Security Directory

ISUZU France operates as a commercial vehicle manufacturer and distributor, focusing on trucks and pickups such as the D-MAX and Truck series. The website serves French-speaking customers with detailed product information, dealer locators, and customer service resources. The company is positioned as a significant player in the transportation sector in France, supported by a large-scale business infrastructure. Technically, the website employs modern frameworks including Laravel and Vue.js, with integration of Google Tag Manager and Iubenda for privacy compliance. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers and explicit incident response information are absent. Privacy policies are comprehensive and GDPR compliant, including a named Data Protection Officer. Overall, the site is professional, trustworthy, and safe for general audiences.

MIDI Europe Srl operates the official Italian website for Isuzu commercial vehicles, focusing on the sales and support of models such as the D-MAX pickup and various truck ranges. The company targets commercial vehicle buyers and fleet operators within Italy and Europe, providing comprehensive product information, after-sales services, and dealer network access. The website demonstrates a solid market position as a reputable manufacturer and distributor in the transportation sector. Technically, the site leverages modern frameworks like Vue.js and Laravel, integrates Google Tag Manager for analytics, and employs Iubenda for cookie compliance, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements standard security headers, and provides a whistleblowing channel and data protection officer contact, indicating a strong security posture. No critical vulnerabilities or suspicious elements were detected, and privacy policies are comprehensive and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with the business's operational and compliance needs.

funny-frisch.de is the official website of funny-frisch, a leading German snack brand known for its salty snack products. The site is branded under the parent company Intersnack Deutschland SE and positions itself as a market leader with a strong consumer focus in Germany. The website offers product information, brand storytelling, and consumer engagement through social media and campaigns. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries such as jQuery, Slick Slider, and WOW.js to deliver a responsive and visually appealing user experience. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, with contact primarily via a web form. Overall, the website is trustworthy, professional, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

M

Mondelez International

fcmilka.de

63

The website fcmilka.de serves as a promotional platform for the Milka brand's campaign in partnership with the Bundesliga football league. It offers consumers opportunities to participate in contests and win prizes by entering codes from Milka products. The site targets football fans and Milka consumers primarily in Germany, leveraging strong brand partnerships and official licensing to enhance engagement. The business model focuses on marketing and brand promotion through interactive fan experiences and contests. Technically, the website is built using modern web technologies including React and Next.js, hosted behind Cloudflare's CDN and security services. It employs Google Tag Manager and cookie consent tools to manage analytics and privacy compliance. The site is well-optimized for mobile devices, performs well, and follows good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which could be improved. Privacy compliance is strong with clear links to comprehensive privacy and cookie policies managed by Mondelez International. Overall, the website presents a low-risk profile with high legitimacy due to its association with a major global brand. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing incident response visibility to further strengthen trust and compliance.

E

Electronic Arts

easports.com

74

Electronic Arts (EA) operates the EA SPORTS website as a leading publisher of sports video games including FIFA, Madden NFL, NHL, UFC, PGA TOUR, and F1 titles. The website targets gamers and sports enthusiasts globally, offering rich content and branding consistent with a major enterprise in the technology and gaming sector. The technical infrastructure leverages modern web technologies such as New Relic for performance monitoring, Google Tag Manager and Optimize for analytics and marketing, and TrustArc for privacy consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not present in the analyzed content. Privacy compliance is partially addressed with cookie consent mechanisms but lacks visible privacy policy or terms of service links in the provided content. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

S

Sportec Solutions

sportec-solutions.de

54

Sportec Solutions is a joint venture between Deltatre and the DFL Gruppe, specializing in sports data analysis and sports technology. The company positions itself as an innovation leader in these sectors, targeting sports organizations, broadcasters, and technology partners primarily in Germany. The website reflects a professional and consistent brand image with a focus on technology-driven sports solutions. Technically, the site is built on WordPress with modern plugins and hosted on Amazon AWS infrastructure, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with cookie consent mechanisms present but lacking a visible privacy policy or terms of service. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency and security practices.

S

Sportcast GmbH

sportcast.de

50

Sportcast GmbH is a specialized media production company focused on live TV production for the Bundesliga and 2. Bundesliga football leagues. As a subsidiary of the DFL Deutsche Fußball Liga, it holds a leading position in the German sports broadcasting market, producing over 600 games per season. The company leverages modern technology and a skilled workforce to deliver high-quality sports content to millions of fans worldwide. The website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site is built on TYPO3 CMS, hosted likely on AWS infrastructure, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is adequate with accessible privacy and cookie policies, though no explicit consent mechanism was detected. Overall, the site is trustworthy and well-maintained, supporting the company's business credibility and market presence.

DFL Digital Sports GmbH is a subsidiary of Deutsche Fußball Liga GmbH, focused on digital content creation and media production for the Bundesliga, Germany's premier football league. The company operates from Cologne with a medium-sized team and freelancers, delivering innovative digital experiences to football fans and partners. The LinkedIn profile reflects a professional and active organization with strong branding and consistent content updates. Technically, the company leverages the LinkedIn platform for its online presence, utilizing modern web technologies and video streaming capabilities. The website is well-optimized for performance, mobile, and accessibility, with good SEO practices. Security posture is strong, with HTTPS enforced and standard security headers implied. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are managed by LinkedIn, ensuring GDPR compliance and user consent mechanisms. Overall, the risk profile is low given the use of a reputable platform and professional content. Recommendations include maintaining security best practices and monitoring third-party scripts. The domain linkedin.com is a trusted platform, though WHOIS data for linkedin.com is not publicly available here, the legitimacy of the company page is unquestioned.

B

Bundesliga International GmbH

bundesliga-international.com

70

Bundesliga International GmbH operates as the global marketing and media rights arm of the Bundesliga, Germany's premier football league. The company focuses on international sales of media rights, commercial partnerships, and marketing initiatives to engage football fans worldwide. The website reflects a professional and consistent brand presence aligned with the parent company DFL Deutsche Fußball Liga. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent implemented, though security headers are not evident and could be improved. The absence of WHOIS data for the domain is a notable anomaly, raising questions about domain registration transparency despite the site's legitimacy and official branding. Overall, the site is well-structured, GDPR compliant, and serves its business purpose effectively.

D

Deutsche Fußball Liga GmbH

bundesliga.com

74

The website represents the official digital presence of the Bundesliga, Germany's premier professional football league. It offers comprehensive sports content including live scores, news, match highlights, and club information, targeting football fans and sports media worldwide. The site is professionally designed with consistent branding and high-quality content, reflecting its position as a leading sports media entity. Technically, the site leverages modern web technologies such as Angular framework, Google Tag Manager for analytics, and Dynatrace for performance monitoring. It is hosted likely on AWS infrastructure, optimized for fast loading and excellent mobile responsiveness. The site employs robust security measures including HTTPS, security headers, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit contact information or incident response channels are publicly visible, which could be improved for transparency. Overall, the website is trustworthy, secure, and professionally maintained, though the lack of WHOIS data introduces some uncertainty about domain registration details. Strategic recommendations include enhancing visible contact and security incident response information and maintaining regular security audits to uphold the high security standards.

H

hantha. Die Webexperten

hantha.com

50

Hantha. Die Webexperten is a small technology-focused web agency based in South Tyrol, Italy, specializing in web design, programming, SEO, e-commerce, and web applications. The company targets businesses primarily in German-speaking regions, offering professional digital solutions with a strong emphasis on design and innovation. Their market position is supported by a portfolio of notable clients including world market leaders and regional enterprises. Technically, the website is built on TYPO3 CMS with modern JavaScript and CSS technologies, delivering fast performance and excellent mobile optimization. The site includes cookie consent mechanisms and uses analytics tools such as Microsoft Clarity and Google Tag Manager, reflecting a moderate user tracking level with good privacy compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks published security policies, incident response contacts, and security headers, which are areas for improvement. The absence of WHOIS data for the domain is a significant anomaly that lowers the trust score, although the professional website and consistent business information mitigate some concerns. Overall, the website is professional, trustworthy, and well-optimized, but would benefit from enhanced transparency in security and domain registration details.

M

Muffin Group

muffingroup.com

59

Muffin Group is a well-established company specializing in premium WordPress themes and website building tools, notably Betheme and BeBuilder. The company targets WordPress users, developers, and agencies seeking versatile and feature-rich themes with extensive pre-built website demos and premium plugin integrations. Their market position is strong, supported by a large user base exceeding 300,000 satisfied customers and consistent product updates. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, though improvements in privacy transparency and security hardening are recommended.

T

Tred Union

tredunion.fr

45

Tred Union is a French transport group established in 2009, focusing on regional transport and logistics services across diverse sectors including industrial, construction, agro-food, and e-commerce. The group aims to foster synergies among transport companies to offer competitive and specialized transport solutions such as refrigerated transport and large volume shipments. The website demonstrates a moderate level of digital maturity, leveraging modern web technologies like React, Google Maps API, and Google Analytics. However, it lacks explicit privacy and cookie policies, and no visible contact information was found in the analyzed content. Security measures include HTTPS and reCAPTCHA, but there is room for improvement in publishing security policies and headers. Overall, the site is professional and trustworthy with a strong market position in France's transport sector.

G

Groupe Pole

groupe-pole.com

56

Groupe Pole operates as a network of specialized transporters focusing on pallet distribution and logistics across France and Europe. Established in 2009, the company leverages a collaborative business model to optimize delivery efficiency and environmental impact. Their market position is supported by a sizable network of 64 members and significant annual transport volumes. Technically, the website is built on Joomla! CMS with standard web technologies including jQuery, Bootstrap, and Google services, hosted by OVH sas. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

The website qwenty.fr is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which prevents full content analysis. The domain is registered since 2019 with Scaleway as registrar and uses Cloudflare for DNS and security services. Due to the WAF challenge, no business information, contact details, or policies are visible, limiting the ability to assess the company's market position, services, or compliance posture. The technical infrastructure indicates use of modern CDN and bot mitigation technologies but lacks visible security headers or SSL details in the accessible content. The security posture cannot be fully evaluated, but the presence of Cloudflare Turnstile suggests a proactive approach to mitigating automated threats. Overall, the site is rated low in AI scoring due to blocked content, with recommendations to allow access for comprehensive analysis and to publish clear privacy and security policies.

The website hostay.fr is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to any business content or information. The domain is registered with Scaleway and uses Cloudflare nameservers, indicating a hosting and security setup consistent with a French-based small business or service. Due to the lack of visible content, no privacy, cookie, or terms of service policies are available, nor is there any contact or security policy information. The technical infrastructure includes modern security measures such as Cloudflare's WAF and CAPTCHA, but the absence of accessible content limits the ability to assess the website's full digital maturity or business model. The security posture is moderate based on the presence of Cloudflare protections, but the lack of visible security headers or policies reduces confidence. Overall, the site is low in trustworthiness and content quality due to the blocking mechanism.

LeadBI is a digital marketing platform offering marketing automation and real-time customer insights, targeting businesses and marketers seeking to enhance their marketing beyond traditional email campaigns. The company is operated by LINK Mobility Italia S.r.l, based in Italy, with a domain registered since 2016, reflecting a mature and stable business presence. The website presents a clean, professional design with good mobile optimization and clear navigation, although it lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. Technically, the website is hosted on Amazon AWS infrastructure as inferred from DNS nameservers, uses standard HTML5 and CSS3 technologies, and performs moderately well. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. No analytics or tracking scripts were detected, indicating minimal user tracking but also limited marketing analytics integration. From a security perspective, the site uses HTTPS (implied by the login link), but no explicit security policies or incident response information is provided. The WHOIS data shows a consistent and legitimate domain registration without privacy protection, appropriate for the business type. Overall, the security posture is moderate but could be improved by implementing security best practices and compliance documentation. The overall risk is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies and security headers are notable gaps. Strategic recommendations include adding comprehensive privacy and cookie policies, enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to improve trust and compliance.

A

Atlas Estate Agents

atlasestateagents.co.uk

45

Atlas Estate Agents is a well-established real estate agency specializing in residential and commercial property sales, lettings, and management in Liverpool, UK. The company emphasizes competitive pricing, family business values, and customer service, positioning itself as a trusted local market player since 1965. Their website provides property search functionality, valuation requests, and detailed service information targeting buyers, sellers, landlords, and tenants in the Liverpool area. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Maps API, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Security measures include HTTPS enforcement and spam protection via reCAPTCHA, but lack certain HTTP security headers and cookie consent mechanisms. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal privacy/cookie consent banners indicates room for improvement in compliance and defense-in-depth. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain trust verification. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, the company should prioritize implementing security headers, cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance. Additionally, clarifying domain registration details and improving accessibility would further enhance their digital maturity and risk management.

E

Evolutrans

evolutrans.fr

56

Evolutrans is a French network of transporters and logisticians providing comprehensive transport and logistics solutions across France. The website positions the company as a national group serving the transportation sector with a focus on logistics services. The digital infrastructure is built on WordPress using the Divi theme and Smart Slider 3 plugin, indicating a modern and flexible content management system. The site is well-structured with good SEO and mobile optimization, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain reduces trust slightly but the professional presentation and clear contact information mitigate concerns. Overall, the site is functional and professional, serving its business purpose effectively.

B

Transporteur

baryshop.com

60

The website baryshop.com presents minimal accessible content, primarily a loading placeholder with no substantive business or contact information. The site title 'Transporteur' suggests a focus on transportation services, but no detailed description or services are provided. The domain is registered since 2020 with Squarespace Domains and uses Google Cloud DNS, indicating a small business or startup digital presence. The technical infrastructure includes the JHipster framework and standard web fonts, but lacks advanced SEO, accessibility, or performance optimizations. Security posture is weak with no detected security headers, no DNSSEC, and no privacy or cookie policies, which raises compliance concerns especially under GDPR. No contact or incident response information is available, limiting trust and business credibility. Overall, the site appears to be in early development or poorly maintained, with significant gaps in content, security, and compliance.

D

Dinas Lingkungan Hidup Kota Semarang

dlhkotasemarang.id

42

Dinas Lingkungan Hidup Kota Semarang is a government environmental agency responsible for managing environmental affairs in Semarang city, Indonesia. The website serves as an official portal providing information about the agency's structure, mission, and public services such as business permits, environmental impact assessments, and public reporting. The site targets the general public and stakeholders interested in environmental governance. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with Cloudflare DNS services. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers. Privacy and cookie policies are absent, which impacts compliance. The domain WHOIS data shows an anomalous future creation date, which may be a data error but slightly reduces trust. Overall, the website is a credible government resource with room for improvement in security and privacy compliance.

D

Dinas Lingkungan Hidup Kota Depok

dlhdepok.id

43

Dinas Lingkungan Hidup Kota Depok is the official government agency responsible for environmental management in Depok city, Indonesia. The website serves as a public information portal providing services such as environmental permits, waste management, and public complaint reporting. The agency operates under local government regulations and targets local citizens and stakeholders interested in environmental governance. Technically, the website is built with standard web technologies, uses HTTPS, and is hosted behind Cloudflare DNS, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies, lack of security headers, and no incident response information highlight areas for improvement in security and compliance. The domain WHOIS data shows a future creation date, which is inconsistent with the agency's founding year, suggesting a data anomaly but not necessarily a legitimacy issue. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Dinas Lingkungan Hidup Kota Bekasi

dlhbekasi.id

50

Dinas Lingkungan Hidup Kota Bekasi is a government environmental agency responsible for managing environmental affairs in Bekasi city, Indonesia. The website serves as an official portal providing information about the agency, its organizational structure, and public services such as business permits, environmental impact assessments, and complaint reporting. The site targets the general public and local businesses requiring environmental services. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, with Cloudflare DNS hosting. It is mobile responsive and employs lazy loading for images, contributing to moderate performance and good user experience. However, the site lacks advanced SEO and accessibility features and does not use a known CMS.

D

Dinas Lingkungan Hidup Kota Bandung

dlhbandung.id

51

Dinas Lingkungan Hidup Kota Bandung is the official government environmental agency for Bandung city, Indonesia, responsible for managing environmental affairs including waste management, forestry, and public works related to environmental issues. The website serves as an information portal offering services such as business permit information, registration for technical permits, environmental impact assessment network access, and public reporting. The site targets the general public and government stakeholders, positioning itself as a leading local government agency in environmental management. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts, hosted with Cloudflare DNS services. It is mobile responsive with good navigation and basic SEO optimization. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy and security practices.

D

Dinas Lingkungan Hidup Kota Jakarta

dlhkotajakarta.id

51

Dinas Lingkungan Hidup Kota Jakarta operates as the official government environmental agency for Jakarta city, focusing on environmental governance, waste management, and public environmental services. The website serves as an information portal for citizens and stakeholders, providing contact details and links to related government services. Technically, the site uses standard web technologies with Cloudflare DNS but lacks advanced CMS or frameworks. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. The domain WHOIS data shows inconsistencies, including a future creation date and a private registrar, which may warrant further verification. Overall, the site is functional, safe, and professional but could improve in security and compliance.

D

Dinas Lingkungan Hidup Provinsi Sumatera Utara

dlhsumaterautara.id

51

The website dlhsumaterautara.id serves as the official online presence of the Environmental Agency of North Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within North Sumatra and operates as a government public service platform. The domain registration aligns with the website's launch year, indicating a new but legitimate government initiative. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, with Cloudflare DNS services. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced SEO and accessibility features, and no CMS or backend platform is explicitly identified. From a security perspective, HTTPS is properly implemented, and the domain status clientTransferProhibited adds a layer of domain security. However, the absence of DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options represents areas for improvement. No privacy or cookie policies are present, which impacts compliance with data protection standards. Overall, the website is trustworthy and safe for general audiences, with no adult or explicit content detected. The lack of privacy and cookie policies and some security best practices lowers the overall security and compliance score. Strategic improvements in these areas would enhance the site's security posture and user trust.

D

DLH Provinsi Sumatera Selatan

dlhsumateraselatan.id

49

The website dlhsumateraselatan.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of South Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management and policies. The site targets residents and stakeholders within the province, functioning as a government information dissemination platform. Technically, the site employs standard web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The design and content quality are basic but functional, with moderate mobile optimization and navigation clarity. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data shows inconsistencies with a future domain creation date and a private registrar, raising legitimacy concerns. Overall, the site is accessible and safe for general audiences but requires improvements in security and privacy compliance to enhance trust and resilience.

D

Dinas Lingkungan Hidup Provinsi Sumatera Barat

dlhsumaterabarat.id

51

The website dlhsumaterabarat.id serves as the official online presence of the Environmental Agency of West Sumatra Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within West Sumatra and operates as a government service platform. The domain registration and website content are consistent with a legitimate government entity, with a domain age and copyright year of 2025, indicating a relatively new but official site. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, hosted behind Cloudflare DNS services. The site is mobile optimized with good navigation and content quality. However, it lacks some advanced SEO and accessibility features. Security-wise, HTTPS is properly implemented, but DNSSEC is not enabled and no security headers are detected in the HTML content. There is no visible privacy or cookie policy, which is a compliance gap, especially for GDPR and similar regulations. Overall, the security posture is moderate with room for improvement in DNS security and privacy compliance. The site does not use analytics or advertising scripts, which reduces privacy risks but also limits marketing insights. Contact information is clearly provided, enhancing business credibility. The content is safe for general audiences with no adult or explicit material detected. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and considering incident response contact details to improve trust and compliance.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Utara

dlhsulawesiutara.id

50

The website dlhsulawesiutara.id serves as the official online portal for the Dinas Lingkungan Hidup (Environmental Agency) of the Sulawesi Utara province in Indonesia. It provides environmental news, public announcements, documents, and contact information aimed at residents and stakeholders interested in environmental governance. The site is positioned as a government information hub with a medium organizational size and a focus on public service. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services, and supports HTTPS for secure communications. However, it lacks advanced DNS security features like DNSSEC and does not implement security headers, which could be improved to enhance security posture. The WHOIS data presents inconsistencies, notably a future domain creation date and a registrant that is a registrar company rather than the government entity, which lowers trustworthiness but does not necessarily indicate malicious intent. No privacy or cookie policies are present, indicating a gap in compliance with modern privacy standards. Overall, the site is functional, professional, and safe for general audiences but would benefit from enhanced security and privacy compliance measures.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Tenggara

dlhsulawesitenggara.id

49

The website dlhsulawesitenggara.id serves as the official online presence of the Environmental Agency of Southeast Sulawesi Province, Indonesia. It provides public information including news, announcements, documents, and contact details relevant to environmental management in the region. The site targets residents and stakeholders within the province and operates as a government service platform. Technically, the website employs common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security-wise, HTTPS is enabled, but the absence of DNSSEC and security headers reduces the overall security posture. The WHOIS data presents inconsistencies, including a future domain creation date and a registrant organization that does not align with the government entity, which raises questions about domain ownership authenticity. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. Overall, the website is functional and safe for general audiences but requires improvements in security, privacy compliance, and domain legitimacy to enhance trust and professionalism.

D

DLH Provinsi Sulawesi Tengah

dlhsulawesitengah.id

41

DLH Provinsi Sulawesi Tengah operates as the official environmental agency for Central Sulawesi Province, Indonesia, providing public information, news, and services related to environmental management. The website serves residents, government officials, and environmental stakeholders with updates, documents, and contact channels. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Cloudflare DNS services, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS enabled but lacks advanced DNS security and published policies. WHOIS data shows inconsistencies that warrant caution but do not directly undermine the site's legitimacy. Overall, the site is functional and trustworthy for its intended audience but requires improvements in privacy compliance and security best practices.

H

Haufe-Lexware GmbH & Co. KG

lexfree.de

70

Haufe-Lexware GmbH & Co. KG operates the website lexware.de, providing comprehensive business software solutions primarily targeting small and medium-sized enterprises, freelancers, and founders in Germany. The company is a market leader with over 360,000 customers and offers a broad range of services including accounting, invoicing, payroll, e-invoicing, and integrated banking solutions. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and consent management tools to ensure compliance and user experience. Security posture is strong, with HTTPS enforced, TÜV and ISO certifications, and GDPR compliance clearly demonstrated. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and trustworthy platform. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

H

Haufe-Lexware GmbH & Co. KG

lexrocket.de

66

Haufe-Lexware GmbH & Co. KG is a well-established German software company specializing in business and accounting software solutions for self-employed individuals, freelancers, and small to medium-sized enterprises. Operating since 1993 as part of the Haufe Group, Lexware holds a strong market position in Germany, offering a range of products including accounting, payroll, and business management software, complemented by educational content and tools for entrepreneurs. The website content is professionally curated, targeting entrepreneurs and business owners with relevant knowledge and practical advice on business formation and management. Technically, the website is built on the TYPO3 CMS platform and integrates modern technologies such as Usercentrics for consent management, Econda for analytics, and Kameleoon for marketing optimization. The hosting infrastructure is managed by the Haufe Group, ensuring reliable performance and security. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs consent management to comply with privacy regulations. While explicit security headers are not visible in the provided data, no vulnerabilities or exposed sensitive data were detected. The company maintains comprehensive privacy and cookie policies, indicating a mature approach to data protection and GDPR compliance. However, the absence of a public security policy or incident response information suggests areas for improvement. Overall, Haufe-Lexware's website reflects a mature, trustworthy, and professional digital presence with strong business credibility and compliance posture. Strategic enhancements in security transparency and header implementation could further strengthen its security stance and user trust.

S

smartsteuer GmbH

smartsteuer.de

63

smartsteuer GmbH operates a well-established online tax declaration platform targeting German taxpayers including employees, self-employed individuals, students, and pensioners. The service offers an intuitive, step-by-step tax filing experience with TÜV certifications and integration options such as Lexware Office. The company positions itself as a user-friendly alternative to traditional tax filing methods, emphasizing ease of use and maximizing tax refunds. Technically, the website is built on WordPress with modern plugins and libraries, hosted on sysEleven infrastructure, and optimized for performance and mobile use. Security posture is strong with HTTPS, cookie consent management, and TÜV certifications, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, smartsteuer demonstrates a mature digital presence with high trustworthiness and professional business operations.

L

Lexware (implied from URLs and branding)

quicksteuer.de

62

QuickSteuer.de is a German website offering tax declaration software targeted at private individuals seeking a fast and easy way to file taxes. The site is professionally designed, leveraging modern web technologies such as Webflow CMS, jQuery, and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. The business is positioned as an established player with over 25 years of experience and strong trust signals including TÜV Saarland and Chip magazine certifications. The website is fully accessible with no blocking or WAF challenges detected, and it demonstrates good privacy and cookie consent mechanisms. However, direct contact information and explicit security policies are not published, which could be improved to enhance trust and compliance.

H

Haufe X360

lexbizz.de

62

Haufe X360 is a cloud-based ERP platform tailored for small and medium-sized enterprises (KMU) primarily in German-speaking countries. It offers a comprehensive suite of integrated business functions including finance, inventory, CRM, production, and e-commerce, supported by a strong partner ecosystem and over 60 integration interfaces. The platform leverages modern technology partnerships with Acumatica and Microsoft Azure to deliver scalable, secure, and user-friendly ERP solutions. The website reflects a mature digital presence with professional design, clear navigation, and a focus on data security and compliance. Security posture is strong, with ISO 27001 certification and data hosting in German data centers, though explicit privacy and terms policies are not directly found in the provided content. Overall, Haufe X360 positions itself as a trusted, innovative ERP provider for the mid-market segment.

C

Cotec

cotec.es

10

Cotec is a Spanish non-profit foundation dedicated to promoting innovation through research, projects, and public engagement. The website reflects a well-established organization with a clear focus on innovation and youth, providing reports, observatories, and events. Technically, the site is built on WordPress with modern plugins and integrations such as HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though formal security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, serving a broad audience interested in innovation in Spain.

M

musicdirectory.ch

musicdirectory.ch

47

musicdirectory.ch is a specialized online platform operated by Helvetiarockt, targeting women, inter-, trans-, non-binary, and agender individuals in the Swiss music industry. It serves as a directory and community hub offering listings of people, projects, and events to foster networking and visibility within this niche market. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages to cater to a diverse Swiss audience. Technically, it is built on WordPress with common plugins for forms, multilingual support, and performance optimization, and it integrates Google Analytics and Tag Manager for user tracking. Security-wise, the site uses HTTPS and some best practices like password strength meters and honeypots in forms but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced privacy and security measures.

M

MIDI Europe Srl per Isuzu Svizzera

isuzu.ch

63

The website is the official Swiss portal for Isuzu vehicles, operated by MIDI Europe Srl for Isuzu Switzerland. It provides detailed information on Isuzu's D-Max models and trucks, dealer locations, customer support, and product catalogs. The site targets consumers and businesses interested in Isuzu vehicles within Switzerland and neighboring regions. The business model focuses on automotive sales and after-sales services, positioning itself as a regional distributor with a medium-sized market presence. Technically, the website is built on Drupal 7 CMS, utilizing common JavaScript libraries such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO is basic but functional, and the site uses HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no published security or incident response policies are available. There are no visible vulnerabilities or exposed sensitive data in the provided content. The WHOIS data aligns well with the business entity, indicating legitimacy and consistency. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance. Recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO for a more robust security posture and user experience.

D

Deutscher Sparkassen- und Giroverband e.V.

sparkassen-schulservice.de

48

The Sparkassen-Schulservice website is a well-established educational platform operated by the Deutscher Sparkassen- und Giroverband e.V., providing free, neutral, and comprehensive financial literacy materials for school students in Germany. The platform targets both students and teachers, offering a wide range of resources including PDFs, videos, interactive exercises, and printed materials. The site is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins such as Yoast SEO and H5P for interactive content, and uses Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not published. Overall, the site is trustworthy, safe, and compliant with GDPR, serving as a valuable resource in the financial education sector.

G

GKV-Bündnis für Gesundheit

gkv-buendnis.de

59

The GKV-Bündnis für Gesundheit website represents a collaborative initiative of statutory health insurance funds in Germany focused on advancing health promotion and prevention across various life settings such as communities, schools, and care facilities. The site provides practical resources and information targeting health professionals and stakeholders involved in these sectors. The business model is non-profit and government-related, emphasizing public health improvement. Technically, the website employs modern web standards with responsive design, accessibility features, and uses Matomo analytics with a consent mechanism, reflecting a privacy-conscious approach. Hosting and DNS infrastructure align with official statutory health insurance IT services, indicating a stable and trustworthy technical foundation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and well-aligned with its public health mission. Strategic recommendations include publishing dedicated security and incident response policies, enhancing security headers, and providing clearer contact information to strengthen user trust and compliance.

S

Stiftung Leben mit Krebs

beweg-dich-gegen-krebs.de

10

Beweg Dich gegen Krebs is a German non-profit initiative operated by Stiftung Leben mit Krebs, focused on promoting physical activity and sports for cancer patients. The initiative leverages a mobile app to engage users in tracking their activities and encourages donations to support cancer patients locally. The website is professionally designed using WordPress and integrates modern technologies such as Swiper.js and Borlabs Cookie for consent management. It maintains a moderate security posture with HTTPS and cookie consent but lacks published privacy and terms of service policies. The site is well-positioned in the healthcare non-profit sector in Germany, targeting patients, supporters, and the general public interested in health and charity. The digital infrastructure is adequate, with room for improvement in security policies and compliance documentation.

I

IQS Initiative Qualitätssperrholz

iqsperrholz.org

44

The IQS Initiative Qualitätssperrholz is a voluntary association of companies within the wood import industry in Germany, focused on promoting fair competition and transparency in plywood product quality and labeling. The website serves as an informational platform to educate customers and industry participants about plywood standards and product declarations. The business model centers on collaboration among industry members to ensure consistent quality and compliance with relevant norms. The site is well-positioned within its niche, supported by a network of partner companies and the Gesamtverband Deutscher Holzhandel e.V., which provides organizational backing. Technically, the website is built on a modern WordPress CMS platform using Elementor and JetEngine plugins, with SEO optimization via Yoast and cookie consent managed by Borlabs Cookie. The site is mobile-optimized and performs moderately well, with a clean and professional design. Security posture is adequate with HTTPS enabled and domain transfer protection in place, though it lacks explicit security policies and vulnerability disclosures. Security-wise, the site benefits from SSL encryption and domain status protections but is missing critical compliance documents such as a privacy policy and terms of service, which impacts GDPR compliance and overall trust. No incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance security readiness. Overall, the website is a credible and professional representation of the IQS initiative with good business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would further strengthen its position and trustworthiness.