corporate identity, showing a legitimate and consistent domain registration. Overall, the website reflects a mature digital presence suitable for a large enterprise in the retail food sector.

VDMA is a prominent German and European industry association representing approximately 3,600 companies in the machinery and plant engineering sector. The organization focuses on innovation, export orientation, and supporting medium-sized enterprises. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to industry professionals and stakeholders. The technical infrastructure is based on the Liferay CMS platform, leveraging modern JavaScript frameworks and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, consent management, and use of security best practices, although explicit security headers could be enhanced. Overall, the site demonstrates compliance with GDPR and provides clear contact and privacy information, supporting trust and credibility.

HanmiGlobal Co., Ltd. is a large Korean construction and project management company with a global footprint, specializing in advanced technology and strategic construction services. The company has executed over 3,200 projects worldwide and offers a broad range of services including project management, development, supervision, and energy infrastructure consulting. Their market position is strong, reflected by a world ranking of 7 in ENR 2025 and a diversified portfolio of subsidiaries and partners. Technically, the website employs a moderate modern tech stack including jQuery, Swiper.js, GSAP, and Google Analytics, with good mobile optimization and a professional design. However, some outdated libraries and missing security headers indicate areas for improvement. The site uses HTTPS but lacks DNSSEC and explicit security policies. Security posture is moderate with good practices like HTTPS and reCAPTCHA on forms, but the absence of security headers, outdated libraries, and missing privacy and cookie policies reduce compliance and security maturity. No incident response or vulnerability disclosure information is published. Overall, the website is professional and trustworthy but would benefit from enhanced security measures, privacy compliance, and updated technical components to improve risk posture and user trust.

The domain ncla.co.kr is registered to Hanmiglobal, a Korean company likely operating in architecture or construction services. The domain is mature, created in 2010, and registration data is consistent and transparent. However, the website itself is inaccessible, returning an HTTP 403 Forbidden error, indicating server-side access restrictions. This prevents any meaningful content, metadata, or technical analysis of the site. The hosting provider is Cafe24, a reputable Korean hosting service. No privacy, cookie, or terms of service policies are found, and no contact forms or social media links are present on the site. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the domain registration is legitimate, but the website's inaccessibility severely limits trust and usability.

The domain turnerandtownsend.co.kr is registered to a South Korean company named (주)한미글로벌건축사사무소, with a registration date in 2009 and an expiry in 2026, indicating a long-standing presence. However, the website content is currently inaccessible due to an HTTP 403 Forbidden error, which blocks any direct content or service access. This limits the ability to assess the company's online presence, services, or digital maturity. The technical infrastructure inferred from nameservers suggests hosting with Hostcocoa, but no CMS or modern web technologies are detectable due to the blocked content. Security posture is weak or unknown, with no visible security headers or HTTPS confirmation, and no privacy or cookie policies are present. The WHOIS data is transparent and consistent with the registrant's location and business, supporting legitimacy. Overall, the site is currently non-functional for external users, representing a significant risk for trust and user engagement.

한미글로벌 E&C is a South Korean construction management company specializing in responsible Construction Management (CM) services. The company showcases a portfolio of architectural projects emphasizing customer-centric construction processes and quality assurance. The website reflects a medium-sized business with a focus on the Korean market and related construction sectors. Technically, the website uses legacy JavaScript libraries such as jQuery 1.12.4 and bxSlider, with basic mobile optimization and moderate performance. Security posture is limited, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present, indicating gaps in compliance and security best practices. The domain registration is consistent with the business claims, registered since 2016 with a reputable Korean registrar, supporting legitimacy. Overall, the website is professional and functional but requires improvements in security, privacy compliance, and modern technical standards.

LMD is a South Korean real estate development company specializing in premium residential and commercial projects primarily in Seoul. The website highlights several key projects and presents the company as a medium-sized player in the real estate sector with a focus on quality development and consulting services. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.12.4 and uses fullPage.js for navigation, indicating moderate digital maturity. The website is accessible and well-structured but lacks modern security headers and visible HTTPS enforcement, which impacts its security posture. Contact information is clearly provided, but privacy and cookie policies are absent, indicating gaps in compliance. Overall, the site is professional but could improve in security and privacy transparency.

E

Ecosian Co.,Ltd.

ecosian.com

61

Ecosian Co.,Ltd. is a South Korean company specializing in environmental consulting services focused on greenhouse gas reduction, carbon asset management, energy cost reduction, and renewable energy development. The company offers a range of consulting, ICT, and energy services targeting corporate clients in the energy and sustainability sectors. The website is professionally designed with clear navigation and relevant content, primarily in Korean, reflecting a medium-sized enterprise with a long operational history since 2001. Technically, the website uses jQuery 3.3.1 and custom JavaScript for interactive elements. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks. Security configurations such as HTTPS enforcement and security headers are not confirmed, and DNSSEC is not enabled, indicating room for improvement in security posture. From a security perspective, the site does not display privacy, cookie, or terms of service policies, nor does it provide incident response or vulnerability disclosure information. No contact emails or phone numbers are explicitly listed on the homepage, which may impact user trust and compliance. The domain registration is consistent with the business claims, showing a long history and no privacy protection, supporting legitimacy. Overall, the website is functional and professional but requires enhancements in privacy compliance, security best practices, and transparency to improve trustworthiness and regulatory adherence.

K

K2 Consultancy Ltd

k2cm.co.uk

61

K2 Consultancy Ltd operates the website www.k2cm.co.uk, providing specialized construction management services in the UK. Their business model focuses on delivering end-to-end construction management solutions that enhance financial control, risk mitigation, and collaboration among clients, design teams, and construction teams. The company positions itself as a flexible and innovative partner in complex building projects, supported by ISO certifications and a portfolio of high-profile projects. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and multimedia content, reflecting a mature digital presence. Security posture is good with HTTPS enforced and secure forms, though some security headers and consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the construction sector.

W

Walker Sime

walkersime.co.uk

61

Walker Sime is a UK-based multi-disciplinary construction consultancy established in 2000, offering professional services such as quantity surveying and project management. The company positions itself as a trusted and well-liked consultancy within its niche, targeting clients who require expert construction consultancy services. The website reflects a professional business model with consistent branding and good content quality, supporting its market position. Technically, the website is built on WordPress using modern technologies including WPBakery Page Builder, Google Analytics, and LinkedIn Insight tags, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

O

Otak

otak.com

55

Otak, Inc. is a professional integrated design and project delivery firm specializing in architecture, engineering, environmental consulting, planning, and project management services. The company emphasizes sustainability, integrity, and community engagement as core values, serving government agencies, developers, and communities primarily in the United States. Their market position is that of a medium-sized, reputable firm with a strong focus on delivering community-centric projects and sustainable solutions. Technically, the website is built on WordPress with a modern technology stack including Google Analytics, Google Tag Manager, and various performance and SEO optimization plugins. The site is well-optimized for mobile devices, features good accessibility, and demonstrates excellent SEO practices. The infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers, a published security policy, and incident response contact information. The absence of WHOIS domain registration data raises some concerns about domain transparency, although the website content and social media presence support its legitimacy. Overall, Otak presents a professional and trustworthy online presence with minor gaps in security transparency and domain registration information. Strategic improvements in security policy publication and domain WHOIS transparency would enhance trust and compliance.

I

Immigrantarch

immigrantarchitects.org

46

The Immigrant Architects Coalition (IAC) operates as a nonprofit organization dedicated to supporting immigrant architects in the United States. Their services include mentoring, public speaking, authorship, and contributions aimed at helping immigrant architects build prosperous careers. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills, indicating a moderate level of technical maturity. The site design is professional and mobile-optimized, though accessibility and SEO optimizations are basic. Security posture is moderate with no explicit security headers detected and no visible SSL configuration details. Privacy and cookie policies are absent, which is a compliance gap. The WHOIS data is privacy protected, common for nonprofits, but limits transparency. Overall, the site is functional and serves its niche audience effectively but would benefit from enhanced security and compliance measures.

U

US Green Building Council California

usgbc-la.org

53

US Green Building Council California (USGBC-CA) is a regional non-profit organization dedicated to advancing sustainability, green building, climate action, and environmental justice within California. Founded in 2023, it serves sustainability professionals and advocates by providing resources, networking opportunities, and certification programs aimed at transforming the built environment. The organization positions itself as a leader in the energy and sustainability sector within the state, leveraging partnerships and community engagement to drive impact. Technically, the website is built on WordPress CMS, enhanced with NitroPack for performance optimization, and uses modern web technologies including jQuery, Google Tag Manager, and Font Awesome. The site demonstrates good mobile optimization, fast loading times, and solid SEO practices. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. From a security perspective, the site enforces HTTPS and employs domain status protections to prevent unauthorized domain changes. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or vulnerability disclosure page, which are areas for improvement. Social media presence and structured data markup enhance trust and visibility. Overall, the website is professional, trustworthy, and well-positioned within its niche. The absence of explicit privacy and cookie policies slightly reduces privacy compliance scores. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to strengthen security posture and compliance.

SoCal NOMA is a regional chapter of the National Organization of Minority Architects focused on advancing education and careers for historically underrepresented groups in architecture and allied design professions. The organization offers educational programs, professional development, advocacy, and community engagement primarily in Southern California. Their website reflects a small non-profit with a clear mission and active community involvement. Technically, the site is built on WordPress, using modern libraries such as jQuery, Bootstrap, and Smart Slider 3, hosted on Bluehost. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the organization's history and supports legitimacy.

Architecture for Communities Los Angeles (ACLA) is a small non-profit organization dedicated to inspiring and empowering communities in Los Angeles through architecture education, events, and engagement. Their website serves as a hub for promoting community events, student exhibitions, scholarships, and sustainability initiatives. The organization targets students, architects, and community members interested in architecture and social impact within the Los Angeles region. The site reflects a consistent brand and professional presentation aligned with their mission. Technically, the website is built on WordPress with WooCommerce for donations and event registrations, leveraging common libraries such as jQuery, RoyalSlider, and Slick Carousel. Hosting is provided by InMotion Hosting, and the site uses HTTPS with a good SSL configuration. SEO and mobile optimization are well addressed, though accessibility features are basic. Analytics are implemented via Google Analytics and Jetpack Stats, but the Google Analytics plugin is not fully configured. From a security perspective, the site enforces HTTPS and uses domain transfer protections. However, it lacks DNSSEC and important security headers like Content-Security-Policy. No cookie consent mechanism is present, which may impact GDPR compliance. Payment processing is handled securely via Authorize.Net CIM. No incident response or security policy is published, and no vulnerability disclosure or security.txt file is found. Overall, the website is safe, professional, and trustworthy with a moderate security posture. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, completing analytics configuration, and publishing security policies to enhance compliance and trust.

A

ARVHA

femmes-archi.org

40

The website www.femmes-archi.org represents ARVHA, a non-profit association dedicated to promoting women architects through the French Prize for Women Architects and related events. The site serves as a platform to showcase award winners, organize conferences, and provide media content supporting gender parity in architecture. The target audience includes women architects, architecture professionals, and supporters of diversity in the field. The business model is centered on event organization and awareness campaigns, supported by institutional and private sponsors. Technically, the website is built on WordPress 5.5.17 using the Enfold theme and several plugins such as LayerSlider and Video Popup. It employs Google Analytics and Google Tag Manager for tracking and uses Google Fonts for typography. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and a published privacy policy, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the professional presentation and active social media presence support trustworthiness. Overall, the website is a well-maintained, professional platform serving a niche non-profit mission. Strategic recommendations include publishing a comprehensive privacy policy, enhancing security headers, updating WordPress and plugins regularly, and providing clear contact information for security and business inquiries to strengthen compliance and trust.

J

JUNG KOREA ELECTRIC CO., LTD.

jungswitch.co.kr

50

JUNG KOREA ELECTRIC CO., LTD. operates a corporate website representing the premium German electrical switch brand JUNG in Korea. The company offers customized electrical switch products and smart floor heating control systems, targeting residential and commercial customers. The website showcases global project references and provides access to an online store, reflecting a medium-sized business with a focus on energy sector products. The digital presence is professionally designed with responsive layouts and modern JavaScript libraries, supporting a good user experience across devices. However, the technical infrastructure lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the site is functional, trustworthy, and business-focused but would benefit from enhanced security and privacy features.

The domain ecredit.co.kr is registered to NICE Information Service Co.,Ltd, a Korean finance-related enterprise established in 1999. The WHOIS data is consistent and indicates a legitimate business with a long domain history. However, the website content is currently inaccessible, returning a 404 error with minimal HTML content, which prevents any meaningful content or technical analysis. No metadata, scripts, or forms are present, and no security headers or HTTPS information is available from the provided data. The lack of accessible content severely limits the ability to assess the company's digital maturity or user experience. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are found, indicating compliance gaps. Overall, the website appears offline or under maintenance, resulting in a low AI score and limited trustworthiness from a user perspective.

L

LEI Register

leikode.no

70

LEI Register is an official Legal Entity Identifier registration agent operating in Norway, providing fast and reliable LEI code issuance and renewal services. The company positions itself as a trusted intermediary partnering with accredited Local Operating Units (LOUs) such as Ubisecure Oy and Nasdaq CSD SE, ensuring compliance with global LEI standards. The website targets Norwegian legal entities requiring LEI codes for regulatory and financial transparency purposes. The business model revolves around facilitating LEI registrations, renewals, and providing related certificates and badges to demonstrate compliance and transparency.

G

Grimshaw Foundation

grimshaw.foundation

50

The Grimshaw Foundation is a charitable trust established in 2020 by Grimshaw Architects, dedicated to promoting creativity and supporting young people aged 11-15 in exploring creative careers, particularly in architecture and the built environment. The foundation provides educational resources, stories, and opportunities to empower youth and address social and economic equity. The website reflects a focused non-profit mission with a clear target audience and consistent branding. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Mailchimp for newsletter subscriptions and Vimeo for video content. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a valid SSL certificate and has domain registration protections such as clientTransferProhibited status, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is limited as no privacy or cookie policies are present, representing a compliance gap. Overall, the site is professional and trustworthy but could improve in privacy and security policy transparency.

I

Inigo

inigo.com

66

Inigo is a specialized UK-based estate agency focusing on the sale and marketing of historic and architecturally significant homes. The company targets discerning buyers and sellers interested in authentic British homes with rich stories and heritage. Their market position is niche but well-defined, supported by professional branding and trust indicators such as accreditation by The Property Ombudsman and Trading Standards. The website offers comprehensive property listings, editorial content, and customer engagement tools such as newsletters and property alerts. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics) and marketing automation (Klaviyo). The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and incident response transparency are recommended. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No security.txt or incident response information is published, which could be improved to enhance security posture and customer trust. Overall, Inigo presents a professional and trustworthy online presence for its real estate business, but domain registration opacity and minor security best practice gaps suggest areas for improvement. Strategic recommendations include verifying domain registration details, implementing security headers, publishing security policies, and enhancing incident response readiness.

C

Charles Dickens Museum

dickensmuseum.com

68

The Charles Dickens Museum operates as a well-established cultural and educational institution located in London, dedicated to preserving and promoting the legacy of Charles Dickens. The website serves as both an informational portal and an e-commerce platform offering museum tickets, educational resources, events, and themed merchandise. The museum targets a broad audience including tourists, educators, students, and literary enthusiasts. The business model is primarily non-profit with revenue streams from admissions, retail sales, and memberships. The museum holds a reputable market position supported by cultural funders and charity status. Technically, the website is built on the Shopify platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Hosting and domain registration are consistent with a legitimate, long-standing organization. From a security perspective, the site enforces HTTPS, uses secure Shopify checkout, and implements client transfer protection on the domain. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information, which are areas for improvement. Privacy compliance is strong with GDPR-consistent cookie consent and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and secure online presence for the Charles Dickens Museum, with minor recommendations to enhance security transparency and DNS security. The risk profile is low, and the site effectively supports the museum's mission and business objectives.

S

South London Gallery

southlondongallery.org

71

South London Gallery is a well-established non-profit cultural institution in London, providing free access to contemporary art exhibitions, film, performance events, and educational programs for diverse audiences including children and adults. The gallery has a strong community focus and a history spanning over 125 years, positioning it as a key player in the local and broader art scene. The website reflects this with rich content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Tag Manager, and Klaviyo for marketing and analytics. Security measures include HTTPS and Google reCAPTCHA, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the institution's public presence and external references.

T

The Quality Assurance Agency for Higher Education

qaa.ac.uk

72

The Quality Assurance Agency for Higher Education (QAA) is a UK-based independent charity and the expert quality body for tertiary education. It provides impartial regulatory and collaborative quality assurance and enhancement services across the UK and internationally. The organization is trusted by governments, funding bodies, and higher education providers, offering services such as membership, accreditation, training, and sector resources. The website reflects a mature, professional entity with a clear focus on education quality and standards. Technically, the website is built on the Sitefinity CMS platform, leveraging modern analytics tools including Google Analytics and Microsoft Clarity, and employs Google Tag Manager for marketing and tracking. The site is mobile-optimized, accessible, and well-structured with comprehensive navigation and content. Security certifications such as ISO 27001 and Cyber Essentials are prominently displayed, indicating a strong commitment to information security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers and a public security policy or incident response contact are not found, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and organization present a low-risk profile with high trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy and incident response details, and implementing a vulnerability disclosure program to further strengthen security and transparency.

The website www.russellgroup.ac.uk is currently inaccessible, returning a 403 Forbidden error page generated by Amazon CloudFront, indicating that access is blocked likely due to security or configuration settings. This prevents any meaningful extraction of business, technical, or security information from the site content. The WHOIS data is completely missing or unavailable, which further limits the ability to verify domain registration details, ownership, and legitimacy. Without access to the website content or WHOIS data, no assessment of privacy policies, contact information, or security posture can be performed. The site appears to be protected by a Web Application Firewall (WAF), but this also restricts visibility into its operations and compliance status.

K

kv.digital GmbH

kv.digital

58

kv.digital GmbH is a medium-sized digital healthcare company based in Germany, fully owned by the Kassenärztliche Bundesvereinigung (KBV). It specializes in providing secure medical communication solutions, including KIM services and the 116117 appointment service software, serving healthcare providers and software manufacturers. The company acts as a central innovation platform and competence center for digitalization in ambulatory healthcare. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes a GDPR-compliant cookie consent mechanism. The presence of ISO 27001 certification demonstrates a strong commitment to information security. Security posture is robust with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the healthcare technology sector.

A

ALS

transports-als.com

60

ALS (Aviculture Logistique Services) is a French company specializing in poultry logistics and transport services, including the transport of eggs to hatch, day-old chicks, adult poultry, and feed. Established in 2007 and based in the West and South-West of France, ALS operates a fleet of over 80 vehicles and serves more than 25 countries. The company recently partnered with Jolival to enhance its service offerings and ensure sustainable growth. The website reflects a professional and consistent brand image, targeting poultry industry professionals with clear service descriptions and contact options. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and caching for performance. It includes Google reCAPTCHA for form security and uses Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly but could improve accessibility and security headers. DNSSEC is not enabled, which is a recommended enhancement. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit incident response or security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact information is clear, including phone and physical address, but no direct company emails were found in the HTML content. Overall, ALS presents a trustworthy and professional online presence with room for security and privacy improvements. The domain registration is transparent and consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent, and publishing security and incident response policies.

G

Goldsmiths College

goldsmithscca.art

46

Goldsmiths Centre for Contemporary Art (Goldsmiths CCA) is an educational and cultural institution affiliated with Goldsmiths College in London, UK. The organization focuses on contemporary art exhibitions, events, residencies, and engagement programs targeting artists, students, and the general public interested in art. The website reflects a well-established institution with a clear mission to foster creativity and debate in the arts sector. The domain registration aligns with the institution's identity and geographic location, supporting its legitimacy. Technically, the website is built on WordPress with a custom theme and integrates modern technologies such as Google Analytics, Google Tag Manager, and Shopify Buy Button SDK for e-commerce capabilities. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and DNS security. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. There are no visible incident response or security policies published, which could be improved to enhance trust and compliance. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no explicit GDPR compliance statements. Analytics usage is moderate, with user tracking via multiple services. Overall, the website is professional, trustworthy, and serves its educational and cultural mission effectively. Strategic recommendations include enhancing DNS security, implementing security headers, publishing security policies, and improving privacy compliance to strengthen the security posture and user trust.

S

Stage de rugby Stade Rochelais

stages-staderochelais.com

58

The website 'Stages Stade Rochelais' offers rugby training camps associated with the Stade Rochelais rugby club, targeting rugby players and enthusiasts primarily in France. The business operates a niche sports training service with a focus on rugby camps. The website is built on the Wix platform, utilizing modern web technologies including Google Analytics and Tag Manager for tracking. The site is professionally designed, mobile-optimized, and provides structured business information including a physical address. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is adequate with HTTPS enforced but lacks explicit security headers and privacy compliance mechanisms such as a privacy policy or cookie consent banner. Overall, the site presents a moderate risk profile with recommendations to improve privacy compliance and domain registration transparency.

P

Paul Mellon Centre for Studies in British Art

richardwilsononline.ac.uk

65

Richard Wilson Online is a scholarly digital catalogue raisonné dedicated to the works of the 18th-century British landscape artist Richard Wilson. Funded by the Paul Mellon Centre for Studies in British Art, the site serves as an evolving research tool for academics, collectors, and the public interested in British art history. The platform offers comprehensive access to paintings, drawings, prints, biographies, exhibitions, and bibliographical resources, supported by advanced search and interactive features. The project is non-commercial and positioned as a specialized educational resource with strong academic credibility. Technically, the website employs modern web technologies including ES modules and CSS with a custom CMS solution developed by iBase Ltd. The site is mobile optimized, accessible, and performs moderately well. It uses Google Tag Manager for analytics and implements GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security policies or vulnerability disclosures are published. From a security perspective, the site enforces HTTPS and uses secure login forms. While no security headers were detected in the HTML content, no vulnerabilities or exposed sensitive data were found. The lack of WHOIS data due to privacy protection is typical for academic projects and does not detract from the site's legitimacy. Overall, the site demonstrates a good security posture but could improve by adding explicit security policies and headers. The overall risk assessment is low given the academic nature, absence of suspicious content, and professional presentation. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to further strengthen trust and compliance.

P

Paul Mellon Centre for Studies in British Art and Yale Center for British Art

britishartstudies.ac.uk

59

British Art Studies is a specialized academic digital publication focusing on peer-reviewed scholarship in British art, with a current thematic issue on Queer Art in Britain since the 1980s. The website is affiliated with reputable institutions such as the Paul Mellon Centre for Studies in British Art and the Yale Center for British Art, positioning it as a trusted source in its niche academic field. The content is rich, well-structured, and targeted towards academics, researchers, and students interested in British and queer art history. Technically, the site uses a modern JavaScript framework (Quire) and is hosted on Netlify, with Google Tag Manager implemented for analytics. The site demonstrates good mobile optimization and accessibility, though SEO could be improved. Security posture is moderate with HTTPS implied but lacks explicit security headers and formal privacy or cookie policies. No forms or contact information for incident response are present, which limits user engagement and security transparency. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

CosmoCaixa Barcelona is a science museum operated by Fundación “la Caixa”, a well-established non-profit foundation in Spain. The website serves as an educational platform offering exhibitions, conferences, and divulgative activities aimed at the general public interested in science. The site is professionally designed, localized in Spanish, and uses a modern CMS platform (Liferay) with integrated analytics and cookie consent mechanisms. The domain is long-standing and registered transparently, reflecting a mature and credible organization. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the website is trustworthy and serves its educational mission effectively.

E

e-pixler GmbH

patientenberatung-der-zahnaerzte.de

44

The website 'Zahnärztliche Patientenberatung' provides a comprehensive, nationwide, and free dental patient advisory service in Germany. It is operated by the (Landes-)Zahnärztekammern and Kassenzahnärztlichen Vereinigungen, offering expert, independent advice on dental health, treatments, and costs to both statutory and private insured patients. The site is professionally designed and well-structured, targeting patients and their families with clear navigation and relevant content. It also links to authoritative health organizations and provides video resources to enhance user understanding. Technically, the website is built on TYPO3 CMS, hosted on sldomains.de nameservers, and uses modern web technologies including JavaScript and CSS. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. No blocking or WAF mechanisms interfere with content access, ensuring full availability. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a clear privacy policy, though no cookie consent mechanism was found. Contact information is present but limited, and no social media or tracking scripts are used, indicating minimal user tracking. Overall, the website is trustworthy, professional, and serves an important public health function. Strategic improvements include implementing cookie consent, adding security headers, and publishing incident response details to enhance security posture and compliance.

CIRS dent operates as a specialized error reporting and learning platform targeted at dental practices in Germany. The website provides anonymous and sanction-free reporting of undesired events in dental practice workflows, aiming to improve patient safety and professional learning. The project is supported by reputable German dental organizations BZÄK and KZBV and collaborates with medical experts, enhancing its credibility and niche market position. The platform offers services such as report creation, database search, publications, and user feedback mechanisms, positioning itself as a valuable resource in healthcare quality management for dentists. Technically, the website employs a traditional web stack with jQuery and Matomo analytics, hosted on German infrastructure (netcologne.de). The site is mobile-optimized with clear navigation and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate but could be improved by implementing security headers and explicit incident response policies. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the website is professional, trustworthy, and aligned with its healthcare mission.

I

Institut der Deutschen Zahnärzte

idz.institute

53

The Institut der Deutschen Zahnärzte (IDZ) is a reputable German dental research institute affiliated with the Bundeszahnärztekammer (BZÄK) and the Kassenzahnärztliche Bundesvereinigung (KZBV). It focuses on oral epidemiology, health economics, dental profession research, and related fields, providing valuable studies such as the German Oral Health Studies (DMS). The website is professionally designed, content-rich, and well-structured, targeting a broad audience interested in dental health research and policy. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is good with HTTPS and secure form handling, though some security headers are missing and no explicit security policies are published. WHOIS data is unavailable due to malformed queries or registry restrictions, but the website's content and affiliations strongly support its legitimacy. Overall, the site represents a trustworthy and authoritative source in the dental research sector in Germany.